Vendor Agreement (Malaysia)
VENDOR AGREEMENT
Contracts Act 1950 | Personal Data Protection Act 2010 | Sale of Goods Act 1957
THIS VENDOR AGREEMENT ("Agreement") is entered into on [Agreement Date]
BETWEEN:
(1) [Principal Name], of [Principal Address] (hereinafter referred to as the "Principal"); AND
(2) [Vendor Name], of [Vendor Address] (hereinafter referred to as the "Vendor").
1. SCOPE OF SUPPLY
1.1 Subject to the terms of this Agreement, the Vendor is approved to supply the following goods and/or services to the Principal (the "Supply"): [Scope Of Supply].
1.2 The Principal may issue purchase orders as call-offs under this Agreement from time to time. Each purchase order shall be governed by the terms of this Agreement. This Agreement is the master framework and prevails over any conflicting terms in any purchase order or acknowledgement form.
1.3 The Vendor shall maintain the performance standards set out below and report to the Principal on a monthly basis against the agreed key performance indicators: [Performance KPIs].
2. PRICING AND PAYMENT
2.1 Pricing for the Supply shall be: [Pricing Terms].
2.2 The Vendor shall issue a valid tax invoice (compliant with the Sales Tax Act 2018 or the Service Tax Act 2018, as applicable) upon each delivery or completion of services. Payment shall be made by the Principal [Payment Terms].
2.3 If the Principal fails to pay any amount by the due date, the Vendor may charge interest on the overdue amount at the rate of BNM base rate plus 2% per annum, calculated daily.
3. INTELLECTUAL PROPERTY AND DATA PROTECTION
3.1 Intellectual property: [IP Ownership].
3.2 Data protection: [Data Protection]. The Vendor's data processing obligations are subject to and shall comply with the Personal Data Protection Act 2010 (Act 709) at all times.
3.3 Confidentiality: Each Party shall keep confidential all proprietary information of the other Party disclosed in connection with this Agreement and shall not disclose such information to any third party without the disclosing party's prior written consent. This obligation survives termination for 3 years.
4. TERM, TERMINATION AND GOVERNING LAW
4.1 This Agreement shall commence on [Agreement Date] and continue for [Agreement Term], unless earlier terminated.
4.2 Either Party may terminate this Agreement for convenience by giving [Termination Notice] to the other Party. Either Party may terminate immediately upon written notice if the other Party commits a material breach that is not remedied within 14 days of written notice, or if the other Party becomes insolvent or is wound up.
4.3 Upon termination, all outstanding purchase orders shall be completed and settled, all confidential information shall be returned or destroyed, and all personal data shall be returned or securely deleted in accordance with the PDPA 2010.
4.4 This Agreement is governed by the laws of Malaysia. Any dispute shall be referred to the High Court of Malaya or to arbitration under the Arbitration Act 2005 at the Asian International Arbitration Centre (AIAC).
Principal
________________
Signature
Vendor
________________
Signature
What Is a Vendor Agreement (Malaysia)?
A Vendor Agreement in Malaysia sets out the rights and obligations the parties agree to be bound by.
In the Malaysian procurement context, Vendor Agreements are widely used by corporations, government-linked companies (GLCs), and large organisations to formalise their approved vendor panels. The Ministry of Finance's procurement guidelines for GLCs and the Treasury Circulars on government procurement require suppliers to be registered in the Vendor Registry maintained by Khazanah Nasional, Vendor Development Programme (VDP), or the Ministry of Finance's ePerolehan system. A Vendor Agreement supplements this registration with specific contractual terms governing the supply relationship.
For technology and IT services vendors, a Vendor Agreement may also incorporate software licence terms, data processing obligations under the Personal Data Protection Act 2010 (PDPA 2010), and cybersecurity requirements under the Computer Crimes Act 1997 and the National Cyber Security Policy. Where the vendor processes personal data on behalf of the Principal, the PDPA 2010 requires that data processing be governed by a written agreement specifying the purposes and manner of processing.
For vendors supplying goods, the Sale of Goods Act 1957 (Act 382) implies conditions of merchantable quality, fitness for purpose, and correspondence with description into the supply arrangement. A Vendor Agreement can supplement these implied terms with express specifications, certificate of conformity requirements, and quality management system obligations (ISO 9001 or industry-specific standards).
Bumiputera vendor development is a significant feature of Malaysian corporate procurement. Large Malaysian companies and GLCs operating under the Vendor Development Programme (VDP) administered by the Ministry of International Trade and Industry (MITI) are required to source a specified percentage of their procurement from Bumiputera vendors registered with SME Corp Malaysia. A Vendor Agreement for Bumiputera vendors under the VDP framework may include additional obligations regarding technology transfer, capacity building, and performance targets aligned with the VDP's objectives.
The legal framework governing the Vendor Agreement (Malaysia) in Malaysia draws on several key statutes and regulatory bodies. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Parties executing a Vendor Agreement (Malaysia) in Malaysia should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Companies Act 2016 (Act 777) sets the foundational requirements.
When Do You Need a Vendor Agreement (Malaysia)?
A Vendor Agreement is required in Malaysia whenever a company wishes to formalise its relationship with a supplier of goods or services on an ongoing basis.
A Vendor Agreement is needed when a company is adding a new supplier to its approved vendor panel — establishing the commercial terms, quality standards, and compliance obligations that the vendor must meet before purchase orders can be placed. The Vendor Agreement serves as the master contract, with individual purchase orders issued as call-offs under the framework.
A Vendor Agreement is required when a company outsources a function or process to a third-party service provider — for example, IT support services, cleaning and maintenance, security services, logistics, or marketing services — and wishes to set clear performance KPIs, reporting obligations, and step-in rights if performance falls below the required standard.
A Vendor Agreement is needed when a company is onboarding a vendor that will handle personal data on its behalf — for example, a payroll processing vendor, a cloud services provider, or a marketing database manager. The Personal Data Protection Act 2010 requires that personal data processing by a third party be governed by a written contract.
A Vendor Agreement is required in government procurement contexts when a government agency or GLC engages a vendor through the ePerolehan system or direct negotiation, requiring a formal contract that incorporates the Government Procurement Act's standard terms.
A Vendor Agreement is needed when a retail chain, e-commerce platform, or marketplace operator onboards a merchant or product supplier to sell on its platform — establishing the commercial terms, brand and intellectual property guidelines, and compliance obligations that the vendor must observe.
Parties in Malaysia should prepare a Vendor Agreement (Malaysia) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.
What to Include in Your Vendor Agreement (Malaysia)
A Vendor Agreement for Malaysia must contain the following essential elements.
Parties: Full legal names, SSM registration numbers, and addresses of the Principal (company engaging the vendor) and the Vendor. For Bumiputera vendors under the VDP framework, confirm the vendor's registration with SME Corp Malaysia or the relevant VDP administrator.
Scope of Supply: A clear description of the goods, services, or both that the vendor is approved to supply — including product codes, service descriptions, and any applicable technical specifications or quality standards.
Pricing: The agreed prices or pricing schedule, the basis for price adjustments (fixed, CPI-linked, annual negotiation), currency (Malaysian Ringgit, RM), and whether prices are inclusive or exclusive of Sales and Services Tax (SST) under the Sales Tax Act 2018 and the Service Tax Act 2018.
Ordering Procedure: How purchase orders are placed (electronically via procurement system, by email, or by formal written order), the minimum and maximum order quantities, and the lead times for delivery or performance.
Payment Terms: The payment period (30, 60, or 90 days from invoice), the payment method, and any early payment discount or late payment interest provisions.
Performance Standards and KPIs: Key performance indicators against which the vendor's performance will be measured — on-time delivery rates, defect rates, response times for service requests, and the consequences of failure to meet KPIs.
Intellectual Property: Ownership of any intellectual property created by the vendor in performing the contract — whether vested in the vendor (licence to the Principal), or assigned to the Principal. The Patents Act 1983, Trademarks Act 2019, and Copyright Act 1987 govern Malaysian IP rights.
Confidentiality: The vendor's obligation to keep confidential the Principal's business information, pricing, customer data, and any other proprietary information disclosed in connection with the vendor relationship.
Data Protection: Where the vendor processes personal data on behalf of the Principal, obligations under the Personal Data Protection Act 2010 including security measures, restriction on further processing, and breach notification.
Term and Termination: The initial engagement period, any automatic renewal, the right to terminate for cause (breach, insolvency) or for convenience with notice, and the consequences of termination (return of materials, settlement of outstanding invoices).
Governing Law: Malaysian law, with disputes resolved by the High Court of Malaya or arbitration at the Asian International Arbitration Centre (AIAC) under the Arbitration Act 2005.
Additional compliance elements for a Vendor Agreement (Malaysia) used in Malaysia include: Under Malaysian law, the Contracts Act 1950 (Act 136) governs contractual obligations. The Companies Act 2016 (Act 777) regulates corporate entities through the Companies Commission of Malaysia (SSM). The Employment Act 1955 (Act 265) and the Department of Labour govern employment matters. The Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection Department protect personal data. The Inland Revenue Board of Malaysia (LHDN) administers tax obligations. The Industrial Court adjudicates employment disputes under the Industrial Relations Act 1967 (Act 177). Forms-legal.com provides this template as a starting point for Malaysia-compliant documentation.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Vendor Agreement (Malaysia) (Malaysia) [Legal document template]. Forms Legal. https://forms-legal.com/malaysia/business/contracts/vendor-agreement-malaysia
"Vendor Agreement (Malaysia) (Malaysia)." Forms Legal, 2026, https://forms-legal.com/malaysia/business/contracts/vendor-agreement-malaysia.
@misc{formslegal-vendor-agreement-malaysia,
author = {{Forms Legal}},
title = {Vendor Agreement (Malaysia) (Malaysia)},
year = {2026},
howpublished = {\url{https://forms-legal.com/malaysia/business/contracts/vendor-agreement-malaysia}},
note = {Free legal document template. Based on Companies Act 2016 (Act 777)}
}Also available for these jurisdictions:
Frequently Asked Questions
A Vendor Agreement and a Supply Agreement serve related but distinct purposes in Malaysia. A Supply Agreement focuses specifically on the ongoing supply of goods — the product specifications, pricing, ordering mechanics, delivery terms (using Incoterms under the Sale of Goods Act 1957 framework), and quality remedies. A Vendor Agreement is broader — it governs the entire commercial relationship with a third-party supplier, including vendor onboarding and registration, approved supplier panel status, performance KPIs, intellectual property ownership, data protection obligations under the Personal Data Protection Act 2010, compliance certifications, and the framework within which individual purchase orders are placed as call-offs. For businesses managing a panel of suppliers or outsourcing specific functions, a Vendor Agreement provides the comprehensive governance framework, while the Supply Agreement is more appropriate for a straightforward ongoing goods supply arrangement.
Sales and Services Tax (SST) applies to vendor supply contracts in Malaysia under the Sales Tax Act 2018 and the Service Tax Act 2018, which replaced GST in September 2018. Sales tax at 10% (standard rate) or 5% (specified goods) applies to the sale of taxable goods by a registered manufacturer. Service tax at 8% (from 1 March 2024) applies to taxable services provided by a registered service provider with an annual taxable turnover exceeding RM500,000. The Vendor Agreement should specify whether the stated prices are inclusive or exclusive of SST. Where SST applies, the vendor (manufacturer or service provider) must be registered with the Royal Malaysian Customs Department (RMCD) and issue valid SST tax invoices. The buyer cannot claim input tax credits under SST (unlike under GST), so the pricing of vendor contracts should reflect the full SST cost. Failure to account for SST correctly can result in penalties under the Sales Tax Act 2018.
The Personal Data Protection Act 2010 (PDPA 2010) governs the processing of personal data in commercial transactions in Malaysia. Where a vendor processes personal data on behalf of the Principal — for example, a payroll outsourcing provider processing employee data, a call centre managing customer records, or a cloud storage provider hosting databases containing personal data — the PDPA 2010 requires that the processing be carried out under a written contract. The Vendor Agreement should specify: (a) the categories of personal data to be processed; (b) the purposes for which the data may be processed; (c) the security measures the vendor must implement to protect the data (encryption, access controls, physical security); (d) the vendor's obligation not to process the data for its own purposes or transfer it to third parties without the Principal's consent; (e) the vendor's obligation to notify the Principal promptly of any data breach; and (f) the vendor's obligation to return or securely destroy all personal data on termination of the agreement. Non-compliance with the PDPA 2010 can result in fines of up to RM500,000 and imprisonment for natural persons.
Vendor performance disputes in Malaysia are typically resolved through the escalation and dispute resolution mechanisms set out in the Vendor Agreement. Most commercial contracts include a tiered dispute resolution process: first, informal escalation between the parties' contract managers; then, escalation to senior management; and finally, referral to formal dispute resolution if the dispute remains unresolved. For formal resolution, the options are litigation in the High Court of Malaya under the Rules of Court 2012, or arbitration under the Arbitration Act 2005 at the Asian International Arbitration Centre (AIAC) in Kuala Lumpur. Arbitration is generally preferred for commercial vendor disputes because it is confidential (protecting business relationships and commercially sensitive information), more flexible in procedure, and produces a final and binding award that is enforceable under the New York Convention in over 170 countries. For smaller disputes below RM5,000,000, the parties may also consider mediation under the Mediation Act 2012, which can be faster and less costly.
The Vendor Development Programme (VDP) is a Malaysian government initiative administered by the Ministry of International Trade and Industry (MITI) that aims to develop Bumiputera entrepreneurs as competitive suppliers to large anchor companies (typically GLCs and major multinationals). Under the VDP, anchor companies commit to procuring a specified value of goods and services from Bumiputera SMEs registered with SME Corp Malaysia, and provide capacity building, technology transfer, and mentoring support to their vendor companies. GLCs operating under Khazanah Nasional's portfolio are required to report their Bumiputera procurement targets and achievements against their 5-year VDP plans. A Vendor Agreement for VDP participants typically includes: (a) confirmation of the vendor's Bumiputera status and registration with SME Corp; (b) the anchor company's procurement commitment (minimum annual purchase value); (c) performance development targets (turnover growth, employment, technology adoption); and (d) reporting obligations to MITI. Participation in the VDP is voluntary for private companies but is factored into the Bumiputera equity and procurement scores under the Government's Malaysia Incorporated policy.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Supply Agreement (Malaysia)
A Supply Agreement for Malaysia under the Contracts Act 1950 governing the ongoing supply of goods between a supplier and a buyer. Covers pricing, delivery terms, quality standards, payment, and remedies for non-conforming goods.
Service Agreement (Malaysia)
A legally binding Service Agreement for Malaysia setting out the terms under which a service provider delivers services to a client. Governed by the Contracts Act 1950, covering scope of services, fees, payment terms, intellectual property ownership, termination, and dispute resolution under Malaysian law.
Distribution Agreement (Malaysia)
A Distribution Agreement for Malaysia appointing a distributor to market and sell products within a defined territory. Governed by the Contracts Act 1950 and the Competition Act 2010, covering exclusive or non-exclusive rights, territory, minimum purchase obligations, pricing, and termination under Malaysian commercial law.
Non-Disclosure Agreement (Malaysia)
A legally binding Non-Disclosure Agreement (NDA) for Malaysia that protects confidential business information under the Contracts Act 1950. Covers unilateral and mutual confidentiality obligations, trade secrets, proprietary data, and permitted disclosures. Enforceable by injunction in the Malaysian High Court.