ISO 9001 Supplier Audit Checklist for Packaging Buyers

ISO 9001 Supplier Audit Checklist for Packaging Buyers

!Packaging Engineering

ISO 9001:2015 Clause 8.4 obligates buyers to verify that external providers of packaging meet specified requirements. A structured supplier audit is your documented evidence of that control. For packaging procurement teams, the audit must go beyond generic quality-system questions: it must interrogate corrugated board performance, film converting tolerances, and regulatory documentation. This checklist is built for on-site or remote audits of corrugated, folding carton, and flexible packaging suppliers in 2026.

Why Packaging Supplier Audits Differ

Packaging failures are rarely bureaucratic—they are structural. An ECT (Edge Crush Test) shortfall of 10% on a 32 ECT C-flute board can double transit damage rates. Auditors must therefore connect ISO 9001’s process-control logic (Clause 8.5) to physical test labs, flute specifications, and substrate lot traceability. Regulators add pressure: the EU Packaging and Packaging Waste Regulation (PPWR), fully applicable since August 2026, requires recyclability grading and recycled-content declarations, while US state EPR programs (California SB 54, Oregon, Colorado) demand producer-verified supplier data. A supplier without material compliance documentation is now a supply-chain liability, not just a quality risk.

The Core ISO 9001 Supplier Audit Checklist

Use this 12-point checklist, scored 0–5 per item for a 100-point weighted qualification (our Custom Packaging QA teams apply it to every new mill and converter).

1. Quality Management System Fundamentals (Clauses 4–7)
– Valid ISO 9001:2015 certificate from an IAF-accredited body (verify on the registrar’s database, not the certificate PDF alone).
– Documented quality policy, measurable objectives (e.g., defect rate <500 DPMO), and a risk register per Clause 6.1. - Management review minutes from the last 12 months showing corrective actions closed.

2. Document & Specification Control (Clause 7.5)
– Current, version-controlled dielines, board specs (flute profile, ECT/Mullen rating, liner GSM), and print files.
– Change-approval workflow: any board substitution (e.g., B-flute 3.0 mm swapped for C-flute 4.0 mm) triggers buyer notification.

3. Incoming Material Inspection (Clause 8.4.3)
– Mill certificates or COAs for every linerboard and medium lot.
– Moisture content verification (corrugated board should be 6–9% MC); documented holding rules for rolls below spec.

4. In-Process & Final Inspection (Clause 8.6)
– Calibrated ECT, burst (Mullen), and Cobb testers with traceable calibration certificates.
– First-article inspection reports per production run; AQL sampling plans (typically ANSI/ASQ Z1.4, Level II, AQL 1.0 for cartons).

5. Traceability & Recall Readiness (Clause 8.5.2)
– Lot codes linking substrate, adhesive, and ink lots to finished SKUs; recall drill evidence within 48-hour trace targets.

6. Regulatory & Sustainability Documentation
– PPWR recyclability and recycled-content declarations for EU-bound goods; heavy-metal compliance (CONEG/94/62/EC limits <100 ppm total Pb, Cd, Hg, Cr6+). - FSC/PEFC chain-of-custody certificates where claims are made; food-contact migration data (EU 10/2011 or FDA 21 CFR) where applicable.

7. Corrective & Preventive Action (Clause 10.2)
– CAPA log with root-cause methods (5-Why, fishbone) and closure rates; reject material segregation and disposition records.

Audit Scoring Quick Reference

A weighted score below 70/100 triggers probation; below 50 requires re-audit within 90 days or disqualification.

Remote vs. On-Site Audit Strategy

Remote audits via live video work well for document control and certificate verification but underperform for press hygiene, warehousing conditions (board stored flat, off concrete, <60% RH), and Caliper/flute measurement on production machines. Best practice per our Materials & Processes guidance: run a full on-site audit before first volume order, then remote surveillance audits every 12 months, with on-site re-audit after any major nonconformity, equipment change, or ownership transfer.

Red Flags That End an Audit Early

1. Expired or non-accredited ISO certificate; refusal to share registrar details.
2. No in-house physical testing—outsourced testing without retained records.
3. Cannot produce a COA for the substrate lot used on your last shipment.
4. No change-notification process for board grade or adhesive substitutions.

Each of these maps directly to an ISO 9001 major nonconformity and justifies immediate new-business hold.

Final Verification Steps

Close the audit with a scored report, signed CAPA agreements with 30/60/90-day deadlines, and an approved-vendor-list (AVL) status update. Retain the full audit file for at least 5 years—it is your primary defense in customer claims, EPR audits, and retail vendor-compliance disputes. Suppliers who pass this checklist consistently deliver board within ±5% of declared ECT and sub-0.3% line reject rates: benchmarks every packaging buyer should demand in 2026 contracts.