Sedex, amfori BSCI and ISO: Buyer Verification Guide

Reviewing supplier audit or ISO evidence? Send the document list, entity/site and buyer requirement for a verification-gap review.

Use the right names

Write the exact program, methodology, standard and document type. Avoid the catch-all phrase “quality certifications” when documents have different owners, purposes and scopes.

Record the wording allowed by the scheme owner, certification body and customer. Marketing copy should not imply endorsement or broader coverage.

Understand Sedex membership

Sedex describes supplier membership as access to its platform to manage and share business information; joining does not require an audit. See Sedex's supplier membership information.

Verify the member/legal entity, site, membership status and what information the buyer is authorized to access. Membership alone is not an audit opinion, product certification or legal-compliance guarantee.

Understand SMETA audits

Sedex states that SMETA is a social-audit methodology covering labour standards and health and safety, with environment and business ethics in a four-pillar audit. Sedex also states that SMETA is continuous-improvement methodology, not certification. See the official SMETA audit page.

Check the audited site, audit type/scope, date, approved audit company, report status, non-conformances and Corrective Action Plan Report. Determine whether findings are open, verified closed, overdue or outside the requested scope.

Understand amfori BSCI monitoring

amfori support explains that amfori BSCI audits are requested by a responsible member through the sustainability platform; the producer does not independently issue itself a BSCI certificate. See amfori's audit-request guidance.

amfori explains that auditors answer questions using evidence and the platform calculates performance-area and overall ratings. Review the current report and rating rather than accepting a logo or informal “BSCI certified” statement. See the official rating explanation.

Understand ISO standards and certification

ISO publishes standards but states that ISO itself does not perform certification or issue certificates. Certification to management-system standards is performed by external certification bodies. See ISO's certification guidance and management-system standards overview.

Verify the named legal entity and sites, exact standard and edition, certificate scope, certificate/body identifiers, issue/expiry dates, surveillance status and certification-body/accreditation details where required. The scope must cover the activity relevant to the order.

Check entity and site identity

Match legal name, address, site identifier and production role against the purchase route. A headquarters certificate, trading-company document or different factory-site audit may not cover the actual production location.

Record subcontracting and process locations for cutting, sewing, printing, finishing and packing when material to the buyer's requirement. Do not combine separate companies or sites into one claim.

Verify authenticity and authority

Use the scheme platform, certification body directory, accreditation database or authorized customer-sharing route as applicable. Request complete documents rather than cropped logos or screenshots.

Confirm issuer/audit company authorization, document number, date, scope and status. Preserve the verification date and URL or platform reference without publicly exposing restricted reports.

Read findings and corrective actions

An audit or certificate is not a substitute for examining current risk. Review non-conformities, severity, root cause, corrective action, closure evidence and recurrence where access is authorized.

Decide which findings require remediation, follow-up audit, additional controls, escalation or non-approval under the buyer's policy. A rating should not replace issue-level due diligence.

Keep social and management evidence separate from product quality

Social audits evaluate site practices within their methodology. Management-system certification evaluates the named organization's system and scope. Neither alone approves cosmetic bags, tote bags or any other product.

For the order, still define end use, materials, dimensions, construction, artwork, labels, claims, testing, approved sample, inspection, pack-out, traceability and change control.

Control logo and public claims

ISO states that the ISO logo cannot be used to demonstrate certification; organizations should follow the certification body's rules for permitted marks. Sedex, SMETA and amfori marks and report information also require scheme/customer authorization.

Use precise wording such as “the named site was audited on [date] using [methodology]” or “the named entity holds a certificate to [standard/edition] for [scope], subject to current verification” only when true and authorized.

Build a buyer verification record

Create one row per entity/site/document: required scheme/standard, document type, issuer, report/certificate ID, scope, audit/issue/expiry dates, rating/findings, corrective-action status, verification method/date and buyer decision.

Set review triggers for expiry, surveillance, new findings, site or supplier change, subcontracting, material/process change and customer requirement updates.

Prepare the RFQ and due-diligence request

Send the buyer's required scheme/standard, acceptable document type/date/score or finding rules, legal entity/site, authorized sharing method and remediation expectations. Separately send the product specification and quality plan.

Audit access, reports, ratings, certificates, certification scope, product compliance, MOQ, price, capacity and delivery are subject to current verification and written confirmation.

Frequently asked questions

Is Sedex membership a certification?

No. Sedex describes membership as platform access; audit status and reports must be checked separately.

Is SMETA a certification?

No. Sedex explicitly describes SMETA as a continuous-improvement audit methodology rather than certification.

Is a factory “BSCI certified”?

Use the current amfori BSCI audit/monitoring terminology and verify the site, report, rating, dates and findings through the authorized route.

Does ISO certify companies?

ISO develops standards and does not issue certificates. External certification bodies perform certification.

Does ISO 9001 prove product quality?

It can provide evidence about a quality-management system within the certificate scope; the buyer still needs product specifications, samples, tests and inspection.

Sources and scope: official Sedex, amfori and ISO pages cited above support the terminology and verification framework; the Luckystar custom-bag category and linked sourcing guides support product/process context. No current document was supplied to establish Sedex membership, a SMETA report, amfori BSCI monitoring, ISO certification or other audit/certification for Luckystar or a named production site. The former certification, guarantee, efficiency, cost, customer, premium, legal-compliance, market-access and hypothetical-case claims were removed. Two unverified legacy images, unsupported company/service wording and personal contact details were removed; the standard GET QUOTE image was retained.