What to Do When a Supplier Fails an Audit

A failed supplier audit does not have to end the relationship, but it does have to change it. The right move depends on what failed and how badly: minor findings get fixed through a corrective action plan and a follow-up check, while critical findings mean you freeze everything until the supplier proves the fix, or you walk away entirely. What you should never do is shrug, release the balance payment, and hope the shipment turns out fine.

If this is your first failed audit, the report probably looks worse than it is. Audit reports document every gap the auditor found, and a long list reads as alarming even when most items are fixable. The skill is separating the two or three findings that matter from the background noise. We run factory audits across China at CN Ally, and this guide follows the same process we walk clients through when a report comes back red.

First, figure out what "failed" actually means in your case

Not all audits fail the same way. A social compliance audit produces a rating, and "failed" means the score fell below your threshold. A factory capability audit often has no score at all, just findings and a verdict like "not recommended." A technical audit can fail on a single issue, like the factory lacking the one machine your product needs.

Before you react, get clear on three things:

1. Which standard was used? A capability checklist, a social compliance code, or your own criteria each define failure differently.
2. How was the verdict reached? Ask the auditor which findings drove the result. A good one can name the two or three that tipped the scale.
3. Was the scope right? An audit that checked the wrong things produces a misleading fail. If you ordered a quality-system audit and got half a day on fire extinguishers, the verdict says more about the audit than the factory.

If any of this is unclear, call the auditor before you call the supplier. Clarifying the verdict now costs nothing; acting on a misunderstood one can cost you a good supplier or keep you tied to a bad one. Our guide to factory audits in China covers the main audit types and what each is designed to catch.

Sort the findings into three piles: critical, major, minor

Almost every professional audit grades findings by severity. The labels vary, but the logic is consistent:

Severity · What it means · Typical examples in a Chinese factory

• **Critical**: An immediate dealbreaker. Product safety, legal compliance, or integrity is at stake. · No valid business license, falsified certificates or test reports, blocked or locked fire exits, child labor or forced labor indicators, major structural safety hazards
• **Major**: A system failure that will likely produce bad product or broken promises. · No incoming material inspection, no calibration records for measuring tools, key production step outsourced with zero control, no traceability from raw material to finished goods
• **Minor**: A gap that should be fixed but does not threaten the order on its own. · Incomplete training records, untidy warehouse labeling, a missing procedure document, housekeeping issues in non-production areas

Read the whole report, then count. The rule that matters: one critical finding outweighs ten minor ones. Don't let minor housekeeping notes drown out one critical line about falsified test reports. Brief your team criticals first, majors second, minors as context.

Also check whether findings describe the factory's systems or a single bad day. One gauge missing a calibration sticker is a blip; no calibration program anywhere in the building is a systemic gap. Auditors usually note the difference. If yours didn't, ask.

Fixable vs. fatal: the only classification that matters

Severity tells you how bad a finding is. This classification tells you what to do about it, and it matters more. Every finding is either fatal or fixable:

Fatal findings end the conversation. There are two kinds. The first is an integrity problem: the factory lied. Falsified certificates, a borrowed business license, a tour staged at someone else's facility, test reports that don't match the product. These are not process gaps; they are evidence you cannot trust anything this supplier says, including its corrective action plan. The second is an incapability problem: the factory physically cannot make your product. If you need injection molding and the "factory" is a trading office with no machines, no CAP will fix that.

Fixable findings are process problems at a factory that is otherwise real and capable: no incoming QC procedure, missing calibration records, untrained line workers, chaotic warehousing. Most small and mid-sized Chinese factories run on thin documentation and informal systems; that is normal for the market. What matters is whether management engages seriously once the gaps are pointed out.

A practical test: ask yourself whether the finding would still exist if the factory owner genuinely tried to fix it within two months. If yes, it is probably a capability or integrity issue. If no, it is a process issue, and a process issue is negotiable.

One special case: social compliance. Excessive hours or missing safety training are common in Chinese factories and usually fixable. But forced labor, child labor, and life-threatening safety conditions sit on every serious buyer's zero-tolerance list. U.S. Department of Labor guidance is explicit that confirmed forced labor ends the business relationship; it does not start a remediation project. Our social compliance audit guide covers where these lines sit under the major standards.

Your four options, and when each one fits

Once the findings are sorted, you have four paths, not two. Binary pass/fail thinking pushes buyers toward blind trust or unnecessary breakups:

Your situation · Recommended path

• Only minor findings, no majors or criticals: Approve with conditions. Put the fixes in writing as PO conditions; verify them at pre-shipment inspection.
• Fixable majors, no criticals, and you need this supplier's pricing or capacity: Conditional trial order. Place a smaller first order with tightened controls; verify every corrective action before releasing the balance.
• Fixable majors too significant to trust without proof: Corrective action plan plus re-audit. The supplier fixes, you verify with a targeted follow-up, then decide.
• Any critical or integrity finding, zero-tolerance issue, or fundamental incapability: Reject and move on. Do not negotiate with a finding that says the supplier cannot be trusted.

Most failed audits land on the middle two options: "not yet" rather than "never." The mistake is treating all non-reject paths the same. Approving with conditions suits minor gaps; applying it to major systemic failures is how buyers end up with a container of defects and a supplier saying "but you approved us."

Timing matters too. With a new supplier, walking away is cheap: no sunk relationship, usually no money at risk. With an existing supplier, you hold leverage in outstanding payments but also carry exposure in goods already in production. If money has changed hands, read the deposit-protection section twice.

How to run a corrective action plan that actually works

A corrective action plan (CAP) is the supplier's written commitment to fix each finding: what went wrong, why, what changes, who owns it, and by when. Large buyers run this formally; Acer, for example, requires suppliers to submit a corrective action report within 30 days of notification. Borrow the discipline if not the bureaucracy: every finding gets a written response with a deadline, or it does not count.

Here is how to run it without the process collapsing into empty promises:

Demand it in writing. "We will improve" is the most common sentence from Chinese factory managers after a failed audit, and it commits them to nothing. Insist on a document covering each major and critical finding: root cause (not symptom), corrective action, preventive action against recurrence, and a named owner with a date. A supplier that cannot produce this is telling you about its management capability.

Set realistic deadlines. Simple fixes like a calibration log take two to four weeks; process changes like incoming inspection take four to eight; equipment and building work takes longer. Build buffer around Chinese New Year, when factories shut for weeks. Deadlines the supplier cannot meet are worse than none: they teach the supplier your dates are decorative.

Put consequences in writing. U.S. Department of Labor supply-chain guidance recommends CAPs state explicitly what happens if violations are not remedied: suspension of orders or cancellation of future business. One plain line in your email does it: "If the critical findings are not closed by [date], we will cancel the pending order and move production elsewhere." Suppliers prioritize buyers who make the cost of inaction concrete.

Verify with evidence, not trust. Accept photos and video for simple fixes, but demand dated proof: timestamped photos, filled-in record templates, training sheets with names. For process changes, only a follow-up audit verifies. And the detail most buyers miss: the re-audit only needs to cover the failed sections, a half-day targeted visit that costs a fraction of a full re-audit.

Watch the supplier's behavior during the CAP. The process itself is diagnostic. A factory that submits a serious CAP on time, hits its dates, and welcomes the follow-up can be managed. One that stalls or bars the re-auditor has answered you, whatever the paperwork says.

Who pays for the re-audit

Expect to pay for the follow-up yourself. The auditor works for you, and that financial separation keeps the report honest. The cost is modest: budget inspection firms in China charge roughly $200 to $400 per auditor per day (published rates from firms like V-Trust and Jonble cluster around $300 to $400), while global names run about $300 to $500 per factory day. A targeted re-audit is typically a single auditor-day, sometimes less, which is never a reason to skip verification.

You do have room to make the supplier share the cost. Arrangements that work in practice:

• Split the re-audit cost if the failures were borderline or partly a matter of unclear requirements on your side.
• Deduct the re-audit cost from the order value when the failures were clearly the supplier's fault. Put this in writing before the CAP starts, not after.
• Make the first re-audit free for the supplier only if they pass. If they fail again, they pay for round two. This aligns incentives sharply.

If the supplier refuses any cost-sharing while dragging its feet on fixes, read that as data. A factory unwilling to invest a few hundred dollars proving it fixed its own failures does not expect to keep your business.

Protect the money you have already paid

This is the section buyers skip until they need it. If you have paid a deposit, usually 30% by wire transfer, your position is weaker than it feels. Act before it weakens further.

Freeze the balance immediately. Release nothing further until critical and major findings are closed. Say so in writing. This is your strongest lever, and it only works while the money is still yours.

Gate future payments on verification. The standard protection is a pre-shipment inspection that must pass before the balance is released. That is how experienced importers structure every first order. If your contract or proforma invoice does not tie the balance to a passed inspection, amend it now, while the failed audit gives you the justification.

Understand deposit recovery realistically. A T/T wire deposit is practically unrecoverable once settled: your bank cannot reverse it. Recovery comes from leverage (the supplier wants your future orders), from a contract with clear refund terms for failed verification, or from platform protection. If you paid through Alibaba's Trade Assurance, open a dispute through the platform rather than arguing with the supplier; the escrow structure exists for exactly this. Our guide on how to pay Chinese suppliers safely covers which payment methods protect you before a failure, not after.

Write the audit into your next contract. The cheapest lesson here is one clause in your next purchase agreement: the order is cancellable, or part of the deposit refundable, if the factory fails an independent audit against agreed criteria. Confident suppliers sign it without drama. Ones who resist are previewing your next failed audit.

Frequently asked questions

Should I still work with a supplier that failed an audit?

It depends on why it failed. A factory that failed on fixable gaps, engaged with the CAP, and passed the follow-up is often a better supplier than one never audited: you know its weaknesses and have verified the fixes. A supplier that failed on integrity findings or zero-tolerance issues gets no second chance. The audit did its job either way; yours is to act on what it found.

How long does a corrective action plan usually take?

For a typical mix of majors at a Chinese factory, expect four to eight weeks from CAP submission to a passed re-audit. Documentation fixes close in two to four weeks; new equipment, retraining, or building work runs longer. Serious buyers commonly require the CAP itself within 30 days of notification. Add buffer around Chinese New Year, and treat "one week for everything" as proof the supplier has not understood the findings.

How much does a re-audit cost in China?

A targeted follow-up covering only the failed sections is typically one auditor-day: roughly $200 to $400 with a budget firm, more with a global name. A full re-audit costs the same as the original. The scoped follow-up is almost always cheaper, and there is rarely reason to pay for a second full audit unless the first was fundamentally flawed.

What counts as a critical nonconformance in a factory audit?

Critical findings threaten safety, legality, or trust: no valid business license, falsified certificates, blocked fire exits or structural hazards, any indicator of child or forced labor. What makes a finding critical is its nature, not its size: it puts people or your business at legal risk, or it says the supplier cannot be trusted. One critical outweighs any number of minors.

Can I dispute or appeal an audit result?

You can ask the firm to review specific findings; reputable auditors correct genuine errors. What you cannot appeal is the verdict when the findings stand. Better use of the energy: ask which two or three findings drove the verdict and aim your CAP there. If the scope was wrong from the start, say so before the re-audit, not after.

What if the supplier refuses to fix the findings or blocks the re-audit?

That is your answer. A supplier that will not engage with a CAP or allow a follow-up has told you what the report could not: the relationship is not manageable. Freeze remaining payments, document everything in writing, pursue recovery through whatever channel your payment method allows, and move to your backup. This is why building a proper shortlist before any audit matters.

Make the call in one sitting

A failed audit report rewards one focused review, not weeks of re-reading. Work it in order: pin down what "failed" meant under the audit's own rules, sort findings into critical, major, minor, then re-sort into fatal or fixable. Fatal means walk away, whatever the pricing. Fixable means choosing among approving with conditions, a conditional trial, or a CAP with a targeted re-audit, with deadlines and consequences in writing before the supplier's promises fade.

Two disciplines separate buyers who recover from failed audits from those who repeat them. Verify with evidence, never trust: dated photos, filled-in records, a follow-up audit of the failed sections. And protect the money while you hold it: freeze the balance, gate payments on passed inspections, write exit terms into your next contract.

If you are staring at a failed audit report right now and want a second opinion on what it actually says, that is exactly what a sourcing agent is for. CN Ally reviews third-party audit reports, runs independent factory audits across China, and manages the corrective-action follow-up so you are not negotiating in a second language against a factory that does this every week. Write to hi@cnally.com with your report, and we will tell you plainly whether the supplier is fixable or you should walk away.