Approved vendor lists keep growing? Onboarding must block unacceptable risk first
At the new supplier onboarding meeting, a stack of business licenses, system certificates, and sample photos was ready. Purchasing asked, 'Can they be added to the list?' Quality said, 'The samples are okay,' and the technical team said, 'We've never been to the site.' Three months later, when the first batch saw volume fluctuations, everyone dug out that 'total score 85' from back then — the list often gets longer not because the standards are too lenient, but because the risks were never blocked at the door.
What you'll take away
- The goal of access approval is to block unacceptable risks, and the output is a chain of evidence and scaling permissions, not a visually appealing scorecard.
- The four sections of data, capability, business, and observation can be prepared in parallel, but volume access permissions must be unlocked sequentially.
- If the red line items are not passed, they cannot enter the qualified list; observation items can only be conditionally admitted and must not be diluted by the total score.
- On-site audits should bring real materials, failure modes, and change scenarios; continuous small-scale tests demonstrate capability better than single batch samples.
- Approval for access does not equal delegation of authority: the observation period must have indicators and conclusion, and the directory must be able to link with performance exit
The filing meeting is over, but risks are still waiting outside in line.
The conference room projector was stuck on 'New Supplier Access Score.' The business score was maxed out, the quality column said 'Sample OK,' and the attachments were the business license and a group photo. The purchasing manager casually entered the code into the qualified supplier list, and the planner could place the first order next week. Three months later, IQC kept failing, delivery schedules didn’t match, and changes were communicated through WeChat—during the review, everyone said, 'The score was pretty high back then.'
The list of qualified suppliers is getting longer, but those who are truly willing to scale up have not increased. Usually, it's not that the evaluation forms are insufficiently detailed, but ratherAccess approval only completed registration, but did not complete risk identificationBlocking unacceptable risks before the cooperation starts is cheaper than holding someone accountable afterwards, switching lines, or claiming compensation.
Admission actually only answers three things
Before launching more templates, first clearly define the admission decisions that need to be served:
| Questions to be answered | What will happen if I can't answer? |
|---|---|
| Can this company be included in our category and factory scope? | Misuse across factories and categories; only found out the qualifications were inappropriate after something went wrong |
| After joining, how much share is given first, and which indicators should be monitored? | Once entered into the list, the full quota is assigned, and fluctuations immediately enter the production line. |
| Under what conditions must one downgrade or withdraw? | Bad money occupies a position for a long time, and the switching cost increases the longer it is delayed. |
If an organization only wants 'digitalized contact lists,' there is no need for a complex scoring model; if it wants to manage directory inflation, the scoring must be able to restrict the orderable range and the observation tags.
The red line comes before the score, observation items cannot pretend to be qualified
The laziest shortcut in practice is using the overall score to cover up a veto. It is recommended to first freeze two types of fields at the category level:
Red line item——However, they cannot be included in the qualified list: key qualifications are missing, core processes are not traceable, major quality/safety incidents have not been closed, critical measuring tools are unavailable, the scope of licenses does not match, etc.
Observation item——Conditional approval allowed: packaging is being improved, some inspection tools are pending calibration, and minor documents are being completed. Observations must clearly state the deadline for completion and the maximum proportion if not completed, rather than verbally saying 'just use it for now.'
Business hard terms (delivery commitment methods, advance/delay rules, quality deductions, change notification deadlines) should be listed separately to avoid 'cooperate first, then discuss details' at the negotiation table. Business scores and relationship scores can exist, butCannot erase the red lineThe dashboard defaults to displaying individual items and red line status, with the total score used only as a summary.
A beautiful sample does not mean the process can withstand it.
The watershed of capability verification is: with the same person and the same process, whether three consecutive batches of small-scale trials or pilot production can fall within specifications. A sample picked from a batch can only prove the 'possibility of making it,' and cannot unlock mass production share.
Do not go empty-handed for an on-site audit. Bring at least three things: a real materials list or key dimensions, the failure modes you encounter most often, and a change scenario (such as material substitution). Audit conclusions should be recorded in the system fields, not just in the auditor's notebook.
| What are you looking at? | The evidence to be obtained | Common 'Looks good but ineffective' |
|---|---|---|
| Process and Equipment | List of Key Process Equipment, Maintenance and Accuracy Records | Only the factory brochure |
| Process Control | Control plan, key dimension sampling inspection or SPC records | Verbally say 'We all check' |
| Change Management | Sample Notice of Material/Process Change and Customer Confirmation | Changes rely on WeChat groups |
| Subcontracting and Outsourcing | Subcontracting List, Incoming Material Inspection, and Traceability Examples | "Do the core yourself" but cannot clearly define the boundaries |
| Nonconformity and Recall | Major non-conformities and closure evidence in the past 12 months | Claiming zero customer complaints but without a ledger |
| Delivery capability | Capacity definition, bottleneck processes, typical lead time composition | Only gives a 'fastest one week' promise |
Traders and manufacturers should not pretend to have the same set of capabilities: traders focus on whether the supply source can be disclosed, whether batches can be traced to production lots, and whether they have matching safety stock or verifiable transfer cycles; manufacturers focus on process routes, equipment, process capabilities, and engineering changes. Main processes can be shared, but verification items must diverge. Traders who cannot clearly explain their supply source should not be included in the qualified list for critical components.
The four stages can be prepared in parallel, but volume release must be unlocked sequentially.
Document review, capability verification, business terms, observation period — documents can be collected simultaneously, butIf the previous section has not passed, the volume increase permission of the following section should not automatically take effect。
| Stage | Questions to be answered | Output | Common laziness |
|---|---|---|---|
| Data Review | Whether the qualifications cover the categories and regulations | List of Certificates, Systems, and Environmental Certifications | Only accept business licenses |
| Competency Verification | Can it consistently meet the specifications? | Process/Equipment/Gauge/Trial Production Records | Only look at the appearance of the sample |
| Business terms | Who Gets to Decide on Price, Payment Terms, Delivery Time, Breach, and Changes | Contract, price agreement, claim terms | Oral agreement on delivery date and deductions |
| Observation period | Can it withstand fluctuations after an increase in volume? | Tracking Dashboard and Case Closure Conclusion | Once entered into the list, the full quota is released |
The root cause usually falls into three areas: confusing red lines with observations; capabilities stopping at samples; contact lists in Excel, orders in emails, and performance in another sheet—the access approval conclusions cannot constrain subsequent ordering.
The observation period does not mean 'you will be made permanent after the probation period'
During the observation period after approval for entry, it is recommended to fix four things: tighten incoming material sampling (based on risk), track delivery performance separately, implement temporary measures for quality issues within 48 hours and a root cause plan within 7 days, and hold a three-option closure meeting at the end (approved / continue observation / downgrade and exit). Without a closure meeting, the observation period essentially does not exist.
Observation period indicators should share the same source as subsequent performance sub-items to avoid having a different set for newcomers and a different one for veterans. Admission addresses 'whether one can join,' while performance addresses 'share and retention after joining'—the two chains should connect on the same set of risk labels, rather than adding a separate score sheet at the end of the year.
Directory physical examination: first select five companies, then discuss replacing the template for all employees
It is not recommended to immediately replace the admission templates for all categories. Sort by risk and share, and first conduct a check on the existing catalog:
- Randomly select five 'qualified suppliers' and ask both the procurement and quality departments: What is the biggest risk for this supplier, what indicators are observed during the monitoring period, and what are the exit triggers.
- If unable to answer, downgrade to restricted or under observation, and supplement evidence, rather than continuing with full allocation;
- New suppliers are required to go through four stages, and without a system status, they cannot place their first strategic material order.
- At least one case of actual demotion or withdrawal should be completed each year, proving that the lists have entries both coming in and going out.
When the group shares a common directory, cross-plant reuse must review the scope; for extremely single sources that cannot be replaced in the short term, make exceptions explicit (risk registration and alternative development plans), which is more honest than pretending 'no entry, no purchase'.
Supply management solutions typically place registration access, master data, licenses and risk labels, performance evaluation, and rectification elimination within the same lifecycle; observation periods, red lines, and evidence attachments can be configured and linked with share/rectification. The value of JEDP-SRM lies in 'the directory has entries and exits, and volume can be constrained,' not in the animated scoring radar charts. The process should allow drilling down to review tasks, attachments, and observation conclusions, with regular meetings debating evidence rather than impressions.
Which scenarios should not be forcefully pushed for full-scale access transformation first
- The daily performance metrics (incoming material qualification, on-time delivery) themselves are inconsistent: first unify the process data, then clean up the directory;
- Materials are not distinguished as key/non-key: the same strict access rules apply to all categories, which either makes implementation difficult or turns it into a formality;
- Procurement, quality, and technology are not aligned with the red line: the system cannot prevent verbal special approvals from the three parties;
- Treating access control as a pure punitive tool, without corresponding guidance and reassessment paths: suppliers will conceal problems;
- Spot store-style, one-time long-tail procurement: only keep the minimum data and price records, no need for the complete four sections.
Useful process signals include: first-pass rate of red-line items, days to close corrective actions, proportion of suppliers under observation during the observation period and their conversion rate to qualified status, on-site/equivalent audit coverage of key suppliers, major quality/delivery incidents within 90 days of admission, and the number of items removed from the annual list. Using a total score instead of red-line items, giving full quota upon first listing, using a group photo in a PPT as an on-site audit, and only adding without removing — all count as anti-patterns.
What to do next
This week, randomly select five key 'qualified suppliers' for an evidence chain check: whether the red-line attachments are complete, whether the observation period indicators are running, and whether the exit conditions are written into the category strategy. Those who cannot answer should first be downgraded to restricted or under observation, and then decide whether to supplement on-site audits. The first pricing after admission should enter the sourcing project, rather than placing orders directly after the buyer's verbal negotiation.
- SRM Supply Solution: From Access to Performance Elimination
- Sourcing: Request for Quotation, Bidding, and Tendering
- Incoming Material Inspection and Supplier Quality Closed Loop
- Supplier Performance and Share Exit
- Order Coordination: Confirmation, Changes, and Feedback
Want to apply this in your plant?Resources has matching self-assessments and templates—or book a live demo.
FAQ
Quick answers on this topic—still stuck?Contact
The small batch trial production has been approved; can it be directly converted to a qualified supplier?
It can enter the observation period, but it is not recommended to equate it directly with mass production qualification. Prototype trials can show that it can be made, while mass production proves it can be made stably. At the end of the observation period, a judgment is made based on incoming materials, delivery performance, and the closure of abnormalities together.
Should traders and manufacturers use the same set of access requirements?
The main framework can be the same, but the competency verification items must diverge: traders focus on the authenticity of supply sources, traceability, and inventory buffering; manufacturers focus on processes, equipment, process capability, and change management.
Can multiple factories in the group share the same directory?
Can be shared but must have scope control. Reuse across factories requires review of key qualifications, capacity, and logistics radius; Factory A being qualified does not automatically allow Factory B to proceed.
Why did problems occur after going online even though the admission score was very high?
It is common for the overall score to be raised by business and relationship points, while the red line and process capability are diluted. Looking at the red line is more useful than looking at the overall score; scores can only be used as a reference for ranking.
What should be done if the supplier is unwilling to cooperate with the on-site audit?
Key categories should not be included in the qualified list without on-site or equivalent remote audits. Non-key categories can start with samples and small batches, but the authority to scale up must still be controlled.