What an Annual Audit Actually Catches
An audit answers one question: what did this factory look like on the day we visited? A good auditor verifies the production line is real, the workforce is present, the equipment is maintained, and the quality system exists on paper and in practice. That's valuable, and you shouldn't stop doing it.
But here's what it can't do. It can't tell you the factory changed owners two months ago. It can't tell you their UL file lapsed last week. It can't tell you their shipment volume has been falling for three straight quarters. Those are the things that actually take a buyer down, and none of them announce themselves during an audit window.
The Gaps Where Risk Actually Lives
The problem with a point-in-time check isn't the check. It's the 364 days between checks.
What Happens Between Audits
| Risk | How it shows up | How long it can hide |
|---|---|---|
| Certification lapse | UL/CE/ISO file not renewed, or quietly switched to a cheaper body | Up to a year, until the next audit |
| Ownership change | Factory sold, merged, or re-registered under a new name | Indefinitely, if no one checks |
| Credit deterioration | New litigation, missed payments, declining export volume | Months, until an order stalls |
| Quality drift | Defect rate creeping up order over order | Until someone plots the data |
Look at the last row. You already have the data to catch quality drift. It's in your own order history. Most buyers just never plot it, so a 1% defect rate that became 4% over six months looks like noise instead of a trend.
The Signals That Update Daily
Continuous monitoring sounds like a software purchase. It isn't, at least not at first. It's a habit of watching a handful of signals that update on their own schedule.
- Certification expiry. Fixed dates, checkable automatically. A lapsed UL, CE, or ISO file is a monthly signal you can catch without leaving your desk.
- Customs and shipment records. Update per shipment. Falling volume is the earliest public sign of a supplier in trouble.
- Financial and legal filings. Registered capital changes, new litigation, and the 失信被执行人 (dishonest judgment debtor) list all update as they're filed.
- Your own order data. Lead time, defect rate, and responsiveness, logged per order. This is the cheapest signal and the one buyers ignore most.
None of these require a site visit. Three of the four are free or near-free to check. The discipline is the hard part, not the data.
Building an Always-On Stack
The right model isn't monitoring instead of audits. It's monitoring in front of audits, so each visit investigates something specific instead of confirming the obvious.
- Layer one: always-on data. The four signal categories above, checked on a schedule, flagging anomalies automatically or by habit.
- Layer two: targeted audit. When a signal fires (a lapsed certification, a court filing, a volume drop), that's when you schedule the on-site visit, with a specific question to answer.
- Layer three: human judgment. The person who walks the floor still decides. Data tells you where to look; it doesn't replace the eyes and ears.
Start with a spreadsheet and a calendar. List your top 20% of suppliers by spend, assign each a set of data sources, and put a recurring check on the calendar. Log your own order performance in the same sheet. When you have hundreds of suppliers, tooling earns its keep; at any scale, the habit is the thing that saves you.
Common Questions from Buyers
Why isn't an annual audit enough anymore?
Which supplier signals actually update daily or monthly?
Do I still need on-site audits if I have continuous monitoring?
How do I start continuous monitoring without a big software budget?
Monitor and source from verified manufacturers on Compare2Best.