Audit Prep for Procurement Officers: Documenting Chemical Compliance and Vendor Qualification

 

For procurement officers in the chemical and pharmaceutical sectors, audit preparation is not a last-minute scramble. It is the continuous, disciplined maintenance of a defensible documentation trail. When regulators or customers arrive, they are not merely checking that documents exist. 

They are verifying that your organisation has exercised control over its supply chain—that you know what you purchased, from whom, and under what conditions, and that you can prove it.

The Documentation Foundation: COA, SDS, and TDS

Every chemical procurement audit begins with three core documents. The Certificate of Analysis (COA) reflects the test results of a specific batch, confirming whether the material met procurement specifications. Buyers should verify that the COA corresponds to the actual batch number and pay close attention to key indicators, including content, purity, moisture, pH, heavy metals, and residual solvents. A single clean COA is useful, but multiple lots showing stable parameters are far more meaningful.

The Safety Data Sheet (SDS) is the hazard document. It communicates composition, physical-chemical properties, hazard classification, safe handling and storage, emergency measures, and disposal requirements. Under EU REACH, SDSs must follow a strict 16-section format, and updated requirements entered into force in 2023. For mixtures placed on the EU market, the Unique Formula Identifier (UFI) must now appear in Section 1.

The Technical Data Sheet (TDS) serves a different purpose. While SDS addresses safety, TDS addresses product characteristics, application scope, recommended dosage, and physicochemical parameters. An SDS cannot substitute for a TDS in a specification dispute. Auditors will look for consistency across all three: product name, grade, CAS number, and hazard classifications should align. If they do not, that mismatch deserves investigation before the order is approved.

Vendor Qualification: Matching Depth to Risk

Supplier qualification is not a one-time paperwork exercise. It is a structured framework that establishes whether a supplier can consistently provide materials meeting your specifications. The depth of assessment should match the risk of the material. For lower-risk commodities, a desktop review of questionnaires, certifications, and COAs may suffice. For higher-risk materials—those with complex supply chains or intended for vulnerable populations—a focused on-site audit of quality and analytical systems is warranted.

Before any audit, request and review key documents in advance. This includes the supplier's quality manual, relevant procedures, internal audit schedule, and recent CAPA status. For critical raw materials, buyers should require multi-batch COAs and consider third-party testing from an ISO 17025-accredited laboratory rather than relying solely on the supplier's in-house results.

The qualification file must follow the batch. Batch traceability should connect the purchase order, supplier lot number, COA, specification, packaging label, and receiving record. If a problem emerges later, the buyer must be able to reconstruct what was ordered, what was shipped, what was tested, and who approved it.

When Data Is Unavailable: Documenting Good-Faith Efforts

One of the most common audit challenges arises when suppliers cannot or will not provide complete regulatory data, particularly regarding restricted substances or full composition disclosure. The instinct may be to wait for perfect information. The more defensible approach is to proceed with documented assumptions.

Where data is genuinely unavailable, procurement officers should document a worst-case or assumed-presence position for known substances of concern. This captures risk rather than ignoring it. The goal is an auditable trail showing reasonable, repeated, good-faith efforts to obtain data. This is itself a defensible compliance posture when regulators or customers ask questions.

Escalation should proceed through the commercial relationship and contractual disclosure clauses. Where a supplier persistently fails to provide required documentation, qualifying alternative suppliers becomes a risk-management imperative, and every effort to obtain data should be documented in the supplier file.

Preparing for the On-Site Audit

A successful on-site audit begins weeks before arrival. Confirm the audit scope and objectives with the supplier, and send the audit plan at least two weeks in advance. The audit team should review previous findings and CAPA status before the visit. On site, the focus should be on verifying that paper claims match operational reality. Key areas include document control, record retention, change control, and the supplier's own incoming material controls.

For procurement officers, the audit is not merely a compliance formality. It is an opportunity to verify that the supplier's quality system can actually deliver what the documentation promises. A mature CAPA system with visible open items is a better sign than a suspiciously empty log . The same principle applies to the entire documentation package: completeness, currency, batch-relevance, and internal consistency matter more than volume.