AI Anti-Corruption Policy Writing Guide 2026: A Structured Framework for Prohibited Conduct, Three Lines of Defense, and Whistleblower Investigation

An anti-corruption policy is not a moral declaration that "the company opposes all forms of commercial bribery" — it is a binding document that determines whether employees dare to report, whether investigations can establish facts, and whether violations actually get punished. The problem with most anti-corruption policies is that prohibited conduct is written vaguely ("no improper benefits" — what counts as improper? do gifts count?) and whistleblower mechanisms are abstract ("employees are encouraged to report" — to whom? will the whistleblower face retaliation?). The biggest trap when using AI to write an anti-corruption policy is asking it to "write a standard anti-corruption template" — FCPA and anti-unfair-competition laws provide frameworks but not your actual business scenarios. What's useful is quantifying your actual gift thresholds, conflict-of-interest declarations, and reporting channels.

I. The Five-Element Structure of an Anti-Corruption Policy

An enforceable anti-corruption policy contains five elements: Prohibited Conduct Definition (what you cannot do — bribery/receiving bribes/conflict of interest/commercial kickbacks, four categories), Three Lines of Defense (how to prevent — business self-control/compliance review/internal audit), Whistleblower Mechanism (how to detect — channels/protection/rewards), Investigation Procedure (how to investigate — filing/evidence/finding/conclusion), and Sanction Standards (how to punish — tiered sanctions + criminal referral). The five elements are sequential: unclear prohibitions mean no red lines, no defense lines mean relying on conscience, blocked reporting means problems stay hidden, unlawful investigation means findings are questionable, and weak sanctions mean the policy has no deterrent.

"I need to write an anti-corruption policy for [company type/industry/whether cross-border]. Here are the business scenarios and risk points: [paste]. Please organize by five elements: 1.Prohibited Conduct Definition (bribery: paying benefits to public officials/clients to gain business; receiving bribes: accepting benefits from suppliers/clients that influence decisions; conflict of interest: personal vs company interest conflict not declared; commercial bribery: paying kickbacks through third parties — list specific scenarios and quantified boundaries for each) 2.Three Lines of Defense (first: business department self-control — approval/records; second: compliance department review — high-risk transactions/gift approval; third: internal audit — periodic audit + special inspection) 3.Whistleblower Mechanism (channels: email/hotline/online platform 4 types + anonymous; protection: identity confidentiality/anti-retaliation prohibition; rewards: verified reports rewarded) 4.Investigation Procedure (filing: report/audit finding → file within 3 working days; evidence: interviews/document review/bank records; finding: investigation team + compliance review; conclusion: investigation report + recommendation) 5.Sanction Standards (general violation: warning/training; serious: demotion/termination; suspected crime: refer to authorities). Boundaries must be quantified."

II. Prohibited Conduct: Four Categories + Quantified Boundaries

Prohibited conduct is the red line of an anti-corruption policy — you must specify what cannot be done, not write "no improper benefits." Four categories: Bribery (providing cash/gifts/meals/travel/employment to public officials/clients/partners to obtain or retain business — cash always prohibited, gifts single value ≤200 RMB and annual cumulative ≤600 RMB require declaration, meals per capita ≤300 RMB require pre-approval, travel always prohibited), Receiving Bribes (accepting cash/gifts/meals/kickbacks/commissions from suppliers/clients/partners — cash always prohibited, gifts ≤200 RMB require declaration, over 200 RMB must be surrendered, over 600 RMB must be refused and reported), Conflict of Interest (employee or immediate family has investment/employment/family relationship with supplier/client not declared — all conflicts declared at onboarding + annually + before transactions, undeclared is a violation), Commercial Bribery (paying kickbacks through distributors/consultants/intermediaries — all commissions/agency fees require written contract + market-reasonable price + approval record, cash payments to intermediaries prohibited).

"Here are the business scenarios and gift practices: [paste]. Please detail by four categories + quantified boundaries: 1.Bribery (①cash payments: always prohibited ②gifts: single ≤200 RMB and annual cumulative ≤600 RMB require declaration, over 200 RMB requires pre-approval, over 600 RMB prohibited ③meals: per capita ≤300 RMB requires pre-approval, high-end venues prohibited ④travel/entertainment: always prohibited ⑤employment opportunities: providing employment to relatives of public officials constitutes bribery) 2.Receiving Bribes (①cash/equivalents: always prohibited from accepting ②gifts: ≤200 RMB requires declaration, over 200 RMB surrender, over 600 RMB must refuse and report ③meals: ≤300 RMB per capita requires reporting, over 300 RMB refuse ④kickbacks/commissions: always prohibited for personal acceptance) 3.Conflict of Interest (①investment: employee or family holds ≥5% equity in supplier/client must declare ②employment: family member employed at supplier/client must declare ③family relationship: must declare before procurement/approval transactions ④declaration timing: onboarding + annual + before transaction, undeclared is a violation) 4.Commercial Bribery (①commissions/agency fees: require written contract + market-reasonable price + approval record ②third-party payments: prohibited from routing through distributors ③cash intermediaries: cash payments to consultants/intermediaries prohibited). Generate prohibited conduct table: category|conduct|boundary|approval requirement|violation consequence."

III. Three Lines of Defense: Business Self-Control + Compliance Review + Internal Audit

The three lines of defense are the prevention system for anti-corruption — you cannot rely on moral conscience alone. First Line — Business Department Self-Control (transaction initiator/approver is responsible for compliance — all external payments require approval + records, gifts/meals require pre-approval, supplier selection follows bidding process), Second Line — Compliance Department Review (compliance officers review high-risk transactions — single transactions ≥50,000 RMB/cross-border payments/government-related transactions/new supplier partnerships; compliance has veto power), Third Line — Internal Audit (annual anti-corruption special audit + quarterly spot checks of high-risk departments — auditing external payments/gift records/supplier selection/conflict of interest declarations; anomalies referred for investigation within 48 hours). The three lines are progressive: what business can't control, compliance blocks; what compliance misses, audit catches.

"Here are the organizational structure and business processes: [paste]. Please detail by three lines of defense: 1.First Line - Business Department (①transaction approval: all external payments require direct supervisor approval, ≥50,000 RMB requires department head approval ②record retention: approval records/contracts/invoices/bank records kept ≥7 years ③gift management: pre-fill gift approval form (recipient/amount/purpose), keep post-records ④supplier selection: follow bidding/comparison process, single-source requires written justification and approval) 2.Second Line - Compliance Department (①high-risk review: single ≥50,000 RMB external payments/cross-border/government-related/new suppliers, compliance reviews within 5 working days, has veto power ②gift approval: gifts over 200 RMB require compliance approval ③training: annual anti-corruption training all staff ≥2 hours, key positions ≥4 hours ④advisory: employees can consult compliance on questions anytime) 3.Third Line - Internal Audit (①annual special audit: external payments/gifts/meals/suppliers/conflict of interest full audit ②quarterly spot checks of high-risk departments: procurement/sales/government affairs ③anomaly referral: anomalies referred to compliance investigation within 48 hours ④audit report: reported to board/audit committee). Generate defense matrix: line|department|responsibility|authority|frequency."

IV. Whistleblower and Investigation: Channels + Protection + Procedure

Whistleblower and investigation are the detection and disposition mechanism for anti-corruption — a policy without reporting channels is a paper tiger. Three elements of the whistleblower mechanism: Channels (4 channels — email/hotline/online platform/suggestion box, all support anonymous reporting, 24/7 acceptance), Protection (whistleblower identity strictly confidential/no retaliation in any form/whistleblower not subject to demotion/termination/transfer/retaliators terminated), Rewards (verified reports rewarded 10% of recovered amount or ≥5,000 RMB). Investigation five steps: Filing (report/audit finding → file within 3 working days, designate investigation team), Evidence (interviews/document review/bank records/electronic records, all evidence collection recorded with audio/video), Finding (investigation team preliminary finding → compliance review → serious violations require legal involvement), Conclusion (investigation report + evidence chain + handling recommendation, submitted to compliance committee for approval), Feedback (conclusion fed back to whistleblower, result notified to the reported person).

"Here is the current whistleblower and investigation setup: [paste]. Please detail by channels + protection + procedure: 1.Whistleblower Channels (①email: anticorruption@company.com ②hotline: 400-XXX-XXXX (24/7/recorded) ③online platform: intranet reporting system (anonymous supported) ④suggestion box: physical box in office area, all 4 channels support anonymous, acknowledged within 48 hours) 2.Whistleblower Protection (①identity confidentiality: only investigation team knows, violators of confidentiality terminated ②anti-retaliation prohibition: no demotion/termination/transfer/pay cut/discrimination, retaliators terminated ③legal protection: if retaliated, can seek help from labor inspection or judicial authorities ④whistleblower may choose to remain anonymous, identity not exposed during investigation) 3.Rewards (after verification — recovered loss ≤100K reward 5,000 RMB, 100K-1M reward 10% of recovery, >1M reward capped at 100K) 4.Investigation Procedure (①filing: report/audit finding → file within 3 working days → designate team of 2+ investigators ②evidence: interviews (audio/video recorded)/document review/bank records/electronic records, subject must cooperate ③finding: investigation team preliminary → compliance review → serious violations legal involvement ④conclusion: report + evidence chain + recommendation → compliance committee approval ⑤feedback: conclusion to whistleblower (except anonymous), result to reported person, investigation file kept ≥7 years). Generate investigation flow: filing→evidence→finding→conclusion→feedback→archive."

V. Common Mistakes Checklist

• Prohibited conduct written as "improper benefits": not quantifiable. Fix: four categories + cash/gift/meal quantified boundaries
• No gift amount threshold: "no accepting gifts." Fix: ≤200 declare/over surrender/over 600 refuse
• Conflict of interest not requiring declaration: relies on conscience. Fix: onboarding + annual + before-transaction declarations
• Only email reporting channel: not anonymous. Fix: 4 channels + all anonymous-supported
• No whistleblower protection: afraid to report. Fix: identity confidentiality + anti-retaliation + retaliators terminated
• No investigation procedure: one compliance person investigates. Fix: five-step procedure + 2-person team + audio/video
• No tiered sanctions: all terminated or all warned. Fix: general/serious/criminal three tiers

VI. Complete Example

Company: 500-person tech enterprise anti-corruption policy (excerpts of prohibited conduct + defense lines + investigation).
Prohibited Conduct: ①Bribery — cash prohibited/gifts single ≤200 RMB annual ≤600 RMB declare/meals ≤300 RMB approve/travel prohibited ②Receiving Bribes — cash prohibited/gifts ≤200 declare over surrender/over 600 refuse and report ③Conflict of Interest — investment ≥5%/employment/family three declarations (onboarding + annual + before transaction) ④Commercial Bribery — commissions require contract + reasonable price + approval, cash intermediaries prohibited.
Three Lines of Defense: ①Business — external payment approval + records ≥7 years/gift pre-approval/supplier bidding ②Compliance — ≥50K/cross-border/government/new supplier review + veto/annual training all 2 hours key 4 hours ③Audit — annual special audit + procurement/sales/government quarterly spot checks/anomalies 48-hour referral.
Whistleblowing: 4 channels (email/hotline/online/box) all anonymous/48-hour acceptance. Protection: identity confidentiality violators terminated/anti-retaliation/retaliators terminated. Rewards: ≤100K reward 5,000/100K-1M reward 10%/>1M cap 100K.
Investigation: filing 3 working days → 2-person team evidence (interview audio/document review/bank records) → finding (team + compliance review + serious legal) → conclusion (report + evidence + recommendation → committee) → feedback to whistleblower + notify reported. Files ≥7 years.
Sanctions: general — warning + training; serious — demotion/termination; criminal — refer to authorities.

This article focuses on anti-corruption policy writing. When building a complete compliance system, also see AI Code of Conduct Writing Guide (employee conduct red lines), AI Audit Report Writing Guide (anti-corruption audit methods), and AI Compliance Training Plan Writing Guide (anti-corruption training design).

Frequently Asked Questions

Q1: Can I accept small gifts from clients?

Depends on amount and context. Single gifts ≤200 RMB that are ordinary business gifts (notebooks/calendars/small souvenirs) may be accepted but must be declared and recorded. Over 200 RMB must be surrendered to the company, over 600 RMB must be refused on the spot and reported. Cash and equivalents (gift cards/red envelopes/prepaid cards) are always prohibited regardless of amount. Gifts from public officials are always prohibited. The test: would accepting this influence a business decision — if unsure, refuse first and consult compliance.

Q2: Does the anti-corruption policy apply to suppliers and agents?

Yes. All suppliers/agents/partners must commit in cooperation agreements to comply with this anti-corruption policy; violations allow termination of cooperation and recovery of losses. Specific approach: embed anti-corruption clauses in procurement/agency contracts (no bribery/commission transparency/audit rights/termination for breach), new supplier onboarding assessment includes anti-corruption compliance review. If a supplier bribes, the company can assert the contract is void and recover losses. This extends the policy — not just internal employees, but external partners too.

Q3: What should I do if I suspect a violation?

Three steps: ①Stop immediately — if an ongoing transaction seems non-compliant, pause and do not proceed ②Preserve evidence — keep relevant emails/contracts/chat records/bank records, do not delete anything ③Report — report to compliance through one of 4 channels (anonymous option), describing time/people/amount/what happened. Compliance acknowledges within 48 hours, decides whether to file within 3 working days. After reporting, your identity is protected, any retaliation (demotion/transfer/discrimination) is prohibited, retaliators will be terminated. Do not investigate yourself or confront the person — let compliance handle it professionally.

Author: UseAIWriter Editorial | Updated: 2026-10-26 | Written by UseAIWriter Editorial. Please cite the source when reposting.