A factory audit does not certify your product, and it does not certify the factory’s honesty. It certifies something narrower and more useful: that on the day you walked in, the processes you were told about were the processes running. Everything else — whether the claim survives your next order, whether the capacity number holds in peak season, whether the people polishing the parts are paid legally — depends on how you structured the audit and what you asked to see. The buyers who lose money on overseas metal gift orders are rarely deceived by a single lie. They are misled by a set of individually plausible statements that nobody tested against each other. This guide sets out how to run an audit that tests them against each other: which management system standards to demand and in which current edition, what evidence to request before travelling, what to walk the floor and count, and what to write into the purchase order so the audit has teeth after you leave.
Buying metal souvenirs from a Chinese factory involves committing volume before you have seen a single production part. Sample approval happens at low quantity, on a mould that may have been set up by a technician who is now working on someone else’s order, and the sample itself may have been finished by hand. What you are actually purchasing is a system: a set of machines, a set of people, a set of procedures, and the supplier’s willingness to run them the same way when the order is ten times larger than the sample.
An audit is the only pre-commitment check that looks at the system rather than the product. That framing matters because the two are frequently confused. A pre-shipment inspection at the end of production tells you whether the goods in this container are acceptable. An audit at the start tells you whether the goods in the container six months from now will be. The second question costs a great deal more to answer after the fact.
What an audit can and cannot establish
Before the mechanics, the boundary. A buyer who treats an audit as a guarantee walks into the wrong expectations and gets the wrong contract terms.
What a well-run audit establishes. Whether the processes described are in place and being followed. Whether the claimed equipment exists, is owned or leased on terms that will still hold, and is actually used for your type of work. Whether the claimed capacity is arithmetically consistent with the staffing and shift pattern you observe. Whether the management system is real, in that records exist, are current, and are produced by the process rather than reconstructed for the visit. Whether the certifications on the wall are real, current, and issued by an accredited body. Whether the people doing the work appear to be doing the work, and are visibly employed properly.
What it cannot establish. It cannot tell you the goods will be good. Quality is determined by the specific order, the specific mould, the specific finishing batch, and the specific production run — which is why sampling plans exist, and why we set out the AQL acceptance system for metal souvenirs separately. It cannot tell you the supplier is financially sound or will still exist in three years, though a financial check is a separate and cheap diligence step. And it cannot replace a trial order. The audit tells you the system works; the trial order tells you it works for you.
This distinction also governs how you use a certification. A certificate is evidence about a management system at an organisation, on a scope, at a date. It is not evidence about any individual order, and it says nothing about the specific mould, the specific finish or the specific shipment. Treat the certificate as a filter: it tells you which suppliers deserve a full audit, because a supplier holding a current accredited certificate against a scope that actually covers your product type and your production site has already demonstrated a level of documentation discipline that makes an audit productive.

Which management system standards to ask for, and in which edition
Buyers ask for “ISO 9001” on a purchase order without a year. In 2026 that request is materially incomplete, and a supplier who produces a 2015 certificate when a 2026 edition exists has told you something about their document control.
The current edition of the quality management system standard is ISO 9001:2026, published on 16 September 2026 by the International Organization for Standardization. It is the sixth edition, replacing ISO 9001:2015, and the change was announced by ISO itself on the same date. ISO describes it as a revision rather than a rebuild: the ten-clause high-level structure is retained, and the changes are targeted. The published list of changes covers consideration of climate change in the standard body itself, stronger quality culture and ethical behaviour requirements, separate handling of risks and opportunities, reinforced change management, knowledge sharing, strengthened supply chain and operational monitoring, and more purposeful internal audit objectives.
ISO’s own standards news page records the 16 September 2026 publication date under the headline that ISO launched an update to the world’s most widely used quality management standard, and the ISO technical committee page for the subcommittee that develops ISO 9001 lists ISO 9001:2026 as its current standard and flags a separate document, ISO 19011:2026, titled Guidelines for auditing management systems, as the key reference for anyone auditing to ISO 9001. That last point is the one most buyers have never heard, and it is the single most useful pointer in this guide.
ISO 19011 is the standard that tells an auditor how to plan, conduct and report a management system audit. If your supplier’s certificate was issued against ISO 9001:2015 by a body that also audits to ISO 19011, the auditors in front of you are working to a published method. If they are working to a different method, your audit and their certification audit are not the same activity, and you should ask which one you are getting. The same ISO committee page also points to ISO/IEC 17021-3:2017, which sets competence requirements for the bodies that audit and certify management systems — in other words, the standard that governs whether the auditor sitting across the table from you is qualified to do it.
| Standard | Current edition | What it governs in an audit | Evidence to ask for |
|---|---|---|---|
| ISO 9001 | ISO 9001:2026, published 2026-09-16 (6th edition) | Quality management system: documented control, process ownership, corrective action, supplier control, internal audit | Certificate stating the edition, the scope, the accredited body, the certificate number and the expiry date |
| ISO 19011 | ISO 19011:2026 (Guidelines for auditing management systems) | The method an auditor should use: planning, evidence gathering, reporting findings | Confirmation of which edition the certifying body audits against, and who the auditor is |
| ISO/IEC 17021-3 | 2017 | Competence requirements for bodies that audit and certify management systems | Accreditation evidence for the certification body, not just a certificate |
| ISO 45001 | ISO 45001:2018 (1st edition) | Occupational health and safety management: incident reporting, worker consultation, emergency arrangements | Certificate if claimed, plus the incident log and the safety training records |
| ISO 14001 | ISO 14001:2026 (4th edition, 2026-04), replacing ISO 14001:2015 | Environmental management: material and waste handling, chemical control, monitoring | Certificate if claimed, plus waste manifests and chemical inventory records |
| ISO/IEC 17025 | 2017, corrected version 2018-03 | Competence of testing and calibration laboratories — determines whether a test report is worth anything | The accreditation mark and scope on any material or compliance test report |
The last row is the one that quietly decides whether a compliance argument holds. A test report is only as good as the laboratory that produced it. ISO/IEC 17025:2017 is the international standard for the competence of testing and calibration laboratories, and an accredited report carries the accreditation mark of the issuing body with a scope that covers the test performed. When a supplier sends you a report to prove a nickel release limit or a lead content limit was met, check the mark and the scope before you rely on it. The official entry for ISO/IEC 17025:2017 is on the ISO committee site, which is also where you will find the current editions of the others, including ISO 45001:2018 for occupational health and safety.
Two certification bodies describe their own work in ways worth reading before you accept a certificate. BSI’s own ISO 9001 page sets out certification as an assurance activity and is explicit that an accredited body will not certify a client for a management system where it has also provided consultancy on the same system — a separation-of-consulting-and-certification rule worth understanding, because it tells you whether your supplier’s certificate came from an independent assessment. The alternative model, offered by third-party inspection bodies, is not certification at all but stage inspection: identifying the regulations and standards that apply to a product and target market, then testing and inspecting at defined points during production. That is the model you want when your concern is not the management system but the finished goods.
Note what these services do not say. Certification does not guarantee product conformance, and an inspection at production stages does not extend to the parts of the process you did not witness. Both are forms of partial assurance, and both need to be specified in the contract. Our guide to contrôle qualité des cadeaux métalliques personnalisés sets out the shipment-stage checks that complement either model.
Prepare before you travel
The audit that finds the most problems is the one with the most preparation behind it, because preparation is what converts a tour into an examination. Five items belong in the request list, sent at least two weeks ahead, in writing, to a named person rather than a general mailbox.
One. The certificate itself, not the claim of it. Ask for a scan of the current certificate showing the reference number, the edition, the scope, the issuing body, the issue and expiry dates, and the sites covered. Then check the body itself. A supplier who holds a certificate for a design office but not for the production site has told you something important; a supplier whose scope excludes your product type has told you something important. Note also that certification is voluntary and not required by law in most jurisdictions — the value to you is entirely in the discipline it evidences.
Two. The organisational chart and the headcount. Ask for a list of the departments that touch your order and who leads each. The point is not the names. The point is to learn which processes are in-house and which are subcontracted. A factory that outsources plating to a neighbouring line is a different risk profile from one with its own plating bath, and you want to know before you agree a delivery date that depends on someone else’s queue.
Three. The process flow for your product, from raw material to packed carton. Ask them to send it in writing. When you arrive you will walk that flow physically, in the same order, and compare. Discrepancies between the written flow and the physical walk are the highest-value finding an audit produces, and they are only findable if the written flow exists.
Four. Two recent audit or corrective action records. Ask for the last two internal audit reports or the last two customer-issued corrective action records, with confidential parts redacted. A supplier that keeps none, or that produces them on the spot, has told you how the corrective action system actually runs. This is the practical test of whether the management system is living documentation or theatre.
Five. The documents that travel with the product. Material certificates, any test reports, the inspection plan used for past orders, the packaging specification. Ask which of these you will receive with each shipment and ask for a sample of a past shipment’s document pack. The document pack is where a supplier’s real process shows up, because it is what they have to produce under time pressure at the end of an order.

The ten checks that earn their keep on the floor
The purpose of walking is not to see everything. It is to test specific claims against physical evidence. Ten checks cover the decision points that matter for a metal gift order, and each one asks for a document or a count rather than a conversation.
| # | Check | Physical evidence to look for | What it protects you from | Risk if it fails |
|---|---|---|---|---|
| 1 | Site identity | Business licence address matched to the site you are standing in; the reception and the workshop are the same address | Subcontracting or site relocation without telling you | High |
| 2 | Owned vs leased machinery | Die casting machine and CNC centre count, with model numbers; ownership or lease terms | Capacity that belongs to another order book | High |
| 3 | Arithmetic capacity check | Observed shift pattern, headcount on the line, cycle times, against the stated daily output | Capacity figures that cannot coexist with the staffing shown | High |
| 4 | Raw material control | Alloy stock with mill or supplier certificates; segregated, labelled bins; a spectrometer or XRF on site | Untraceable material entering your batch | High |
| 5 | Mould control | A register of your mould with location, shot count and maintenance history | Losing a paid-for mould, or a mould used for a different job | High |
| 6 | In-house finishing | Polishing, plating, colour filling and assembly actually performed on site | A queue outside the factory in peak season | Medium |
| 7 | Inspection capability | Calibrated instruments, sampling tables on the wall, the inspection record for a past order | Inspection performed by eye and argued about later | Medium |
| 8 | Traceability of finished goods | Carton or unit labels that carry order number, batch and production date back to the line | Being unable to isolate a bad batch from a good one | Medium |
| 9 | Workforce conditions | Attendance records, wage records sampled, dormitory or canteen provision, machine guarding, PPE issue | Delivery being sustained by an unsustainable labour practice | High |
| 10 | Corrective action behaviour | How a non-conformance from the last customer complaint was closed out, on the record | Complaints that are answered but never fixed | Medium |
Check three is the one that most often produces a finding, so it is worth being precise about how to run it. A claimed daily output of thirty thousand pieces sounds impressive until you divide it by the shift pattern and the number of people you can actually see on the line. If the figure was derived from a theoretical cycle time with no allowance for changeover, setup, or the polishing and plating steps that are not part of the die casting cycle, the number describes a machine, not a factory. Ask what percentage of the stated output is achieved in the last three months, and ask to see the production records that support it. The answer tells you more than the tour.
To make the arithmetic concrete, take the stated daily output and work backwards through the process. If a factory claims thirty thousand pieces a day, and the site is nine thousand six hundred square metres with two hundred staff, the die casting alone must produce the volume, and then the pieces still have to be trimmed, polished, plated, colour filled, assembled and packed. Counting the people actually standing at each of those stations, and multiplying by the shift pattern you see, is a fast test. If the number of people visible cannot plausibly produce the claimed volume through the full process, the volume claim is a machine figure rather than a factory figure. Sites that publish their floor area and headcount openly, such as the vendor selection checklist on this site, give you the inputs to run this test yourself.
Check nine is where most buyers are least prepared, because they treat it as a social question rather than an evidence question. Frame it as evidence. Ask to see three things: the wage calculation for a sample of workers, the attendance record for a sample of workers, and the record of a safety incident with its corrective action. These are ordinary factory documents, they exist in any compliant operation, and their absence is informative. The International Labour Organization’s global estimates put the number of children in child labour at 138 million, of whom 54 million are in hazardous work, on its child labour topic page. A metal gift operation involves soldering, polishing, plating chemicals and powered machinery, which is precisely the category of work that is hazardous for a child. You do not need to make the accusation; you need to see documents that show the workforce is documented and correctly employed.
Check seven has a direct counterpart in the inspection world, and it is worth reading how sampling works before you ask for the equipment list, so that you know what to look for. The standard that governs it, ISO 2859-1, now in its 2026 edition, sets out the sample size codes and acceptance numbers that an inspector works from, as our guide to AQL inspection for metal souvenirs covers in detail. The part that matters for an audit is simply that the sampling table is on the wall, current, and used — and that the inspection record for a past order shows the same code letter and accept number you would have computed yourself.

Auditing remotely when you cannot travel
Not every buyer can travel, and not every supplier will host. Remote audit is weaker than an on-site audit and should be treated as a screening tool rather than a substitute. It works well for verifying that a physical thing exists and is in use, and it works poorly for anything about process discipline, because you cannot see what happens when nobody is looking.
A remote audit that is worth doing consists of a live video walk, in sequence, with a person who is not the sales contact hosting it. Cover the same ten checks, with three adjustments: ask the host to open a machine log or a production record on camera rather than describing it; ask for a live count of heads on the line and note the time of day against the shift pattern; and ask to see the certificate on camera rather than as a scan, so that the scope and dates are legible in the frame. Record the session, with the supplier’s agreement, and treat the recording as an audit record in its own right.
Two questions are worth asking at the end of any remote session, because they test whether the host controls access: which areas of the facility are you not able to show me, and why. A direct answer is reassuring. An evasion is a finding.

Turn findings into contract terms
An audit that does not change a document changes nothing. The findings need to land somewhere that binds the supplier for the life of the order, and the natural place is the purchase order or the quality agreement attached to it. Five clauses earn their keep.
First, an approval gate that requires your written sign-off before production starts on a new mould. We cover how this works in practice in the sample approval process for custom metal gifts. Second, a clause naming the standard editions you are auditing against, so a certificate expiring mid-order does not create an argument about which rules apply. Third, a clause that lets you, or an inspector you appoint, inspect the site and the in-process goods during production, with reasonable notice. Fourth, a clause requiring the certification to be maintained for the duration of the order, with notification of suspension or withdrawal. Fifth, a clause requiring material and test documentation to travel with each shipment, with the laboratory’s accreditation scope attached.
The information you asked for in the pre-visit list should also be re-issued as a standing document list. A buyer who has to re-request the process flow every time should treat that as a signal about how the relationship is running.
Whichever factory you are auditing, the economics of the order are set by facts you can verify in a day: whether the machines are there, whether the people are there, whether the certificates are current, whether the paperwork is real. A well-run audit produces a small number of specific, testable claims — and a purchase order written against those claims is worth more than any reassurance you could have obtained by asking whether the factory is good.
What an audit does not do is settle the commercial terms. Lead time, minimum order quantity and payment terms are the other half of the decision, and they are worth reading separately before you commit: our guide to lead time and shipping for custom metal gifts covers the sampling and production sequence that determines what a quoted date actually means. An audit tells you the factory can run the order. A quoted date tells you whether you should ask it to.
Factory audit readiness checklist
Work through this before you sign the purchase order. Each line is a specific thing to have in hand, not a general assurance.
| # | Item to hold | Evidence required | Status |
|---|---|---|---|
| 1 | Current ISO 9001 certificate (ISO 9001:2026 edition or a documented transition plan from the 2015 edition) | Certificate scan with reference number, scope, body, issue and expiry dates; body accreditation confirmed | ☐ |
| 2 | Audit method stated | Confirmation of ISO 19011:2026 edition used by the certifying body, and named lead auditor | ☐ |
| 3 | ISO 45001 occupational health and safety evidence | Certificate if claimed; incident log; training records; machine guarding and PPE issue observed | ☐ |
| 4 | ISO 14001 environmental management evidence (ISO 14001:2026 edition) | Certificate if claimed; chemical inventory; waste manifests; discharge handling | ☐ |
| 5 | Laboratory accreditation on every test report | ISO/IEC 17025:2017 accreditation mark and scope covering the specific test performed | ☐ |
| 6 | Written process flow for your product | Documented flow from material receipt to packed carton, showing which steps are in-house | ☐ |
| 7 | Capacity arithmetic reconciled | Machine count and model numbers, shift pattern, line headcount, cycle time, three months of actual output records | ☐ |
| 8 | Raw material traceability | Alloy certificates for stock in use, bin labelling, segregation, on-site composition test method | ☐ |
| 9 | Mould register | Register entry per mould with location, shot count, maintenance history, ownership clause | ☐ |
| 10 | Corrective action evidence | Two recent internal audit or customer corrective action records, showing what was changed | ☐ |
| 11 | Workforce documentation | Wage calculation and attendance records for a sampled group; worker consultation records | ☐ |
| 12 | Contract clauses written | Approval gate, standard editions named, inspection right, certification maintenance, document delivery | ☐ |
Every line above is something you can ask for in an email and confirm in an afternoon. The ones you cannot confirm are the ones to price into your risk before you commit volume.