CNC Supplier Audit Checklist: Key Items

Why a Structured Audit Matters Before Placing Orders

Procurement teams often rely on sample parts and price quotes to select machining partners. This approach leaves gaps. A supplier can produce a good sample and then fail on a production run of two hundred thousand parts due to poor process controls. A cnc supplier audit closes these gaps by testing the system behind the parts.

The goal is not to police the supplier. The goal is to confirm that they have the controls to prevent defects, detect problems early, and correct them when they occur. This protects your product quality, shortens onboarding, and reduces the risk of expensive rework or scrap.

When you place a large order for precision machined components, the cost of a quality failure extends far beyond the part itself. It includes production downtime, field failures, and the loss of customer trust. A structured audit provides a baseline of evidence that the supplier can handle the complexity of your program. It moves the evaluation from a sales conversation to an operational verification.

Quality System Review: What to Check First

Start with the supplier’s quality management system. You are looking for evidence that the system is active, not just certified.

1. Request the latest internal audit report or management review minutes.
2. Ask for the list of open non-conformances and corrective actions.
3. Verify the scope of any ISO certification covers the specific processes you need, such as machining, heat treatment, and surface finishing.
4. Confirm that the quality manager has authority to stop production if controls fail.
5. Check how the supplier handles customer complaints and returns.

A strong system shows history. You should see a log of internal audits, records of operator training, and documented changes to processes. If the supplier cannot show when their last internal audit happened, or if all corrective actions are marked closed without evidence, treat that as a warning sign.

Look closely at the corrective action logs. A mature quality system does not just close tickets. It documents the root cause and the permanent fix. For example, if a bracket was out of tolerance due to a dull insert, the log should show that the tooling vendor was contacted and that a new tool change interval was established. If the log only says “operator retrained,” it suggests the underlying process issue was ignored.

Also review the scope of their ISO certification. Many suppliers hold a general certification but exclude specific services. If you require heat treatment, confirm that the heat treat furnace is within the certified scope. If it is not, the supplier may be outsourcing that step or operating outside their controlled system. Both scenarios introduce risk. You need to know exactly which processes are covered by the certification and which are managed internally without external audit.

CNC Factory Inspection: Verifying Floor Controls

The factory floor is where quality is made or broken. During a cnc factory inspection, walk the shop floor and observe the workflow.

Look for the following:

• Machine Setup: Are machines set up with standard work instructions? Is the operator following a checklist rather than relying on memory?
• Tool Management: Are tools checked, labeled, and stored properly? Uncontrolled tooling leads to dimensional drift and surface finish issues.
• Material Handling: How are raw materials tracked? Can the supplier show you the mill certificates for the aluminum, steel, or titanium you requested?
• In-Process Inspection: Do operators check parts at defined intervals? Look for gauge blocks, micrometers, and CMMs in use, not just sitting on shelves.
• Cleanliness and Organization: A clean floor often reflects good management. Look for organized tool cribs, labeled bins, and clear pathways.

A common mistake is to only inspect the finished goods area. The real indicators are in the machining bays. If you see operators guessing at settings or using uncalibrated gauges, the final inspection step is unlikely to catch the problem.

During your walkthrough, check how they manage tool wear. In high-volume runs, tool wear is a constant variable. A good shop monitors tool life through spindle load, cycle counts, or automated tool breaking. If the operator simply runs until the part looks “off” on the screen, they are relying on subjective judgment rather than controlled data.

Observe the interaction between the CNC operator and the quality engineer. In a well-run facility, the quality team is present on the floor. They are not hidden in an office. They are checking gauges, reviewing CMM reports, and advising operators on setup. If the quality engineer only appears for final inspections, the in-process control is likely weak.

Check the handling of scrap and rework. Where do rejected parts go? They should be segregated in a clearly marked area, often with a red tag or a quarantine bin. If you see defective parts mixed with good inventory or if rework parts are not tracked separately, the risk of shipping a bad part is high. Rework parts require their own inspection to ensure the correction did not introduce a new defect.

Supplier Compliance Check: Materials and Standards

Compliance goes beyond ISO certificates. It covers the specific materials, finishes, and standards required by your product.

For each product family, verify:

• Material Certificates: Mill test reports (MTRs) or mill certificates that match the heat lot of the material used.
• Heat Treatment: If heat treatment is required, ask for the heat treat log and the furnace calibration record.
• Surface Finish: How do they measure and verify surface roughness? Do they have a profilometer or a calibrated comparator?
• Coatings: If plating or anodizing is required, check the coating thickness measurement method and the supplier’s environmental compliance records.

A supplier that cannot provide the mill certificate for the specific heat lot used in a part is not fully traceable. This is a major red flag for aerospace, automotive, or medical applications.

Material traceability is a chain of custody. It starts with the mill certificate from the raw material vendor. It continues through the supplier’s internal heat lot tracking. It ends with the finished part record. If any link in that chain is missing, you cannot prove what is inside the part. For example, if a supplier uses multiple batches of 6061-T6 aluminum in a single run, they must be able to tell you exactly which batch was used for which specific part. If they cannot, they are not managing the material as a controlled variable.

For surface finish, check their measurement method. A roughness value of 0.8 microns is not just a visual judgment. It requires a calibrated profilometer. Ask to see the calibration sticker and the last verification date. If they rely on a micrometer to check surface finish, the method is incorrect. A micrometer checks height, not texture.

If your parts require plating or anodizing, verify the thickness measurement. They should use a calibrated eddy current tester or a thickness gauge. Ask how they handle coating breakdown or porosity. If they do not have a defined acceptance criterion for coating defects, they may ship parts that fail in the field due to corrosion or electrical shorts.

Documentation and Traceability

Traceability is the backbone of quality. If a problem occurs in the field, you need to know which material, machine, operator, and tooling were used.

Ask the supplier to walk you through their traceability process.

1. Can they pull the specific setup sheet for a part number?
2. Can they identify the exact machine used for a specific batch?
3. Do they store first article inspection (FAI) reports for each new part?
4. How do they manage drawing revisions? If you send a revised drawing, do they automatically flag the old version?

A weak traceability system often shows up in the records. Look for handwritten notes, missing signatures, or reports that do not match the part number. If the supplier uses a legacy system that does not integrate machine data, ask how they compensate for that gap.

Traceability is not just about paperwork. It is about the ability to isolate a problem. If a batch of parts fails, you need to know if the failure is due to a specific operator, a specific machine, or a specific batch of material. If the records do not allow you to isolate these variables, you are left guessing. This delays corrective action and increases the cost of the recall.

Check how they manage drawing revisions. This is a common failure point. If you send a revision of a drawing, the supplier must have a process to stop the use of the old revision. If they continue machining with the old drawing, every part produced is a non-conformance. Ask to see their document control log. They should have a record of when each revision was released, when it was received, and when it was retired.

Also check their setup sheets. A good setup sheet includes the part number, revision, tool list, program name, and operator signature. It should be attached to the job. If the setup sheet is a generic template that does not change with the part, it is not a control. It is just a form. The sheet must reflect the specific parameters for that part.

First Article Inspection and Ongoing QC

First Article Inspection (FAI) is the gatekeeper for new parts. It verifies that the part meets all drawing requirements before mass production begins.

Check the following for their FAI process:

• Scope: Does the FAI cover all critical characteristics, or just a subset?
• Method: Do they use CMM, optical measurement, or manual gauges? The method must match the tolerance.
• Approval: Who signs off the FAI? Is it a qualified inspector or the machine operator?
• Retention: Are the FAI reports stored for the life of the part or longer?

For ongoing production, check their in-process and final inspection frequency. A supplier that only inspects 100% of parts at the end of the run is reactive. A good supplier inspects in-process to catch drift early.

Inspection Stage	Typical Check	Key Question to Ask
First Article	Full drawing compliance	Who approves the FAI report?
In-Process	Critical dimensions, surface finish	How often is the part measured?
Final Inspection	100% or AQL sampling	What is the acceptance criteria?
Pre-Ship	Packaging, labeling, documentation	How are parts protected during transit?

The FAI report should be a complete record of the part’s characteristics. It should include measured values, not just pass/fail statements. If the report only says “dimension 1 is good,” it is not useful. It should say “dimension 1 measured 10.002 mm, tolerance 10.000 to 10.005 mm.” This level of detail allows you to verify that their measurement method is appropriate for the tolerance.

Check who signs off the FAI. It should be a quality engineer or a certified inspector, not the machine operator. The operator built the part. The inspector verifies it. If the operator signs the FAI, there is a conflict of interest. They are judging their own work. A qualified inspector provides an independent check.

For in-process inspection, check the frequency. If a part is machined over a ten-hour shift, you need measurements at regular intervals. For example, after every 50 parts, or every hour, depending on the process. If they only measure the first part and the last part, they are not controlling the process. They are hoping the process stays stable. In-process checks allow them to detect drift and adjust the machine before a large batch of bad parts is produced.

Red Flags to Watch For

Some signs indicate a poor quality culture. These should trigger a deeper review or a walk-away decision.

• Vague Answers: If the quality manager cannot explain how a specific defect is prevented, the process is likely not defined.
• Missing Calibrations: If the supplier cannot show the last calibration date for their micrometers or CMM, their measurements are unreliable.
• No Corrective Action: If the same defect has occurred three times and there is no documented fix, the system is not working.
• Pressure to Skip Steps: If the supplier suggests skipping FAI to save time or money, they are prioritizing speed over quality.
• Lack of Training Records: If operators are not trained on the specific processes they perform, the risk of error is high.

Do not ignore the tone of the conversation. If the quality manager is defensive or dismissive, it is a sign that the quality system is not integrated into the daily operations. They may view quality as a burden rather than a core function. If they cannot explain the “why” behind their controls, they are likely following a checklist without understanding the purpose.

Check for signs of shortcutting. If you see parts stored in a way that could lead to damage or contamination, it shows a lack of care for the product. If they use the same tool for different materials without cleaning, it shows a lack of process discipline. These small details reveal the bigger picture of how the facility operates.

Final Steps: Scoring and Decision

After the audit, score the supplier against your critical requirements. Weight the items based on your product’s risk. A consumer electronics part may prioritize surface finish and packaging. An aerospace part may prioritize material traceability and CMM capability.

Do not rely on a single audit. Revisit the supplier periodically. A cnc factory inspection should be part of your ongoing supplier management, not just a one-time event.

Keep the checklist handy. Use it to compare multiple suppliers on the same criteria. This makes the decision objective and defensible.

When scoring, do not give equal weight to every item. A missing calibration certificate is a critical failure. A slightly disorganized tool crib is a minor issue. Your scoring model should reflect the risk of your product. If your part is safety-critical, a minor issue in calibration is actually a major risk. If your part is cosmetic, the risk profile is different.

Create a scorecard that lists each audit item, the weight assigned to it, and the score received. This allows you to compare suppliers on a level playing field. It also provides a record of your decision-making process. If a supplier fails on a critical item, they may not be a viable partner, regardless of their price. If they pass on the critical items but fail on a minor item, they may be a viable partner with a plan to improve.

The audit is not just a gate. It is a conversation. Use it to identify gaps and discuss how the supplier will close them. A good supplier will welcome the audit and work with you to improve their process. A bad supplier will resist and try to minimize the findings. Your goal is to find a partner who values quality as much as you do.