Auditing a CNC Supplier: What to Check During an On-Site or Virtual Factory Visit
Auditing a CNC Supplier: Why a Structured Factory Visit Pays Off
Choosing a precision machining partner is one of the highest-risk decisions in parts procurement. Once you commit to a supplier and ramp into production, switching costs become substantial: re-prototyping, tooling and fixture transfer, and rebuilding your quality system from scratch. Independent inspection data makes the risk concrete: across 20,000+ third-party inspections in 45 countries in 2025, 28% of production lots failed their first inspection, and 16% of re-inspected lots failed again on the same defects. Those numbers do not come from brochure photographs. They come from what is actually happening on factory floors.
A factory visit without a checklist is a tour. A tour tells you the workshop is clean and the machines are running. A structured audit tells you whether the supplier can make your parts to print, on time, every time — and that is the difference between a vendor and a production partner. This guide walks through everything you should verify during an on-site or virtual CNC factory audit, from pre-visit document review to a 20-point scoring system you can reuse for every supplier you evaluate.
What Is a CNC Supplier Audit?
A CNC supplier audit is a structured, evidence-based evaluation of a machining supplier's quality system, equipment, process control, metrology, and business practices. It follows the same logic whether it happens in person or over a live video call: define the scope, request documents, walk the floor, verify claims with evidence, score the results, and follow up on gaps.
An audit is fundamentally different from a sales visit. In a sales visit, the supplier shows you what it wants you to see. In an audit, you pick the machines, the records, and the material lots — and you check whether documented procedures match real shop-floor practice. Industry audit experience supports this caution: 68% of supplier audits in 2025 found gaps between documented procedures and what was actually practiced on the floor.
Key Benefits of a Structured Supplier Audit
Running a disciplined audit before you place a production order protects both your cost and your brand. Here is what a well-executed audit delivers:
Lower Cost of Poor Quality
Supplier-driven defects can represent 15-25% of total procurement costs in high-risk precision categories. External failures alone — defects found after delivery — typically cost 20-35% of order value. Most of this is avoidable with verification.
Fewer Defect Disputes
Certified and audited facilities measurably perform better: ISO 9001 certified facilities report about 60% fewer defect-related disputes, and a standardized supplier quality assurance protocol reduced post-delivery issues by 73% across 500+ analyzed orders.
Better Process Capability
Top-tier audited machining suppliers hold first-production-run defect rates to 0.5-1.5%, while unaudited average suppliers run 3-7% — a five-to-six-fold difference. The gap is not geography; it is audit discipline and quality investment.
Supply Chain Resilience
An annual re-audit cycle tracks equipment updates, personnel turnover, certification renewals, and capacity changes. Keeping 1-2 qualified backup suppliers avoids the single-source risk that halts assembly lines.
Before the Visit: Scope, Standards, and Document Review
Preparation decides how much value you get from an audit. Define your scope first: the critical dimensions and tolerances of your parts (for example ±0.005 mm on bearing bores), the materials involved (6061-T6 aluminum, 17-4PH stainless, Ti-6Al-4V), and the industry standards that apply — ISO 9001 for general quality management, IATF 16949 for automotive, AS9100 for aerospace, ISO 13485 for medical devices.
Request key documents at least three business days before the call or visit. A supplier that cannot produce them within 72 hours is not organized enough for a production partnership:
- Current ISO 9001 / IATF 16949 / AS9100 certificate — verify the certificate number against the registrar's online database. A lapsed certificate is a red flag regardless of the reason given.
- Controlled quality manual with revision number and approval signatures. Pick one procedure at random and ask an operator to describe it.
- Calibration records for at least three key instruments — CMM, micrometer set, hardness tester.
- Material certificates (mill test reports) from the last three shipments, in chronological order, with heat numbers that trace back to the material lots.
- Non-conformance log for the last quarter. Zero open entries usually means the factory does not record non-conformances — which is dangerous, not perfect.
- PPAP or first-article inspection (FAI) reports for representative parts, plus an organizational chart showing whether quality reports independently of production.
Holding a certificate does not guarantee execution. The audit's job is to verify that documented procedures match what actually happens when operators run your job.
The 20-Point Audit Checklist: What to Verify on the Floor
During the walkthrough — in person or via a live video tour — work through a structured checklist across five areas. This is the framework used by experienced precision machining auditors, and it maps directly to the risk areas that produce defective parts.
Quality System (Points 1-5)
Check certification validity and registrar confirmation, controlled quality manual, the non-conformance system, corrective action depth, and management review. Pick a closed NCR and trace it to a corrective action: was root cause identified, and was the fix verified as effective? An NCR closed with "rework the part" and no root cause analysis is a time bomb.
Incoming Material Control (Points 6-8)
Watch a material receipt being processed. Is the material checked against the purchase order and certificate? Are dimensions verified on raw stock? Trace one finished part back through work order and material lot to the mill cert — if the chain breaks anywhere, traceability does not exist. Confirm different alloys and grades are stored separately and clearly labeled.
Production Control (Points 9-13)
Pick a running machine and ask for its setup sheet: program number, tool list with offsets, material, and inspection checkpoints. Ask how often parts are checked during the run, who checks them, and what dimensions they verify. Look at tool life tracking, the preventive maintenance log, and whether controlled work instructions are posted at each workstation. A factory that only inspects at the end of the run is gambling with your parts.
Final Inspection and Shipping (Points 14-17)
Spot-check five measuring instruments — every calibration sticker must be current. Review the sampling plan: AQL 1.0 C=0 is the industry standard for precision parts. Ask whether the supplier has performed Gage R&R studies on key measurement systems. Then watch a finished part being packed: cleaned, protected against corrosion, secured against movement.
Business, Capacity, and Communication (Points 18-20)
Ask to see the actual production schedule. A factory running at 60% capacity can absorb your order; one at 95% will delay you regardless of what the salesperson promises. Confirm in-house engineering capability — a supplier that gives DFM feedback saves you money, while a purely build-to-print shop is just a machine room. Finally, evaluate communication: how long did it take to schedule the audit, and were your questions answered directly?
On-Site vs Virtual Audit: How to Choose
A two-day on-site audit of a machining supplier in Asia can cost $3,000-6,000 in travel alone, before the audit itself. A well-structured remote audit delivers roughly 80% of the same assurance at about 10% of the cost. For routine qualification and repeat orders, a remote audit is no longer a backup plan — it is a competitive advantage.
Run the remote audit as a filter: pass it first, then decide whether the spend justifies a physical visit. Book the on-site audit when parts are safety-critical (aerospace or medical implants), when order value exceeds roughly $50,000, or when it is a new supplier relationship. During a virtual audit, structure the 60-90 minute call by zone: incoming inspection, machine shop floor, quality lab with a live gauge-block measurement, final inspection and packing, and calibration records.
Red Flags and Traps to Watch For
Experienced auditors watch for patterns that no amount of polish can hide. If you see any of these, treat them as findings, not anecdotes:
The "90%-Ready" Trick
Some suppliers pre-sort defective units and present the lot as 90% complete, hoping you inspect the good goods while the defects sit aside. Verify the full ordered quantity on site, not just what the factory presents as finished.
The Golden Sample Trap
Perfect prototypes followed by a production run with burrs, mismatched finishes, and out-of-tolerance bores. Sample parts prove capability, not control — only a process audit proves control.
The Shadow Workshop
Count the active machines and operators visible on screen, then compare them with claimed monthly output. If the numbers cannot add up, part of the work is subcontracted to unaudited shops, breaking your traceability chain.
The Silent Supplier
A shop that executes your CAD file without DFM feedback is not reviewing your design — it is waiting for the failure. Top-tier suppliers flag sharp internal corners, thin walls, and tolerance issues before quoting.
Other signals to record: operators modifying G-code without engineering approval, no FAI on new parts, coolant mixed with oil, measuring tools stored near machining areas, the CMM room "not available right now," repeated rescheduling of the audit call, and material certificates showing a different supplier name than the one you are auditing — a classic broker pattern.
Scoring the Audit and Planning Follow-Up
Score every point on the checklist: Met = 2, Partially Met = 1, Not Met = 0, for a maximum of 40. The score gives you an objective, repeatable way to compare suppliers and to track a supplier's improvement over time.
A score of 35-40 means production-ready: proceed with a trial order and schedule an annual re-audit. A score of 25-34 means conditionally approved: require corrective action plans on every partially met and not-met item, then re-audit before volume production. Below 25, the gaps are systemic rather than incidental — do not proceed. Within 24 hours of the visit, send the supplier a structured report with findings, risks, and your recommendation, so the follow-up is documented and traceable.
How SOMI Custom Parts Can Help
SOMI Custom Parts operates as an audit-ready precision machining partner, not just a build-to-print shop. Our CNC machining parts capabilities span CNC turning, milling, and drilling, backed by controlled quality documentation, calibrated metrology, and engineering support that flags manufacturability issues before they reach the floor. When you send us an inquiry, you receive DFM feedback alongside your quote — the same signal a good audit looks for. For buyers evaluating us, we are transparent about our company profile and manufacturing setup, and we welcome structured audits, whether you visit our facility or run a live virtual walkthrough. You can also browse our full product catalog and read more buyer's guides to benchmark what a quality-focused supplier should provide.
Frequently Asked Questions
How long does a CNC supplier audit take?
A focused on-site audit typically takes one to two days: half a day for document review and interviews, a full day for the shop floor walkthrough and metrology checks, and a debrief on the second day. A structured virtual audit compresses this into a 60-90 minute live walkthrough preceded by a three-day document review window.
Can I really verify quality over a video call?
Yes, if the call is live and structured. Ask the host to walk through receiving, the machine floor, the metrology lab, final inspection, and calibration — and to demonstrate a live measurement, such as a calibrated 25 mm gauge block reading 25.000. Documents are easy to fake in a PDF; they are much harder to fake on a live call.
What is the minimum certification a CNC supplier should have?
ISO 9001 is the baseline for precision machining. Add IATF 16949 for automotive parts, AS9100 for aerospace, and ISO 13485 for medical devices. More important than the certificate itself is whether the audited practice matches the documented procedure — verify the certificate number against the registrar database and check execution on the floor.
How often should I re-audit a supplier?
At least annually for core suppliers. Combine the annual re-audit with ongoing monitoring: first-article inspection on new parts, periodic sampling per AQL, and quarterly review of non-conformance and on-time delivery data. For critical, safety-related parts, consider on-site audits every six months and maintain a qualified backup supplier.
Conclusion
Auditing a CNC supplier is the single most effective step you can take to protect part quality, delivery, and total cost. Whether you audit on-site or through a structured virtual walkthrough, the discipline is the same: define scope, review documents, verify practice against procedure, score objectively, and follow up with corrective actions. In a market where more than one in four production lots fails first inspection, the suppliers who welcome audits — and pass them — are the ones worth building long-term partnerships with. Start your next supplier evaluation with a 20-point checklist, and if you would like a partner that is open to scrutiny, contact the SOMI team to discuss your project.
