# How to Read a Factory Compliance Audit Report | Surajmal

> Source: https://surajmal.com/blog/2026/04/how-to-read-a-compliance-audit

[SSL Newsroom](/blog) Compliance

# How to Read a Factory Compliance Audit Report

Kolkata · 08 APRIL 2026 ·By Surajmal Editorial Team·11 min read·Updated 11 AUGUST 2026

Published 8 April 2026

Read a compliance audit report from the site identity and scope upwards, then judge the findings and closure evidence before you give weight to its headline result. The report is useful evidence about a defined visit. It is not a transferable badge for a supplier account, a permanent statement about working conditions or a substitute for production follow-through.

That order of reading matters. An audit pack can contain a score, a certificate, a corrective action plan and several pages of detail. The headline is the quickest part to absorb, yet it usually tells the reviewer least about whether the document applies to the site that will make the order and whether open issues have been dealt with.

For example, Sedex states that neither SMETA nor Sedex membership is certification, and that SMETA has no pass or fail result. A report must therefore be read as the output of a named assessment, with its own scope and findings, not converted into a generic approval label. Our guide to [verifying sustainability claims](/blog/2025/05/verify-sustainability-claims) covers the same discipline for any supplier assertion.

## What should you check before reading the headline result?

Start by matching the report to the proposed production site. Record the facility's legal name, physical address, audit date, audit company, report reference and the scheme or customer programme shown on the cover. A supplier group name, trading name or invoice header can be broader than the site reviewed. The address is the control point.

Next, establish what document you have. A social-audit report, a certification document, a customer code assessment and a follow-up visit can all sit in the same folder. They do not carry the same meaning. Do not let the title on a cover page do the comparison for you.

Check first

What to record

Why it matters

Facility identity

Legal name, site address and any site code

Confirms the document belongs to the location proposed for production

Document type

Audit report, certificate, follow-up or corrective action plan

Prevents a supporting document being treated as the full assessment

Assessment date

Visit date and report issue date

Shows how current the evidence is

Audit company and scheme

Named auditor, methodology and report number

Makes the document traceable if a question arises

Production connection

Style, purchase order or approved-site record

Connects compliance evidence to the order, not only to the supplier account

If any of these items does not line up, pause the review. A good result at a different address does not answer the question of conditions at the intended site. The mismatch may have a straightforward explanation, such as a site move or a separate processing location, but it still needs a clear record before production is released.

## How do you tell what the audit report actually covers?

Read the scope statement before the findings list. It should identify the site, the activities examined, the workforce population, the date of the visit and the records reviewed. Some reports cover one production unit. Others include canteen, dormitory, warehouse or shared services. The scope is the boundary around every conclusion that follows.

In SMETA, the chosen two-pillar or four-pillar scope affects the subjects assessed. Sedex describes the audit as a review of site documentation, records, policies, processes, operations, workers and conditions across the selected scope. That makes the scope page as important as the summary page.

Scope question

What a useful answer looks like

What needs follow-up

Which site was visited?

A complete physical address and identifiable facility name

A group name, city only or an address that differs from the production plan

What work took place there?

Activities and departments included in the visit

A report that gives no indication of whether relevant garment processes were covered

Who was in scope?

Workforce figure or description, shifts and employment categories where stated

No indication of temporary, agency or migrant-worker coverage where those groups are relevant

What period did records cover?

Dates for payroll, hours and other sampled records

A report date with no record-review period

What did the audit exclude?

Clear limitations, inaccessible areas or unavailable records

A vague scope statement that leaves a material part of the operation unclear

Scope is not a technical footnote. If a packing facility, wash unit or homeworking arrangement contributes to the product, determine whether it sits inside the report's stated boundary. Where it does not, treat it as an additional due-diligence question, not as an issue silently covered by the main-site report.

## How should findings be prioritised?

Read the highest-severity findings first, then look for patterns. A long list of low-level administrative gaps needs attention, but it should not take the same place in a sourcing decision as a finding involving immediate life safety, coercion, child labour indicators, wage practices or serious working-hours concerns.

The report's severity labels are useful because they reflect its methodology. Keep the original label in your file. Then add an operational judgement: what could happen if the issue is real, how much of the workforce it could affect, whether the proposed production schedule is exposed and what evidence would resolve the uncertainty.

Finding pattern

Review question

Sensible next action

Immediate safety concern

Could workers face harm before a planned production start?

Obtain evidence of correction and confirm whether independent verification is needed before release

Wage or hours discrepancy

Do records, worker accounts and payroll evidence point to the same practice?

Request the corrective-action record and a defined sample of follow-up evidence

Missing policy or training record

Is the control absent, or is the evidence incomplete?

Check the underlying procedure, attendance record and how it is used on the floor

Repeated finding from a prior report

Has the issue persisted through more than one review cycle?

Compare prior and current CAPs, then ask for cause, owner and verified closure evidence

Isolated housekeeping issue

Does it indicate a wider failure in maintenance or supervision?

Check the area, recurrence and whether the correction is visible in routine inspections

Do not reduce a finding to a colour code. A recurring issue may be more revealing than a single high-level observation closed promptly. Conversely, one severe issue can change the decision even when the rest of the report is strong. The task is to understand the condition behind the label and the evidence behind the proposed fix.

## What does a corrective action plan tell you?

A corrective action plan, often called a CAP, records the route from a finding to a proposed correction. It is a working document, not proof that the correction happened. The difference is easy to lose when a plan contains a target date, an owner and a reassuring statement such as "training completed".

Sedex describes SMETA as providing a Corrective Action Plan to address issues found in the audit. The plan should be read beside the original finding and any follow-up report, not in isolation.

CAP field

What it should answer

Evidence worth requesting

Finding

What was observed, where and under which requirement

The original report reference and finding description

Root cause

Why the problem occurred

A specific explanation that can be tested against records or site practice

Action

What will change

Revised process, repair record, payroll correction, training record or other relevant proof

Owner and date

Who is accountable and when it was due

A named role, completion date and any escalation where timing moved

Closure status

Whether closure was proposed, self-reported or independently verified

Follow-up report, auditor confirmation or evidence suitable to the risk

Look closely at the tense. "Will install", "planned" and "in progress" describe future action. "Completed" is stronger only when it is supported by something a reviewer can examine. For a blocked exit, a dated photograph may be useful, though it does not show whether access remains clear every day. For a payroll issue, a single payslip may not demonstrate that the system changed across shifts and pay periods. Match the evidence to the finding.

Recurring CAPs deserve a separate note in the supplier file. Compare the wording, target dates and closure status across reports. If the same problem returns, the useful question is not whether a document says it was closed last time. It is what failed to hold the correction in place.

## How do you read worker interview evidence?

Treat worker interviews as one part of the evidence, then compare them with records, site observations and the report's account of how interviews were conducted. Interviews can reveal a gap between a written policy and daily practice. They can also be limited by sample size, timing, language, trust and the conditions under which workers felt able to speak.

Sedex's SMETA process summary lists both group and individual worker interviews alongside the site tour and document review. That combination is the point: no single source should carry the entire conclusion.

Read this section for detail, not a perfect script. Note which groups were represented, whether interviews were individual or group-based, the language used where the report says so, and whether the interview evidence conflicts with records. A reported gap on overtime, deductions, recruitment fees, grievance access or treatment by supervisors needs the same disciplined follow-up as any other finding.

Uniformly positive answers do not prove that workers had nothing to raise. Nor does a difficult interview section automatically establish that every worker had the same experience. A useful reviewer asks whether the method gave the auditor a credible chance to hear a range of accounts, then tests material issues against payroll, attendance, personnel files and direct site follow-up.

## How should subcontracting and production locations be checked?

Confirm the production location for each material step that matters to the order. A garment programme can involve fabric processing, printing, embroidery, washing, finishing, packing and garment assembly across more than one location. The compliance file should make clear which of those locations are approved for the work and which audit record supports each one.

Sedex describes SMETA as an assessment of a supplier site within the selected scope. It should not be read as evidence that every external workplace connected to a supplier has been inspected. Check the production plan alongside the report.

Production question

Evidence to keep

Reason for checking it

Where will the garment be made?

Approved-site record with name and address

Links the order to the audited facility

Are specialist processes elsewhere?

Process list and the relevant site evidence

Stops a main-site report being stretched across an unreviewed location

Has work moved since the audit?

Revised production plan, audit status and approval record

Identifies whether current evidence still applies

Is any outside work authorised?

Supplier declaration, approval trail and applicable records

Makes subcontracting visible before it becomes a shipping-stage discovery

This check is practical as well as compliance-led. A late change of wash unit or print route can affect sample matching, quality control and the critical path. Recording the site before bulk gives the sourcing, quality and compliance teams one reference when a change is proposed.

## What belongs in a supplier compliance file?

Keep the complete record, not only a cover page or score. A later reviewer should be able to establish what was assessed, what was found, what changed and whether the planned production site remains the one supported by the evidence.

A complete file contains the full report and any certificate, the corrective action plan, closure evidence and follow-up reports, an approved production-site record, and an internal review note covering open points, the decision and next review date.

Keep versions together. Replacing an old report with a new PDF may make the folder look current, yet it removes the history needed to spot recurring findings. The previous report, CAP and follow-up provide the trend that a single result cannot show.

The same discipline belongs in the supplier agreement and onboarding process. [Questions to settle in a sourcing agreement](/blog/2025/01/sourcing-agreement-questions) can help define who supplies evidence, who approves sites and how material changes are escalated.

## Short FAQ

**Is a good audit result enough to approve a production site?**

No. Confirm the exact site, the audit scope, the date, open findings and closure evidence, then match those records to the planned production location.

**Should a corrective action marked complete be treated as closed?**

No. "Complete" may be the site's own status. Check what evidence supports it and whether the relevant scheme, auditor or compliance process has verified closure where that is needed.

**Does a report cover subcontracted work?**

Not automatically. Read the stated scope, then confirm the locations and processes that will be used for the order.

**What is the most useful question to ask after reading the report?**

Ask whether the document shows a current, relevant picture of the site proposed for production, including how material findings were resolved. That question keeps the review tied to the order.

## The audit judgement to make

An audit report earns its place in a supplier decision when it is connected to a named site, a defined scope, readable findings and credible closure evidence. The headline result may help orient the review. It cannot carry the decision by itself.

Use the report to identify what must be checked next: an address mismatch, an open safety issue, a repeated payroll finding, an unverified CAP or a process that has moved outside the audited scope. That is how an audit becomes a useful control in a live production programme.

Related pages

-   [Certifications→](/sustainability)

Share[](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fsurajmal.com%2Fblog%2F2026%2F04%2Fhow-to-read-a-compliance-audit) [](https://twitter.com/intent/tweet?url=https%3A%2F%2Fsurajmal.com%2Fblog%2F2026%2F04%2Fhow-to-read-a-compliance-audit&text=How%20to%20Read%20a%20Factory%20Compliance%20Audit%20Report) [](https://wa.me/?text=How%20to%20Read%20a%20Factory%20Compliance%20Audit%20Report%20https%3A%2F%2Fsurajmal.com%2Fblog%2F2026%2F04%2Fhow-to-read-a-compliance-audit) [](mailto:?subject=How%20to%20Read%20a%20Factory%20Compliance%20Audit%20Report&body=https%3A%2F%2Fsurajmal.com%2Fblog%2F2026%2F04%2Fhow-to-read-a-compliance-audit)

SSL

Surajmal Editorial Team

The Surajmal Editorial Team writes from inside a working textile export house in Kolkata, drawing on experience manufacturing garments, fabrics, and yarns for global retail buyers since 1968. Every article is reviewed by practitioners who source, sample, and ship the products they write about.

On this page

-   [What should you check before reading the headline result?](#what-should-you-check-before-reading-the-headline-result)
-   [How do you tell what the audit report actually covers?](#how-do-you-tell-what-the-audit-report-actually-covers)
-   [How should findings be prioritised?](#how-should-findings-be-prioritised)
-   [What does a corrective action plan tell you?](#what-does-a-corrective-action-plan-tell-you)
-   [How do you read worker interview evidence?](#how-do-you-read-worker-interview-evidence)
-   [How should subcontracting and production locations be checked?](#how-should-subcontracting-and-production-locations-be-checked)
-   [What belongs in a supplier compliance file?](#what-belongs-in-a-supplier-compliance-file)
-   [Short FAQ](#short-faq)
-   [The audit judgement to make](#the-audit-judgement-to-make)

More from the newsroom

-   [Compliance · 10 min Saudi SABER Textile Conformity: An Apparel Import Guide](/blog/2026/08/saudi-saber-textile-conformity-guide)
-   [Compliance · 11 min US Apparel Labelling: Fibre Content, Country of Origin and Care](/blog/2026/08/us-apparel-labelling-requirements)
-   [Compliance · 10 min Forced-Labour Due Diligence: Cotton Traceability and What Buyers Must Prove](/blog/2026/08/forced-labour-due-diligence-cotton-traceability)

START A CONVERSATION

## Ready to source with _confidence?_

Send a brief and we'll reply within 24 hours, with a first sample in 4 to 10 days.

[Get in Touch→](/contact)
