Skip to main content
German Supply Chain Due Diligence Act (LkSG) Compliance

German Supply Chain Due Diligence Act (LkSG) Compliance: is it right for your Odoo?

The German Supply Chain Due Diligence Act (LkSG) Compliance module fits if you want to run supplier onboarding, risk assessment, the grievance channel and the annual BAFA report inside Odoo. It is published for Odoo 17, 18, 19 and 20, and the up-to-date country risk baseline needs a FlexigoTech Cloud subscription. Migrating your database and third-party costs stay with you.

FlexigoTech · Editor in charge: Víctor Gómez · Updated 4 November 2026

Key facts

Versions
Odoo 17, 18, 19 and 20
Checked
in the module's source code, version 20.0 · against the sources linked at the end
Reading time
5 min

What the module covers and what stays with you

The module's README and listing let you split things into three groups: what the module does, what depends on the FlexigoTech Cloud service and what is down to you. The table puts them side by side.

NeedWhat the documentation saysWho covers it
Supplier onboarding (§6 Abs. 4 LkSG)Captures and tracks supplier compliance data, questionnaires and contractual assurance clausesThe module
Risk assessment (§5 LkSG)Scores each supplier across 13 HR and ENV risk dimensions per §2 Abs. 2/3, with a weighted scoring algorithmThe module
Country risk referenceCountry risk baseline, kept up to dateFlexigoTech Cloud, with a subscription
Compliance dashboard (§3, §10 LkSG)Real-time overview of supplier states, open measures and upcoming BAFA deadlinesThe module
Grievance channel (§8)Public complaint portal with anonymity protection and IP rate-limitingThe module
BAFA annual report (§10 LkSG)PDF and XML exports, prepopulated from the risk assessment dataThe module
Data retention7-year retention schedule, DSAR flow and Art. 17 erasure conflict resolutionThe module
Audit logImmutable, 10-year, with write and delete blocked for all rolesThe module
BAFA deadline reminderA scheduled task you activate once you have your first reportYou, by activating it
Migration to another Odoo versionFlexigoTech does not migrate your databaseYou or your implementer
Accounts and hostingYou contract and pay for each platform, Odoo and your hostingYou

The reading is straightforward. Work with suppliers, assessments, complaints and the annual report is described as a module feature. The listing states explicitly that the up-to-date country risk baseline requires a FlexigoTech Cloud subscription. And two things are left out by the documentation: migrating your database to a new Odoo version and third-party costs.

Supplier list in Odoo with columns for name, LkSG supplier tier, country, state and risk level
The supplier list with eight records, the New button and the search bar
Approved risk assessment form with overall score, high level and a table of risk areas
An approved risk assessment: type, assessor, overall score, risk level and areas with evidence and measures

Criteria for deciding whether it suits you

Whether the law applies to you is a question for your advisers. Here we only explain how the module handles it, so you can see whether its way of working matches yours.

  • If you need to know whether you are in scope: the README asks you to set your employee count and uses ≥1,000 employees as the threshold that triggers LkSG scope in the module.
  • If you assess suppliers in spreadsheets: the module scores each supplier across the 13 dimensions in the README with a weighted algorithm, and the dashboard brings together states, open measures and deadlines.
  • If you need a complaints channel open to outsiders: the README describes a public portal with anonymity protection and IP rate-limiting.
  • If you prepare the annual report for BAFA: the module generates PDF and XML from the risk assessment data.
  • If being able to prove what happened and when matters to you: the audit log blocks writing and deleting for all roles.
  • If you want the country risk baseline kept current: you need the FlexigoTech Cloud subscription.
  • If your Odoo is not 17, 18, 19 or 20: the module is not published for your version.
BAFA annual report form with status bar, fiscal year 2026, deadlines and supplier and complaint statistics
The BAFA annual report in the Ready for Review state, with fiscal year 2026 and the Report Content (§10 Abs. 2) tab

What to have ready before installing

The README gives this order to get started:

  1. Install the module through the Odoo Apps interface.
  2. Go to Settings → Companies → Your Company → LkSG Compliance to enable the module and set your employee count.
  3. Open LkSG Compliance from the main menu.

In the configuration, the README also asks for your data protection officer (DPO) email address and the complaint acknowledgement sender. Decide on both before you begin. The BAFA deadline reminder task is activated once you have your first compliance report, not on day one.

To see which menus it adds and what a record goes through, read how the module works under the hood. And if something stops you while testing, check its error messages and warnings.

Odoo versions and what you pay

The module is published on Odoo Apps for 17.0, 18.0, 19.0 and 20.0, and on all four listings it costs €9 per Odoo version, one-off payment, excluding VAT. The FlexigoTech Cloud local service costs €29/month or €290/year excluding VAT (Pro: €58/month or €580/year).

One detail that matters if you plan to upgrade: with the subscription, the module for new Odoo versions is included if you bought it on flexigotech.com; on the Odoo App Store, each version is bought there. Without a subscription, or with the service suspended, whatever the subscription provides stops, and your data stays in your Odoo.

What FlexigoTech Cloud receives if you take the service

Before signing up, it is worth knowing what data leaves your database. According to the listing:

  • The database identifier (uuid), its address (URL) and the Odoo version.
  • The FlexigoTech modules installed, with their version, and whether the database is a neutralised copy (staging or test).
  • The company name and the email of the person who accepts, with the date and version of the text accepted.
  • A public code to check that requests come from that database and a proof that it is that database, computed on your server without sending its secret.
  • A request for its service permit every 6 hours and the health of the service: counters and errors (type and code), without the content of your records.
  • When you use LkSG Data Feed: the names of the data tables your Odoo asks for and the version it already has, and nothing from your records.

The listing also includes support with a first response within one working day and module updates.

How FlexigoTech can help

FlexigoTech implements Odoo 17, 18, 19 and 20 and builds connectors and bespoke integrations. If you want to check whether the module fits the way you work with suppliers, you will find the details on the module page and its Odoo Apps listing.

Keep reading

How German Supply Chain Due Diligence Act (LkSG) Compliance works inside OdooMenus, scheduled actions and records of the German Supply Chain Due Diligence Act (LkSG) Compliance module for Odoo 17, 18, 19 and 20, explained in order.LkSG Compliance error messages in Odoo: when they appear and what to do about eachThe error messages in German Supply Chain Due Diligence Act (LkSG) Compliance for Odoo: when each one appears and what to do, with the exact text.Setting up EU Digital Services Act Compliance Suite in Odoo: a case from start to finishA worked case for setting up EU Digital Services Act Compliance Suite in Odoo: key fields, the states each record uses and what to check in week one.
Checked in the module's source code (version 20.0) and the linked sources

Sources