Major risks identified at Group level are also analysed at the country level. This is carried out in two stages: first using a selection of international indicators and then by conducting a qualitative study for each country.
Each year, the Social Responsibility Department updates a consolidation of internationally recognised indicators,* used to determine a country’s risk level. To better reflect all of the risk factors being considered, two additional indicators were adopted in 2025, bringing the total to ten. One of the new indicators is the Labour Rights Index published by the WageIndicator Foundation, which measures access to decent work based on the labour legislation in force in the country. The other is the Fragile States Index published by the Fund for Peace, which measures factors of economic, social and political vulnerability affecting the country.
Qualitative research is also carried out for each country. This level of analysis is essential to identifying and prioritising the risks that may particularly affect Group entities and require their attention. A country-level study considers the relevance of the issues identified by the Group for a given operational context and business line, making it easier to target local priorities and implement tailored risk prevention strategies. The analyses draw on reports published by public administrations, international organisations, non-governmental organisations, academics, trade unions, the media, and so on, as well as information about the country’s legal and institutional frameworks. Industry data is also systematically sought out and incorporated into the research whenever it is available.
Country-level risk analyses are updated to reflect dialogue with employees and feedback from teams on the ground and represent a fundamental resource in the assessment of a subsidiary’s situation. They are also essential tools for making the Group’s employees and partners aware of risks requiring special scrutiny in their operations, contractual arrangements and partnerships, as well as earlier on, as projects or acquisitions are being identified or tenders are being prepared.
Conflict-affected areas are identified and treated as special factors of human rights risks for workers and residents alike. Additional ad hoc studies may be conducted on these geographic areas to examine partners, financing, the type of business activities involved, the project’s aim and its impact on the area and its population. Conflict-related risk is also monitored on a permanent basis by the Security Department, which continuously updates a multi-level risk classification. This classification is verified by VINCI’s Risk Committee.
Beyond enabling remedial action to be taken, whistleblowing systems and the handling of reported concerns also help to highlight and analyse more precisely areas where VINCI must be vigilant.
The Group is committed to protecting human rights and provides multiple channels through which its employees and stakeholders can report concerns. These channels include contacting human resources departments, health and safety representatives, line managers or employee representative bodies. If confidentiality is an issue, employees can also approach the ethics officers of VINCI’s business lines and divisions or at Group level.
In addition to the whistleblowing system at Group level (see section 6, “The Group’s whistleblowing system”, page 324), VINCI encourages the implementation of local procedures for reporting concerns. The Group’s view is that whistleblowing systems and alert procedures must be local and open to reports by all stakeholders, including indirect staff, end users or affected communities. In addition, they must enable the company, project or worksite to proactively handle reports, implement appropriate corrective measures, identify any weak areas in the organisation and reinforce its preventive measures.
A number of Group companies have set up additional methods, other than alerting the line manager, to report complaints or situations that present a risk, such as a human rights risk. Such methods may consist of procedures providing access to a dedicated email address, hotline or digital solution. Some companies, such as LISEA in France and Lima Expresa in Peru, have a contact point for the public on their websites. Others outsource the processing of reports to an independent body: this is the case for Seymour Whyte in Australia and VINCI Construction in the Czech Republic and Slovakia. In the Gulf region and Africa, social responsibility coordinators or occupational social workers are tasked with handling any complaints from workers, whether directly or indirectly employed, and members of affected communities. They also maintain a log and ensure that the problems raised are quickly resolved.
Although VINCI entities are sometimes the customer, their role is very often that of subcontractor or service provider. In these situations, Group entities are encouraged to participate in the processes put in place by their customers. This is the case for Sogea-Satom projects, where teams can report concerns using customers’ existing systems as well as suggest improvements via complaint logs and public meetings. It also monitors complaints handling using a few simple indicators: number of complaints, corrective action taken, effectiveness (whether the issue recurs) and resolution time. Written records are kept.
