Your buyer just asked for a BSCI report
Social compliance audits (BSCI and SMETA) at Chinese factories - from audit scope and grades to the working hours trap, double bookkeeping, CAP and contract clauses

Hello, this is GreenFrog Seoul.

"Our head office compliance team has asked for the factory's latest BSCI report. Could you send it over? We need it by next week."

That email arrives out of nowhere for importers who have just started dealing with European buyers or large retail channels. Three things go blank at the same moment. You do not know what BSCI is, you do not know whether your factory has one, and if it does not, you have no idea whether one can be produced by next week. Call the factory and the answer is usually some version of this. "We did one a while back but it has lapsed. Getting another costs money and takes time."

That is what today is about. The social compliance audit, also called an ethical audit, and known in Chinese factories as 验厂. It is not a quality audit looking at whether the product was built well. It looks at the conditions the people who built it are working under.

Quality sits in Episode 103 on quality agreements, and environmental and sustainable sourcing in Episode 63 on sustainable sourcing. Today covers the axis that falls into neither of those: labour and human rights.

A social compliance audit is a completely different sport from a quality audit. A quality audit looks at goods. A social compliance audit looks at payroll ledgers, attendance records and what the workers say. Factories with flawless quality land a D grade on this one all the time.

1. Why is this suddenly landing on you?

A few years ago social compliance audits were something that happened to tier-one vendors supplying Nike or H&M. Now the demand reaches importers turning over a few million dollars a year. The number of routes the pressure travels down has multiplied.

Here is the part importers most often miss. The demand comes to you, but the factory is the one being audited. No amount of paperwork on your side solves it; a Chinese factory outside your control has to pass. If the factory says no, your only remaining option is to change suppliers. Which means this belongs much earlier than delivery dates and unit prices — at the point where you choose a supplier.

Supplier selection and management in general is covered in Episode 23 on supplier management and Episode 62 on supplier credit checks, so today stays on the audit itself.

"But we don't sell into Europe"

I hear that a lot. If you only sell domestically you may well not face the demand today. Two things are worth keeping in view anyway. One is that domestic retail channels are adopting their own supplier codes of conduct faster than most people expect. The other is the case where a domestic customer who bought from you then exports — in which the demand reaches you eventually, just with a lag.

I worked with a household goods importer selling purely B2B domestically who was asked, because of a customer's US export, to produce three years of supply chain records retroactively. By that point the factory had already changed once, and simply getting cooperation from the previous factory took two months.

2. Comparing the schemes — which one do you actually need?

Being told "get BSCI" does not make BSCI your only option. Buyers recognise different schemes, and the cost and difficulty vary quite a bit. Here are the main ones side by side.

The column to read first is not the one on the right. It is "character". Who commissions the audit differs by scheme, and that makes a bigger practical difference than the fee does.

The decisive difference between BSCI and SMETA

These two come up most often, so here they are next to each other.

The row that matters in practice is "scope." SMETA comes as either 2-Pillar or 4-Pillar, and missing this is how factories end up being audited twice.

If a buyer just says "send us a SMETA," find out which one first. A factory holding 2-Pillar when the buyer wants 4-Pillar means booking another audit, and that is three to four more weeks gone.

Can ISO 45001 stand in for BSCI?

Factories ask this fairly often: "we have ISO 45001, does that not work?" It does not. ISO 45001 certifies an occupational health and safety management system, so it examines procedures and documentation. Working hours, wage payment, child labour and freedom of association are outside its scope entirely. It helps on the health and safety side, where the two overlap, but it is not a substitute. If your buyer asked for BSCI or SMETA, that is what you have to get.

The BSCI grade scale

Open a BSCI report and there is a single letter on the front page. That letter is the first thing your buyer looks at.

The realistic target is not A. It is C or better, ideally B. A small or mid-sized Chinese factory being audited for the first time almost never gets an A, and the working hours item alone makes A close to impossible. The reason is coming up next.

3. What the auditor actually looks at

An audit usually runs opening meeting, document review, site walkthrough, worker interviews, closing meeting. Even a one-day audit allocates a lot of that time to documents and interviews. Factory owners tend to assume a thorough clean-up will do it, when in fact what the auditor digs into is paperwork and people.

Worker interviews are the heart of it

Auditors typically sample around 10% of the workforce for individual or small-group interviews. How the sample is picked is the point. They choose at random from the employee roster, not from a list the factory supplies. No managers sit in, and auditors will also strike up short conversations on the production line, in the dormitory or in the canteen, where management is less present.

The questions are fairly standard. How many days off a month, what the overtime rate is, when and how wages arrive, what you do if you want to leave, who you tell if you have a complaint. When the answers conflict with the documents, the auditor treats the documents as the suspect party. It is worth making sure the factory understands in advance that what a worker says carries more weight than what a document shows.

4. The most common failure: working hours

This is the core of the article. What Chinese factories get caught on in a social compliance audit converges on essentially one thing: excessive working hours. Most other items can be fixed with money and time. This one is structural.

Start with the legal position in China.

Read the middle row. Legal cap 36 hours a month, actual 60-120. The gap is two to three times over. This is not a handful of bad factories; it is close to the default setting across Chinese manufacturing.

How it got this way

It is not simply that factory owners are unscrupulous. The structure locks it in.

Production workers at Chinese factories are mostly migrants from inland provinces. They left home and live in dormitories in order to save money, and base pay alone does not get them to their target. Overtime premium makes up close to half of take-home pay, so cut the overtime and the workers complain first. Factories with little overtime genuinely struggle to recruit. Job ads listing "lots of overtime" (加班多) as a selling point are a real thing.

Layer the order structure on top. When a buyer sets a short lead time and volume concentrates in season, the factory either hires more people or extends hours — and hiring skilled workers takes time, so hours win. Which means part of the cause of that overtime sits on your side of the order. Auditors know this, and the business ethics pillar of a 4-Pillar audit puts questions to the factory about buyer purchasing practices.

So what does "realistically passing" look like?

Buyers and audit bodies know the Chinese reality. Here is the shape that works in practice.

• The working hours non-conformance goes on the record. You acknowledge it rather than hide it.
• In exchange, you submit a continuous improvement plan — a phased reduction, something like bringing 100 hours a month down to 80 by the next audit.
• Where overtime exists but premiums are paid at the legal rate (150% on weekdays, 200% on rest days, 300% on statutory holidays), one day off in every seven is genuinely given, and overtime is voluntary, the auditor's assessment shifts considerably.
• The grade usually lands at C, and the buyer continues on the condition of a CAP.

So chasing a perfect score on working hours is unrealistic. Acknowledge it, pay the premium exactly, protect the rest day, and put a reduction plan in writing. That is the answer that actually works on the ground. With those four in place, excessive overtime rarely ends a relationship.

5. Double bookkeeping and coaching — the fastest way to lose the account

The most common mistake a factory makes after being notified of an audit is falsifying records. In Chinese it is 双套账 — double bookkeeping — keeping a separate payroll ledger and attendance record for the auditor. The real record shows 100 hours of monthly overtime; the one shown to the auditor has been adjusted to 34.

From the factory's chair it looks rational. Tell the truth and take a D, or tidy it up and maybe get a B. The problem is that auditors are trained to find exactly this.

How auditors catch falsification

The pattern is visible in the table. Fixing the attendance record alone never reconciles. Fix the payroll and it breaks against the bank records; fix the bank records too and it breaks against the tax filings; reduce the output figures to match and now it breaks against the shipment volumes you reported to the buyer. Holding one lie in place requires ten more, and the auditor only has to find one of the ten.

Coaching workers falls apart even faster

The companion to record falsification is coaching. Gather the workers the night before and drill them: say you get four days off a month, say the overtime is voluntary.

The reason it fails is simple. Auditors put the same question to several people in different forms. Memorised answers come back in identical phrasing; answers drawn from real experience vary person to person. Ten people answering in word-for-word the same sentence is itself the signal. Shift the angle slightly — "what did you do last Saturday?" — and the script has no line for it, so the answer wobbles.

So I suggest starting every audit preparation conversation with the same sentence. "Do not fix anything. Submit it as it is. Whatever is short, we will improve together after the audit." A C grade keeps the business; a falsification finding ends it. Factories rarely absorb that distinction in one conversation, so it is better to nail it down in writing from the contract stage.

6. UFLPA and forced labour import bans

If any of your goods flow into the United States, read this section separately. Everything above is a commercial demand from a buyer. This is customs holding your cargo.

The US Uyghur Forced Labor Prevention Act (UFLPA) creates a presumption that goods produced wholly or in part in China's Xinjiang Uyghur Autonomous Region are the product of forced labour. The word presumption is the whole game. Customs does not have to prove forced labour; the importer has to prove its absence to clear. The burden of proof is inverted.

Cotton is the hardest. The sewing factory may be in Guangdong, but the fabric comes from another province, the yarn in that fabric from somewhere else again, and where the raw cotton came from is something the sewing factory does not know either. What you have to trace is not your factory but the raw material three or four steps upstream.

Documents to hold if you ship to the US

Note the bottom row. A BSCI or SMETA report does not by itself guarantee a UFLPA exemption, but it does serve as evidence that you conducted due diligence in good faith. Which is why, despite the two regimes having different purposes, you end up preparing them as a single package.

Worth adding: the EU is moving toward its own ban on placing forced labour products on the market. Timing and enforcement will be decided differently region by region, but the direction is clear. It is best not to file this as a purely American problem.

7. Non-conformance grades and the CAP

When the audit ends you get a list of non-conformances. That is where the real work starts. What follows the audit takes more time and money than the audit itself.

A CAP is a document where, for each non-conformance, you fill in root cause, corrective action, responsible person, completion deadline and method of evidence. It is close cousin to the 8D report on the quality side. The most common reason CAPs come back rejected is a thin root cause field.

The difference is plain. The rejected version removes the symptom; the one that passes adds a mechanism against recurrence, with evidence. Audit bodies are less interested in "we cleared it" than in "what did you change so it does not pile up again."

Follow-up audits and cost

Anything at Critical or above usually brings a follow-up audit. It is a partial audit checking only the relevant items rather than repeating the whole thing, so it costs around 40-60% of a full audit. Two things are easy to miss. One is deadline management — overrun the correction deadline and the finding can be escalated or the grade recalculated. The other is who pays, which turns into a scrap with the factory at exactly this moment if the contract is silent on it.

8. Getting a factory with no audit experience ready

You have been asked for something "by next week" and the factory has never been audited. This is genuinely the most common situation. Start with a realistic schedule.

What four weeks can and cannot fix

A tight schedule forces you to choose. Sorted by difficulty, the items fall out like this.

The bottom row is the point made earlier. Past records cannot be changed. The moment you try, it becomes falsification. If time is short, the realistic combination is to concentrate on health and safety to eliminate Critical findings and handle working hours with a reduction plan. No Criticals and a handful of Majors gets you a C, and most buyers will start trading on a C conditional on a CAP.

9. What does it cost?

"How much is an audit?" cannot be answered with the audit fee alone. Real spending scatters across several lines.

The bold row is the real fight. A USD 2,000 audit fee is something most factories can absorb; raising the social insurance enrolment rate permanently increases a fixed monthly cost. Take a 200-person factory from 60% to 100% enrolment and labour cost can rise by a double-digit percentage. That is usually the actual reason a factory resists being audited.

So the cost conversation has to be about this structure, not the audit fee. The arrangements used in practice run roughly as follows.

• The importer pays the audit fee and the factory carries the improvement cost — common on new relationships
• Build it into the unit price, letting the factory recover a few cents per piece — used on long-running relationships
• Trade it against a minimum order commitment — this lets the factory calculate a payback period
• The buyer pays — large brands frequently commission audits at their own cost

Whichever route you take, a demand that loads cost onto the factory with no volume commitment gets refused. From where the factory sits, there is no reason to add tens of thousands of dollars of fixed cost to win an order worth USD 40,000 a year.

10. Clauses for your contract and code of conduct

Everything so far has been damage control. From here it is about not repeating it. Once you have been through an audit demand, it is worth settling this in writing at the point where the relationship starts.

Sample clause.
"The Supplier shall not subcontract all or part of the production processes under this Agreement to any third party without the Buyer's prior written approval. The code of conduct annexed to this Agreement shall apply equally to approved subcontractors, and the Supplier shall submit a list of subcontractors (name, address and process handled) each quarter. Where unapproved subcontracting is identified, the Buyer may terminate this Agreement immediately, and the Supplier shall bear any customs delay, re-production and claim costs arising from it."

There is a reason I use the subcontracting clause as the example. Subcontracting is the most common way an audit gets neutralised. The audited factory has decent conditions, and then part of the peak season volume quietly moves to a small factory in the next town. That factory has never been audited. On paper everything looks fine, while the actual production happens outside your control.

Catching it takes more than a contract. You cross-check the factory's production capacity against your order volume, visit unannounced, check the lot marking and production dates on the goods themselves — several layers at once. The site inspection technique covered in Episode 31 on factory visits and industrial clusters applies directly here.

You can write your own code of conduct

People often ask how they are supposed to write a code of conduct. You do not have to start from a blank page. Published standards like the amfori BSCI Code of Conduct or the ETI Base Code exist, and most buyers work from adapted versions of them. Add a few lines specific to your own business and that is enough.

Length matters far less than producing a Chinese translation, handing it to the factory and getting a signature on it. Send English only and the factory owner will not read it. A document nobody read comes back later as "we did not know about that." Deal structure and contract terms generally are covered in Episode 12 on OEM and ODM contracts.

11. What happens on the day

Even with the preparation done, points get lost in how the day is handled. Here are a few scenes I see repeatedly.

I want to underline the last row. Hosting guests is a courtesy in Chinese business culture, so factories genuinely do prepare an envelope out of goodwill. To the auditor this is an unmistakable attempt at bribery, and it goes straight into the record as a zero tolerance finding. Raise it with the factory before the audit. Being specific works best: "give the auditor nothing but water and coffee."

12. Common mistakes

These come up again and again in social compliance consultations.

• Commissioning a new audit without checking whether the factory already holds a valid report
• Not confirming whether the buyer asked for BSCI or SMETA, and if SMETA, 2-Pillar or 4-Pillar
• Expecting an ISO 45001 or ISO 9001 certificate to substitute, then having to book the audit anyway
• Not tracking report validity, so it has expired by the time the buyer asks
• Trying to hide a working hours non-conformance and taking a zero tolerance finding for falsified records
• Making workers memorise answers, which the cross-checking in interviews exposes
• Offering the auditor a meal or a gift and having it recorded as bribery
• Pouring effort into cleaning and painting while leaving payroll and social insurance documents untouched
• Skipping the gap assessment and paying for two full audits
• Writing only "corrected" in the CAP, with no root cause or prevention, and having it rejected
• Missing a correction deadline, so the finding escalates or the grade is recalculated
• Loading improvement costs onto the factory with no volume commitment, and being turned down
• Leaving the audit obligation and records access out of the contract, so the factory refuses
• Having no clause against unauthorized subcontracting, so an unaudited factory produces behind the audited one
• Shipping to the US without raw material traceability documents and getting stopped at the border

13. Social compliance audit checklist

Understanding the demand

• The scheme and scope the buyer requires (BSCI / SMETA 2-Pillar / 4-Pillar) is confirmed in writing
• The submission deadline and how the report is shared (platform sharing or file transfer) is confirmed
• Whether the factory holds an existing report, and whether it is still valid, has been checked
• Where a report exists, platform sharing settings have been requested so you can access it
• Any route by which your goods get re-exported to the US or EU has been identified

Before the audit

• A pre-audit gap assessment has been run and a written list of non-conformances received
• Employment contracts are signed with every employee and copies are held
• ID copies have been collected for the whole workforce and ages verified
• Social insurance payment certificates can be reconciled against the employee roster
• The payroll ledger matches the bank transfer records
• Twelve months of attendance records are in order
• Fire exits and walkways are clear and unlocked
• Extinguishers, exit signs and fire detectors are maintained with inspection records
• Chemical storage cabinets and MSDS are in place where the chemicals are used
• Machine guarding and PPE are issued and worn, with an issue log
• Safety training has been delivered and signed training records kept
• A grievance channel has been opened and is actually operating
• Work rules and wage policies are posted and explained in Chinese
• Dormitory and canteen hygiene and fire safety have been inspected

On the day

• Requested records are gathered in one place, ready to hand over immediately
• HR, safety and production staff plus a decision-maker are on site
• Workers have been briefed on the purpose of the audit, with no answers dictated
• The auditor's access to every area and right to photograph are not restricted
• No manager sits in on worker interviews
• No meals, gifts or money of any kind are offered
• Findings and the follow-up schedule are confirmed and signed at the closing meeting

After the audit

• A CAP with root cause and prevention measures has been written for each non-conformance
• Correction deadlines for Critical items are in a calendar and being tracked
• Evidence of correction (photos, documents, transfer records) has been collected item by item
• The follow-up audit schedule and who pays for it have been agreed with the factory
• The report expiry date is logged and a renewal date scheduled

Contract and ongoing management

• The code of conduct has been delivered with a Chinese translation and signed
• The contract states the obligation to be audited and the annual cycle
• Unannounced visit and audit rights and records access are written in as clauses
• Prior approval for subcontracting and submission of the subcontractor list are required
• A Zero Tolerance finding is named as immediate grounds for termination
• Who bears customs delay, disposal and claim costs arising from a breach is settled
• Where volume goes to the US, raw material traceability documents are secured tier by tier

Closing: an audit is a management problem, not a pass/fail problem

Importers who have been through one social compliance audit all say the same thing afterwards: there was more to prepare than expected. True. But most of what you prepare is not for the audit — it is things that should have been in place anyway. Fire exits should not be blocked, overtime premiums should be paid as calculated, minors should not be working. The audit is just the procedure that checks.

Which is why treating it as "a project to obtain one report" makes it painful every time. You go through the same scramble at renewal two years later, and if a buyer turns up for an unannounced audit in between, the unprepared version is exactly what they see. Put this item into your supplier selection criteria from the start, on the other hand, and from then on you only have to manage renewals.

It also changes how you read a factory. Visiting a lot of them, what strikes me is that factories with their labour conditions in order tend to have stable quality too. People stay, so skill accumulates; they are in the habit of keeping proper records, so quality history is traceable. A social compliance audit result is also an indicator of how a factory is actually run. There is no reason to file it purely as a regulatory cost.

One last thing, said again. Non-conformances can be fixed; falsification cannot. A C-grade factory keeps trading on a CAP, and a factory caught falsifying records trades with nobody. However short your preparation window feels, that is the one line worth holding.

GreenFrog Seoul works with importers facing a social compliance audit demand at their Chinese factory, from checking for an existing report through audit preparation, CAP corrections and tightening up contract clauses. Where a matter turns on interpreting specific regulation or on whether US or EU rules apply, have a specialist in that field review it alongside us.