Overseas Factory Audits and Supplier Reviews: Your Checklist from Questionnaire to Site Visit

Bottom line first: An overseas customer’s factory audit is really pricing your risk. On the same documents, a 10-point score gap typically means your quote gets squeezed by 3% to 5%. The four stages — self-assessment questionnaire, document pre-review, on-site audit, corrective action response — generally take 6 to 11 weeks. What stops Chinese factories usually isn’t scale, but seven automatic-fail items and a mismatch between the site and the paperwork.

1. An audit isn’t pass or fail — it’s the customer pricing your risk

An audit isn’t an exam with only a win or a loss. For the buyer it’s due diligence: what they need to judge isn’t “is this factory good” but “if I place orders here, how likely is something to go wrong within two years?” The audit score feeds straight into their supplier risk model, and what that model outputs is price.

Overall audit score	Customer’s internal positioning	Typical impact on pricing	Order share, rule of thumb
90 and above	Strategic supplier	Can command a 2% to 5% premium	40%+ in the same category
80 to 89	Qualified core supplier	Price roughly at par	20% to 40%
70 to 79	Backup supplier	Price squeezed by 3% to 5%	10% to 20%
60 to 69	Conditional approval	Price squeezed by 5% to 8%, plus corrective action required	Trial small orders
Below 60	Not approved for now	No deal unless you’re the sole source	Close to zero

Going from 85 to 92 is only 7 points, but it lands you in two completely different positions: “can command a premium” versus “backup.” But a higher score isn’t always worth it — for customers buying under 1 million RMB a year, hitting 80 and holding the automatic-fail items is enough.

A caveat: this logic only holds for mid-to-large customers with a supplier management system. When orders come through a trading company, or the end customer is a small-to-mid wholesaler, the audit is often just a formality — price and lead time still decide who wins.

2. The four-stage timeline tells you when to start preparing

The process has four stages, each with its own rhythm. Telling the customer the timeline upfront is far better than a last-minute notice.

Stage	Typical cycle	Key actions	Deliverable
Self-assessment questionnaire	1 to 2 weeks	Factory self-assesses and attaches supporting documents	Questionnaire plus attachment pack
Document pre-review	2 to 3 weeks	Remotely verify document authenticity and validity	Document issue list
On-site audit	1 to 2 days	Walk the production lines, take samples, conduct interviews	On-site audit report
Corrective action response	2 to 4 weeks	Submit evidence for each nonconformity	Corrective action report and closure confirmation

All four stages together: 6 weeks when things go smoothly, 9 to 11 weeks with corrective actions. When quality system and social responsibility audits run in parallel, the total timeline doesn’t double — but your internal manpower does.

The two most common timing traps: a certificate expiring one month before the audit, and a questionnaire that lands with no one assigned to own it.Review and renew certificates 3 months ahead; assign an owner for the questionnaire within 3 days.

3. How to fill in the self-assessment questionnaire: only check what you can back up with evidence

Many factories fill in questionnaires with a “check everything you can” mindset. This is the step where landmines get buried, because every “yes” in the questionnaire may later require you to produce evidence. If an answer is found to be untrue, your credibility drops to zero in one shot.

Item type	Judgment criteria	How to fill it in	Cost if audited
Evidence available	Certificates, reports, logs	Check the box and attach the document number	Low, just verify
True in practice but no document	You really do it but there is no written record	Check “yes” and note that records are being completed	Medium, flagged as an observation item
Not done at all	Never done, no equipment, no assigned role	Check “no” and attach an improvement plan	Low, actually a plus
Not sure	Don’t know whether it exists	Confirm internally first, don’t guess	High, a wrong guess counts as falsification

The hardest category is the second one: gauges calibrated weekly but the records are written on a whiteboard, defective parts really are segregated but there is no sign. The rule is “state it as it is and add a follow-up action” — don’t force a perfect score. Filling these record gaps usually takes 20 to 40 hours.

Better to expose a weakness than to patch a hole later. Exposing a weakness gets you flagged as an observation item, and customers usually allow 30 to 90 days to fix it. A patched hole, once found, gives you away — paper age, handwriting, all of it — and triggers an automatic rejection on the “data falsification” item.

4. The six must-have document categories for document pre-review

Document pre-review is the remote stage: the customer or a third-party agency checks item by item against the list. One missing item can send you back a round, and each round takes 5 to 10 working days on average.

Category	Specific documents	Validity requirements	Common gaps
Legal entity and licenses	Business license, import/export rights, production license	Within validity period and covering the scope of business	Scope of business doesn’t match actual operations
System certificates	ISO 9001, ISO 14001, IATF 16949	Certificate number verifiable on the issuing body’s website	Expired or suspended
Test reports	Product testing, material composition, RoHS or REACH	Report date usually within 2 years	Report model doesn’t match the shipping model
Equipment and capacity	Equipment list, precision, monthly capacity, plant floor plan	Consistent with the actual production line	The list still includes retired equipment
Customers and projects	Key customer list (anonymized), representative projects	No conflict with confidentiality obligations	Copying a competitor’s list falls apart on the first question
Insurance and employment	Product liability insurance, employer liability insurance, employment compliance	Coverage matches customer requirements	Social insurance only, no commercial insurance

Of the six categories,the sixth is the most underrated When US and European clients audit you, insurance isn’t a nice-to-have, it’s a gate: if someone gets injured or a product causes an accident, they need to confirm you can pay. Product liability coverage of $1 million to $5 million is a common requirement.

5. What the On-Site Audit Actually Looks At

An on-site audit usually runs 1 to 2 days. The auditor walks the line, flips through records, and interviews people at random. It looks like a lot of items, but there are only six core things.

What to Watch	What the Auditor Is Looking At	Passing Signal	Common Deductions
Line pace and work-in-progress	Is the process flowing smoothly, is WIP piling up?	Zoned placement, clear labeling	Aisles crammed with semi-finished goods
Inspection records and gauge calibration	Are records filled in on shift, do gauges have calibration labels?	Records match production batches	Records were filled in the day before the audit
Defective goods quarantine area	Is there a separate area, labeling, and log?	Clear red and yellow labels, disposal records on file	Mixed on the same shelf as conforming goods
Material traceability	Can you trace from finished product back to raw material batch?	Complete batch numbering system, traceable within 2 hours	Batch number only on the box, no log
5S and safety	Aisles, fire safety, protective gear, chemical storage	Aisles clear, protective gear actually being worn	Expired fire extinguishers, no protective gear worn
Can workers explain the process?	Random spot-checks of front-line workers	Can explain the process and acceptance criteria	Worker answers “ask my supervisor”

The last one is the most underrated: the auditor randomly asks an operator “what’s the critical dimension, and what do you do if it’s out of tolerance?” If the worker can’t answer, the conclusion is “the documents exist, but execution doesn’t.” The fix costs almost nothing — just spend 5 minutes a day quizzing the team for a week beforehand.

6. Seven Automatic-Fail Items and Two Reasonable Boundaries

Automatic fail means: no matter how many points you score elsewhere, hitting one of these means you fail outright, with no room to negotiate.

No.	Automatic-Fail Situation	Determining Evidence	Consequence
1	Major safety hazard	Blocked fire exits, hazardous chemicals without isolation, equipment without guards	Terminated immediately
2	Child labor or forced labor	Age records don’t match, ID documents withheld, deposits collected	Terminated and blacklisted
3	Environmental violation	No discharge permit, hazardous waste not disposed of compliantly	Terminated immediately
4	Data falsification	Records filled in all at once, forged certificates, two sets of books	Terminated immediately
5	Refusal to open an area	A workshop or warehouse not allowed to be entered	Deemed concealment, terminated
6	Key certificate expired	System certificate or production license past its date	Audit suspended, redo after corrective action
7	Site seriously inconsistent with documents	Documents say 8 production lines, only 3 actually running	Direct downgrade or termination

Item 5 is a frequent point of dispute.There are only two categories where refusal is allowed: dedicated lines covered by confidentiality agreements with other clients, and workshops involving proprietary core processes. For these two, you can request “no photos, no parameter recording,” but refusing entry to an entire area is not advisable — under most audit standards, refusal of entry is treated as concealment.

There is only one invalid reason: fear of chaos on the floor. Fix the floor first, don’t shut the auditor out. If your quotation structure isn’t clear yet, start with /insight/02-export-payment-terms-credit-risk-four-tiers/ and put commercial terms and audit preparation on the same table.

7. How to Write a Corrective Action Response That Actually Closes the Loop

Once you have the nonconformity report, whether you get into the directory depends on the quality of your corrective action response. A qualified response must contain five elements. Miss one and the customer opens another round.

Element	What to write	Common mistakes
Root cause analysis	Why it happened, down to the specific step	Writing “employee negligence” is not analysis
Corrective action	Immediate handling of this specific issue	Writing only “corrected” with no evidence
Preventive action	Mechanism to prevent recurrence	Skipping this column entirely
Owner	Specific name and title	Writing only a department name like “Quality Dept.”
Completion date and evidence	Clear date, with photos and records	Writing “in progress” with no date

Nonconformities usually come in three levels, and closure timelines vary widely.

Level	Meaning	Typical closure timeline	Deliverables
Major nonconformity	Triggers a veto or systemic gap	30 to 90 days	Full corrective action report plus verification evidence
Minor nonconformity	Partial execution gap	14 to 30 days	Corrective action plus evidence
Observation	Suggested improvement, does not affect passing	Before next audit	Improvement note is enough

“In progress” is the five most useless words in a corrective action response. When the customer sees it, they can only mark it unclosed and ask again next cycle. Even if you’re only 30% done, write clearly: “30% complete, remaining portion scheduled for [date], owner is [name].”

8. Common Point Losses and the Order to Fix Them

After the audit, there’s usually a 30 to 90 day window to recover points. Don’t spread effort evenly. Sort by points lost divided by hours invested.

Common point loss	Typical deduction	Remediation action	Hours invested
Incomplete or backfilled records	5 to 12 points	Set up a per-shift logging system, supervisor spot-checks daily	20 to 40 hours
Frontline workers can’t answer questions	5 to 10 points	5-minute pre-shift quiz, create process cards	10 to 20 hours
Missing gauge calibration	3 to 8 points	Send for third-party calibration, set up calibration log	8 to 16 hours
Defective products not segregated	4 to 8 points	Mark red/yellow zones, add signage and log	4 to 8 hours
Documents don’t match reality	8 to 15 points	Update documents or adjust the floor, pick one	16 to 32 hours

Based on experience,30 to 60 hours of effective effort usually lifts the overall score from around 72 to around 85. Beyond that, marginal returns drop fast: going from 85 to 92 often requires systemic overhaul, costing three to five times more. If you have a line upgrade or peak-season rush coming up, you can apply for a 4 to 8 week extension.

9. When Not to Worry Too Much About the Score

An audit score isn’t worth much in every business. In the three cases below, scoring above 80 and holding the deal-breakers is enough.

Scenario	What the customer cares about	Where to invest	Metrics to watch
Standard and off-the-shelf parts	Price, lead time, stock	Just clear the pass mark and put your resources into cost	Quote win rate, on-time delivery rate
Low order value, high frequency	Easy ordering, fast response	Protect the deal-breakers, simplify the paperwork	Repeat purchase rate, response time
Orders transferred from platforms or trading companies	Platform rules, on-time shipping	Prepare to platform requirements, don’t stack on more systems	Platform rating, dispute rate

Standard parts are the clearest boundary. For a factory making general fasteners or standard bearings, switching suppliers costs the customer almost nothing and purchasing decisions come down to price and stock nine times out of ten. At that point, spending three months filling out system documents is worth less than spending one month cutting lead time from 45 days to 30.

Another boundary is a small first order: when a customer with annual purchases under RMB 500,000 asks for a full factory audit, the internal hours for one audit alone run 120 to 200, plus remediation and certification costs, which can eat two years of gross profit on that order. Both boundaries come with a condition:the product doesn’t involve safety, human health or use by children, and the target market has no mandatory compliance requirements. Once you’re in automotive, medical, children’s products or pressure equipment, an audit is a prerequisite for market access. If you’re stuck on audit preparation right now, go to /contact/ and tell us your category and the market your customer is in.

FAQ

The customer says they want to audit our factory, but they’re only sending a third-party firm. Does that count?

Yes, and it’s increasingly common. Large buyers usually outsource audits to third-party firms, and the report goes into their supplier system with the same weight as an in-house audit. Confirm three things: whether the firm has written authorization from the customer and who the report ultimately goes to; which version of the standard the audit uses; and that reports are usually valid for 12 to 24 months and need re-auditing when they expire. If the customer also sends their own purchasing or quality staff on site, that means the order carries more weight.

The customer wants to see a certain workshop. Can we refuse?

Yes, but your reason has to hold up. Two reasons are usually accepted: a confidentiality agreement covering other customers, and proprietary core processes. The way to handle it is to restrict photography and keep parameters off the record, not to bar the whole area, and to explain in writing beforehand, then substitute output records from that area on the day of the visit. The only reason that doesn’t hold up is that the floor is a mess. Fix the floor first, because in most standards refusing access is the same as hiding something.

If we fail the audit, can we still keep talking?

Yes, but you need to change your pace. First work out whether this is a downgrade or a termination: a downgrade usually comes with a 30 to 90 day corrective action window, and you pass once you’re re-reviewed. A termination triggered by a veto item is almost impossible to reverse. In a downgrade, email back the same day with the nonconformities, your corrective action plan, who owns each item, the expected close date, and ask the customer to confirm the acceptance criteria. At the same time, push for a small trial order.

The customer is asking for our main customer list. Do we hand it over?

Give a redacted version, never the original list. What you can share is industry plus size plus region, for example “a tier-one automotive parts supplier in Europe, annual purchasing around EUR 5 million, four years working together.” Three situations where you must refuse: the customer is a direct competitor of one of your existing customers; the list is covered by a written confidentiality agreement; or they only want the list without giving you their audit criteria and purchasing plan. When you refuse, offer alternative evidence.

How long should the corrective action window be?

Set it by severity of the nonconformity, don’t promise the same timeline for everything. Major nonconformities usually run 30 to 90 days; if equipment modification or certification is involved, you can ask for 120 days. Minor nonconformities run 14 to 30 days. Observations can be closed before the next audit. Build in a 20% buffer when you commit, because third-party testing and certification often take longer than expected. More important, break the big items into dated milestones and report every two weeks.

What if a small factory has no management system certificate?

First check whether the customer has a hard requirement. Automotive, medical and pressure equipment customers usually require IATF 16949 or ISO 13485, and without it there’s little to discuss, so you can only start with ISO 9001 as a stepping stone. Most general industrial customers accept “has quality management processes but isn’t certified,” and then you need to provide verifiable process documents such as inspection records, patrol inspection sheets and customer complaint logs. Certification usually takes 3 to 6 months, so start only after the customer asks for it explicitly.

Final thoughts

The biggest misunderstanding about factory audits is treating them as a one-off exam. They’re really the customer’s risk pricing tool: your score, how fast you fix things and how well you cooperate together determine your position in their supplier system, and that position is itself a price.

The preparation order I recommend is: spend two weeks first getting the six categories of required documents complete and indexed by number; then spend one week on an internal pre-audit, focusing on whether records are from the current shift and whether frontline workers can explain their processes clearly; finally turn the seven veto items into a checklist and self-check once a month.System documents can be filled in gradually, but you can’t touch a single veto item even once.

One line worth remembering: the customer isn’t there to test you, they’re there to work out what you’re worth. Your job is to make the number they come up with match your real level.