QLD2032

Register · Procurement Assurance Model

The rules, and when each of them last moved.

Queensland's Procurement Assurance Model is not one document. It is 7, published separately, with no index and no change history. This is the index, with a content hash against each one.

Why the dates are the point. 5 of these were created or revised in May 2026. The framework commits to being updated with incentive scheme detail by 1 January 2027, the same day tiered supplier ratings commence, roughly 17 weeks from this capture. Anyone can download these documents today. Only a baseline taken beforehand can show what changed.
Corpus baseline Captured 2026-08-19
7
Documents in the corpus
5
Changed in May 2026
17
Weeks to commencement
What a hash gives you: each document below is recorded by the exact bytes served on 19 August 2026. When the publisher revises one, the hash changes. That turns "I think this section is new" into something checkable.
All documents © State of Queensland, licensed CC BY 4.0. The Procurement Assurance Model Framework specifies citation as: Procurement Assurance Model: Framework 2026.
Dates are read from the publisher's own metadata, not inferred. Machine-readable manifest: pam-corpus-manifest.json.
Last verified 29 August 2026. All 7 documents were re-fetched and compared against this baseline automatically. No document has changed since capture. PDFs are compared by content hash; the two HTML pages by their publisher metadata block, which is stable across clients where a whole-page hash is not. State file, rewritten on every check.

Governing documents

These set the obligations. The framework establishes the model and how suppliers are rated; the code of conduct is the standard they are rated against; the guidance page carries at least one operative rule that is not in the framework PDF at all.

Procurement Assurance Model Framework
The assurance model itself. Three interlinked systems: incentive scheme from 1 Jan 2027, capability building and accountability from 1 Jan 2026. Sets out what an unmet commitment is, how it is graded minor/moderate/major, and what follows. Applies to all suppliers engaged by any agency covered by the QPP.

Replaces the Ethical Supplier Mandate, effective 1 January 2026. The 125km Local Benefits Test appears nowhere in this document. Table 2 grades unmet commitments against purposeful public procurement outcomes by undelivered margin: 1-40% minor, 41-75% moderate, 76-100% major. A sanction prevents doing business with government for up to 2 years. Up to two Improvement Notices, with 5 business days to respond. New suppliers are exempt from initial assessment until 12 months after their first government contract. Agencies must check the Portal unless the supplier is pre-qualified or the value is under the $50,000 including GST general exemption threshold. Page 2 states the Framework is intended as a guide for the internal use of government agencies and may not be relied on by any other party, which is notable given suppliers are the parties rated under it.
Last changed by publisher19 May 2026
First published22 December 2025
FormatPDF, 1,083,479 bytes
SHA256 at capturedc3bee20205cdac77f26e65a2e7f2bd5e0b5f9828165813478b6a09d890f2585
Description based onFull text, read 20 August 2026

Publisher page → · Document →

Procurement Assurance Model Guidance
Agency-facing operational guidance on applying the model. States one rule more plainly than the Framework does, and carries the referral addresses and contact numbers.

States verbatim: 'Sanctions apply only to new contracts or contract extensions and do not affect existing contracts.' The Framework conveys the same effect by enumeration in section 3.3.6.3, since every listed sanction type is prospective, but does not state it as a rule. Important caveat: Framework section 3.3.6 says an agency may activate any contract remedy in addition to referring the matter, so an existing contract is protected from PAM sanction, not from termination. The sentence sits in a section headed 'Impact of outcomes under the PAM on agencies' operations', so the plainest statement of a rule that matters most to suppliers is written to reassure agencies. HTML only, no downloadable document, so the page itself is the artifact.
Last changed by publisher6 January 2026
First published6 January 2026
FormatHTML, 247,741 bytes
SHA256 at capturec8706ffbad41c27c026bc043c88d6d030aa486cb5b4c65a8f753c16607198fec
Description based onFull text, read 20 August 2026

Publisher page →

Queensland Government Supplier Code of Conduct 2026
The conduct standard suppliers are held to, and the benchmark Framework Table 2 grades against. Ethical expectations (2.1-2.8), social (3.1-3.7), environmental (4.1).

Version discrepancy: the PDF footer reads 'Version 1.0 November 2025' while the landing page reports modified 2026-05-20. Either the page was touched without the document changing, or the footer was not updated. Section 1.1 imposes an active obligation often missed: suppliers on contracts executed on or after 1 January 2026 must make and retain records demonstrating adherence. Section 2.7 ties subcontractor payment terms to project and retention trust account requirements under the Building Industry Fairness (Security of Payment) Act 2017. Section 3.7 requires child safe standards under the Child Safe Organisations Act 2024. Also published at a second location on business.qld.gov.au, not yet compared.
Last changed by publisher20 May 2026
First published5 November 2025
FormatPDF, 207,307 bytes
SHA256 at capture6739f6f558f26c9c9819b35945e2d9c3d655aa0de0f3d11d06977eab95726b2b
Description based onFull text, read 20 August 2026

Publisher page → · Document →

The rules, one at a time

Each answer below is taken from the document named beside it and the section it sits in. Nothing here is summarised from commentary.

How long does a sanction under the PAM last?

Up to 2 years from the date of the decision. A sanction prevents the supplier doing business with Queensland Government for that period.

SourceProcurement Assurance Model Framework
Section3.3.6
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

Do PAM sanctions affect existing contracts?

No. Sanctions apply only to new contracts and contract extensions. An existing contract is protected from PAM sanction, but not from termination: Framework 3.3.6 allows an agency to activate any contract remedy in addition to referring the matter.

SourceProcurement Assurance Model Guidance
SectionImpact of outcomes on agencies' operations
Read from full text20 August 2026
Document last changed6 January 2026

Publisher page →

How is an unmet commitment graded minor, moderate or major?

Table 2 grades purposeful public procurement outcomes by undelivered margin: 1-40% minor, 41-75% moderate, 76-100% major.

SourceProcurement Assurance Model Framework
SectionTable 2
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

How many Improvement Notices can a supplier receive, and how long is there to respond?

Up to two Improvement Notices, with 5 business days to respond to each.

SourceProcurement Assurance Model Framework
Section3.3
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

Are new suppliers assessed immediately?

No. New suppliers are exempt from initial assessment until 12 months after their first Queensland Government contract.

SourceProcurement Assurance Model Framework
Section3.3
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

When must an agency check the assurance portal before awarding?

On every procurement except where the supplier is pre-qualified, or the value falls under the $50,000 including GST general exemption threshold.

SourceProcurement Assurance Model Framework
Section3.3
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

Can suppliers rely on the PAM Framework?

The Framework states on page 2 that it is intended as a guide only for the internal use and benefit of government agencies, and may not be relied on by any other party. Suppliers are the parties rated, sanctioned and excluded under it.

SourceProcurement Assurance Model Framework
Sectionpage 2
Read from full text20 August 2026
Document last changed19 May 2026

Publisher page → · Document →

Supplier guidelines

Conduct standards a supplier is measured against during procurement and delivery. Two of these did not exist before 11 May 2026.

Supplier guidelines, with publisher change dates. Hashes are in the manifest.
DocumentFirst publishedLast changed
Managing conflicts of interest (Procurement and Delivery): Supplier guidelines 11 May 2026 11 May 2026
Handling Information (Procurement and Delivery): Supplier Guidelines 11 May 2026 11 May 2026
Acting Properly Toward Government Officers: Influencing Decision-making (Procurement and Delivery): Supplier Guidelines 1 January 2022 8 May 2026
The May 2026 wave. 5 of the 7 documents were created or revised in May 2026. guidance dates to the 6 January 2026 commencement week. This looks like a policy wave that has not been compiled publicly.

What feeds a supplier rating

The Framework does not name a single regulator as a rating input. Section 3.1.2 says only that ratings draw on performance in fulfilling contractual obligations, and on supplier history from previous assurance assessments and open source data held by state and federal regulatory agencies.

Four regulators are named in the document, but in Appendix 2, inside an example contract clause defining "Government Department or Instrumentality". Reading them as the rating feed is a reasonable inference and a common one. It is not what the Framework says.

The four named in Appendix 2. The right-hand column states what this platform holds, which is not the same thing.
Regulator namedHeld here
Work Health and Safety Queenslandnone
Queensland Building and Construction Commissionlicences only, not enforcement actions
Fair Work Commissionharvested, never cheffed
Australian Taxation Officenone, likely to stay closed
Scope, stated plainly. Any claim of authority on supplier assurance must state the registers actually held, not the four the Framework names. This page indexes the rules. It does not reproduce any regulator's enforcement data, and it is not connected to the assurance portal.

The related supplier test

A supplier is related where it is a related body corporate, OR shares one or more common company officers, OR shares a business address.

Appendix 1 gives the three limbs above. Section 3.3.4.1 gates when the provision fires: the related supplier must continue the work of a business that has been issued an outcome under the PAM AND that business must have ceased trading or entered liquidation, AND control must be shown, per section 50AA of the Corporations Act 2001. It is a phoenix provision, not a general related-party rule.

What the portal is, and is not

The assurance portal is agency-facing. It records moderate and major outcomes and shows sanctions in force to government procurement officers. Not a public data source. A supplier cannot look themselves up in it, and neither can anyone else.

Adjacent

Building Policy Framework — Queensland Government building and construction procurement policy. Adjacent to PAM rather than part of it, but listed as related and relevant to construction suppliers. Last changed 3 March 2026.

What this page does not tell you

Stated so it is not inferred
No rating is published here. Assurance outcomes are recorded in an agency-facing portal and are not public.
No enforcement data. This indexes the rules, not any regulator's actions against any supplier.
Not legal advice. A first-pass index. Read the governing documents.
Hashes describe a moment. Verified at capture on 19 August 2026. Re-check against the publisher before relying on any of it.

The rest of the record

Disclosed contracts, licensed contractors, tenders and development applications, compiled daily from the same public registers.

The delivery decade →

Sources

Direct fetch from the publisher. Dates are read from DCTERMS meta on each landing page, not inferred. Hashes are SHA256 of the exact bytes served. Baseline taken 19 August 2026. Corrected 20 August 2026: Documents marked FULL_TEXT_READ were read in full on 2026-08-20 and their descriptions corrected against the source text. Before that date several descriptions were compiled from working notes rather than the documents themselves, and overstated what the Framework says about regulator feeds and the related supplier test.