Supplier audit basics for product safety: visiting, questioning and verifying without needing a big team

Documents can be accurate, outdated, borrowed, or aspirational, and only a visit or a verification exercise reveals which. A supplier audit checks whether the controls described in documents actually operate on the floor: whether incoming materials are checked, whether production steps are controlled, whether finished products are tested, and whether changes are notified. A buyer who never verifies will discover a supplier's reality only through a fault in its own products, which is the most expensive way to learn.

Auditing is also a relationship act. A supplier who welcomes an audit, shows its controls openly, and acts on findings demonstrates a safety culture the buyer can rely on. A supplier who resists, hides, or dismisses findings demonstrates the opposite, and that demonstration is valuable information for future orders, even where the audit itself finds no major fault.

Planning starts with scope: which products, which processes, and which risks the audit covers, chosen by the safety criticality of the supplied goods. A small audit focused on one critical process, such as a safety test or a material control, teaches more than a broad audit that skims everything. The plan should list the documents to review in advance, the people to meet, the floor areas to see, and the questions that matter most, so the visit uses its limited time well.

The supplier should receive the plan in advance, with the scope and the documents wanted, because a surprise audit of a small supplier will produce defensiveness rather than openness, and a prepared supplier can have its records ready. Advance notice does not weaken an audit; it strengthens it, by ensuring the audit examines real records rather than a scramble to produce them.

The most revealing questions concern change, failure, and verification. How are material or component changes notified and approved? What happens when a product fails a test? How are nonconforming products separated from good ones? How are workers trained for safety critical steps? How are complaints from buyers handled and fed back into production? A supplier with good answers, backed by records, shows a working system. A supplier with vague answers, however polished, shows a system that exists mainly in presentations.

Questions should be followed by evidence requests. An answer about testing should lead to test records for recent batches. An answer about change notification should lead to a recent change record. An answer about nonconforming product should lead to the quarantine area itself. Evidence following answers is what turns a conversation into an audit.

Floor checks look for the physical signs of control: materials labelled and separated by lot, work instructions visible at safety critical steps, test equipment present and apparently in use, nonconforming products quarantined and labelled, finished products traceable to batches, and a general order that suggests process discipline. Disorder alone does not prove unsafe products, but order in safety critical areas correlates with control, while chaos in those areas should prompt deeper questions.

Floor checks should also include a sample trace: pick a finished unit and ask to trace it back to its materials and tests, using the supplier's records, in real time. A trace that completes smoothly proves the system works. Illustration: a buyer tracing a toy back through its paint lot and its pull test, in the supplier's records, finds the trace breaks at the paint lot, revealing a gap no document review had shown.

Findings should be written plainly, graded by risk, and agreed with the supplier where possible, with actions, owners, and dates. A finding about a safety critical control deserves a prompt fix and verification, while a finding about a documentation habit deserves a dated improvement. The buyer should verify fixes by evidence, not by assurance alone, asking for the corrected record, the new procedure, or a retest result, depending on the finding.

Follow up should also affect future orders. A supplier who fixes findings promptly and verifiably earns continued and possibly increased business. A supplier who ignores findings, disputes them without evidence, or repeats them at the next audit should lose safety critical work until proof of improvement exists. That consequence is what gives audit findings their weight; findings without consequences will be ignored.

Where a visit is not possible, due to distance, cost, or a small order volume, a remote audit can still verify much: documents reviewed in detail, video walkthroughs of relevant areas, live sample traces, and structured interviews with the people who run safety critical steps. Remote auditing is weaker than a visit for observing floor reality, but it is far stronger than no audit, and it should be used rather than skipping verification entirely.

Remote audits need the same discipline as visits: a plan, evidence following answers, graded findings, and verified fixes. They also need honesty about their limits: a video walkthrough shows what the supplier chooses to show, so the auditor should ask for unplanned views, such as a random shelf or a quarantine area, to test whether the picture is complete. A remote audit that acknowledges its limits is still a valuable check.