BSCI and Sedex for Bag Suppliers: Audits Explained Simply

What Are BSCI and Sedex, in the Terms a Buyer Needs?

BSCI is a system run by a business association, under which member companies commission social audits of production sites against a code of conduct. Sedex is a platform on which sites upload audit data, most commonly in a four-module audit methodology. Both produce a report on a site, held on a system, with a date and a set of findings. Neither produces a certificate that a product is compliant.

For a buyer the useful framing is that these are document systems, not approval marks. What you are buying into is access to a report about a place, and the value of that report depends entirely on whether the place named in it is the place making your goods, and on how recently it was written.

How Do You Ask for the Document?

Ask for three specific things rather than for evidence of social compliance. The audit report itself, in full rather than a summary. The site identifier used on the platform, which is what lets you find and verify it. And the list of sites and processes covered, including any subcontracted work. Those three requests produce a usable file; a request for a certificate produces a logo.

Ask early, at quotation rather than at packing, because a site that has not been audited recently needs an audit cycle to produce a current report, and that cycle does not compress because a shipment is ready. Where the report exists but is old, the question to ask is when the next audit is scheduled rather than whether the existing one can be reissued.

Full audit report

Not a summary, not a score card

Platform site identifier

The reference used to find it on the system

Site name and address

To compare against where your goods are made

Audit date and type

Initial, follow-up or re-audit

Scope of the audit

Which buildings, processes and worker groups

Subcontractor list

Which processes are performed elsewhere

Findings and corrective plan

Open items, owners and target dates

How Do You Verify a Report Is Real?

On the platform. Both systems provide a route to confirm that a report exists and to whom it belongs, normally through the site identifier or through a sharing invitation. A PDF sent by email is not verification, because a PDF can be edited and does not show whether the report is current, withdrawn or superseded. Run the identifier.

Then match four fields against your own records: the legal entity, the site address, the audit date, and the scope. The address is the one that catches people, because a group can have several sites and the audited one is not always the one making the goods. Where the address on the report differs from the address on your purchase order, ask which site your order will be made at before you proceed.

How Long Does a Report Stay Useful?

An audit report is a snapshot with a date, not a licence with a term. What expires in practice is not the document but its acceptability: most customers set a window, and audits run in cycles in which an initial audit is followed by a re-audit after a period set by the system. A report that was acceptable when issued becomes old rather than invalid, and the question is always what window your customer recognises.

Two periods matter and they are different. The audit cycle determines when the next audit is due. The customer window determines when the current report stops being accepted. Where the two do not line up, ask for the audit schedule in writing, because the gap between them is a known cause of an onboarding submission being returned.

Does the Audit Cover Subcontracted Work?

Only if the subcontracted site is within the scope of the audit. This is the most common gap in a bag programme, because bags are assembled from processes that frequently sit in different places: cutting and sewing in one site, dyeing or printing in another, welding or coating in a third, and hardware plating somewhere else entirely. An audit of the assembly site says nothing about the others.

Ask for the subcontractor list and compare it against the processes your construction actually needs. Where a process is subcontracted, ask whether that site is audited, under which system, and with what date. Where it is not, the honest position is that part of your supply chain is unexamined, and that is a decision to record rather than a gap to ignore.

How Do You Read the Findings?

Findings are normally graded and each carries a corrective action with an owner and a target date. Read the open items rather than the summary grade, because the grade tells you how the audit went overall while the open items tell you what is actually wrong. A report with a good grade and an open item on working hours is more informative than a grade alone.

Ask for the corrective action plan and, where it is available, evidence of closure. Where a finding is open, the useful questions are what has been done, when it will be verified, and whether the verification will produce a document you can see. That is the difference between a plan and a closing.

What Does an Audit Report Not Tell You?

It says nothing about the product. No finding in it bears on fabric strength, seam behaviour, colour consistency, chemical content or dimensional accuracy. Those are evidenced by physical and chemical testing and by inspection, and none of them can be inferred from a social audit. Buyers who read a good audit as evidence of a good product are reading two unrelated documents as one.

It also says nothing about capacity, delivery reliability or financial standing. Those are commercial questions with their own evidence: a production calendar, a capacity statement, an inspection record. Keeping the audit in its own lane is what stops it being asked to carry weight it was never built to carry.

How Do You Build This Into the Order Cycle?

Ask at quotation, verify before the order is placed, and re-check at each reorder. The first request tells you whether a current report exists. The verification tells you whether it describes the site that will make your goods. The re-check catches the drift that happens when a report ages, a subcontractor changes, or production moves to a second building.

Put the re-check on the same calendar as the reorder. Where a programme runs seasonally, one check per season is normally enough, provided nothing changed in between. Where it runs continuously, tie the check to the audit cycle rather than to a fixed date, so the question is always asked before the report stops being accepted rather than after.

Record what you checked and when, in the same place as the inspection record. A one-line note — identifier, site, date, scope, verified by whom — is enough, and it is what turns a folder of PDFs into an evidence trail. When a customer asks eighteen months later how you satisfied yourself that the site was audited, the note is the answer rather than a memory.

What Does Buyer-Led Versus Seller-Led Mean Here?

It determines whose audit you are reading. Some audits are commissioned by the buyer that trades with the site, some by the site itself, and some by a third party with no commercial relationship to either. The distinction is worth knowing because it affects who can see the report, who owns it, and how quickly a follow-up can be arranged.

For a buyer the practical question is access rather than ownership. Ask which party commissioned the audit and whether the report can be shared with you through the platform. Where a report was commissioned by another customer, there may be no route to share it with you at all, which is a commercial fact worth discovering at quotation rather than at onboarding.

Where you intend to rely on the report for your own customer submission, ask for a sharing invitation in your own name. That gives you direct access, lets you re-check the report later without asking anyone, and means the evidence in your file is evidence you can actually produce rather than a screenshot someone sent you.

How Do You Handle a Site With No Current Report?

Decide early, because the options have very different calendar costs. The first is to wait for a scheduled audit, which costs nothing but may not land inside your onboarding window. The second is to ask for an audit to be brought forward, which costs a fee and an audit slot. The third is to place the order at a site that already holds a current report, which costs a change of plan but no calendar time at all.

Where a customer deadline is fixed, the second option is usually the only one that fits, and the question to settle in advance is who pays for it. Write the answer into the purchase clause, because an audit brought forward for one customer's deadline is a commercial negotiation rather than a compliance task, and it is easier to settle before anyone is under time pressure.

What Should Go Into the Purchase Clause?

Name the system, the site and the notice requirement. A clause that requires the seller to maintain a current audit under a named system at the named production site, to supply the report and the platform identifier on request, and to give written notice before production moves or a subcontractor changes, is enforceable. A clause that requires ethical production is a sentiment.

Add the sharing route. Require the seller to share the report through the platform rather than as a file, because sharing is what lets you verify it and re-check it later without asking again. That one requirement is what makes the difference between holding a document and holding a position.

And state what happens when the report ages out. Whether the seller must re-audit, whether you accept a scheduled audit date instead, and who carries the cost of an audit brought forward to meet a customer deadline — those are the questions that get argued about, and they cost little to settle in advance.

Finally, name the recheck trigger in the same clause. A requirement to re-verify the report at each reorder, and to give notice before production moves or a subcontractor changes, turns a one-off check into a standing control. Without it the first verification is accurate once, and every season after it inherits a document nobody has looked at since.

Frequently Asked Questions

People Also Ask