eProcurement Toolkit

You are here: qualification, stop 2/6

The lineSupplier management

What is supplier quality management?

Short answer

Supplier quality management makes sure suppliers deliver parts and services that meet agreed requirements: clear quality terms, approval before supply, checks on arrival and a fixed process when something fails.

Cite this answereProcurement Toolkit, “What is supplier quality management?”, updated 31 Oct 2026, eprocurementtoolkit.org/supplier-management/supplier-quality-management

Key takeaways

  • Supplier quality management (SQM) is the part of supplier management that makes sure what a supplier delivers meets the specification, every time, not only at the first delivery.
  • It works in a fixed order: write the quality requirements down, check the supplier can meet them, approve the first parts, check deliveries, deal with defects, and control any change the supplier makes.
  • The quality agreement is the key document. It says what the supplier must do, what the buyer will check, how fast a defect must be answered and who pays for a defect.
  • When a defect arrives, the order is always the same: protect the customer first (containment), then find the root cause, then fix it so it does not come back. The 8D method is the common format.
  • Quality standards such as ISO 9001 and ISO 13485 require buyers to set criteria for choosing, monitoring and re-evaluating suppliers, and to keep records. Since 2 February 2026 the US FDA rule for medical devices uses ISO 13485.

What does supplier quality management mean?

Supplier quality management is the work a buyer does to make sure its suppliers deliver goods and services that meet the agreed requirements. It sets the quality terms in the contract, checks the supplier before it supplies, approves the first parts, checks deliveries and runs a fixed process when a delivery is defective.

Take a common case. A maker of garden machines buys a steel bracket from a small metal shop. For two years the brackets are fine. Then the shop buys its steel from a cheaper mill and says nothing. Three months later, brackets crack on machines already sold. Supplier quality management is the set of rules that would have stopped this: a clause that obliges the supplier to announce any change of material, a new approval of the part after the change, and a check of the first deliveries made with the new steel.

The work is most formal in manufacturing, medical devices, food and aerospace, where a bad part can hurt people. It also applies to services, as the FAQ below shows.

How is it different from supplier performance, risk and lifecycle management?

Supplier quality management answers one question: does what the supplier delivers meet the specification? The neighbouring disciplines use its results but answer other questions, and each has its own guide.

Supplier performance management
Measures everything the supplier delivers against the contract: quality, but also delivery, cost, service and responsiveness, in a scorecard reviewed with the supplier. Defect rates from supplier quality feed its quality line. See supplier performance management.
Vendor risk management
Looks at what could go wrong in the future: insolvency, sanctions, cyber attacks, a single source. A rising defect rate can be an early sign of a supplier in trouble. See vendor risk management.
Supplier lifecycle management
Controls the supplier record over time: its status, what it may do, and the checks between stages. A failed quality audit is one of the events that can restrict a supplier. See supplier lifecycle management.
Supplier onboarding
Collects and checks the supplier’s legal, tax and bank data before the first order. Quality certificates are often collected at the same time, but judging them is quality work. See supplier onboarding.

The whole set, and who owns each part, is described in the supplier management guide.

What are the steps of supplier quality management?

The supplier quality management process follows the life of a part or a service, from the first drawing to years of repeat deliveries. Most organisations use these steps, with more or less effort depending on how critical the part is.

  1. Write the requirements down. The drawing or specification, the tests, the packaging and the documents that must come with each delivery, such as a certificate of conformity. What is not written cannot be checked.
  2. Agree the quality terms. A supplier quality agreement, signed next to the purchase contract, sets what the supplier must do and what the buyer will check (see the next section).
  3. Qualify the supplier for quality. Check its certificates, such as ISO 9001, and for important parts audit its factory or site. This is the quality side of the supplier qualification described in supplier lifecycle management.
  4. Approve the first parts. Before series supply starts, the supplier makes parts with its real tools and process, and the buyer measures them against the drawing. In the car industry this is the production part approval process (PPAP).
  5. Check deliveries. Incoming inspection at the buyer’s site, the supplier’s own test reports, or both. Many buyers reduce checks for suppliers with a long clean record and increase them after a problem.
  6. Handle defects. Stop bad parts reaching the customer, ask the supplier for a corrective action, and check that the fix works.
  7. Control changes. The supplier must ask before it changes a material, a site, a process or a sub-supplier, and the buyer decides whether the part must be approved again.
  8. Measure and develop. Count defects, follow open actions, audit again on a schedule, and help weak suppliers improve when changing supplier is not an option.

Several people share this work. A supplier quality engineer usually owns the technical side: approvals, audits and defect analysis. Procurement owns the contract and the commercial follow-up, such as charging the cost of a defect. The receiving team or the laboratory runs the incoming checks.

What goes in a supplier quality agreement?

A supplier quality agreement is the contract document that turns quality expectations into duties. It sits next to the purchase contract or the framework agreement and applies to every order placed under it. ISO 9001 asks the buyer to tell external providers its requirements, including how the buyer will control and monitor their performance and which checks it or its customer will perform, at the supplier’s site if needed.

Typical clauses of a supplier quality agreement, with an example of each
ClauseWhat it settlesExample wording or value
ScopeWhich parts, services and sites the agreement coversAll machined parts delivered to the two assembly plants
Quality systemThe certificate or standard the supplier must hold and keepISO 9001 certificate kept valid; copy sent at each renewal
First-part approvalWhat must be approved before series supply, and howApproval of first parts from production tools before the first order
Delivery documentsWhat comes with each deliveryCertificate of conformity and material certificate with each batch
Measures and targetsHow quality is counted and what level is expectedDefective parts per million (PPM) per quarter, target set per part family
Defect responseHow fast the supplier must react to a complaintContainment within 24 hours, root cause within 10 working days
Change notificationWhat the supplier must announce before doing itAny change of material, site, process or sub-supplier, notified in advance
Audit rightsWhen and how the buyer may auditAudit on notice, and without notice after a serious defect
Costs of defectsWho pays for sorting, rework, returns and line stopsCosts documented, agreed with the supplier and charged
RecordsWhat the supplier keeps and for how longTest records kept for the life of the product plus a set period

The response times and targets in the example column are illustrations: each buyer sets its own per part and risk, and writes them down before the first defect.

Some buyers publish their quality agreements on their supplier pages. A German industrial manufacturer, for example, publishes a quality agreement that rates suppliers A, B or C on customer-driven quality, supplier quality, on-time delivery, response to complaints and premium freight caused by the supplier. B and C suppliers must present measures to reach A. The same document asks for immediate measures after a defect, ideally in an 8D report, and says costs are documented, agreed with the supplier and charged.

How is a new supplier part approved?

A new part is approved when the supplier shows, with parts made on its real production tools and process, that it meets every requirement of the drawing. Approving a hand-made sample is not enough, because the series process can behave differently. The approval is repeated when the part or the process changes.

The car industry has the most formal version: the production part approval process (PPAP), published by the Automotive Industry Action Group (AIAG), whose current manual is the fourth edition, published in 2006. The supplier submits a package of up to 18 elements, from design records and process failure analysis to measurement results, sample parts and a Part Submission Warrant, the summary the supplier signs. Five submission levels set how much of the package the customer receives, from the warrant alone (level 1) to samples and the complete data kept available for review at the supplier’s site (level 5). Car makers add their own requirements on top.

Other sectors use lighter forms: a first article inspection report that measures every feature of the first parts, a pilot batch tested in the buyer’s laboratory, or a trial period for a service. The principle is the same. A supplier does not start series supply until the buyer has seen evidence from the real process.

What happens when a supplier delivers a defective part?

When a defect is found, the buyer first protects its own production and its customers, then asks the supplier to find and remove the cause. The order matters: sorting the stock comes before the analysis, because bad parts may already be on the line or in the warehouse.

  1. Record the defect. Batch, quantity, what is wrong, where it was found, with photos. Block the stock concerned.
  2. Contain. Sort the parts in stock and in transit, at the buyer or at the supplier, and replace the bad ones so production can continue.
  3. Send a corrective action request. Often called a SCAR (supplier corrective action request), it asks the supplier to answer in a set format and by set dates.
  4. Find the root cause. The supplier explains why the defect happened and why its own checks did not catch it. The 8D method, made popular by Ford in the late 1980s, gives the structure: team, problem description, containment, root cause, corrective action, validation, prevention, closure.
  5. Check the fix. The buyer checks the next deliveries more closely, and closes the request only when the defect has not come back.
  6. Recover the costs. Sorting, rework, extra freight and line stops are charged as the quality agreement allows.

A repeat defect, or a corrective action that misses its dates, is no longer only a quality problem. It goes into the supplier’s scorecard and review, and may change the supplier’s status, for example no new parts until the problem is closed.

How do you measure supplier quality?

The most common measure of supplier quality is defective parts per million (PPM): the number of defective parts divided by the number of parts delivered, multiplied by one million. It lets a buyer compare suppliers that deliver very different volumes. Other measures count rejected lots, complaints and how fast the supplier responds.

Common supplier quality measures: formula and what each one shows
MeasureFormula or countWhat it shows
Defective parts per million (PPM)Defective parts ÷ parts delivered × 1,000,000Defect rate, comparable across volumes
Lot rejection rate (%)Rejected lots ÷ lots received × 100How often a whole delivery fails the incoming check
Complaints per periodNumber of formal complaints sent to the supplierFrequency of problems, whatever their size
Containment time (hours)Hours from complaint to safe stockHow fast the supplier protects the buyer
Corrective actions overdueOpen requests past their due dateWhether the supplier fixes causes or only symptoms
Repeat defectsDefects with the same cause as a closed requestWhether past fixes worked
Cost of defects (currency)Sorting, rework, freight and stops charged or absorbedWhat poor quality costs the buyer

PPM alone hides slow answers and repeat defects; read it with the response and repeat measures.

A worked example. In one quarter a supplier delivers 120,000 brackets. Incoming checks and the assembly line find 36 defective ones. Its PPM is 36 ÷ 120,000 × 1,000,000 = 300. A second supplier delivers 4,000 castings and 6 are defective: 6 ÷ 4,000 × 1,000,000 = 1,500 PPM. The second supplier had fewer defects but a defect rate five times higher. There is no universal good PPM: the target depends on the part, the sector and the process, and belongs in the quality agreement.

These figures become the quality line of the supplier scorecard. How to weigh them against delivery, cost and service, and how to run the review with the supplier, is explained in supplier performance management.

What do quality standards require from buyers?

Quality management standards make supplier quality a duty of the buyer, not an option. They do not say how to do it, but they require criteria, controls and records, which auditors check.

What three quality frameworks ask buyers to do about suppliers
FrameworkWho it applies toWhat it asks about suppliers
ISO 9001:2015, clause 8.4Any organisation certified to ISO 9001Criteria to evaluate, select, monitor and re-evaluate external providers; type and extent of control set by the potential impact on the buyer’s own products; requirements communicated to the provider, including the checks the buyer will do; records kept
ISO 13485:2016, clause 7.4Medical device makers and their suppliersSupplier criteria based on the supplier’s ability, its performance, the effect of the purchased product on device quality and the risk of the device; monitoring and re-evaluation; verification of purchased product
US FDA Quality Management System Regulation (21 CFR 820)Manufacturers of finished medical devices sold in the USEffective 2 February 2026, it incorporates ISO 13485:2016 by reference, so the purchasing duties of clause 7.4 apply under US law

Certification proves a supplier has a quality system, not that its parts are good: approve the parts and measure deliveries as well.

Sector rules add their own layer: aerospace, automotive, food and pharmaceutical buyers have their own standards and audit schemes. Check what your own customers and regulators require before designing the supplier quality process.

What does supplier quality management software do?

Supplier quality management software records the quality side of each supplier in one place: certificates and their expiry dates, audits and findings, first-part approvals, incoming inspection results, complaints, corrective action requests and their deadlines, and the PPM and other measures. Its main value is the trail: who approved what, when, on which evidence, which auditors ask for.

  • Quality management system (QMS) software with a supplier module. Common in medical devices and pharmaceuticals, where documents, training, audits and corrective actions must be controlled together.
  • The quality module of an ERP. Inspection plans on goods receipt, blocked stock and quality notifications tied to the purchase order and the supplier.
  • Supplier management or source-to-pay suites. Strong on supplier data, questionnaires, certificates and scorecards; often lighter on inspection and engineering detail.
  • Supplier portals and collaboration tools. Let the supplier upload certificates, answer complaints and submit approval packages instead of exchanging emails.

Choose from your own cases, not from feature lists. Ask each tool to show, with your data, a certificate expiring next month, a complaint that goes from containment to a closed 8D, a change request from a supplier that triggers a new part approval, and a quarter’s PPM per supplier. Then check how the result reaches the systems that order and pay: a supplier blocked for quality must be blocked where orders are placed. The wider choice of supplier tools is covered in supplier management software.

Questions

What does a supplier quality engineer do?

A supplier quality engineer owns the technical side of supplier quality management. The engineer audits suppliers, approves first parts and approval packages, analyses defects with the supplier, follows corrective actions and decides whether a supplier change needs a new approval. Procurement keeps the contract and the commercial side, such as charging the cost of a defect.

Is supplier quality management only for manufacturing?

No. It is most formal in manufacturing, medical devices, food and aerospace, but the same steps work for services: set the quality level in the contract, check the provider before it starts, audit the work, and ask for a corrective plan when an audit fails. A cleaning, catering or IT support contract can follow this logic.

What is a SCAR in supplier quality?

A SCAR is a supplier corrective action request: a formal request, sent after a defect, asking the supplier to contain the problem, find its root cause and fix it by set dates. Many buyers ask for the answer in the 8D format, and close the request only when later deliveries show the defect has not come back.

What is the difference between supplier quality management and supplier performance management?

Supplier quality management checks that deliveries meet the specification and handles defects. Supplier performance management measures the supplier against the whole contract, including delivery, cost and service, in a scorecard and regular reviews. Quality results are one input to performance management.

Does an ISO 9001 certificate replace supplier quality checks?

No. An ISO 9001 certificate shows that the supplier runs a quality management system that a certification body has audited. It does not prove that a given part meets your drawing. Buyers still approve the first parts, check deliveries in proportion to risk and measure defects over time.

New guides on the supplier management line

One short email when a guide on this line is added or revised. Nothing else.

Coming soon: sign-up opens with the first email.

Seb Troz

Source-to-pay consultant · written and maintained this guide

Seb Troz is a source-to-pay consultant who implements Ivalua for buying organisations. He writes the guides on eProcurement Toolkit from that hands-on work.

Disclosure: the author works as an Ivalua consultant. Pages that compare software say so next to the comparison.