Track order·Sign in·
·

ISO 9001 and your suppliers: what the standard really demands

Clause 8.4 puts the duty on you, not on your supplier, so a folder of their certificates is not evidence — it is the evaluation you still owe. What the standard wants is cheaper to produce than the certificates.

Roter KONI-Stoßdämpfer, Diagonalansicht mit Befestigungsösen an beiden Enden

The supplier file

The standard asks nothing of your supplier. It asks a great deal of you.

The most persistent misunderstanding in supplier management is that a certified company may only buy from certified companies. In the 2015 edition, clause 8.4 places the obligation on the buying organisation — criteria, graded control, requirements, records.

Nowhere in that list does the word certificate appear. It is one possible input to your evaluation and it is neither required nor sufficient. A folder full of them with no criteria and no monitoring behind it is a non-conformity waiting to be written up.

Read the other way round the clause is liberating: it lets you buy a low-impact standard part from an uncertified source with light controls, and it makes you control a critical position tightly even where the supplier holds every certificate.

  • The grading is yours to justify, and justifying it is the actual work
  • Every position here names its manufacturer and its supplier
  • A specification table on 114 of 114 items documents what you ordered

The four duties

What clause 8.4 makes you do

None of these can be delegated to a supplier, and all four are checked in an audit.

  • Define criteria before you need them

    Written criteria for evaluation, selection, performance monitoring and re-evaluation. Written beforehand, so that a decision under time pressure is measured against something.

  • Grade the control by impact

    The extent of control follows from what a failure would do to your own conformity. A gasket in a safety function and a box of cable ties do not belong in the same regime.

  • State your requirements to the provider

    Including the competence expected of their people, the release method, and any verification you intend to carry out at their premises. Unstated requirements are not requirements.

  • Keep the records

    Evaluations, monitoring results and the actions taken when something went wrong. In an audit, the records are the system; everything else is a description of it.

Schrägsitzventil 3/4" PN15 mit Messinggehäuse und silbernem Pneumatikantrieb, Frontalansicht von oben

If you do use a certificate

The scope statement tells you more than the certificate does

A quality management certificate can legitimately cover "trade in industrial goods" and say nothing whatsoever about how the goods themselves are made, because the making happens elsewhere. Reading that one sentence takes thirty seconds and is the most informative thing you can do with the document.

Three checks belong in the routine. Confirm that the certification body is itself accredited and by whom. Verify validity in that body’s public register rather than in the PDF you were sent — a suspended certificate looks identical on paper. And note the expiry in your own system, because nobody will tell you when it passes.

Better evidence exists: your own delivery history is specific to the relationship you actually have.

  • On-time performance, defect rate and response time accumulate whether you use them or not
  • Using them is precisely what clause 8.4 calls monitoring
  • A second-party audit proves what you saw, on the day you saw it

How far each one carries

What each kind of evidence proves, and where it stops

Useful when deciding how much control a given article actually needs.

EvidenceWhat it provesWhere it stops
ISO 9001 certificateA management system was audited within the stated scopeNothing about the conformity of an individual delivery, and nothing outside that scope
Second-party audit reportWhat you saw yourself, at the time you saw itThat the same conditions hold on the day your order is produced
Inspection document under EN 10204Properties of a specific batch, at the level 2.1 to 3.2 agreedAnything about batches other than the one named on it
First-article inspection reportThat the first piece met the drawing under the release conditionsThat the series will, without ongoing process control
Your own performance historyHow this supplier actually behaves towards you over timeHow they will behave under a load or a product they have not had before
Supplier self-assessmentWhat the supplier states about themselves — and how carefullyAnything verified; it is a starting point for questions, not an answer

Open books

Which records a marketplace brings along — and who issues them

None of the following comes through this catalogue today. It is also where the format changes something: shukchok is an open marketplace for industrial goods, so whoever issues these papers keeps them on their own positions and ships through the same basket, and the invitation to manufacturers and distributors stands. If your file needs one of them, settle it before you set us up as a supplier.

  • No quality management certificate is provided through this catalogue
  • No inspection documents under EN 10204 — not 2.1, 2.2, 3.1 or 3.2
  • No calibration certificates for measuring instruments
  • No PED category and no ATEX marking in the product data of any item
  • No first-article inspection reports and no initial sample release procedures
  • No completed supplier self-assessment questionnaire as a standard enclosure
  • No permission for a supplier audit at a manufacturer’s premises, since we are not the manufacturer of most items

Two ways in

Start the evaluation with the data you can see today

Origin, part number and technical values sit on every position and can go straight into your supplier file. And if your own quality system produces documents that buyers here keep asking for, bring them with you: listing is free, and we take a share only of what actually sells.

The webshop for the industry