Packaging Supplier Audit: 6 Real On-Site Actions and 3 Questions BSCI/SEDEX Auditors Never Ask Directly
Last week, a packaging OEM owner called me: "A French client is sending an auditor tomorrow, the checklist says BSCI audit, 4 hours long, I'm not confident right now, what do you think they'll focus on?"
I helped him prepare for 2 hours, and the audit went smoothly the next day. He later asked me: "How did you know they'd ask these things?" I said: "Auditors don't follow the checklist. They follow the real actions. They've read the checklist. What they want to see is whether you actually did it, whether what you did is real, and whether you can recover when something goes wrong."
This article breaks down the 6 categories of real BSCI/SEDEX audit actions plus 3 questions they "never ask directly but will definitely check."
Audit Action 1: Real Signatures on Employee Contracts and Social Insurance
The first thing an auditor almost always does is randomly pick 3-5 employees and check their labor contracts and social insurance.
How it works in practice: the auditor pulls frontline workers (not management) from the workshop, asks them one-on-one: "When did you join? Did you sign a contract? What day of the month is payroll? Do you have social insurance?" then cross-checks against the contracts, pay slips, and social-insurance payment records in the HR file.
Real failure points: many print shops' labor contracts are "signed on behalf" or "back-dated". An employee actually joined in 2023 but the contract says 2022; social insurance is paid on the minimum base rather than on the actual salary. When the auditor compares the pay slip with the social-insurance contribution base, a big gap earns an immediate "non-conformance."
Last year, a folding-carton OEM client was rejected by a BSCI audit, not because wages were low, but because the social-insurance contribution base was 60% lower than actual wages. An employee earning 6,000 RMB/month had insurance paid on a 3,000 base. The auditor asked one question: "Why is the employee's social insurance paid on a 50% base?" The owner had no answer.
Compliance actions for a print shop: labor contracts for all employees + social insurance for all employees + contribution base roughly aligned with actual salary (within 10% allowed). If you can't get full coverage yet, prioritize key positions + employees with 5+ years of seniority — even if the auditor randomly picks them, you can answer cleanly.
Audit Action 2: Real Drills for Workshop Safety
The second auditor action is walking the workshop, observing the site, and asking workers. They don't directly ask "do you have fire drills?" Instead they: 1) check the inspection date label on fire extinguishers; 2) check whether evacuation routes are clear; 3) check whether flammables are stacked in the workshop; 4) randomly ask a worker "if there's a fire in the workshop, how do you evacuate?"
Real failure points: many print shops have expired fire extinguishers, blocked evacuation routes with goods, and workers who can't recite the evacuation route. These three are the easiest to expose.
In the prep I did for a client last week, one item was: have the workshop manager stick inspection date labels on every fire extinguisher, clear all clutter from evacuation routes, and have the on-duty workers rehearse the evacuation route. The next day when the auditor walked the workshop — extinguishers, routes, evacuation — all checked, no deductions.
Audit Action 3: Real Records of Working Hours and Overtime
The third auditor action is checking working-hour records. They look at: 1) the past 6 months of daily clock-in times for each employee; 2) whether overtime pay is calculated per labor law; 3) whether forced overtime records exist; 4) whether any employee worked 7 consecutive days (a labor-law violation).
Real failure points: many print shops have incomplete working-hour records — some months present, some missing; some employees recorded, others not; overtime paid as a flat amount rather than at the legal multipliers (1.5x on weekdays, 2x on weekends, 3x on public holidays).
Compliance actions: clock-in/clock-out for all employees (fingerprint/face), overtime pay calculated at legal multipliers, no more than 6 consecutive working days. For small print shops (under 50 people), paper attendance sheets + employee signatures are acceptable, but you need full coverage and 6 continuous months.
Audit Action 4: Real Bank Flows for Wage Payment
The fourth auditor action is cross-checking wage payment evidence. They look at: 1) whether pay slips match bank statements; 2) whether wages are ever delayed (more than 1 week past pay day); 3) whether wages are withheld (fines, deposits, etc.); 4) whether wages fall below the local minimum-wage standard.
Real failure points: many print shops pay wages in cash (especially for temporary workers), with no bank trail, and the auditor immediately issues a non-conformance. Or the pay slip says 5,000 but the bank statement shows 3,500 (with deductions for meals, uniform fees, etc.) — the auditor asks "why doesn't the pay slip match the bank flow?" and the owner has no answer.
Compliance actions: all wages paid by bank transfer; pay slip amount = bank statement amount ± reasonable differences (tax, employee's social-insurance portion). If you must deduct for meals etc., spell out the deduction items and amounts clearly in the labor contract.
Audit Action 5: Real Ledgers for Chemical Management
The inks, glues, and cleaning solvents a packaging factory uses are all chemicals. The auditor checks: 1) whether a chemical inventory with MSDS (Material Safety Data Sheets) exists; 2) whether chemical storage rules are in place; 3) whether staff have PPE (masks, gloves, ventilation); 4) whether the chemical store is locked and uses secondary containment.
Real failure points: many print shops have incomplete MSDS, ink drums sitting in the workshop without secondary containment, and workers not wearing masks. When the auditor sees these, they issue an immediate "health and safety non-conformance."
Compliance actions: every chemical has an MSDS (request from the supplier) + chemical store locked + secondary containment (leak-proof pallets) + records of PPE distribution to employees.
Audit Action 6: Real Disposal of Environmental Compliance and Waste
The last auditor action is checking environmental compliance and waste disposal. They look at: 1) whether a discharge permit exists; 2) whether a hazardous-waste disposal contract is in place (for waste ink drums, waste glue, waste solvent); 3) whether solid waste is sorted; 4) whether VOC emissions are monitored.
Real failure points: many print shops keep using expired hazardous-waste contracts, have no separate section for the hazardous-waste store, and have incomplete hazardous-waste transfer manifests. When the auditor reviews the transfer manifests, missing ones in the past 6 months trigger an immediate non-conformance.
Compliance actions: hazardous-waste contracts renewed every 1-3 years; hazardous-waste store in a separate, locked section; transfer manifests kept for 5 years; VOC monitoring done at the frequency required by the local ecology and environment bureau.
The 3 Questions Auditors "Never Ask Directly but Will Definitely Check"
Now that the 6 audit actions are covered, here are 3 questions auditors never ask directly but will definitely check.
Question 1: "The real work intensity of workers." They don't directly ask workers "are you tired?" Instead they look at real-time workshop CCTV (if the factory has it), employee clock-out times, and the injury log. If they find continuous overtime or frequent injuries, they dig in.
Question 2: "How you manage your suppliers." They don't directly ask "have your suppliers been audited?" Instead they ask "Who is your paper supplier? Have they had a social-compliance audit?". If the print shop can't answer whether its suppliers have been socially audited, an "inadequate supply-chain management" non-conformance will be issued.
Question 3: "Do you have freedom of association?" They don't directly ask "can workers join a union?" Instead they check whether the employee handbook contains any clause prohibiting workers from forming a union. If the handbook says "workers are prohibited from striking or from collective bargaining," that's an immediate non-conformance (a violation of BSCI's freedom-of-association principle).
If any of these 3 questions goes wrong, the audit result is usually "zero tolerance" — you can't remediate, and you can only reapply 6 months later.
2-Week Pre-Audit Checklist
Finally, here is a 2-week pre-audit checklist, ordered by importance:
1) Full employee contract coverage + social-insurance contribution base aligned with wages (most important, 30% of the score)
2) Complete chemical MSDS collection + storage rules (20%)
3) 6 months of continuous working-hour records + overtime paid at legal multipliers (20%)
4) All wages paid by bank transfer + pay slips matching bank statements (15%)
5) Evacuation routes clear + fire extinguishers in date + workers can recite the evacuation route (10%)
6) Hazardous-waste contract valid + manifests complete (5%)
Get the first 3 right and the audit will basically pass. The last 3 are bonus points — done well, they can push the auditor to a higher rating.
Further Reading
First-Time Custom Gift-Box Procurement: A 6-Week Process Map + the 3 Nodes Owners Should Gate
Packaging-Box Transit Damage Rate Too High? 8 Concrete Improvements Across 3 Stages
5 Common Errors in Gift-Box Die-Line Drawings + 5 Self-Checks Before Sampling
FAQ
What is the difference between BSCI and SEDEX audits?
BSCI (Europe) is a supply-chain social-compliance audit led by European retailers, using the BSCI Code of Conduct. SEDEX (global) is a multi-industry social-compliance platform using the SMETA audit method. The two focus slightly differently — BSCI emphasizes European labor law, while SEDEX is more flexible and general. Brand clients usually accept only one of the two, so print shops must clarify which one the client requires.
Is 2 weeks enough to prepare for an audit?
For a first-time audit, 2 weeks of prep can only achieve "basic compliance." To score high, allow 2-3 months. For a re-audit, 2 weeks is enough for a focused patch-up (updating extinguishers, back-filling contracts, etc.), but the basics must be in place year-round.
If the audit fails, how soon can I re-apply?
BSCI: 3-6 months after remediating major non-conformances. SEDEX: 30 days to 6 months, depending on the non-conformance grade. For zero-tolerance items (child labor, forced labor, serious safety hazards), no re-audit is allowed within 6 months.
For a small print shop (under 20 people), will the audit be tougher?
On the contrary, small print shops are usually subject to simplified audits, with man-days reduced from 1 day to 0.5 day. But the basics (contracts, social insurance, working hours, wages) are not simplified — they must be in place.
Before the auditor arrives, should we "coach" employees on how to answer?
This is a red line — absolutely not. Once the auditor detects that an employee has been "trained" to answer, you will be issued a "deceptive audit" non-conformance and blacklisted across the industry; all BSCI/SEDEX clients will reject you. The correct approach is <strong>to stay compliant year-round and let employees speak authentically</strong>.
After passing the audit, how long is the certificate valid? Is a re-audit required every year?
BSCI reports are typically valid for 1-3 years, depending on the audit grade: A = 3 years, B = 2 years, C = 1 year. SEDEX reports are valid for 1 year. Reports must be updated every year, and clients will ask for the latest version.
📚 📚 Related Recommendations
Need a Custom Packaging Solution?
Learn more about packaging, or consult directly for a custom solution and quote
