Supplier Qualification: A Step-by-Step Process

Supplier qualification is the risk-based process of vetting and approving a new supplier before any production purchase order is issued, confirming through assessment, samples, and capability review that the supplier can consistently meet quality, delivery, and regulatory requirements. It is the gate that keeps unproven suppliers off the floor.

Qualification is where supplier quality is cheapest to get right. A gap caught before the first order costs a phone call; the same gap caught after production has started costs sorting, line stoppages, and an awkward exit. Yet many plants either wave suppliers through on a quote and a certificate, or bury them in a generic questionnaire that proves nothing. The workable middle is a staged, risk-proportional process. This guide walks it step by step, assessment, samples, capability, and the approved list, the front gate to the wider supplier quality management system.

What is supplier qualification?

Supplier qualification is a systematic, evidence-based activity performed before onboarding to confirm a potential supplier can meet defined requirements, quality, capacity, regulatory, and continuity of supply. It is forward-looking: where an audit examines a supplier you already use, qualification predicts whether a supplier you do not yet use will perform. It draws on the same evidence, a quality-system review, a capability assessment, sample parts, financial and capacity checks, but its output is a single decision: approve, approve with conditions, or reject.

The clause behind it is ISO 9001:2015 8.4, which requires defined criteria for the evaluation and selection of external providers, applied and recorded. The standard does not prescribe a method, which is the point: qualification is where you decide how much evidence a given part's risk justifies, and write it down so the decision is defensible later.

Qualification, approval, or certification, what is the difference?

The three words get used loosely, and the distinction is worth keeping. Qualification is the process of evaluation. Approval is the outcome, the supplier is added to the approved vendor list for specific parts or categories, sometimes conditionally. Certification is a higher, earned status where a track record of clean receipts and demonstrated process control lets you reduce or skip incoming inspection and move toward dock-to-stock. A supplier is qualified once, approved as a result, and certified later through sustained performance. Confusing them leads to the common error of treating a fresh approval as if it were earned certification, skipping inspection on an unproven supplier, which just relocates the verification cost to your production line.

How do you qualify a supplier, step by step?

The process below scales from a light commodity check to a full safety-critical qualification by adjusting how deep each step goes, not by skipping steps.

1. Define the need and the risk. Before evaluating anyone, classify the part or service by risk: consequence of failure and likelihood of trouble. The risk tier sets how rigorous every following step must be, so this is the decision that governs the rest.
2. Screen candidates against knock-out criteria. Check the non-negotiables first, required certifications, regulatory status, capacity, geography, financial stability. Screening early keeps you from spending an audit on a supplier who was never viable.
3. Assess the quality system and capability. For higher-risk parts, run an on-site supplier audit; for lower-risk, a documented self-assessment or remote review. Confirm the supplier has the processes, equipment, measurement, and people to hold your tolerances.
4. Request and evaluate samples. Order sample parts made on production tooling and inspect them yourself. Samples turn claims into evidence, this is where a first article inspection or a formal part-approval package proves the supplier can actually make the part, not just describe it.
5. Verify capability with data. For critical characteristics, require capability studies (Cpk/Ppk) or a full part-approval submission so you know the process is centered and repeatable, not just able to make one good lot for the audit.
6. Decide and set conditions. Approve, approve with conditions (tightened inspection, a follow-up audit, a capacity ramp), or reject. Record the rationale so the decision survives the person who made it.
7. Add to the approved list with a review date. Put the approval on the approved vendor list scoped to specific parts, and set re-qualification triggers and a review date so approval is a living status, not a permanent stamp.

What goes into the qualification assessment?

The assessment gathers evidence across four fronts, and the weight on each shifts with risk. Quality capability comes from the quality-system review, capability studies, and sample results. Delivery and capacity capability comes from checking that the supplier's equipment, staffing, and lead times can hold your volume without heroics. Regulatory and compliance status covers the certifications, material declarations, and traceability your industry demands. Commercial and continuity risk covers financial stability and single-source exposure. A qualification that weighs only price has skipped three of the four, which is how a cheap quote turns into an expensive year.

How you gather that evidence scales with risk, and stating the proportionality in writing keeps qualification honest. A low-risk commodity supplier might clear the bar with a completed self-assessment, current certifications, and one accepted sample lot. A high-risk, safety-critical part demands the full weight: an on-site audit, production samples on final tooling, capability studies on the critical characteristics, a capacity study, and a financial check. The failure mode at both extremes is the same, mismatching effort to risk. Over-qualify a washer supplier and you create a bottleneck that slows sourcing for no gain; under-qualify a critical casting supplier and you inherit their process problems on your own line. Writing down which evidence each risk tier requires turns qualification from a matter of who is asking into a repeatable control.

How do samples and part approval fit in?

Samples are the moment qualification stops being paperwork. You want parts made on production tooling and processes, not hand-made prototypes, because the qualification question is whether the production process can hold the drawing, and you inspect them yourself against every characteristic. In automotive and much of general manufacturing the formal vehicle is the Production Part Approval Process (PPAP), which bundles the sample parts with a defined package of evidence, dimensional results, material and performance test data, process-flow and control-plan documentation, and capability studies, submitted at a level set by the part's risk. Approval can be full, interim (permitting limited shipment while a gap is closed), or rejected. Even outside a formal PPAP scheme, the principle holds: no supplier joins the approved list on samples alone without evidence that the process behind them is capable and controlled, which is why qualification connects directly to your incoming inspection plan, the approval decides how tightly you inspect the first production lots.

By the numbers

By the numbers. ISO 9001:2015 clause 8.4 requires organizations to determine and apply criteria for the evaluation, selection, monitoring, and re-evaluation of external providers based on their ability to provide conforming product, and to retain documented information on the results, the record that a qualification decision must produce (ISO 9001:2015). The Production Part Approval Process, maintained by AIAG as one of the automotive core tools, defines the sample-plus-evidence package used to approve a supplier and part for production, with submission levels scaled to risk (AIAG, PPAP). And the reason to qualify rigorously up front is the cost multiplier of finding trouble later: ASQ notes total quality costs commonly run 15-20% of sales revenue, much of it failure cost that a properly qualified supplier keeps off your floor (ASQ, Cost of Quality).

When does a supplier come off the approved list?

Approval is a status, not a stamp, and the qualification process only works if it can be reversed. Define re-qualification triggers when you approve the supplier: an escape or serious nonconformance, a change of ownership, a move of the manufacturing process or site, a sub-tier supplier change, a long gap with no orders, or a scorecard that slips below threshold. Any of these means the evidence the original approval rested on may no longer hold, and the supplier earns a fresh look rather than a benefit of the doubt. A living approved vendor list with review dates and triggers is the difference between qualification as a control and qualification as a filing exercise.

All of this depends on records you can actually find. When qualification evidence, samples, capability data, and re-qualification triggers live in scattered folders and one buyer's memory, the approved list drifts out of date and the triggers never fire. Capturing qualification and incoming results digitally and connecting them, the kind of plumbing Harmony's quality intelligence and connected-systems modules handle, keeps the approved list honest and turns qualification into the front end of a continuous program that also runs on supplier audits supplier development and the IATF 16949-style disciplines many customers require. CLS made that shift, from qualification records buried in a drive to evidence visible when a sourcing decision is on the line.