China Factory Audit vs Supplier Verification

Short answer: a factory audit asks whether a particular site appears capable of doing the work within the agreed audit scope. Company verification asks which registered entity exists, signs, receives payment and can be held responsible. The difficult cases are usually not caused by either check failing. They arise because the audited factory and the contractual seller were never connected on paper.

When a buyer sends me a factory audit report, the first thing I check is not the score. I look for the full legal name of the entity that operates the site. I then compare that name with the business licence, contract, invoice and bank beneficiary.

That comparison often changes the meaning of the report. A capable factory may belong to a related company, a subcontractor or a manufacturer introduced by a trading company. None of those structures is automatically improper. But an audit of one company does not, by itself, make another company responsible for what the auditor saw.

Factory audit and company verification answer different questions

“Factory audit” is used broadly in international sourcing. One assignment may focus on production capability and quality systems. Another may examine social compliance, environmental controls, security or a particular technical process. The report is only as useful as its scope, the auditor's competence, the access provided and the evidence available on the audit date.

Company verification is narrower in a different direction. It starts with the supplier's full Chinese legal name and 18-character Unified Social Credit Code, checks the current government registry, and compares that identity with the transaction documents. It can tell a buyer whether the company exists and whether important names and records align. It cannot establish that a production line is present or that the company can make the product.

Capability versus accountability: the audit gives evidence about capability at a site. Company verification identifies the legal person in the transaction. A buyer needs to understand both, then decide how the production arrangement should be reflected in the contract.

The current ISO 19011:2026 provides guidance for auditing management systems, including audit principles, programmes, methods and auditor competence. It is a useful reminder that an audit is an evidence-based process with defined objectives. It is not a universal certificate that answers every commercial question about a supplier.

What a factory audit can support — and where the report stops

A properly scoped on-site audit may support the conclusion that the auditor visited a stated location and observed specified equipment, personnel, workflow, records and controls. Depending on the assignment, the auditor may review production planning, incoming-material checks, calibration, traceability, non-conforming goods, complaint handling or capacity records. Certificates shown at the site may also be recorded, although their current validity should be checked with the issuing or certification body where that point matters.

I use the word “support” deliberately. A visit is a snapshot. Records are sampled. Some production lines may be idle on the day. Equipment can be leased, shared or moved. Staff may prepare for the visit, and an auditor can only assess what falls within the agreed scope and what the site makes available. This does not make the exercise unreliable; it explains how the result should be read.

Site and equipmentObserved at a stated time

The report may show that a facility and production resources were present. It does not automatically prove ownership, long-term control of the premises or that the contractual seller operates them.

Processes and recordsReviewed within scope

The auditor may test whether documented controls exist and are being used. That evidence does not establish future capacity, financial stability or an intention to prioritise the buyer's order.

Quality managementSystem, not shipment

A quality-system audit concerns how the organisation manages its processes. ISO and IAF explain that ISO 9001 certification does not mean the product itself is certified and does not ensure 100 percent product conformity.

This is also why I separate a factory audit from product inspection. Under ISO/IEC 17020:2026, inspection involves examining an item — including products, installations, plants or processes — and determining conformity with specified requirements. In an actual purchase, a pre-production, during-production or pre-shipment inspection can be designed around the buyer's drawings, tolerances, samples and acceptance criteria. A general factory audit cannot tell you whether the finished batch meets those requirements.

The distinction is especially important when a report mentions ISO 9001. The joint ISO and International Accreditation Forum guidance says that the standard defines requirements for a quality management system, not the product itself. Certification is useful evidence about the system. It is not a warranty that every shipment will conform or that one product is superior to another.

What company verification establishes — and what it cannot see

For the legal side, I start with the company rather than the factory gate. The supplier's business licence and the National Enterprise Credit Information Publicity System identify the registered entity. I compare the Chinese legal name, social credit code, status, legal representative and relevant public records with the contract, company chop, invoice and proposed payment account.

The separate business licence guide explains how I read those fields. The broader supplier verification guide covers the registry, payment, litigation, export role and site checks in sequence. Neither exercise should be reduced to “the licence is real”. A real company can still be the wrong counterparty, and an active registry record says little about production capability.

Company verification also has limits. Public records do not show every private manufacturing agreement, every leased machine or every subcontractor. The registered address may be an office rather than the production site. A shareholder connection between two companies does not make them the same legal person, and a shared brand or salesperson does not automatically transfer one company's obligations to another.

That is why I treat the legal name of the site operator as another identity anchor. The question is not merely, “Is this a real factory?” It is, “Who operates this site, and how is that operator connected to the company taking my order and money?”

Connect the audited site, seller and contract

In a simple structure, the audited factory, contract seller, invoice issuer and payment beneficiary are the same mainland company. The evidence is easier to follow, although the buyer still needs specifications, inspection rights and remedies.

Many legitimate transactions are more complicated. A trading company may contract with the buyer and place the order with an independent factory. A group may use one company for sales and another for manufacturing. An export agent may appear in the shipping documents. The purpose of due diligence is not to force these roles into one company. It is to document who does what and keep the intended seller responsible.

Audited siteRecord its address and the full Chinese legal name and social credit code of the company operating it.

Contract sellerConfirm which company promises manufacture or procurement, quality, delivery, warranty and any refund.

Payment beneficiaryMatch the account holder to the seller or document a third-party collection arrangement before payment.

Exporter or agentUnderstand the shipping role without assuming that an export role changes the seller's contractual responsibility.

If the audited factory is not the seller, I do not automatically insist that the factory must replace the trading company in the contract. That may be commercially wrong or legally impractical. I first decide which company should owe the buyer the core obligations. The seller can remain responsible for its chosen manufacturer even when production is subcontracted. In a higher-risk structure, the manufacturer may also need to sign a manufacturing acknowledgement, quality undertaking, guarantee or other document suited to the actual relationship.

How audit findings become useful contract terms

An audit report is usually evidence prepared under a separate audit engagement, not the supplier's performance promise under the supply contract. Its findings become more useful when the contract addresses them directly:

identify the approved production site and disclose material subcontracting;
attach precise specifications, drawings, approved samples and testing methods;
state inspection stages, sampling rules and who bears reinspection costs;
require corrective action for identified weaknesses where appropriate;
link payment milestones to defined documents, production progress or inspection results; and
set proportionate remedies for delay, defects, rejection, rework and refund.

A report can acquire contractual significance if the parties expressly incorporate it, use identified facts as representations or make an audit outcome a condition to payment. The drafting has to be deliberate. Merely attaching a report to an email does not tell a court or tribunal which statements the supplier accepted as binding.

The level of work should follow the risk, not just the invoice total. A standard sample order may justify basic registry and payment checks. A custom product, new tooling, regulated goods, sensitive designs, a large deposit or reliance on specialised equipment may justify a site audit and product-specific inspection even when the first order is not especially large. Buyers combining a trade-fair visit with supplier meetings can also plan these checks alongside Canton Fair contract support, while commercial leverage is still available before payment.

Questions buyers usually ask

Is a factory audit enough to verify a Chinese supplier?

No. A factory audit can provide evidence about a particular site, its systems and production capability within the agreed scope and audit date. Company verification addresses the legal entity, registry record and transaction documents. A buyer normally needs to connect both to the contract and payment structure.

Does ISO 9001 certification guarantee product quality?

No. ISO 9001 concerns an organisation's quality management system. ISO and IAF explain that certification does not mean the product itself is certified and does not ensure 100 percent product conformity. Product specifications, inspection and contractual remedies still matter.

What if the audited factory is not the company named in my contract?

That structure may be legitimate, but the relationship should be identified and documented. The contract should state the seller's responsibility for manufacture, quality and delivery, identify the production site where appropriate, and address subcontracting, inspection and remedies. Whether the factory should also sign depends on the transaction structure.

Official sources

These sources support the audit, quality-system, inspection and Chinese-company identity distinctions discussed above. The scope of any actual audit remains defined by the engagement and report.

A good audit report can reduce uncertainty about production. A good company check can reduce uncertainty about identity and accountability. The buyer still has to connect the two. That connection — supported by specifications, inspection, payment controls, evidence and a workable dispute clause — is what turns due diligence into a transaction structure that can be used when something goes wrong.