Social audits entered European purchasing through the retailers and have spread down to companies with a single supplier. The mechanism is now familiar: the buyer asks for a report, the supplier produces one, the file is closed. What is much less familiar is what the document in the file actually says — and the confusion starts with its name.
The frameworks are methods, not certificates
Most of what circulates under the name of a social audit comes from a small number of schemes — amfori BSCI and SMETA, run through Sedex, are the two you will meet most often in Chinese manufacturing, alongside sector schemes. They are audit methodologies: a common questionnaire, a common way of grading findings, and a report. They do not certify the factory. There is no such thing as a « certified BSCI factory », only a factory that has had an audit under that method, on a date, with findings.
Certification is a different object. A certification standard audited by an accredited body — SA8000 is the best known in this field — certifies a management system against requirements, with surveillance between cycles. It is a heavier and rarer thing, and the difference matters when a supplier answers a question about social compliance with a logo. Ask which scheme, which date, announced or not, and whether you may read the report rather than the summary page.
Announced, semi-announced, unannounced
The single most informative line in a report is the type of visit. An announced audit gives a date; everything that can be prepared will be prepared, and what the auditor sees is a factory's best version of itself. A semi-announced audit gives a window of some weeks, which removes most of the theatre while remaining workable for a real production site. An unannounced audit shows the factory as it runs — and is also the one a factory can most legitimately refuse, because a visit on a day with no production tells nobody anything.
What the audits look at
- Working hours and rest days, reconstructed from records that are supposed to be consistent with production output and with payroll.
- Wages: the legal minimum for the locality, overtime paid at the legal rate, payslips that match hours, and deductions that are lawful.
- Age: no child labour, and the specific protections that apply to young workers where they are lawfully employed.
- Health and safety: fire exits and their state, machine guarding, chemical storage and labelling, protective equipment actually worn, dormitories and canteens when they exist.
- Freedom of association and grievance: whether workers have any route to raise a problem, and what happens to the person who uses it.
- Undeclared subcontracting: work that leaves the audited site for a workshop nobody has ever visited. This is the finding that matters most to a buyer, and the hardest to make.
The structural limit
An audit is a snapshot taken by someone who is on site for a short time, working largely from documents the factory produced, on a day the factory often knew about. Records can be prepared. Interviews happen in a building the interviewee works in tomorrow. A subcontracted workshop two hours away is outside the gate and outside the scope. None of this makes audits useless — they find real things, especially on safety, and the preparation itself improves some factories — but it does mean a clean report is evidence of a method having been applied, not proof that the conditions described are the conditions that exist.
There is a second limit, and it is the buyer's own. Orders placed late, dates pulled forward, prices negotiated below what the stated conditions cost: these are the ordinary causes of the overtime an audit then records as a finding. A purchasing practice that produces the non-conformity and an audit that reports it belong to the same system.
What a buyer can do beyond asking for the report
- Read the full report and the corrective action plan, not the grade. The findings and what was done about them say more than any letter.
- Write your own code of conduct into the purchase order, so that the commitment is contractual rather than declarative — including the obligation to declare subcontracting and to allow a visit.
- Go yourself, or send someone, on an ordinary working day. What a buyer notices in an hour — the state of the exits, whether the line is running at a plausible pace, how many people are there — is a different kind of information from a report.
- Place orders in a way that does not require the breach: realistic dates, forecasts, and a price that can pay for the conditions you are asking the factory to certify.
European rules on corporate sustainability due diligence have been moving, and their scope and timetable have been amended more than once. If your buyers or your bank start asking about supply chain obligations, check the current text rather than a summary written before the last change — including a summary in an article like this one.
Treat the report as a starting point and the code of conduct as the commitment. The report tells you what a method found on one day; the code, signed and attached to the order, tells you what the supplier has agreed to be held to on every other day — including the obligation to tell you where the work is actually done.