Every supplier file checked for expiry, completeness and scope coverage, ending in a request list you can send as it stands.
A supplier document review checks the file held for each supplier against what your standard and your own approval procedure require, and confirms the documents cover the materials you buy. Supplier approval is among the most commonly failed clause areas in every major standard, and the usual cause is expired certificates and scope mismatches sitting unnoticed in files that look complete.
The finding that matters is scope mismatch, and it is the one nobody looks for. A certificate sits in the file, in date and correctly issued, covering a scope that excludes the material you buy. It passes every check except reading the scope line, which is exactly what an auditor does.
The cheapest supplier service and the one to buy first. It frequently answers the question an audit would ask, and it identifies which suppliers genuinely warrant a site audit.
Eight elements assessed in every file, with the failure each one attracts most often.
| Document | What it must show | Common failure |
|---|---|---|
| Certification certificate | Valid, in date, and issued by a body whose certificates your standard accepts. | Expired, or issued under a scheme your own standard does not recognise. |
| Certified scope | Covering the specific material, process and site you purchase from. | A scope excluding your material entirely, on a certificate that looks valid. |
| Product specification | One per material purchased, current, and matching what is delivered. | A specification for a similar material, or one predating a reformulation. |
| Allergen declaration | Consistent with the specification and covering the site as well as the product. | A product level declaration with nothing about what else runs on the line. |
| Analytical data | Microbiological and chemical results where the material risk requires them, current. | Certificates of analysis from a single historic batch, treated as ongoing evidence. |
| Food contact compliance | Declarations of compliance for packaging and food contact materials. | Absent entirely, which is among the most common packaging supplier gaps. |
| Supplier questionnaire | Completed, signed, dated and answering the questions you asked. | Returned with sections blank, filed without anyone reading it. |
| Approval record | Evidence that someone assessed the file and made a documented approval decision. | Documents present with no record of a decision ever being taken. |
Eight findings that appear in most supplier bases that have never been checked line by line.
The most common finding by volume. Certificates carry expiry dates and supplier files rarely carry a review trigger, so lapses sit unnoticed until an auditor opens the folder.
A supplier holds a valid certificate whose certified scope excludes the material you buy. A site certified for ambient packing supplying you a frozen ingredient is the classic example. It looks valid until someone reads the scope line.
The supplier changed the product and the specification in your file describes the old version. Every downstream document built on it is now wrong too.
A declaration covering what is in the product, with nothing about what else the supplier runs on the same line. Cross contact risk is invisible.
A certificate of analysis from one historic batch, filed and relied on indefinitely. It evidences that batch and nothing else.
Food contact materials require declarations of compliance, and packaging files are consistently the thinnest in any supplier base.
Returned with blank sections, contradictions, or answers that should have prompted a follow up. Filed on receipt without assessment.
Documents collected and no evidence anyone assessed them or approved the supplier. Collecting paperwork is not approving a supplier, and auditors distinguish sharply between the two.
The request list is written so it can go straight out to suppliers without being rewritten first.
| Element | What it covers |
|---|---|
| File by file assessment | Every supplier file assessed against your procedure and your standard. |
| Currency check | Every document checked for validity date, with expiries listed. |
| Scope coverage | Certificate scopes compared against the materials purchased. |
| Consistency check | Specifications, allergen declarations and analytical data cross checked for contradiction. |
| Gap list per supplier | What is missing, expired or mismatched, supplier by supplier. |
| Request list | A ready to send list of exactly what to request from each supplier. |
| Risk ordering | Findings ordered by material risk, so the consequential gaps surface first. |
| Procedure feedback | Where your own approval procedure is the cause of a recurring gap. |
Any operation buying raw materials, packaging, ingredients or outsourced processing and required to demonstrate supplier control. It suits businesses with more suppliers than time, where the files exist and nobody has checked them line by line.
An audit is approaching and you are unsure the files are current.
Supplier approval has been raised as a finding before.
You have grown quickly and documentation has not kept pace.
Nobody has verified that certificates cover the materials you buy.
You have taken over supplier approval from someone else.
Records are spread across several sites or systems.
Packaging supplier files look thinner than the rest.
You are deciding which suppliers warrant a site audit.
You share the supplier files, your approval procedure, and the list of materials purchased from each supplier.
Every document is checked for validity date, so expired items surface immediately.
Certificate scopes are compared against the materials purchased, which is where most mismatches are found.
Each file is assessed against your own procedure and against your standard's requirements.
Specifications, allergen declarations and analytical data are cross checked for contradictions.
You receive a per supplier list of exactly what to request, ordered by material risk.
Contacting your suppliers. The request list is written ready to send, and the commercial relationship stays with you.
Supplier audits and risk classification, which are separate services. The review identifies which suppliers genuinely warrant either.
Approving suppliers. The review assesses files against your criteria, and the approval decision is yours to make and record.
Every review is quoted against its own scope. Twelve suppliers with tidy files and two hundred spread across three sites are very different pieces of work. These factors set the price.
These are the primary sources this work is built on. Where a market you sell into has its own requirement, that takes precedence and we assess against it.
It checks the file held for each supplier against what your standard and your own approval procedure require, and confirms the documents cover the materials you buy. It identifies expired documents, missing items, scope mismatches and contradictions, and returns a request list for each supplier.
It depends on your standard and the risk of the material. A typical file holds a valid certification certificate or an approved alternative, a current specification for each material purchased, an allergen declaration, analytical data where relevant, a completed questionnaire, a declaration of compliance for food contact materials, and a record of the approval decision.
It is where a supplier holds a valid certificate whose certified scope does not cover the material you buy from them. A site certified for ambient packing that also supplies you a frozen ingredient is a common example. The certificate looks valid in the file, and an auditor who reads the scope line will raise it.
Certificates are checked against the issuing certification body's public directory where one exists, which confirms both authenticity and current status. Certificates that cannot be verified are flagged for you to query with the supplier directly.
Any number. Larger supplier bases are normally reviewed in risk order, with high risk material suppliers first, so the most consequential gaps surface early instead of at the end of the exercise.
That is not automatically a problem. Standards accept alternative approval bases, including supplier audit, provided your procedure sets out the route and you follow it. What fails is holding no certification and no alternative evidence either.
That is a supplier control issue and standards expect you to have a route for it, whether an alternative approval basis, escalation, or de listing. The review flags non responsive suppliers so you can address them before an auditor does.
No, and auditors distinguish sharply between the two. Approval requires evidence that someone assessed the file against your criteria and made a documented decision. A folder of correct documents with no approval record still fails the clause.
This review assesses the files you already hold, remotely and at far lower cost. A supplier audit goes to the site and tests what happens in practice there. Most businesses should do the document review first, because it frequently answers the question and it identifies which suppliers genuinely warrant an audit.
On a cycle driven by risk, with a trigger tied to document expiry dates. Most gaps found in this review exist because nothing prompts a check when a certificate lapses, and fixing that trigger prevents the same review being needed repeatedly.
Yes, and it is often the more valuable half. Reviewing supplier specifications catches missing allergen information, absent microbiological criteria and unsupported claims before the material enters your process.
A file by file assessment, a currency check listing every expiry, scope coverage against the materials you purchase, a consistency check across documents, a gap list per supplier, a ready to send request list, findings ordered by material risk, and feedback where your own procedure is causing a recurring gap.
Confi Food assigns work by subject. HACCP, labelling, certification standards, regulatory compliance, supplier assurance and monitoring are separate disciplines, and each piece goes to someone who works in that area. Every deliverable is reviewed internally by a second specialist before it reaches you.
Our technical positions are built from primary sources, meaning the legislation, the competent authority, Codex Alimentarius, the certification scheme owner or the relevant standards body. We set out how that works in our technical review and editorial policy, and what happens at each stage of an engagement in how Confi Food works.
A review of how you approve and monitor suppliers, which is one of the most commonly failed clauses in every major standard.
Read about Supplier Approval System Review →A review of your product specifications for completeness and technical accuracy, so they hold up with customers and auditors.
Read about Product Specification Review →Certificated course covering approval systems, risk classification and supplier auditing.
View Certified Supplier Approval Specialist →Expert supplier approval programme consulting worldwide. Risk-based supplier tiering, verification activities, and approval programmes aligned with GFSI, FSMA, and...
See Supplier Approval Programme Consulting →Expert GLOBALG.A.P. consulting worldwide.
See GLOBALG.A.P. Consulting →Expert Halal certification consulting worldwide. OIC/SMIIC standards, navigating fragmented national requirements across Malaysia, Indonesia, the GCC and beyond,...
See Halal Certification Consulting →Tell us how many suppliers and materials are in scope, and receive a written quote covering the scope, the deliverable and the price.