Can the checklist be signed electronically?

Yes. Electronic signatures meet U.S. legal standards under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Ensure intent, consent, signer attribution, and readable retention to meet the legal validity test.

Do I need notarization or witnesses?

Not typically for supplier audits. Notarization or witnesses are only required when a specific state law or contract clause demands it. Use state rules for deeds, powers of attorney, or other notarized instruments when applicable.

What authentication level is recommended?

Use email verification for low-risk suppliers and stronger methods (SMS OTP, knowledge-based or multi-factor authentication) for high-risk suppliers or where regulatory compliance requires higher assurance.

How long must I retain completed checklists?

Retention depends on industry and legal obligations: at least 3 years generally for tax-related records, 6 years for HIPAA-related documents, and longer where contracts or state law require it.

How should I store supporting evidence?

Store signed checklists and attachments in a secure archive with tamper-evident controls, access logging, and search capabilities. Ensure records can be reproduced for audits and legal requests.

What if supplier information changes after approval?

Document changes with an updated checklist or amendment, require re-submission of affected evidence, and re-assess risk; maintain version history to show when and why approvals were updated.

Electronic Signature
Templates
Miscellaneous
Supplier Audit Checklist

Supplier Audit Checklist

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

SUPPLIER AUDIT CHECKLIST AND ENGAGEMENT

WHEREAS

WHEREAS Company (the "Auditing Party") requires periodic verification of supplier processes, systems, and product controls to ensure continued conformity with contractual, regulatory, and quality requirements; and

WHEREAS Supplier (the "Audited Party") agrees to permit access and to cooperate with the Auditing Party for the purpose of conducting such audits and implementing any required corrective actions in accordance with the terms set forth herein.

WHEREAS this Checklist serves as both the operational audit instrument and the written engagement terms between the parties for the specified audit.

ENGAGEMENT DETAILS

Supplier Name:

Supplier ID: Site / Address:

Contact Person: Phone / Email:

Audit Conducted By: Audit Reference:

Audit Date: Audit Location / Area:

SCOPE OF WORK

Scope Description

PAYMENT TERMS

Audit Fee Amount: Payment Schedule:

Late Payment Fee:

TERM AND TERMINATION

Engagement Start Date: Engagement End Date:

Termination Notice Period (days):

Either party may terminate this engagement for material breach that is not remedied within the stated notice period; termination shall not relieve either party of obligations accrued prior to termination.

CONFIDENTIALITY

All audit materials, findings, nonconformance reports, and associated records created or exchanged under this engagement are confidential. The Auditing Party and the Audited Party each shall restrict disclosure to personnel with a legitimate need to know and shall not disclose such information to third parties without prior written consent, except as required by law. Confidentiality obligations survive termination of this engagement for a period of three (3) years.

GOVERNING LAW

This engagement and any disputes arising from it shall be governed by the laws of: .

ENTIRE AGREEMENT

This document constitutes the entire agreement between the parties regarding the subject matter and supersedes any prior oral or written agreements. Amendments must be in writing and signed by authorized representatives of both parties.

AUDIT CHECKLIST

1. MANAGEMENT SYSTEMS & CERTIFICATIONS

Quality Management System present and implemented: Compliant Non-Conforming Not Applicable

Comments / Evidence

2. QUALITY CONTROL & INSPECTION

Incoming inspection, in-process checks, and final inspection procedures documented and followed: Compliant Non-Conforming Not Applicable

Findings / Evidence

3. TRACEABILITY & RECORDS

Lot/batch traceability and retention of quality records: Compliant Non-Conforming Not Applicable

Record Types Reviewed

4. FACILITIES, EQUIPMENT & CALIBRATION

Facility cleanliness, equipment maintenance, and calibration controls: Compliant Non-Conforming Not Applicable

Observed Issues

5. PACKAGING, LABELING & SHIPPING

Packaging integrity, correct labeling, and shipping documentation: Compliant Non-Conforming Not Applicable

Exceptions / Actions Required

6. ENVIRONMENTAL, HEALTH & SAFETY

Compliance with applicable safety and environmental controls: Compliant Non-Conforming Not Applicable

Hazards Observed

7. SUBCONTRACTING & SUPPLIER CONTROL

Controls over subcontractors, flow-down requirements, and monitoring: Compliant Non-Conforming Not Applicable

Subcontractor Details / Concerns

8. OVERALL AUDIT RATING & FINDINGS

Overall Rating: Compliant Conditional Not Acceptable

Summary of Key Findings

CORRECTIVE ACTION PLAN

Required Corrective Actions, Responsible Party, and Target Completion Dates

CERTIFICATION

By signing below, the undersigned certify that the information recorded in this Supplier Audit Checklist is true and correct to the best of their knowledge, that the Supplier has been afforded the opportunity to review findings and that follow-up corrective actions will be implemented in accordance with the Corrective Action Plan set forth above.

Auditor Printed Name:

By:

Date:

Supplier Representative Printed Name:

By:

Date:

What a Supplier Audit Checklist Is and when it's used

The Supplier Audit Checklist is a standardized form used by procurement, quality, and compliance teams to assess a vendor’s controls, documentation, and regulatory posture. Typical items include supplier identity, certifications (for example ISO or SOC 2), insurance and safety records, financial indicators, subcontractor relationships, and evidence of regulatory compliance such as HIPAA or FERPA where applicable. Completed checklists create an auditable record to support onboarding, periodic review, corrective actions, and third-party risk reporting across locations and systems.

Why a consistent checklist matters for supplier risk

A Supplier Audit Checklist improves consistency, reduces onboarding time, and documents vendor controls for internal audit and regulatory review. It makes gaps visible so buyers can require remediation, compare suppliers objectively, and demonstrate due diligence to stakeholders and regulators.

Who completes and reviews the checklist

Procurement, quality assurance, compliance officers, and contract managers typically complete or review Supplier Audit Checklists during vendor onboarding and scheduled reassessments.

Procurement teams — perform initial evaluation, scoring, and enter contractual requirements into the vendor record.
Quality managers — assess manufacturing or service controls, certifications, corrective action plans, and test evidence.
Compliance officers — verify regulatory obligations, data protection measures, insurance coverage, and reporting requirements.

Final reviewers sign or approve the checklist to record acceptance of residual risk and to trigger contract execution or corrective actions.

Who has authority to sign the checklist

Procurement Director

Typically the Procurement Director or delegated approver signs to authorize vendor onboarding when monetary thresholds or strategic risk levels are met. Their signature documents business acceptance of any residual risk and triggers contracting and payment workflows.

Supplier Representative

A supplier's authorized representative attests to the accuracy of submitted information, signs the checklist declarations, and accepts follow-up verification or audit access as required by contract terms.

Required supplier data elements

Supplier legal name: Full registered legal name

Tax ID / EIN: Nine-digit EIN or TIN

Primary contact: Name, title, phone, email

Insurance details: Policy numbers and limits

Certifications: ISO, SOC 2, or similar

Financial evidence: Recent financial statements

Step-by-step: completing the Supplier Audit Checklist

Follow these sequential steps to complete the Supplier Audit Checklist accurately, attach supporting evidence, and obtain required approvals for an auditable record.

01

Identify supplier: Enter legal name, EIN, address, and primary contact information.
02

Collect documents: Attach certifications, insurance declarations, financials, and relevant policies.
03

Assess controls: Score quality, information security, data protection, and regulatory compliance.
04

Approve and store: Obtain signatures, store the checklist in the vendor file, and note remediation steps.

Routing and retention after completion

After the checklist is completed and signed, route copies to procurement, quality, and legal teams, attach supporting evidence to the vendor record, and maintain an auditable copy for the retention period required by your policies and applicable law.

Prepare package: Compile checklist and supporting attachments in PDF or native formats.
Route for approval: Send to designated approvers in the correct signing order.
Archive file: Store a signed copy with the vendor record for retention compliance.
Monitor remediation: Track open corrective actions and schedule follow-up audits.

Key sections of a professional Supplier Audit Checklist

A comprehensive checklist groups information into discrete sections to make review, scoring, and follow-up straightforward for cross-functional teams.

Supplier identification

Records the supplier's legal name, address, tax ID, corporate structure, key contacts, and contract owner so reviewers can quickly confirm the organization being assessed and link to payment and contract systems.

Certifications and compliance

Documents ISO, SOC 2, PCI, or industry-specific certificates with issue and expiry dates plus links to attestation letters or audit reports to verify claims and maintain evidence continuity.

Information security controls

Summarizes security posture, encryption practices, incident response, and access controls; includes evidence of penetration testing, vulnerability scanning, and any third-party security attestations.

Insurance and safety

Lists insurance types, policy numbers, limits, and effective dates plus workplace safety records or OSHA reports where applicable to confirm adequate risk transfer and liability coverage.

Financial and operational health

Captures recent financial statements, credit indicators, business continuity plans, and production capacity data to assess the supplier's ability to meet contractual obligations.

Corrective actions and follow-up

Records nonconformances, assigned owners, due dates, and verification steps so unresolved issues are tracked until closed and re-inspected as needed.

Typical timelines and response deadlines

Set clear timelines for supplier responses and internal review to avoid delays in onboarding and contract execution.

Initial response window:

Supplier provides checklist and documents within 10–15 business days.

Reviewer turnaround:

Internal review and scoring completed within 5–10 business days.

Corrective action period:

Supplier remediates deficiencies within 30–90 days, depending on severity.

Periodic reassessment:

Annual or risk-based reassessment; high-risk suppliers more frequently.

Record retention:

Retain signed checklist per policy and legal requirements.

Common mistakes to avoid when preparing the checklist

Incomplete fields or missing attachments that require repeated follow-up and delay approval.
Mismatched legal names or Tax ID errors that can trigger backup withholding or contract validation failures.
Accepting expired certificates or unsupported evidence without verification of authenticity or scope.
Failing to record remediation timelines and verification steps, leaving open risks untracked.

Risks and consequences of an incorrect or incomplete checklist

Backup withholding: 24% rate

Regulatory fines: State or federal penalties possible

Contract termination: Buyer may cancel agreement

Audit findings: Internal or external audit risk

Reputational harm: Customer and partner trust loss

Operational disruption: Supply interruptions or delays

How a Supplier Audit Checklist compares to related vendor documents

Use this quick comparison to choose the right approach: checklist for structured review, questionnaire for high-level screening, and on-site audit for in-depth verification.

Document Type	Scope	Depth
Checklist	focused	structured evidence
Questionnaire	broad	self-reported
On-site audit	narrow	direct verification
Third-party certification	independent	high confidence

eSignature vendor comparison for executing Supplier Audit Checklists

This comparison shows starting prices and common capability indicators across eSignature vendors; signNow is listed first per platform conventions.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes

Configuring an electronic workflow for the checklist

Configure field types, signer order, and authentication appropriate to risk and regulatory requirements.

Upload document	PDF or DOCX preferred
Place fields	Signature, date, checkbox, and attachment fields
Authentication	Email, SMS code, or stronger methods
Routing order	Sequential or parallel signer routing
Storage location	Secure cloud or on-premise archive

Practical tips for accurate and efficient completion

Adopt these practices to reduce errors, speed approvals, and preserve evidentiary value in audits.

Standardize templates and evidence lists

Use consistent templates with mandatory attachments and clear field-level instructions so suppliers know exactly what to provide. Standardization reduces follow-ups and improves auditability across procurement teams.

Require signer attribution and dates

Ensure each signature block includes printed name, title, and MM/DD/YYYY date. Explicit attribution supports legal enforceability and helps reconcile who approved decisions and when.

Use version control and change logs

Track revisions, noting reviewer comments and dates. A documented change history prevents disputes about which requirements applied at a given time.

Align remediation with SLAs

Define remediation deadlines and acceptance criteria in the checklist. Link corrective actions to purchase order or contract remedies to ensure measurable outcomes.

Real-world examples of checklists in use

These concise examples show how organizations apply Supplier Audit Checklists to solve operational and compliance needs.

Optica Ventures

Optica standardized supplier checklists to speed vendor qualification during rapid growth.

They used a single template for evidence collection.
Standardized workflows reduced onboarding time, improved documentation consistency, and made it simpler for sales and operations to accept new suppliers while maintaining internal audit trails and compliance.

Martin Properties

A property management firm moved to electronic checklists for maintenance contractors.

They combined checklist and certificate uploads.
The change ensured insurance and safety documents were current, reduced physical file handling, and provided a reliable historical record for tenant disputes and insurance claims.

Frequently asked questions about the Supplier Audit Checklist

Answers to common questions about validity, signatures, retention, and integration with electronic systems.

Need help? Contact support

Can the checklist be signed electronically?
Yes. Electronic signatures meet U.S. legal standards under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Ensure intent, consent, signer attribution, and readable retention to meet the legal validity test.
Do I need notarization or witnesses?
Not typically for supplier audits. Notarization or witnesses are only required when a specific state law or contract clause demands it. Use state rules for deeds, powers of attorney, or other notarized instruments when applicable.
What authentication level is recommended?
Use email verification for low-risk suppliers and stronger methods (SMS OTP, knowledge-based or multi-factor authentication) for high-risk suppliers or where regulatory compliance requires higher assurance.
How long must I retain completed checklists?
Retention depends on industry and legal obligations: at least 3 years generally for tax-related records, 6 years for HIPAA-related documents, and longer where contracts or state law require it.
How should I store supporting evidence?
Store signed checklists and attachments in a secure archive with tamper-evident controls, access logging, and search capabilities. Ensure records can be reproduced for audits and legal requests.
What if supplier information changes after approval?
Document changes with an updated checklist or amendment, require re-submission of affected evidence, and re-assess risk; maintain version history to show when and why approvals were updated.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now