What a social investment and community policy actually says

What a social investment and community policy is

A social investment and community policy sets out how a company puts time, money or expertise back into people and organisations outside its own paying customer base: free training for people who are not yet clients, advice for beginners or non-profits, volunteering time, or direct financial support to a cause. "Corporate social responsibility policy examples" is a common search precisely because most of what shows up is a template rather than a document a company actually follows.

The name varies. Some companies call it a community investment policy, others a CSR policy or a pro bono policy, but the content usually answers the same three questions: what does the company offer for free, to whom, and how is a request for support decided and recorded. A policy that answers none of those three is a mission statement, not a policy.

This distinction matters for a reader doing due diligence on a supplier or a prospective partner. A one-paragraph statement that a company "cares about giving back" tells a procurement reviewer nothing checkable. A policy with a decision process, a budget mechanism and a register tells them something they can actually ask follow-up questions about.

No law requires one, and that is the point

No binding EU law requires a company to make community donations, sponsor local projects, or run a social investment programme as a condition of operating. Nothing in company law, tax law or the sustainability reporting rules obliges a private company to give anything away. That absence is worth stating plainly rather than glossing over, because it is what makes a published community policy meaningful: a company writes one voluntarily, or it does not write one at all.

The closest thing to a legal hook is indirect. Large companies inside the scope of the Corporate Sustainability Reporting Directive must disclose material impacts on affected communities under the European Sustainability Reporting Standards, a topic covered by standard ESRS S3. That is a disclosure duty on large, in-scope companies, not a duty to donate, and it does not reach a small company outside CSRD’s scope at all. A voluntary EU standard aimed at smaller companies, the EFRAG VSME standard, touches similar ground but its use is optional.

So when a bank, a tender or a customer asks a small company for its community or CSR policy, they are not checking compliance with a legal minimum, because there is not one. They are checking whether the company has thought about the question at all, and whether what it says lines up with what it can actually show.

That absence of a legal floor also means there is no standard structure a regulator requires, no numbered clause a lawyer can point to as the mandatory minimum content. Two companies can publish genuinely different documents, one covering only volunteering hours, another covering training, advice and direct financial support, and both can be equally honest. The only wrong version is one that claims a commitment the company has no process for actually keeping.

What belongs in a genuine version of this policy

A credible policy states the forms of support the company actually offers: free training, advisory time, volunteering hours, or direct financial support, and does not list forms it has no mechanism to deliver. It states who can request support and through what channel, and what criteria a request is judged against, fit with the company’s stated focus, transparency about the recipient, and whether the result is measurable.

It should set a decision process with a named decision-maker and a stated turnaround time, rather than leaving requests to sit indefinitely. A genuine policy also states what it will not fund, political activity is the standard exclusion, and how support is actually paid, since a company that only pays by traceable bank transfer is making a different, checkable commitment than one that says nothing about payment method at all.

Finally, look for a record-keeping commitment: a register of what was given, to whom, and when, feeding into whatever annual review or report the company publishes. Without a register, "we support the community" is a claim with no way to check it a year later.

What to check when someone hands you theirs

Check first whether the policy names a decision-maker and a turnaround time for a support request. A policy that says support decisions are made "as appropriate" with no named role and no deadline is describing an intention, not a process.

Check for an explicit political exclusion and a payment-method commitment. Their absence is not automatically a red flag on a short document, but their presence is a positive signal: it shows the company anticipated the two situations most likely to make a community programme look like something other than what it claims to be.

Check whether volunteering, if the policy mentions it, has a stated cap and a logging mechanism. An open-ended "employees are encouraged to volunteer" line with no cap and no record is unfalsifiable. A stated number of hours per employee per year, logged, is a claim a reader can actually ask to see evidence of.

What Ripe Leads’ SIP-1 commits to

SIP-1, Ripe Leads’ Social Investment and Community Policy, implements section 3 of the company’s ESG statement (ESG-1) rather than standing on its own. UAB "Kofi Tech" offers free sales and operations training under its Educational Initiatives Programme (EIP-1) to freelancers, including people who do not yet work with the company, and the director and employees may advise beginners, non-governmental organisations and educational institutions without charge. The policy also states that the company works with educational institutions and professional communities on placements, lectures and joint events, and aims to keep its existing jobs and let people work remotely from anywhere in Lithuania.

Volunteering is capped and logged: each employee may use up to 8 hours a year of paid time for public-benefit volunteer work, agreed with the director in advance and recorded. That is a small, stated number, not an open-ended encouragement, and it is checkable against the log the policy requires.

Support requests go to info@kofitech.eu and must state the recipient, the purpose, the amount and the expected result. They are assessed against fit with the policy’s own stated focus, transparency of the recipient, and measurability, and the director decides within 20 working days, with the decision and its reasons logged. Two exclusions are stated outright: no support to political parties, campaigns, or persons connected to the company’s director, and no support in cash, only by bank transfer or a documented asset transfer.

SIP-1 also states that the company publicly shares its responsible-selling practice, its GDPR rules for collecting contacts, honest claims, opt-out handling, and follows and publishes its Business Ethics and Anti-Corruption Code (EK-1). The full text sits among all thirteen documents at the sustainability page, SIP-1.

How the annual plan and register keep it honest

The director sets an annual plan, goals, activities, and a time and money budget, by 31 January each year, recorded in writing and reviewed at year end alongside the company’s wider ESG review. Every activity is logged in a register: the date, participants, hours and amount, and an annual summary of that register is published at kofitech.eu as part of the ESG review.

That cadence is what turns a stated intention into something a reader can actually follow year over year: a plan set in January, activity logged through the year, a summary published afterwards. It is the same mechanism, an annual plan against a register, that separates a checkable community policy from a paragraph of goodwill language with nothing behind it.

What this document does not prove

SIP-1 is self-authored and approved internally by UAB "Kofi Tech". It is not audited, certified or verified by any third party, and no sustainability label, badge or score is claimed for it. That matters here more than in most of the company’s other governance documents, because a self-awarded community or CSR badge is exactly the kind of claim the Empowering Consumers Directive (EU) 2024/825 bans outright from 27 September 2026 when it is not based on a real certification scheme or a public authority.

It also does not prove that any specific education partnership or lecture has already taken place. Only activity actually logged in the register and reflected in a published annual review should be read as a completed fact; the policy itself describes a process and a set of standing commitments, not a list of events that have already happened. A reader who wants proof rather than a stated process should ask for the register entry, not the policy document.