Global Compliance & Marketing

Supplier Quality Audit Checklist: Packaging Vendor Vetting Guide

Key Takeaways & Direct Technical Answer

  • A supplier quality audit must verify ISO 9001:2015, FSC/BRCGS packaging certifications, and documented QC data.
  • Audit incoming material controls: board ECT/Mullen certs, GSM verification, and batch traceability.
  • Process capability (Cpk ≥ 1.33), caliper tolerance ±0.15 mm, and drop-test records separate reliable vendors from risky ones.
  • Verify EU PPWR and US EPR readiness — non-compliant suppliers create downstream liability for your brand.

Supplier Quality Audit Checklist: Packaging Vendor Vetting Guide

!Packaging Engineering

A failed packaging supplier audit costs more than a failed shipment. Weak incoming material control, undocumented tolerances, and missing compliance records surface as line stoppages, damage claims, and regulatory exposure months after the PO was signed. This supplier quality audit checklist gives packaging buyers and QA managers a field-tested framework for vetting corrugated, flexible, and rigid packaging vendors before volume commitment.

Why a Formal Audit Beats a Spec Sheet

A spec sheet tells you what a supplier intends to deliver. An audit tells you whether their process can hold that spec at your volume. For corrugated, the gap matters: a box quoted at 32 ECT can test at 26 ECT if the vendor sources board from an unqualified mill or runs linerboard below the declared 175 GSM. Audit before qualification, then re-audit annually or after any material change.

Section 1: Certifications & Documentation

Start with the paperwork. Request, then verify authenticity with issuing bodies:

  • ISO 9001:2015 — baseline QMS; check the certificate scope covers packaging manufacture, not just headquarters.
  • FSC or PEFC chain-of-custody — mandatory if you claim sustainable sourcing on-pack.
  • BRCGS Packaging Materials (Issue 6) or SQF — critical for food-contact and pharma-adjacent packaging.
  • ISO 22000 where direct food contact occurs.
  • PPWR readiness documentation — under the EU Packaging and Packaging Waste Regulation, recyclability grading and recycled-content declarations must be contractually guaranteed by 2026-2030 phase-ins.
  • US state EPR declarations — California SB 54 and Oregon/Colorado programs require suppliers to supply accurate material composition data for producer reporting.

Red flag: certificates issued by unaccredited registrars, or scope statements that exclude the actual converting plant.

Section 2: Incoming Material Control

Audit the receiving dock and the mill certificate trail:

  • Mill certs on file for every board lot — ECT/Mullen (burst), GSM, and moisture content within 6–9%.
  • Caliper checks — flute height tolerance ±0.15 mm (B flute ≈ 3.0 mm, C flute ≈ 4.0 mm, E flute ≈ 1.5 mm).
  • Batch traceability — can the vendor trace a finished box back to the board reel within 24 hours?
  • Ink and adhesive spec control — low-migration inks documented for food-contact SKUs.

Section 3: Process Capability & In-Process QC

A capable process reduces your incoming inspection burden. Verify:

  • Cpk ≥ 1.33 on critical dimensions (box length/width/depth, print registration ±0.5 mm).
  • Calibrated gauges with current calibration stickers traceable to national standards.
  • Statistical process control charts live on the floor, not archived spreadsheets.
  • Drop-test and compression data — ISTA 3A or ASTM D642 records matching your distribution cycle, and stacked stack-test results against the declared 40-lb/in² ECT-to-BCT correlation for typical RSC geometries.
  • Die-cut and gluer setup sheets tied to your SKU numbers.

For deeper process context, see our coverage of Materials & Processes.

Section 4: Facility & Traceability Walk-Through

Walk the floor. Check hygiene zoning, scrap segregation, humidity control (corrugated converting works best at 45–55% RH), and warehouse FIFO rotation. Confirm finished-goods labeling carries lot, production date, and SKU revision. A vendor that cannot show a mock recall within two hours fails the audit.

Section 5: Compliance Scorecard

Audit Area Pass Benchmark Red Flag
Certifications Valid, scoped ISO/BRCGS Expired or wrong scope
Board QC ECT/GSM certs per lot No mill traceability
Process control Cpk ≥ 1.33 No SPC data
Compliance PPWR/EPR data ready Unverified composition

Score each area 0–5. Below 70% overall, require a corrective action plan before the trial PO; below 50%, walk away. For structural qualification after the audit passes, our Custom Packaging team runs full ISTA validation on first articles.

Post-Audit Actions

Document findings in a standardized report, agree corrective actions with 30-day deadlines, and lock audit results into supplier agreements with quality clauses tied to the spec. Re-audit annually for critical vendors and immediately after any plant relocation, equipment change, or subcontracted volume. Suppliers who resist a mock recall or refuse floor access are signaling exactly where their risk lives — believe the signal before it becomes your line-down event.

Frequently Asked Questions (FAQ)

What certifications should a packaging supplier have in 2026?

Minimum: ISO 9001:2015 QMS and FSC/PEFC chain-of-custody. Add BRCGS Packaging Materials Issue 6 or SQF for food-contact, plus documented PPWR recyclability data for EU shipments and EPR material declarations for US state programs.

How often should you audit a packaging supplier?

Annually for critical vendors, before any first PO, and immediately after plant relocation, major equipment changes, or undisclosed subcontracting of your volume.

What Cpk should a packaging supplier achieve?

Cpk ≥ 1.33 on critical dimensions and print registration. Lower values mean inconsistent output and higher incoming inspection costs on your side.

Beatrix Varga

EU PPWR & Regulatory Compliance Counsel | LL.M. in International Environmental Law, EU Circular Economy Mandates Expert | Beatrix advises brands on EU Packaging & Packaging Waste Regulations (PPWR 2024/1991), labeling mandates, and EPR tariffs.