Engineering Reference · Supplier Qualification

The factory audit checklist, section by section

Every supplier is "audited". Here is what that word should contain: three audit types (quality, social compliance, supply-chain security), five recognised bodies (SGS, Intertek, BV, TÜV, UL), ten audit sections from credentials to regulatory compliance, four result grades with a 15-30 day CAPA clock, supplier tiers A-D with a circuit-breaker that trips at two consecutive batches below 95%, and a 3+1 validation before any switch. Getting this wrong costs about 50 times what screening costs — roughly USD 14,000 of checks against USD 700,000+ of incident.

Figures reflect common industry thresholds and partner-factory practice, August 2026; product-specific values are agreed in your specification.

Types & Bodies

Three kinds of audit, five bodies that run them.

"Audited factory" means nothing until you know which audit. Buyers ask for three, and they answer three different questions:

Audit typeQuestion it answersWhat is checkedWho asks for it
Quality / technical auditCan this factory make my part to my standard, repeatably?QMS, laboratory, process control, non-conformance handling, mould managementEvery serious buyer; the foundation for the ten sections below
Social compliance auditIs it made lawfully and humanely?Labour law, hours and wages, no child or forced labour, freedom of association, health and safety, fire, environmental permitsEU and UK retailers, listed brands (Sedex SMETA, BSCI, RBA)
Supply-chain security auditCan the cargo be trusted from line to port?Personnel, data and cargo security; sealed packing and loading; no unauthorised goods in shipmentsMainly US importers (C-TPAT)

Third-party bodies: SGS, Intertek (ITS), Bureau Veritas (BV), TÜV, UL, with STR and Omega for social audits. Audits are either announced (dated, notified) or unannounced (a "flying" audit, mostly by third parties). A well-run factory does not mind the second kind. A factory that asks for a week's notice and then rearranges the floor is telling you something. Partner factories in our network hold ISO 22716 / GMP and are audited to the ten sections below before they see a customer drawing; see how we work.

The Checklist

The ten sections of a cosmetic packaging factory audit.

SectionKey check points (sampled, not declared)
A. Credentials & document controlBusiness licence and production permit; ISO 9001 / ISO 14001 / ISO 22716 (GMPC), BRC Packaging, Sedex SMETA, RBA as applicable; organisation chart with named responsibilities; controlled-document list with approval, issue and withdrawal records; record retention ≥ product shelf life + 1 year
B. Quality management systemQuality policy and measured objectives; SOPs and work instructions for cleaning, inspection and mould handling; internal audit and management review held; PDCA improvement loop; change control — material, process, equipment or site changes evaluated, approved, validated and notified to the customer
C. Design, development & mouldsAPQP/PPAP-style new-product process; mould design, acceptance, maintenance and storage records; sample-making procedure; review of customer drawings and specifications and their translation to the floor
D. Supplier managementApproval and monitoring of resin, glass, metal, ink, adhesive and plating suppliers; for formula-contact materials: specification, COA, declaration of conformity, regulatory evidence; incoming-inspection standards and records; supplier change management
E. Production process controlCleanliness of moulding, blowing, washing and assembly areas to GMPC; temperature, humidity, pest control, 5S; equipment list, maintenance plan, calibration; critical parameters (temperature, pressure, time, speed) set, monitored and recorded; first-piece and patrol inspection; mould register with life monitoring; batch traceability from raw material to carton; cleaning validation between materials, colours and customers; status labelling and quarantine
F. Finished-goods QC & laboratoryFinal inspection against the signed golden sample and specification (dimensions, appearance, colour, seal, pump output, spray pattern, torque, drop); calibrated callipers, spectrophotometer, tension gauge, leak tester, microscope; third-party migration, heavy-metal, phthalate and REACH SVHC reports; retained samples with defined quantity and period
G. Non-conformance & CAPAIdentification, recording, review and disposition (rework, scrap, concession) of non-conforming material at every stage; complaint handling with root-cause analysis; corrective and preventive actions implemented and their effectiveness verified
H. Warehousing & logisticsTemperature, humidity, fire, damp, crush and contamination control; zones for pending, passed, rejected and returned stock; FIFO in practice; protective packing and fragile labelling; transport damage and contamination controls
I. Social responsibility & EHSLocal labour law: hours, wages, social insurance, contracts; no child or forced labour; safe working environment, fire equipment and exits, machine guarding, chemical handling, first aid; waste segregation, discharge permits, energy use
J. Regulatory compliancePackaging requirements of the destination market (EU 1223/2009, US FDA, Japan MHLW, China CSTR); ability to supply full material disclosure, especially printing inks and plating layers; label, recycling and material-code marking; staff training records for induction, safety and quality awareness

How the day runs. Pre-audit questionnaire and document pack (certificates, internal audit and management-review reports, key test reports, layout) → opening meeting → floor walk covering warehouse, incoming inspection, every process, laboratory, finished goods, mould shop, chemical store, waste area, canteen and dormitories → record sampling across products, shifts and dates → structured interviews from manager to operator, checking that what is written is what is done → closing meeting where every non-conformance is stated with the fact, the requirement breached, the location and the evidence. No conclusion is announced on the day.

Results & Follow-up

Four results, one CAPA clock.

ResultMeaningWhat happens next
PassNo major non-conformances; minors closable in the agreed periodNormal ordering
Conditional passMinor or a few major non-conformances with an acceptable CAPA plan — the most common resultOrders limited in type or quantity, or inspection tightened, until CAPA closes
FailMajor or systemic non-conformances: quality hazard, safety risk, falsified records, system not functioningNot approved; if already supplying, stop
PendingEvidence outstandingDecision held until it arrives

The report is issued within 3-7 working days. The factory then has 15-30 days to submit root-cause analysis and a corrective and preventive action plan for each finding; the plan is reviewed for whether it is realistic and verifiable, and closure is confirmed by document evidence or, for major findings, a re-visit. A CAPA that only produces an apology has not closed.

Beyond the Audit

Three dimensions, and the cheapest-quote arithmetic.

A pass certificate is one input. Suppliers are profiled on technical fit × compliance × cost, and compliance is a veto, not a score: a missing migration report or a falsified record ends the assessment regardless of price. Technical fit is measured, not described — a neck-thread deviation of 0.5 mm has produced 15% filling-line scrap. Cost is judged on total cost of ownership, which is where the low-price patterns show up:

Low-price patternWhat it looks likeWhat it actually costsCounter-measure
Hidden mould feeUnit price ~20% below marketAfter mould amortisation, real cost ~32% above market averageLife-cycle cost model: unit + mould amortisation + freight + warranty
Capacity claim"One million pieces a day", 0% spare-machine ratioPower restriction or breakdown stops your order; one factory lost RMB 450,000 a dayCount spare machines and spare moulds on the floor, not on the slide
Sample fraudSample from imported resin, production from local gradeCompatibility failures, colour drift, cracking in the fieldRetained sample + composition test; deviation >2% from sample freezes payment

The 50× rule. Proper screening — audit, samples, compatibility testing — costs on the order of RMB 100,000 (approx. USD 14,000). One incident from an unvetted supplier — an aluminium can reacting electrochemically with the formula, a pump leaking on shelf — has cost brands RMB 5 million and up (approx. USD 700,000+): scrapped stock, line downtime at around RMB 150,000 a day, a 2-3 day gap while a replacement is found, refunds and compensation, and a trust rebuild measured in years. The ratio is about fifty to one.

Ongoing Governance

Grading, circuit-breakers and the 3+1 switch.

TierScoreProfileManagement
A — strategic≥90Core or exclusive components: private bottles, precision pumps, special materialsAnnual pricing, joint development, buffer stock, an A- or B backup always in hand
B — leverage75-89Standard, replaceable, high volume: stock bottles, jars, tubes, cartonsCompetitive tendering, volume consolidation, targeted process help
C — bottleneck60-74Scarce process or component but unstable performanceReduced share, stricter terms (deposits, shorter credit), active replacement search
D — exit<60Serious compliance, quality or delivery failure with no will to improvePlanned exit with a dated hand-over
TriggerThresholdResponse
Batch pass rate2 consecutive batches <95%Level 1 warning — root-cause report within 72 hours
On-time delivery3 consecutive deliveries <90%Level 1 warning
Repeated or double breachTwo indicators, or the same one againLevel 2 — order share cut 50%, resident audit
Line stop or recall causedAnyLevel 3 — new orders frozen, second source activated
Falsified data1 instanceLevel 4 — blacklist and legal follow-up

3+1 validation governs every supplier switch and every new supplier: three small pilot batches (different production and raw-material lots, tested for dimensions, appearance, print, material and migration, function, compatibility with the formula, and delivery accuracy) plus one full-scale production batch on the real line before volume moves. The backup red line: every critical component keeps at least two qualified sources, and the contract already provides that if the primary fails to supply for 5 days or more the second source starts without a legal process. Mould ownership and transfer are agreed at entry, not argued at exit — see mould cost and ownership.

Where the Factories Are

Five industrial belts, five specialisms.

BeltTypical strengthNotes
Guangzhou (Baiyun, Huadu) and the Pearl River DeltaFull-range cosmetic packaging: bottles, jars, pumps, caps, decoration; closest to the largest cosmetics manufacturing clusterFastest sampling and matching across components; Dongguan and Shenzhen for precision moulding and metallised finishes
Shantou (eastern Guangdong)Injection and blow moulding at volume; tubes, caps, PET/PETG bottlesStrong toolmaking base; price-competitive standard formats
Ningbo (Yuyao)Pumps, sprayers, dispensers, closuresChina's dispenser centre; where most lotion pumps and mist sprayers originate
Shaoxing (Shangyu)Airless bottles, acrylic and PMMA, lipstick and compact componentsColour-cosmetics and premium skincare hardware
Yiwu, Suzhou, ShanghaiCartons, gift boxes, labels, flexible packaging; Shanghai and Suzhou for higher-spec decoration and export-grade paperSecondary packaging and the paper side of a matching set

Distance matters for glass in particular: one brand's rule that glass suppliers must sit within 500 km of the filling site saved about RMB 2.7 million a year in breakage. Our sourcing-agent service selects the belt by component and the factory by audit result, and we say plainly that we are a sourcing partner working with vetted partner factories — the audit is how we earn the word "vetted".

Questions

Frequently asked

What are the three types of factory audit?
Quality audits (also called technical or production-capability audits) check the factory against the buyer's quality standard: management system, laboratory, process control, non-conformance handling. Social compliance audits (human-rights audits) check labour law, working hours and wages, no child or forced labour, freedom of association, health and safety, fire protection and environmental permits. Security audits (supply-chain security, most often requested by US buyers under C-TPAT) check personnel, data and cargo security from production through packing and loading to port. Third-party bodies that run them include SGS, Intertek (ITS), Bureau Veritas, TÜV and UL; audits are either announced or unannounced.
What does a cosmetic packaging factory audit cover?
Ten sections: company credentials and document control; the quality management system (including change control); design, development and mould management; supplier management for raw materials that touch the formula; production process control, cleanliness and traceability; finished-goods QC and laboratory capability; non-conformance and CAPA; warehousing and logistics; social responsibility and EHS; and regulatory compliance for the destination market. Evidence is sampled across products, shifts and time periods, and every non-conformance is written with the fact, the requirement breached, the location and the proof.
What are the four possible audit results?
Pass: no major non-conformances and any minor ones closable within the agreed period; the factory can be ordered from normally. Conditional pass: minor or a few major non-conformances with an acceptable corrective and preventive action (CAPA) plan; orders are limited in type or quantity, or inspection is tightened, until the CAPA closes — this is the most common result. Fail: major or systemic non-conformances such as a serious quality hazard, a safety risk, falsified records or a system that does not function; the factory is not approved. Pending: a result held until additional evidence arrives. The report is issued within 3-7 working days, the factory has 15-30 days to submit its CAPA, and closure is verified by document review or a re-visit.
Why can the cheapest packaging quote cost more?
Three patterns recur. A unit price 20% below the market that hides the mould fee; once the mould is amortised the real cost lands about 32% above the market average. A promised daily capacity of a million pieces with no backup injection machine (zero spare-machine ratio), so a power restriction stops your order. And sample fraud: a sample made from imported resin and a production run switched to a cheaper local grade. The defence is a full life-cycle cost model that includes mould amortisation, freight and warranty; a check of spare machines and moulds on the floor; and retained samples with a composition test, so that a deviation above 2% from the sample freezes payment.
How are packaging suppliers graded and monitored after the audit?
Suppliers are scored on quality (highest weight), delivery, cost and service, and compliance, then tiered A (90 or above, strategic), B (75-89, leverage), C (60-74, bottleneck) and D (below 60, exit). A circuit-breaker then watches the KPIs: two consecutive batches below 95% pass rate triggers a warning and a root-cause report within 72 hours; repeated or double breaches cut order share by 50% with an on-site audit; a line stop or recall freezes new orders and activates the second source; one instance of falsified data is a blacklist and legal follow-up. Any new or replacement supplier is validated by 3+1: three small pilot batches plus one full-scale production batch before volume moves, and every critical component keeps at least two qualified sources.
What does choosing the wrong packaging supplier cost?
Roughly 50 times the cost of screening properly. Pre-qualification — audit, samples, compatibility testing — costs on the order of RMB 100,000 (approximately USD 14,000). A single incident from an unvetted supplier — an aluminium can reacting with the formula, a pump that leaks on shelf — has cost brands RMB 5 million and upwards (approximately USD 700,000+) in scrapped stock, line downtime at around RMB 150,000 a day, refunds and compensation, before the reputational damage. Screening is the cheapest line on the project budget.
Download our audit checklist

Get the ten-section checklist as a working document.

Tell us the components you are sourcing and we will send the audit checklist we apply to partner factories, with the check points for your formats marked — and, if you want it, an audit summary for the factories we would propose.

Reply within 24h · NDA on request · Your details stay confidential

Keep Reading

Related reading.