A supplier qualification file should show two different things: whether a supplier has an adequately controlled capability for the work you may place with it, and whether a specific delivered item met the requirements of a specific order. Combining these purposes in one unstructured folder makes approval difficult to defend and delivery records difficult to retrieve. A certificate, questionnaire, or supplier profile can support qualification, but none should stand in for item-specific inspection and acceptance evidence.

Define the file boundary before collecting documents

Start by defining what the file qualifies. The subject may be a legal supplier entity, a particular manufacturing site, a product family, or a narrowly defined process such as machining, pressure testing, coating, welding, or panel assembly. These boundaries matter because a supplier can have different controls, personnel, equipment, subcontractors, and approvals at different sites.

A practical file normally has two linked parts:

  • A standing supplier qualification file holds reusable evidence about identity, scope, process control, and supplier-management status.
  • An order or equipment file holds records for the purchased configuration, including the applicable drawing revision, inspection results, traceability, nonconformances, and final acceptance.

Do not assume the same document depth is necessary for every purchase. The buyer should set the required evidence using equipment criticality, service conditions, contractual obligations, customer requirements, regulatory obligations, and the consequence of failure. A catalog fastener purchased for noncritical service may need only controlled receiving checks and a declaration where contractually required. A pressure-retaining assembly, safety-related component, or custom machine may require approved plans, material traceability, witnessed testing, and an indexed manufacturing data book.

Before requesting documents, record the following in a controlled qualification plan or file index:

  • Supplier legal name, relevant site, and site address.
  • Product family, process, or service within the approved scope.
  • Risk classification and the basis for that classification.
  • Governing purchase specifications, drawings, standards, and customer requirements.
  • Required approval authority: procurement, engineering, quality, customer, or another designated party.
  • Required documents, their revision status, and acceptance criteria.
  • Record owner, storage location, retention requirement, and retrieval method.
  • Events that require requalification or an update to the file.

This distinction is consistent with supplier-quality requirements used in industrial supply chains. For example, Baker Hughes supplier requirements call for documented retention and timely retrieval of product and quality records, while also treating qualification documentation as subject to review. Those requirements are not a universal document-list standard, but they illustrate why file structure and retrievability matter.

Keep reusable supplier identity and capability evidence in the standing file

The standing file should establish who is responsible for the supplied product and what that organization is actually approved to do. It is not a collection of promotional brochures or unverified claims.

At minimum, retain a controlled supplier profile containing the current legal entity name, operating site, primary contacts, quality contact, and commercial contact. If ordering, invoicing, manufacturing, and shipping are handled by different entities or locations, show those relationships explicitly. This reduces the risk of qualifying one site while receiving product made elsewhere.

The appropriate depth of capability evidence depends on the purchase risk. For higher-risk or engineered equipment, useful standing records may include:

  • A controlled manufacturing-scope statement identifying product types and processes performed at the relevant site.
  • Organization chart or responsibility matrix for quality, engineering, production, purchasing, and final release.
  • Quality manual or process map, where relevant to the required controls.
  • Document-control, calibration, nonconformance, corrective-action, and change-control procedures.
  • A list of critical production and test equipment where capability depends on that equipment.
  • A list of subcontracted or externally controlled operations, especially special processes and final testing.
  • Quality-system certificates, if required, with issuer, scope, site, and validity reviewed rather than merely filed.
  • Completed supplier assessment or audit records, but only where an assessment actually occurred and the record identifies its date, scope, site, findings, and disposition.

A quality-system certificate can show that an organization has been certified to the scope stated on that certificate. It does not establish that the certificate covers the manufacturing site, product family, process, drawing revision, or customer-specific controls needed for a particular order. Likewise, a completed questionnaire may reveal useful information, but it is supplier-provided evidence that should be checked against the risk of the purchase.

Where traceability is contractually required, evaluate whether the supplier’s documented system can identify material, item status, and applicable technical documents through processing. The Bruce Power audit checklist provides an example of audit questions addressing identification, test status, and traceability. It should not be treated as a universal checklist, particularly outside its intended quality and nuclear-service context.

A standing approval becomes unreliable when it is applied to work outside the approved scope. The qualification file should therefore connect reusable capability evidence to the exact equipment or process being sourced.

Create an order-specific requirements record that identifies:

  • Purchase-order number and line item.
  • Equipment description, model, and required configuration.
  • Applicable specification, drawing number, and revision.
  • Approved deviations, clarifications, and change notices.
  • Required material grades and critical characteristics.
  • Required tests, documentation, hold points, witness points, and release authority.
  • Required subcontracted operations and any restrictions on where they may be performed.

For custom, critical, or regulated equipment, request a supplier manufacturing plan, quality plan, or inspection and test plan (ITP) before production begins when the contract requires one. The plan should identify the item, the governing technical documents, inspection or test activities, responsible parties, acceptance criteria, and records to be produced. ABB supplier quality requirements describe product quality plans and ITPs as revision-controlled documents that identify the applicable item, governing documents, inspection activities, and criteria.

The useful question is not simply whether a supplier has an ITP template. Ask whether the proposed plan addresses the actual order. For example, a generic pump supplier approval does not demonstrate readiness to build a pump with a different wetted material, seal arrangement, pressure rating, motor classification, or customer witness-test requirement.

If work will be subcontracted, identify the outsourced operation and the party controlling it. A supplier may remain contractually responsible for the finished product, but the buyer still needs to know whether critical operations such as heat treatment, coating, nondestructive examination, pressure testing, or electrical testing are controlled by the supplier’s procedures and purchase requirements. The exact evidence required should be defined before award, not reconstructed after a delivery issue.

Control traceability, inspection, and test records by lot or serial number

Order-specific records demonstrate what was delivered and what evidence supports its acceptance. The required traceability depth should be proportional to risk and contractual requirements; full heat, lot, and serial traceability is not necessary for every industrial purchase.

Where traceability is required, establish a link from the delivered equipment to the records that apply to it. The linking identifier may be a serial number, lot number, batch number, job number, heat number, or another controlled identifier. The same identifier, or a documented cross-reference, should appear on inspection reports, test reports, material certificates, deviation records, and shipping or release documents.

An order file may contain:

  • Approved ITP or quality plan, including revisions and approved changes.
  • Incoming inspection records for critical purchased materials or components where required.
  • In-process inspection records for specified characteristics.
  • Dimensional inspection reports and final inspection reports.
  • Functional, electrical, pressure, leak, performance, or other test records required by the order.
  • Material certificates and traceability records when material identity or properties are specified.
  • Special-process certificates where the process is contractually controlled.
  • Calibration status or measuring-equipment identification for critical measurements, where required by the quality plan or contract.
  • First-article records where a first-article process is specified.
  • Certificate of conformity, if required, linked to the actual delivery.

The record should state the acceptance requirement, actual result, inspection date, responsible organization, and the item or lot to which the result applies. A test report that gives only “pass” without a model, serial number, test condition, acceptance criterion, or accountable issuer may not be sufficient for a critical order.

Baker Hughes supplier requirements list inspection and test plans and results, material specifications, qualification documents, and certificates of conformance among records that may be retained. The Barry-Wehmiller supplier quality manual similarly identifies incoming, in-process, final-inspection, raw-material, special-process, finished-goods, and first-article records. These examples support a layered record set; they do not mean every purchaser requires every record for every item.

Preserve nonconformances, changes, and concessions with the affected equipment

A qualification file that retains only favorable documents cannot show the actual acceptance basis. Nonconformances, repairs, rework, substitutions, and deviations must remain connected to the specific affected equipment, lot, or serial number.

For each nonconformance, retain the report number, description of the condition, affected identifiers, containment action, proposed disposition, authorization, and evidence that the authorized disposition was completed. If rework or repair is permitted, retain the approved instruction and the post-rework inspection or test evidence required by the disposition.

The buyer should define who can authorize each type of departure before placing the order. A sales contact, production planner, or receiving clerk may not have authority to accept a deviation from an engineering drawing, material grade, pressure-test requirement, or safety-related characteristic. The authority should be visible in the purchase order, quality plan, contract, or controlled internal procedure.

Similarly, retain revised drawings, purchase-order amendments, engineering change notices, and approved clarifications. The file should make it possible to determine which revision governed manufacture and which revision governed acceptance. A certificate of conformity does not remove the need for these linked records when the delivered item was made under an approved deviation or concession.

The Barry-Wehmiller manual includes nonconformity reports and resulting actions, such as rework, among retained quality records. Whether those exact record types apply to your purchase remains a contractual and risk-based decision.

Treat certificates and certification marks as controlled record elements

Certificates are useful only when the buyer understands what each one supports. File them as evidence with a defined purpose, rather than treating them as a complete supplier qualification decision.

A certificate of conformity normally represents a supplier declaration that the delivered product meets identified requirements. Check that it identifies the supplier, purchase order or shipment, delivered item, applicable requirements, authorized issuer, and date. Compare it with the actual model, configuration, quantity, serial numbers or lots, and known deviations.

Material certificates may support specified chemical composition, mechanical properties, heat treatment, or traceability, depending on the document and material standard. Special-process certificates may support completion of a stated process. Neither document proves that every other purchase requirement was met.

Quality-system certificates should be reviewed for the certifying body, legal entity, site, scope, issue date, and expiry date. If a certification mark, listing, declaration, or third-party approval is required for the ordered equipment, verify that the evidence applies to the actual product and configuration. Where an official certification-body directory is available, use the directory or the body’s stated verification route rather than relying only on a copied certificate or product image.

Do not infer regulatory compliance from an unverified mark, a generic certificate, country of origin, or a supplier statement. If the order requires a particular approval, the acceptance record should state how the buyer checked the applicable product coverage and what limitations remain.

Close the file with acceptance status and requalification triggers

The final step is not simply archiving documents. Close the file with a clear, retrievable decision: accepted, conditionally accepted, rejected, or accepted with documented outstanding actions. Identify who made the decision, the date, the supporting records, and any restrictions on use or release.

A simple controlled index is often more valuable than a large document collection. For each record, list the document title, number, revision, date, owner, related supplier site, linked purchase order, and related serial or lot number. Identify missing records explicitly rather than implying the file is complete.

Set requalification triggers when the supplier relationship or purchased scope changes. Typical triggers include:

  • Manufacturing-site relocation or a new production site.
  • Addition of a critical product family or process outside the approved scope.
  • Change in ownership, legal entity, quality-system status, or key subcontracted process.
  • A major nonconformance, recurring defect, or unresolved corrective action.
  • Expiry or replacement of a required certificate or approval.
  • A design, material, process, or test-method change that affects critical characteristics.
  • A defined periodic review date for suppliers supporting higher-risk equipment.

The appropriate review interval and retention period depend on contract terms, customer requirements, regulated-service obligations, and the buyer’s quality system. The defensible rule is narrower than “collect every certificate”: qualify the responsible supplier and site for the relevant scope, then retain order-specific evidence that the delivered equipment met the controlled purchase requirements. If either link is missing, the qualification decision should remain open, conditional, or escalated to the responsible engineering and quality authorities.

Frequently asked questions

What is the difference between a supplier qualification file and an equipment manufacturing data book?

A supplier qualification file contains reusable evidence about a supplier’s identity, approved scope, process controls, and approval status. A manufacturing data book is normally order- or equipment-specific and contains records generated for a particular item, lot, or project. The same supplier may have one standing qualification file and many separate equipment data books.

Which records should be tied to a specific purchase order or serial number?

Tie records to the order or item whenever they demonstrate delivered conformity: applicable drawing revisions, ITPs, inspection and test reports, material and special-process certificates where required, nonconformances, concessions, rework records, release documentation, and certificates of conformity. Use serial, lot, batch, or job identifiers as required by the contract and risk level.

Does an ISO certificate or certification mark qualify an industrial supplier by itself?

No. A quality-system certificate may support confidence in a defined management-system scope, while a certification mark or listing may support a defined product approval. Neither by itself proves that a particular site can make the required configuration or that a specific delivered order met its purchase requirements.

When should a buyer requalify an approved supplier?

Requalify or formally review the supplier when the approved site, scope, process, ownership, certification status, critical subcontracting arrangement, or product risk changes. Significant quality failures, repeated nonconformances, and expired required documents can also trigger review. The buyer’s documented risk method and contract requirements should determine the exact trigger and response.