Supplier Audit Checklist: A Complete Guide to Supplier Quality and Compliance

A reliable supplier helps your business deliver quality products and services. However, not every supplier follows the same standards. Some may have weak quality controls, poor records, or delays that affect your work. Therefore, it is important to check how suppliers manage their processes. A supplier audit checklist helps businesses review suppliers in a clear and consistent way. It covers areas such as quality, delivery, documentation, safety, and risk management. As a result, teams can spot gaps early and make better decisions about their suppliers.

A good audit also helps build stronger supplier relationships. Instead of waiting for a problem, your team can find risks, discuss improvements, and agree on actions before they affect customers.

With eAuditor Audits & Inspections, businesses can use digital checklists to record supplier audit findings, add notes, and manage follow-up actions. This helps teams keep audit records organised and track issues from discovery to closure.

What Is a Supplier Audit Checklist?

A supplier audit checklist is a structured list of questions used to assess whether a supplier meets your business requirements. It helps auditors review the supplier’s quality systems, production methods, records, delivery processes, and other relevant controls.

A supplier audit may take place at the supplier’s site, through a remote review, or by checking documents and records. The right method depends on the type of goods or services supplied and the risks involved.

For example, a manufacturer may audit a component supplier to check inspection records, equipment maintenance, and product traceability. In contrast, a service business may review staff competence, service controls, data protection practices, and contract requirements.

The checklist should reflect the supplier’s role and the risks they may create for your business. It should not use the same questions for every supplier without considering their products, services, and obligations.

Why Is a Supplier Audit Checklist Important?

A supplier audit checklist helps your business review suppliers before problems become costly. It also creates a clear record of what the audit found and what needs to improve.

1. It Helps Maintain Product and Service Quality

First, the checklist helps you review the supplier’s quality controls. You can check how the supplier inspects products, manages defects, and handles customer complaints.

As a result, your team can identify weaknesses that may affect the quality of the goods or services you receive.

2. It Helps Reduce Supply Chain Risks

Suppliers can affect your production, delivery schedules, customer service, and reputation. Therefore, an audit should look at risks such as poor traceability, weak backup plans, and repeated delivery failures.

Early checks help you decide whether a supplier needs corrective action, closer monitoring, or a wider review.

3. It Supports Compliance With Requirements

Your suppliers may need to meet contractual, legal, regulatory, or industry-specific requirements. A checklist helps you review the evidence that supports those requirements.

However, the audit must use the correct criteria for the supplier and the product or service. A general checklist alone does not prove legal or regulatory compliance.

4. It Improves Supplier Performance

An audit can reveal problems with delivery times, documentation, packaging, or communication. You can then agree on practical improvements with the supplier.

This creates a clearer path to better performance and fewer repeat issues.

5. It Supports Better Purchasing Decisions

Audit findings help purchasing teams compare suppliers against defined requirements. For example, a supplier with strong quality controls and reliable delivery may be a better fit than one with repeated failures.

However, decisions should also consider cost, capacity, service, risk, and other relevant business needs.

6. It Encourages Accountability

A supplier audit records what the auditor checked and what they found. When the report includes owners and deadlines for corrective actions, both parties can understand what must happen next.

Who Should Use a Supplier Audit Checklist?

Supplier audits can support many types of businesses and supply chains.

• Quality assurance teams: To review quality controls, inspection records, and defect management.
• Procurement teams: To assess supplier capability and support sourcing decisions.
• Operations managers: To check whether supplier processes meet operational needs.
• Supply chain teams: To identify risks that could interrupt supply.
• Compliance teams: To review relevant requirements and supporting evidence.
• Manufacturers: To assess raw material, component, and finished product suppliers.
• Food businesses: To review food safety controls, traceability, storage, and handling where relevant.
• Service organisations: To check service delivery, competence, records, and contractual requirements.
• Internal auditors: To document findings and monitor agreed actions.

The business should define who can approve suppliers, conduct audits, review results, and close corrective actions.

What Should a Supplier Audit Checklist Include?

A useful checklist covers the areas that matter most to your business and the supplier’s role. The following sections provide a practical starting point.

1. Supplier Information and Approval

First, confirm the supplier’s identity and the scope of the audit.

• Is the supplier’s legal or trading name recorded correctly?
• Are contact details and key contacts up to date?
• Are the products or services supplied clearly defined?
• Is the supplier approved under the company’s purchasing process?
• Are relevant contracts and specifications available?
• Have key supplier risks been identified?
• Is the audit scope clear?
• Have previous audit findings been reviewed?

2. Quality Management System

Next, review how the supplier manages quality.

• Does the supplier have documented quality procedures where required?
• Are roles and responsibilities clearly assigned?
• Are staff trained for their tasks?
• Are quality records maintained?
• Are inspection and testing methods defined?
• Are nonconforming products or services identified and controlled?
• Are customer complaints recorded and reviewed?
• Are corrective actions tracked?
• Does the supplier review recurring quality problems?

If the supplier claims ISO 9001 certification, verify the certificate’s scope, status, and issuing certification body as appropriate. Do not assume that a certificate covers every product, site, or service.

3. Product and Service Quality

The audit should confirm that the supplier can meet your specifications.

• Are current specifications available to the relevant staff?
• Are products checked against acceptance criteria?
• Are measuring and test tools suitable for their intended use?
• Are inspection results recorded?
• Are defects identified and reported?
• Are rejected items kept separate where necessary?
• Are changes to products or services controlled?
• Are customer requirements communicated to relevant workers?

For service suppliers, replace product-specific checks with suitable measures for service quality, delivery, accuracy, and customer requirements.

4. Purchasing and Material Control

If the supplier buys materials or subcontracts work, review how those activities are managed.

• Are incoming materials checked where required?
• Are approved suppliers used for critical materials?
• Are purchase specifications clear?
• Are material substitutions controlled and approved?
• Are outsourced processes reviewed?
• Are supplier-related problems recorded?
• Can the supplier trace critical materials to their source where required?

These checks help you understand whether the supplier also manages risks from its own supply chain.

5. Production and Process Controls

For manufacturing suppliers, check whether key processes are controlled.

• Are work instructions available and current?
• Are production settings defined where needed?
• Are process checks completed at the required stages?
• Are equipment maintenance activities recorded?
• Are process changes reviewed before implementation?
• Are operators trained for their assigned tasks?
• Are production records linked to the relevant batches or orders?
• Are deviations reported and managed?

Not every item applies to every supplier. Mark items as not applicable when they fall outside the audit scope, and explain the reason where needed.

6. Inspection, Testing, and Calibration

Inspection controls help show whether products or services meet the required criteria.

• Are inspection plans documented where needed?
• Are acceptance criteria clear?
• Are test results recorded and retained?
• Are measuring devices suitable for the task?
• Is calibration or verification completed at required intervals?
• Are out-of-tolerance devices assessed for possible impact?
• Are failed inspection results investigated?
• Are final release decisions recorded?

The auditor should review actual evidence rather than relying only on verbal assurances.

7. Traceability and Document Control

Traceability is important when a business must identify the source, status, or history of a product or service.

• Are relevant batches, lots, or orders identifiable?
• Can the supplier trace materials and finished products where required?
• Are records linked to the correct product or delivery?
• Are current documents available at the point of use?
• Are outdated documents removed from use?
• Are changes to specifications approved and recorded?
• Are records stored securely and retained for the required period?

8. Delivery and Inventory Management

Delivery problems can disrupt production and customer commitments.

• Does the supplier meet agreed delivery dates?
• Are orders checked before dispatch?
• Are quantities verified?
• Is packaging suitable for the product?
• Are goods protected from damage during storage and transport?
• Are delays reported promptly?
• Are inventory levels managed for critical items?
• Does the supplier have a suitable plan for supply interruptions?

9. Workplace Health, Safety, and Environment

Depending on the supplier’s work, you may need to review workplace and environmental controls.

• Are relevant workplace hazards identified?
• Are suitable controls in place?
• Are staff given required safety training?
• Are emergency arrangements defined?
• Are equipment safety procedures followed?
• Are hazardous materials stored and handled appropriately?
• Are waste and emissions managed under applicable requirements?
• Are incidents and unsafe conditions recorded?

These checks should match the audit scope. A supplier audit does not replace a specialist safety, environmental, or regulatory inspection when one is required.

10. Business Continuity and Risk Management

A supplier’s ability to keep operating can affect your own business.

• Has the supplier identified key operational risks?
• Are backup arrangements available for critical equipment or systems?
• Are alternative supply options considered for critical materials?
• Are key records protected against loss?
• Are recovery arrangements defined for major disruptions?
• Are important subcontractors identified?
• Does the supplier notify customers about major changes or disruptions?

The depth of this review should reflect the supplier’s importance and the potential impact of failure.

11. Customer Complaints and Corrective Actions

Finally, review how the supplier learns from problems.

• Are complaints recorded and investigated?
• Are root causes identified when appropriate?
• Are corrective actions assigned to responsible people?
• Are target dates defined?
• Is action completion supported by evidence?
• Is effectiveness checked?
• Are repeat issues reviewed?
• Are customers informed when required?

This section is especially useful when a supplier has a history of defects, late deliveries, or service failures.

Sample Supplier Audit Checklist

Use the following table as a starting point. Adapt it to the supplier, the audit criteria, and your business risks.

 

Audit area	What to verify	Result
Supplier approval	Supplier details and approval records are current	Pass / Fail / N/A
Quality system	Quality procedures and responsibilities are defined	Pass / Fail / N/A
Product specifications	Current requirements are available and followed	Pass / Fail / N/A
Incoming materials	Required checks are completed and recorded	Pass / Fail / N/A
Process controls	Relevant work instructions and process checks are in place	Pass / Fail / N/A
Inspection and testing	Results meet defined acceptance criteria	Pass / Fail / N/A
Calibration	Measuring devices are suitable and controlled	Pass / Fail / N/A
Traceability	Relevant products, batches, or orders can be identified	Pass / Fail / N/A
Document control	Current documents and records are maintained	Pass / Fail / N/A
Delivery performance	Delivery requirements are monitored	Pass / Fail / N/A
Workplace safety	Relevant hazards and controls are addressed	Pass / Fail / N/A
Business continuity	Risks to supply are assessed where relevant	Pass / Fail / N/A
Complaints	Complaints are recorded and investigated	Pass / Fail / N/A
Corrective actions	Actions are assigned and effectiveness is reviewed	Pass / Fail / N/A

For each failed item, record the evidence, requirement, risk, and action needed. Also identify the person responsible and the target date.

How to Conduct a Supplier Audit

A supplier audit works best when the scope is clear and the auditor follows a consistent process.

Step 1: Define the Audit Scope

First, decide what you need to review. Consider the products or services supplied, past performance, business risks, and any customer or regulatory requirements.

For example, a supplier of critical machine parts may need a detailed review of traceability, inspection, and process control. A supplier of office stationery may need a simpler assessment.

Step 2: Review Existing Supplier Records

Before the audit, review available information such as contracts, specifications, delivery performance, complaints, previous audit reports, and corrective action records.

This helps you focus on areas where evidence suggests a higher risk.

Step 3: Prepare the Checklist

Select questions that match the scope. Define what counts as acceptable evidence and how findings will be classified.

If you use categories such as major and minor findings, define them in your audit procedure. Apply the same rules consistently.

Step 4: Conduct the Audit

Depending on the audit method, review documents, interview relevant staff, observe processes, and examine samples or records.

Record what you see and compare it with the agreed criteria. Avoid treating an unsupported statement as proof that a control works.

Step 5: Record Findings

Document each nonconformity or concern in clear terms. Include the requirement, the evidence, and the gap between the two.

Also record good practices and areas where the supplier performs well.

Step 6: Discuss Results With the Supplier

Share the findings with the appropriate supplier contact. Explain the evidence and allow the supplier to clarify facts or provide relevant records.

This supports a fair review and helps both parties agree on suitable next steps.

Step 7: Agree on Corrective Actions

For each finding that needs action, define the expected result, the owner, and the target date. Ask the supplier to investigate the cause where necessary and propose actions that address it.

Step 8: Verify Completion and Effectiveness

Review the evidence provided by the supplier. Depending on the risk, you may need a follow-up audit, sample inspection, updated records, or a review of later deliveries.

Close the finding only when the required evidence meets your acceptance criteria.

Common Supplier Audit Mistakes to Avoid

Even a detailed checklist can fail to deliver useful results if the audit process is weak.

• Using the same checklist for every supplier: Adjust questions to the supplier’s risks and responsibilities.
• Auditing without clear criteria: Define the requirements before starting.
• Accepting verbal claims without evidence: Review records, samples, and actual practices.
• Ignoring past performance: Use complaints, delivery issues, and previous findings to guide the audit.
• Writing vague findings: State the requirement, evidence, and gap clearly.
• Focusing only on paperwork: Check whether documented controls are followed in practice.
• Failing to assign actions: Give each required action an owner and due date.
• Closing findings too early: Verify completion and effectiveness.
• Ignoring subcontractors: Review outsourced processes when they affect the supplied product or service.
• Treating every supplier as equally risky: Set audit frequency and depth according to risk and business impact.

How eAuditor Audits & Inspections Supports Supplier Audits

Paper forms and separate spreadsheets can make supplier audit records difficult to manage. A digital checklist can help teams standardise the audit process and organise findings.

eAuditor Audits & Inspections can support supplier audits in several practical ways.

1. Create Digital Supplier Audit Checklists

Businesses can configure checklist questions for supplier approval, quality controls, traceability, delivery, documentation, and other relevant areas.

The checklist can reflect the company’s supplier requirements and the scope of each audit.

2. Record Findings During the Audit

Auditors can record results as they review supplier processes and evidence. They can add notes to explain concerns and document the details needed for follow-up.

Where supported by the configured workflow, they can also attach photos or other evidence. This helps provide context for findings.

3. Document Nonconformities

When a supplier fails to meet a requirement, the audit record can describe the issue and the relevant evidence. This helps the team explain what needs to change.

For example, if inspection records are missing for a critical component, the auditor can record the gap and identify the records needed to resolve it.

4. Support Corrective Action Follow-Up

Teams can record actions that need to happen after the audit. Depending on the features and workflow enabled, they can assign responsibility, set target dates, and monitor progress.

This can help purchasing and quality teams follow up with suppliers and keep outstanding findings visible.

5. Keep Audit Records Organised

Digital records can help authorised users review previous audit findings and related follow-up actions. This makes it easier to prepare for future audits and review recurring problems.

Organisations should confirm which reporting, export, access, and retention features are available in their current setup.

6. Support Consistent Supplier Reviews

Using a shared checklist structure can help auditors collect similar information across suppliers. This makes it easier to review results against defined criteria.

However, teams should still account for differences in supplier risk, scope, and capability rather than assuming that every supplier needs identical checks.

7. Help Teams Review Improvement Needs

Over time, recorded findings can help teams identify areas that need further attention. For example, recurring documentation gaps may indicate a need for clearer supplier requirements or a better review process.

The audit team must still interpret the findings and decide what action is appropriate.

Important note: eAuditor Audits & Inspections supports checklist-based inspections and follow-up workflows. It does not automatically certify suppliers, verify every legal requirement, or guarantee supplier quality. The organisation remains responsible for defining audit criteria, assessing risk, and confirming that corrective actions are effective.

Explore available resources in the eAuditor Template Library.

Benefits of Using a Supplier Audit Checklist

A well-managed supplier audit process can help businesses improve oversight and reduce avoidable risks.

• More consistent supplier reviews: Auditors follow a clear structure.
• Better quality control: Teams can identify gaps in supplier processes.
• Earlier risk detection: Potential issues may be found before they disrupt operations.
• Improved traceability: Audit records help explain what was checked and what was found.
• Clear corrective actions: Owners and deadlines support accountability.
• Stronger supplier relationships: Evidence-based feedback encourages practical improvement.
• Better purchasing decisions: Audit results provide useful information for supplier evaluation.
• More organised records: Teams can retrieve findings for reviews and follow-up.
• Continual improvement: Repeated findings can guide changes to supplier controls and internal processes.

A checklist cannot remove every supply chain risk. However, it can help your business identify weaknesses, take action, and make supplier oversight more systematic.

Best Practices for Supplier Audit Management

To make your supplier audits more effective, follow these practices:

• Prioritise suppliers based on risk and business impact.
• Define the audit scope and criteria before each review.
• Use trained and suitably independent auditors.
• Review previous findings and supplier performance.
• Collect evidence from records, interviews, and observations.
• Write clear, factual findings.
• Give suppliers a reasonable opportunity to respond.
• Assign corrective actions and realistic deadlines.
• Verify action completion and effectiveness.
• Review audit frequency when supplier risks or performance change.
• Protect confidential supplier information.
• Update the checklist when requirements, products, or processes change.

Above all, treat the audit as a way to improve supplier performance, not merely as a compliance exercise. Clear expectations and fair follow-up can help both parties work toward better outcomes.

Frequently Asked Questions About Supplier Audit Checklists

1. What is a supplier audit checklist?

A supplier audit checklist is a structured list of questions used to assess whether a supplier meets defined quality, delivery, documentation, safety, and other business requirements. It helps auditors record findings and identify improvement needs.

2. Why should a business conduct supplier audits?

Supplier audits help businesses assess supplier capability, identify risks, review quality controls, and follow up on recurring issues. They also provide evidence to support supplier approval and performance decisions.

3. What should a supplier audit checklist include?

It should cover supplier approval, quality management, product or service requirements, process controls, inspection, traceability, documentation, delivery, relevant safety controls, risk management, and corrective actions. The exact content should reflect the supplier’s role and risk.

4. How often should supplier audits be conducted?

Audit frequency should depend on the supplier’s risk, performance, importance, and applicable requirements. A critical supplier with repeated failures may need more frequent reviews than a low-risk supplier with a strong record.

5. Who should conduct a supplier audit?

A suitably competent quality professional, auditor, procurement representative, or other authorised person may conduct the audit. The auditor should understand the requirements, use objective evidence, and follow the organisation’s audit procedure.

6. What is the difference between a supplier audit and a supplier evaluation?

A supplier evaluation may review factors such as price, delivery, capability, and past performance. A supplier audit usually examines processes, controls, and evidence in more detail. Organisations may use both methods as part of supplier management.

7. What happens when a supplier fails an audit?

The organisation should document the finding, assess its risk, and agree on appropriate corrective action. Depending on the issue, it may also need to contain affected products, increase monitoring, restrict approval, or consider another supplier.

8. How can a supplier audit checklist support ISO 9001?

A checklist can help an organisation document supplier controls and assess whether externally provided products and services meet its requirements. ISO 9001:2015 clause 8.4 addresses the control of externally provided processes, products, and services. The checklist should support the organisation’s wider QMS rather than replace it.

9. Can eAuditor Audits & Inspections be used for supplier audits?

Yes. eAuditor Audits & Inspections can support digital audit checklists, recorded findings, and follow-up workflows. Depending on the configured features, teams can also use evidence attachments and action tracking to help manage supplier audit results.

10. How can a business improve its supplier audit process?

Define clear criteria, prioritise suppliers by risk, collect objective evidence, document findings accurately, assign corrective actions, and verify results. Review recurring issues and update the audit process when supplier risks or business requirements change.

Final Thoughts

A supplier audit checklist helps businesses review supplier processes, identify quality gaps, and manage supply chain risks. It gives teams a consistent way to document findings and agree on practical improvements.

However, the checklist is only one part of effective supplier management. Businesses also need clear requirements, competent auditors, evidence-based decisions, and follow-up that confirms whether corrective actions work.

With eAuditor Audits & Inspections, teams can support supplier audits through digital checklists, structured findings, and corrective action workflows. By combining these tools with risk-based supplier management, your business can strengthen quality oversight and build more reliable supplier relationships.

Related eAuditor Resources

• Explore the eAuditor Template Library
• Chemical Risk Assessment Form
• General Workplace Health and Safety Checklist