Social Compliance Audit Preparation: What a Protective Case Supplier Must Prove

A social compliance audit does not test your product. It tests whether the organisation that made it can produce evidence, on demand, that its labour, hours, wages, safety and environmental practices are what it claims. If the first time you see that evidence is the week the audit is booked, you are already behind. This guide covers what a third-party audit actually measures, the five document sets to request before you commit to a supplier, and where custom protective case manufacturing most often fails.

What a social compliance audit actually measures

Most schemes — amfori BSCI, Sedex SMETA, SA8000, WRAP, ICS — differ in scoring language and report format. The underlying evidence they ask for is nearly the same, and it clusters into five blocks:

• Labour — no child labour, no forced or bonded labour, no retention of identity documents, freedom of association.
• Compensation and working hours — wages at or above legal minimum, overtime voluntary and paid at the legal premium, recorded hours matching actual hours.
• Health and safety — machine guarding, chemical storage, fire exits, ventilation, protective equipment, first aid, accident records.
• Environment — waste handling and disposal records, effluent, permits, restricted substances.
• Business ethics and management systems — no bribery, transparent subcontracting, a named person accountable for compliance, and a grievance channel that workers actually use.

The practical point for a buyer is that all five blocks are documented rather than inspected. An auditor spends more time matching records against each other than walking the floor. That is why a supplier can look orderly and still fail: the payroll file, the attendance file and the production file tell three different stories.

The five document sets to request before you commit

Ask for these before the purchase order, not after. A supplier who can produce them quickly is telling you something useful; a supplier who negotiates about producing them is telling you something more useful still.

1. The full audit report, not the certificate card. Check the issuing body, the scheme, the report version, the audit date and the expiry or cycle. A one-page summary with a logo is not a report. If you are handed a card in a frame, ask for the underlying document.

2. The scope page. Which legal entity, which site address, which production lines. A group-level certificate covering an address that is not where your goods are made proves nothing about your goods. This is the single most common gap we see when buyers audit their own supply chain.

3. The open corrective action plan. Any real audit leaves findings. What matters is the list of open items with root cause, responsible person, target date and closure evidence. A first audit with zero findings is not a clean supplier — it is usually a supplier who was coached, or an auditor who did not sample widely.

4. A sample of wage and attendance records, matched. The auditor samples; you should sample too. Pick three ordinary weeks, including one with a shipment deadline, and ask for the payroll sheet, the attendance record and the production output for the same week. If the three cannot be reconciled, the reported hours are not the real hours.

5. A subcontracting declaration. Which processes run in-house, which are outsourced, and to whom. For sewn goods this matters more than for most categories, because sewing is the easiest process to move to an undeclared workshop under a deadline.

Where protective case manufacturing tends to fail

A custom protective case built from thermoformed EVA with high-strength sewn construction is labour-intensive and multi-stage: moulding, cutting, sewing, assembly, inspection, packing. That shape creates two specific audit risks.

First, hours concentrate near shipment. Because the last stage is assembly and packing, a slip earlier in the sequence is absorbed at the end, which is exactly when overtime becomes attractive. Second, sewing capacity is elastic. It is technically easy to push part of a sewing run outward when volume spikes, and undeclared subcontracting is one of the findings that most often escalates from minor to critical.

Neither risk is a reason to avoid the category. Both are reasons to ask about process ownership explicitly — a question that overlaps with the one every buyer should already be asking about who actually designs and manufactures the case under an ODM or OEM arrangement.

What a supplier should be able to produce

Use this as a request list, not a scoring sheet. The middle column is what you are asking for; the point is whether it arrives promptly and consistently.

Common gaps behind those five items

• Report exists, but the site on it is a different address from the one shipping your order.
• Certificate is current, but the open findings list has been detached from it.
• Hours reconcile in a normal week and not in a shipment week.
• Subcontracting is declared as "none", while the sewing capacity clearly exceeds the in-house floor.

How to read an audit report you are handed

Four checks cover most of the value, and none of them require audit training.

Entity and address before logo. Confirm the report names the site that will make your goods. Scheme logos are widely reproduced; scope pages are not.

Date and cycle before grade. An expired report and a report with no cycle stated are equally uninformative about current conditions.

Finding severity before overall result. A passing headline with an open major finding is not a pass. Read the finding list and check whether closure evidence exists, rather than whether a box is ticked.

Sampling depth before conclusion. How many workers were interviewed against the total headcount, and across how many days. A conclusion drawn from a thin sample is a statement about the sample.

What "audit-ready" looks like on an ordinary Tuesday

The distinction auditors care about is not between certified and uncertified suppliers. It is between organisations that maintain records as a by-product of running the business, and organisations that assemble a parallel set of documents when a visit is announced.

Three observable signals separate them. Records arrive within an hour of being requested, not "next week". There is no separate audit version of any file. And the person answering the auditor's questions is the person who actually runs that process, not a coordinator reading from a prepared script.

On the buying side this translates into a question worth asking on every sourcing trip: show me last month's attendance record, not your audit folder.

FAQ

Which scheme should I ask my supplier about?

Whichever one your customer's code of conduct names. BSCI, Sedex SMETA, SA8000 and WRAP are not interchangeable in scoring, and a supplier holding one is not automatically acceptable under another. Ask for the scheme your end customer recognises, and treat a different scheme as a starting point rather than a substitute.

Can a supplier be compliant without holding a certificate?

Yes. Compliance is a state; certification is the output of an audit process. A supplier with no current certificate but with reconcilable records and a working corrective action process is often in a better position than one holding an expired certificate and no open-findings list. If a supplier claims certification, ask for the report behind it — FZ® does not publish certification claims it cannot support with a current document on request.

What if our existing supplier fails the audit?

Treat it as a corrective action problem rather than an automatic exit. The useful questions are which findings are critical versus minor, whether root causes are understood, and who owns closure. A schedule for closure should be written down with named owners; we deliberately do not quote fixed day counts for remediation, because a number offered before the findings are known tends to become a contractual commitment that nobody can hold.

Next step

If you are preparing a supplier review or an audit cycle and want the protective case side of it documented properly, send the device model, the target annual volume and the markets you ship into. We return a written feasibility note covering construction route, tooling approach, and the evidence we can supply for your review — including which of the five document blocks above we can produce for our own scope, and which sit with a named partner.

Two related reads if you are building the commercial case at the same time: how total cost of ownership behaves across a protective case programme, and where lead time is actually consumed before the first unit ships. For trial quantities, minimum order and prototyping routes are covered separately.

Contact: jack@shfangzhen.com