⚡ Key Takeaways & Direct Technical Answer
- Verify ISO 9001:2015, ISO 14001:2015, and ISO 22000/FSSC 22000 certificates directly with accreditation bodies, never via supplier PDFs.
- Audit process control evidence: ECT/Mullen test records, GSM batch logs, and statistical process control (SPC) charts on critical dimensions.
- Cross-check regulatory readiness: EU PPWR 2025/2026 deadlines, EPR fee data, and recycled-content declarations.
- Score nonconformances objectively (major/minor) and require CAPA closure within 30–60 days before volume release.
ISO Packaging Supplier Audit Checklist: Engineer’s Guide
Qualifying a corrugated or flexible packaging supplier without a structured Materials & Processes review is the fastest route to line stoppages, freight damage claims, and EPR compliance failures. This checklist distills what a lead structural engineer verifies during a supplier audit, mapped to ISO 9001:2015 clause numbers and current 2026 regulatory benchmarks.
1. Certificate & Accreditation Verification (ISO 9001 Cl. 4–7)
Never accept a scanned certificate at face value. Confirm:
- Scope match: The certificate scope must explicitly cover the plant address and product class (e.g., “corrugated converting,” not “general manufacturing”).
- Accredited CB: Verify the certification body is IAF MLA-recognized via the IAF CertSearch database. Non-accredited certificates fail audit.
- Food contact (if applicable): ISO 22000 or FSSC 22000 plus GFSI-recognized GMP documentation, and FDA 21 CFR 176.170 or EU 1935/2004 declarations of compliance (DoC).
- Environmental system: ISO 14001:2015 with valid EPR registration numbers for each ship-to jurisdiction.
2. Process Control & In-House Testing (ISO 9001 Cl. 8.5)
This is where most audits fail. Demand live evidence, not binder samples:
- ECT testing: ASTM D1161 or ISO 3037 compression tests per roll lot; records showing 32 ECT minimum for typical 200 lb. test double-wall work.
- Burst strength: Mullen (TAPPI T810) logged per production run — 200 lb./sq. in. for single-wall B flute (approx. 3.0 mm), 275 lb. for C flute (4.0 mm) export grades.
- Grammage control: GSM verification per ISO 536 with batch traceability to the mill certificate of analysis (CoA).
- Dimensional SPC: Caliper and dimensional tolerance charts (±1.5 mm on scored blanks is a common control limit) with CpK ≥ 1.33 on critical-to-quality dimensions.
- Calibration: Test equipment calibration certificates traceable to national standards, current within cycle.
3. Regulatory & Sustainability Compliance (2026 Benchmarks)
Under EU PPWR, by August 2026 all packaging must be recyclable by design grading, and recycled-content thresholds apply to plastic components (10–35% by contact type). Auditors should require:
- Recyclability design-at-source evidence (mono-material structure, no non-separable barrier layers in grades above Design-for-Recycling class B).
- Recycled-content declarations with third-party chain-of-custody (FSC/PEFC for fiber; EuCertPlast or ISCC PLUS for plastics).
- Per-SKU EPR fee modeling data supplied quarterly.
For structural sourcing decisions, pair audit results with a Custom Packaging specification review before awarding volume.
4. Scoring Nonconformances
Classify every finding:
- Major: Missing test records, expired calibration, falsified CoA → volume hold until CAPA closed.
- Minor: Isolated documentation gaps → CAPA within 30 days.
- Observation: Improvement opportunity → log, no hold.
Require corrective action plans with root-cause analysis (5-Why or fishbone) and effectiveness verification within 60 days. A supplier scoring below 80% on process-control clauses should not ship first-article production.
5. Compact Audit Scorecard
| Audit Area | ISO Clause | Pass Evidence |
|---|---|---|
| Certificate validity | Cl. 4.3 | IAF-verified, scope-matched |
| In-house testing | Cl. 8.5.1 | ECT/GSM logs, SPC charts |
| Food contact DoC | Cl. 8.2 | FDA/EU 1935/2004 signed |
| PPWR/EPR readiness | Cl. 6.1 | Recyclability + EPR data |
6. Audit Frequency
Full on-site audits every 24 months for ISO-certified suppliers; annual for suppliers without certification; remote interim reviews every 12 months including certificate re-verification and batch test record sampling. Trigger-based audits follow any major nonconformance or material change of mill substrate.
A disciplined ISO supplier audit checklist converts vendor risk into a measurable, defensible qualification process — protecting both your structural performance targets and your 2026 compliance posture.
Frequently Asked Questions (FAQ)
How do I verify a supplier’s ISO 9001 certificate is legitimate?
Use the IAF CertSearch database to confirm the certification body is IAF MLA-accredited and the certificate scope covers the specific plant address and product class. Never rely on supplier-supplied PDFs alone.
What ISO certification should a food packaging supplier hold?
ISO 22000 or FSSC 22000 (GFSI-recognized) alongside ISO 9001:2015, plus food-contact declarations of compliance under FDA 21 CFR 176.170 or EU Regulation 1935/2004 for each material grade.
How often should packaging suppliers be audited?
Every 24 months for ISO-certified suppliers, annually for uncertified ones, with interim remote certificate and batch-record reviews every 12 months, plus trigger audits after any major nonconformance.