Packaging Supplier Sustainability Audit Framework FAQ
What are the three pillars of a packaging supplier sustainability audit?
Environment, labor, and materials. The environment pillar covers energy use, water discharge, waste routing, permits, and emissions — verified against site reality. The labor pillar covers working hours, wages, health and safety, and freedom of association — checked through payroll samples, safety records, and worker interviews. The materials pillar covers recycled content, fiber origin, chemical compliance, and certificate validity — backed by mass-balance records and chain-of-custody documents. A supplier with only an environmental story fails the audit that matters, because buyers repeat all three pillars to their own customers.
Why do questionnaire-based supplier assessments fail?
Because self-reported answers measure paperwork, not performance. Common failures include expired certificates listed as current, recycled-content percentages from unverified spreadsheets, and permits covering only part of actual operations. A framework fix requires three evidence sources — documents, site observation, and worker interviews — and accepts a finding only when at least two of them agree. Findings supported by one source are flagged as unverified rather than counted as facts.
How should I score suppliers fairly across different factory types?
Score against a fixed, published rubric with evidence-defined criteria — not against other suppliers. A four-point scale works: 4 (systematic) requires certificate, records, and site observation in agreement; 3 (functional) shows records with one evidence source missing; 2 (partial) is paper-only; 1 (absent) has nothing verifiable. Weight pillars to your risk profile — materials evidence weighs heaviest when you make recycled-content claims to your own buyers — and publish the weights so suppliers know what to prepare. (Source: ISO, 2025)
How do I verify a supplier's environmental certificate is valid?
Check three things: status (active, not expired), scope (the certificate must cover the site being audited, not a sister plant), and issuing body (confirm the registration exists with the certifier). ISO 9001 for quality and ISO 14001 for environmental management are the common baselines. Treat certificates as the floor of the environment pillar, then audit beyond them — a certificate proves a management system exists, and only site evidence proves it is practiced. (Source: ISO, 2025)
How do I verify a recycled-content claim from a packaging supplier?
Require the record trail, not the percentage. Ask for mass-balance records connecting recycled-fiber input to finished output, chain-of-custody documentation for fiber origin, and the mill records behind any certified-content statement. Paper-industry chain-of-custody conventions give auditors the documentation formats that make a claim verifiable rather than asserted. A supplier that cannot show the file behind its number will not survive your buyer's audit either. (Source: TAPPI, 2025)
What is a corrective action plan and when do I require one?
After findings are confirmed, each converts into a corrective action plan item with three fields: owner, deadline, and evidence of completion. Zero-tolerance findings — child labor, falsified certificates, unpermitted hazardous discharge — trigger immediate remediation or supplier exit, with re-audit within 90 days. Capability gaps such as missing procedures or weak record-keeping get a 90-day plan with documented close-out and a follow-up at the next annual cycle. An audit without this loop is an expensive opinion.
How do supplier audits connect to my own regulatory reporting?
Directly: EU packaging rules under the PPWR framework build supply-chain information duties — recyclability, recycled content, and material composition data that buyers pass up the chain. If a recycled-content number is not verifiable at the mill, it cannot legally appear in your reporting. That makes supplier audits the first link in your compliance chain: audit suppliers to the evidence standard you will need for your own disclosures, before a regulator or buyer asks for the file. (Source: European Commission PPWR, 2024)