SSL NewsroomCompliance

How to Read a Factory Compliance Audit Report

Kolkata 08 APRIL 2026By Surajmal Editorial Team11 min readUpdated 11 AUGUST 2026

Published 8 April 2026

Read a compliance audit report from the site identity and scope upwards, then judge the findings and closure evidence before you give weight to its headline result. The report is useful evidence about a defined visit. It is not a transferable badge for a supplier account, a permanent statement about working conditions or a substitute for production follow-through.

That order of reading matters. An audit pack can contain a score, a certificate, a corrective action plan and several pages of detail. The headline is the quickest part to absorb, yet it usually tells the reviewer least about whether the document applies to the site that will make the order and whether open issues have been dealt with.

For example, Sedex states that neither SMETA nor Sedex membership is certification, and that SMETA has no pass or fail result. A report must therefore be read as the output of a named assessment, with its own scope and findings, not converted into a generic approval label. Our guide to verifying sustainability claims covers the same discipline for any supplier assertion.

What should you check before reading the headline result?

Start by matching the report to the proposed production site. Record the facility's legal name, physical address, audit date, audit company, report reference and the scheme or customer programme shown on the cover. A supplier group name, trading name or invoice header can be broader than the site reviewed. The address is the control point.

Next, establish what document you have. A social-audit report, a certification document, a customer code assessment and a follow-up visit can all sit in the same folder. They do not carry the same meaning. Do not let the title on a cover page do the comparison for you.

Check firstWhat to recordWhy it matters
Facility identityLegal name, site address and any site codeConfirms the document belongs to the location proposed for production
Document typeAudit report, certificate, follow-up or corrective action planPrevents a supporting document being treated as the full assessment
Assessment dateVisit date and report issue dateShows how current the evidence is
Audit company and schemeNamed auditor, methodology and report numberMakes the document traceable if a question arises
Production connectionStyle, purchase order or approved-site recordConnects compliance evidence to the order, not only to the supplier account

If any of these items does not line up, pause the review. A good result at a different address does not answer the question of conditions at the intended site. The mismatch may have a straightforward explanation, such as a site move or a separate processing location, but it still needs a clear record before production is released.

How do you tell what the audit report actually covers?

Read the scope statement before the findings list. It should identify the site, the activities examined, the workforce population, the date of the visit and the records reviewed. Some reports cover one production unit. Others include canteen, dormitory, warehouse or shared services. The scope is the boundary around every conclusion that follows.

In SMETA, the chosen two-pillar or four-pillar scope affects the subjects assessed. Sedex describes the audit as a review of site documentation, records, policies, processes, operations, workers and conditions across the selected scope. That makes the scope page as important as the summary page.

Scope questionWhat a useful answer looks likeWhat needs follow-up
Which site was visited?A complete physical address and identifiable facility nameA group name, city only or an address that differs from the production plan
What work took place there?Activities and departments included in the visitA report that gives no indication of whether relevant garment processes were covered
Who was in scope?Workforce figure or description, shifts and employment categories where statedNo indication of temporary, agency or migrant-worker coverage where those groups are relevant
What period did records cover?Dates for payroll, hours and other sampled recordsA report date with no record-review period
What did the audit exclude?Clear limitations, inaccessible areas or unavailable recordsA vague scope statement that leaves a material part of the operation unclear

Scope is not a technical footnote. If a packing facility, wash unit or homeworking arrangement contributes to the product, determine whether it sits inside the report's stated boundary. Where it does not, treat it as an additional due-diligence question, not as an issue silently covered by the main-site report.

How should findings be prioritised?

Read the highest-severity findings first, then look for patterns. A long list of low-level administrative gaps needs attention, but it should not take the same place in a sourcing decision as a finding involving immediate life safety, coercion, child labour indicators, wage practices or serious working-hours concerns.

The report's severity labels are useful because they reflect its methodology. Keep the original label in your file. Then add an operational judgement: what could happen if the issue is real, how much of the workforce it could affect, whether the proposed production schedule is exposed and what evidence would resolve the uncertainty.

Finding patternReview questionSensible next action
Immediate safety concernCould workers face harm before a planned production start?Obtain evidence of correction and confirm whether independent verification is needed before release
Wage or hours discrepancyDo records, worker accounts and payroll evidence point to the same practice?Request the corrective-action record and a defined sample of follow-up evidence
Missing policy or training recordIs the control absent, or is the evidence incomplete?Check the underlying procedure, attendance record and how it is used on the floor
Repeated finding from a prior reportHas the issue persisted through more than one review cycle?Compare prior and current CAPs, then ask for cause, owner and verified closure evidence
Isolated housekeeping issueDoes it indicate a wider failure in maintenance or supervision?Check the area, recurrence and whether the correction is visible in routine inspections

Do not reduce a finding to a colour code. A recurring issue may be more revealing than a single high-level observation closed promptly. Conversely, one severe issue can change the decision even when the rest of the report is strong. The task is to understand the condition behind the label and the evidence behind the proposed fix.

What does a corrective action plan tell you?

A corrective action plan, often called a CAP, records the route from a finding to a proposed correction. It is a working document, not proof that the correction happened. The difference is easy to lose when a plan contains a target date, an owner and a reassuring statement such as "training completed".

Sedex describes SMETA as providing a Corrective Action Plan to address issues found in the audit. The plan should be read beside the original finding and any follow-up report, not in isolation.

CAP fieldWhat it should answerEvidence worth requesting
FindingWhat was observed, where and under which requirementThe original report reference and finding description
Root causeWhy the problem occurredA specific explanation that can be tested against records or site practice
ActionWhat will changeRevised process, repair record, payroll correction, training record or other relevant proof
Owner and dateWho is accountable and when it was dueA named role, completion date and any escalation where timing moved
Closure statusWhether closure was proposed, self-reported or independently verifiedFollow-up report, auditor confirmation or evidence suitable to the risk

Look closely at the tense. "Will install", "planned" and "in progress" describe future action. "Completed" is stronger only when it is supported by something a reviewer can examine. For a blocked exit, a dated photograph may be useful, though it does not show whether access remains clear every day. For a payroll issue, a single payslip may not demonstrate that the system changed across shifts and pay periods. Match the evidence to the finding.

Recurring CAPs deserve a separate note in the supplier file. Compare the wording, target dates and closure status across reports. If the same problem returns, the useful question is not whether a document says it was closed last time. It is what failed to hold the correction in place.

How do you read worker interview evidence?

Treat worker interviews as one part of the evidence, then compare them with records, site observations and the report's account of how interviews were conducted. Interviews can reveal a gap between a written policy and daily practice. They can also be limited by sample size, timing, language, trust and the conditions under which workers felt able to speak.

Sedex's SMETA process summary lists both group and individual worker interviews alongside the site tour and document review. That combination is the point: no single source should carry the entire conclusion.

Read this section for detail, not a perfect script. Note which groups were represented, whether interviews were individual or group-based, the language used where the report says so, and whether the interview evidence conflicts with records. A reported gap on overtime, deductions, recruitment fees, grievance access or treatment by supervisors needs the same disciplined follow-up as any other finding.

Uniformly positive answers do not prove that workers had nothing to raise. Nor does a difficult interview section automatically establish that every worker had the same experience. A useful reviewer asks whether the method gave the auditor a credible chance to hear a range of accounts, then tests material issues against payroll, attendance, personnel files and direct site follow-up.

How should subcontracting and production locations be checked?

Confirm the production location for each material step that matters to the order. A garment programme can involve fabric processing, printing, embroidery, washing, finishing, packing and garment assembly across more than one location. The compliance file should make clear which of those locations are approved for the work and which audit record supports each one.

Sedex describes SMETA as an assessment of a supplier site within the selected scope. It should not be read as evidence that every external workplace connected to a supplier has been inspected. Check the production plan alongside the report.

Production questionEvidence to keepReason for checking it
Where will the garment be made?Approved-site record with name and addressLinks the order to the audited facility
Are specialist processes elsewhere?Process list and the relevant site evidenceStops a main-site report being stretched across an unreviewed location
Has work moved since the audit?Revised production plan, audit status and approval recordIdentifies whether current evidence still applies
Is any outside work authorised?Supplier declaration, approval trail and applicable recordsMakes subcontracting visible before it becomes a shipping-stage discovery

This check is practical as well as compliance-led. A late change of wash unit or print route can affect sample matching, quality control and the critical path. Recording the site before bulk gives the sourcing, quality and compliance teams one reference when a change is proposed.

What belongs in a supplier compliance file?

Keep the complete record, not only a cover page or score. A later reviewer should be able to establish what was assessed, what was found, what changed and whether the planned production site remains the one supported by the evidence.

A complete file contains the full report and any certificate, the corrective action plan, closure evidence and follow-up reports, an approved production-site record, and an internal review note covering open points, the decision and next review date.

Keep versions together. Replacing an old report with a new PDF may make the folder look current, yet it removes the history needed to spot recurring findings. The previous report, CAP and follow-up provide the trend that a single result cannot show.

The same discipline belongs in the supplier agreement and onboarding process. Questions to settle in a sourcing agreement can help define who supplies evidence, who approves sites and how material changes are escalated.

Short FAQ

Is a good audit result enough to approve a production site?

No. Confirm the exact site, the audit scope, the date, open findings and closure evidence, then match those records to the planned production location.

Should a corrective action marked complete be treated as closed?

No. "Complete" may be the site's own status. Check what evidence supports it and whether the relevant scheme, auditor or compliance process has verified closure where that is needed.

Does a report cover subcontracted work?

Not automatically. Read the stated scope, then confirm the locations and processes that will be used for the order.

What is the most useful question to ask after reading the report?

Ask whether the document shows a current, relevant picture of the site proposed for production, including how material findings were resolved. That question keeps the review tied to the order.

The audit judgement to make

An audit report earns its place in a supplier decision when it is connected to a named site, a defined scope, readable findings and credible closure evidence. The headline result may help orient the review. It cannot carry the decision by itself.

Use the report to identify what must be checked next: an address mismatch, an open safety issue, a repeated payroll finding, an unverified CAP or a process that has moved outside the audited scope. That is how an audit becomes a useful control in a live production programme.

Share
START A CONVERSATION

Ready to source with confidence?

Send a brief and we'll reply within 24 hours, with a first sample in 4 to 10 days.

Get in Touch