Supplier Audit Before the First Impression: What Exactly to Check When Qualifying New Suppliers for the First Time

Which verification steps are customary in the initial qualification of new suppliers: self-disclosure, document review, audit, sample evaluation: tiered in proportion to risk and compared.

A delivered brochure is not yet proof of qualification

A new offer arrives: attractive price, short-notice capacity, a professionally designed website. The first impression is good, and therein lies precisely the problem. The first impression says nothing about whether the supplier has its processes under control, whether certificates are valid, or whether the QM system is actually practised in day-to-day operations. Anyone who relies on third parties takes a risk: almost every manufacturer in medical, electronics or production technology, in the automotive or mechanical engineering industries has outsourced quality-relevant processes, and is therefore subject to specific quality requirements not only for its own processes. The initial qualification of a new supplier is therefore not a quick run-through, but a structured process divided into several verification stages. This article compares the common verification variants, shows their strengths and weaknesses and helps you to scale the verification effort in proportion to risk.

What initial qualification covers, and why it is not a one-off act

According to the commonly held understanding, qualification covers several evaluation dimensions which together determine a supplier's suitability: technical competence and production capacities, the quality management system including certifications, financial stability and creditworthiness, as well as legal compliance and sustainability standards. It is thus a central building block of supplier management and forms the basis for the subsequent supplier approval and integration into the supplier base.

The need for a systematic approach becomes particularly evident in a regulated environment. In the pharmaceutical GMP environment, careful supplier qualification is essential because every individual supplier has a direct influence on the quality of products and services. There, the supplier qualification system aims to ensure product quality and safety across the entire pharmaceutical supply chain. In regulated industries such as automotive and pharma, qualification is moreover required by law or by standards.

The assessment that poor supplier management causes unnecessary problems, carries risks and drives up future costs is shared consistently by the relevant specialist sources. From a management perspective, too, the topic is worth a closer look: according to a practitioner's assessment, robust qualification directly influences product and series maturity, audit-readiness towards customers and authorities, reaction time in the event of deviations, stability in the plant and margins in sensitive projects.

The four verification stages of initial qualification at a glance

According to common practice, the qualification process is divided into consecutive stages that enable a systematic risk assessment. In essence, four verification variants can be distinguished, which are compared individually below: the supplier self-disclosure as pre-qualification, the document review with certificate validation, the on-site audit or virtual supplier audit, and the sample inspection prior to series approval.

1. Pre-qualification via supplier self-disclosure
2. Document review and certificate validation
3. On-site audit or virtual supplier audit
4. Sample evaluation or initial sampling prior to approval

Even before these stages, classification belongs on the agenda: the consistent classification of suppliers and materials according to clearly defined evaluation criteria into standard, risk, core and strategic groups is a proven practice of strategic supplier management. It determines which of the four verification stages must be completed and with what effort.

Verification variant in comparison: self-disclosure, document check, audit, sample inspection

Supplier self-disclosure: rapid pre-qualification with limited informative value

The self-disclosure is typically the first step. It provides structured information on capacities, processes, certifications and contacts without the applicant already being subjected to a costly examination. Its strength lies in speed: with little effort, unsuitable candidates can be screened out before resources flow into more in-depth checks. The weakness is obvious: these are the supplier's own statements, which remain unverified until documents and certificates are checked against them. The self-disclosure is therefore suitable as a filter, not as a basis for approval.

Document review and certificate validation: the objectively verifiable foundation

In the second stage, the statements from the self-disclosure are cross-checked against verifiable documents: certificates such as ISO or industry-specific evidence, QM system documentation, specifications. In the GMP environment, compliance with GMP, USFDA and ISO certifications for approval explicitly belongs to the verification aspects when selecting a pharmaceutical contract manufacturer. The document review is objectively verifiable, comparable across several candidates and relatively inexpensive. Its limit: it only proves that a system exists on paper: not that it is practised in operation. That is precisely what the next stage is for.

On-site audit: the deepest verification stage

According to expert assessment, a multi-stage selection process is recommended as follows: companies should first identify potential suppliers and have purchasing check them against the most important criteria. In a subsequent audit, the technical qualification should be examined more closely. The audit is the only stage in which the examiner can directly inspect manufacturing processes, machinery, process controls and the practised QM system on site. Depending on the risk of the future supplier, a virtual supplier audit can alternatively be used, for example if an on-site inspection is not proportionate or feasible in terms of timing.

Sample evaluation: the practical test prior to approval

Initial sampling supplements the previous checks with a practical test: the supplier produces a sample batch or a first article, which is evaluated against the specification. Detailed contract design belongs to this from the very beginning: whether a service level agreement or a simple requirements specification: manufacturing processes, specifications or tolerances should without fail be recorded in writing. Only once the sample evaluation has confirmed the documented capabilities does supplier approval follow.

Scaling by risk: not every supplier needs a full audit

A full audit for every small-part supplier would be uneconomical; no verification at all would be risky. The solution is tiering according to the classification model mentioned above: suppliers and materials are assigned to standard, risk, core and strategic groups. For standard suppliers, the combination of self-disclosure and document review is usually sufficient. For risk, core and strategic suppliers, an audit is added, and for critical parts additionally the sample evaluation as a mandatory step prior to approval.

The effect of these preventive measures is considerable: according to a widely held estimate, structured supplier qualification reduces supplier risks by up to 40 per cent. This figure comes from a procurement lexicon and should be understood as an order of magnitude, not as a guarantee for the individual case.

Benchmark of the verification criteria: what the evaluation is oriented towards

Regardless of the verification stage chosen, clearly defined criteria are needed. The following evaluation dimensions have become established: technical competence and production capacities, the quality management system including certifications, financial stability and creditworthiness, as well as legal compliance and sustainability standards. The scope and weighting of these criteria are determined by the risk classification of the planned purchase and by the industry.

The importance of these criteria is not a niche topic: according to a study by Candidus Management Consulting, more than three quarters of respondents (78 per cent) named strategic supplier management as a factor decisive for their company's success. This demonstrates that the quality of the supplier base is perceived as a success factor far beyond the purchasing department.

Suitability by target group: who should choose which verification depth

Purchasers in series-production industries (automotive, mechanical engineering)

Anyone purchasing critical series parts should complete the multi-stage process with all four stages and not omit the on-site audit. Technical qualification in the audit is the core of initial qualification here, supplemented by contractual safeguards: SLA or requirements specification with manufacturing processes, specifications and tolerances recorded in writing.

Quality managers in regulated industries (pharma, medical technology)

In regulated industries, document review and certificate validation are non-negotiable: GMP, USFDA and ISO certifications are prerequisites for approval. In addition, the following applies: in the GMP environment, every supplier has a direct influence on product quality, which is why a careful overview of suppliers is crucial. The complete sequence of stages is recommended here, including sample evaluation and defined controls in ongoing operations.

Managing directors and supply chain managers at supplier companies

Suppliers should understand initial qualification from the customer's perspective as a management topic, not as a purely operational detail check. From a management perspective, the best companies act as follows: they verify suppliers earlier and more deeply, set clear objectives and define responsibilities, bring in external specialists when internal capacity is lacking, and have short paths with clear decisions. A supplier who maintains its own audit-readiness significantly shortens its own qualification at customers.

Purchasers of standard and C-parts

For low-risk purchases, the tiered variant is sufficient: self-disclosure, document review and a leaner sample inspection. A full audit is usually not worthwhile here, provided the parts are uncritical and a comprehensible classification proves this.

A well-founded decision: tiering by risk, not maximalism

The choice of the appropriate verification depth can be reduced to a clear formula: classification first, verification second. Anyone who assigns suppliers to standard, risk, core and strategic groups according to clearly defined evaluation criteria automatically knows which of the four verification stages are mandatory and which can be omitted. For critical parts, the complete chain, self-disclosure, document review, audit, sample evaluation, is the right decision, because only the audit makes practised reality visible and only the sample evaluation confirms capabilities on the real product. For uncritical purchases, the document level is sufficient; here, the additional effort of an on-site audit would provide no added value.

Two additional recommendations from practice round off the picture. Firstly: controls should be defined in terms of timing: initial qualification is the starting point, not a one-off event; the subsequent continuous supplier evaluation takes over the monitoring. Secondly: the advantage lies in the depth of the initial verification, not in the speed of ordering. The time invested at the start pays off over the entire business relationship because it reduces friction in day-to-day operations.

For practical implementation, it helps to support the process digitally at an early stage: for example in candidate search via a platform or in the structuring of tender documents. As a purchaser, anyone who uses a pre-structured candidate base can complete the stages of initial qualification more quickly without sacrificing verification depth. Platforms such as Amplifa address precisely this point by supporting pre-qualification with verified manufacturer profiles: professional responsibility for the audit and approval naturally remains with purchasing.

Conclusion: initial qualification is a staged process with clear logic

The initial qualification of new suppliers follows a proven stage logic: self-disclosure as a filter, document review as an objectively verifiable foundation, audit as an in-depth check of technical qualification and sample evaluation as a practical test prior to approval. The decisive control variable is the classification into standard, risk, core and strategic groups carried out in advance: it determines which stages are completed and with what effort. In regulated industries, document review and evidence of GMP, USFDA and ISO certification are mandatory. And regardless of industry, the practical rule from the expert conversation applies: anyone who invests time and energy at the start ensures less friction in day-to-day operations. The first impression of a good offer is not proof of qualification: the structured verification is.

Editorially responsible

Leon J. Hermann

COO & Co-Founder at Amplifa

As COO and co-founder, Leon is responsible for scaling Amplifa's operations.

View profile