Supplier qualification and evaluation: criteria, stages and monitoring

Supplier qualification and evaluation turns a commercial choice into a controlled decision. Rather than approving a company on price or recommendation alone, the organization defines what must be demonstrated, which risks are acceptable and how performance will be monitored after contracting.

Externally provided products, services and processes can directly affect customer conformity. The ISO 9001 Auditing Practices Group guidance on external providers highlights approved-provider information and purchasing against defined criteria.

Qualification is more than document collection

Documents show part of a supplier’s capability, but not whether requirements will be met consistently. A sound decision combines legal status, technical capacity, quality performance, integrity, security and continuity.

Dimension	Central question	Evidence examples
Legal and documentary	Is the supplier authorized and compliant?	registrations, licenses, insurance and certificates
Technical and operational	Can it perform the scope?	capacity, competence, equipment and contingency
Quality and performance	Does it meet requirements consistently?	SLAs, indicators, incidents and audits
Integrity and security	Does the relationship create material exposure?	access, information security, compliance and supply-chain controls

The decision should be explicit: approved, conditionally approved or rejected. Any exception needs an owner, rationale, time limit and compensating controls.

1. Classify supply risk

A stationery supplier and a carrier handling international cargo should not receive identical scrutiny. Assess impact on customers, operations, legal duties, data, security and continuity. Consider substitution time, failure history, contractual requirements and access to sensitive cargo or information.

Higher exposure calls for deeper selection and usually shorter reassessment cycles. This connects supplier control with quality risk management.

2. Define criteria before evaluation

Vague criteria create indefensible scores. Replace “good service” with an observable requirement such as “responds to critical incidents within two hours under the SLA.”

Use common and category-specific questions. Carriers may require tracking, maintenance and contingency; freight forwarders need partner-network, shipment visibility and document controls; warehouses need access, inventory and fire protection; technology vendors need backups, identity management and continuity.

Set weights and identify mandatory criteria. A critical failure should not disappear inside a favorable average.

3. Evaluate with evidence

A questionnaire may use Yes, Partial, No and Not Applicable. Each answer needs suitable support. Record the gap and required action for partial or negative answers, and explain why a requirement is not applicable.

When documents are insufficient, use samples, interviews, tests, site visits or a supplier audit. Depth should follow risk rather than paperwork volume.

4. Decide and control exceptions

Scoring supports comparison but does not replace judgment. Review critical requirements, dependencies and residual risk before approval.

• Approved: requirements are met for the assessed scope.
• Conditionally approved: manageable gaps have owners and deadlines.
• Rejected: a critical requirement or risk tolerance is not met.
• Strategic exception: leadership authorizes temporary use with controls and a review date.

Convert treatable gaps into a 5W2H action plan.

5. Monitor actual performance

Qualification is the opening snapshot. Ongoing evaluation measures delivery, document accuracy, damage, availability, complaints, nonconformities and incident response.

Select a small number of indicators tied to risk. Poor results should trigger a proportionate response: meeting, corrective action, audit, scope restriction, more frequent review or replacement.

Reassess on schedule and after material changes, serious failures, expired critical documents, security incidents or sustained performance decline. The Brazilian AEO implementation guide similarly addresses formal partner selection and ongoing monitoring according to supply-chain risk.

How Konvéz Quality supports the process

Konvéz Quality registers carriers, freight forwarders, customs brokers, warehouses, insurers, technology companies and other providers. Organizations can flag strategic suppliers and maintain common or type-specific weighted questions.

Evaluations retain the owner, answers, comments, score, classification and next-review date. History supports comparison, while rejection of a strategic supplier requires an additional leadership decision in the workflow.

This places supplier evidence inside the broader quality management system while leaving criteria and approval accountability with the organization.

Official sources

• ISO 9001 Auditing Practices Group — External Providers
• Brazilian Federal Revenue — AEO implementation guide
• World Customs Organization — SAFE Framework

Qualification makes the initial decision evidence-based. Evaluation uses subsequent performance to confirm or revise it.

Frequently asked questions

What is the difference between supplier qualification and evaluation?

Qualification decides whether a supplier is fit to provide a defined scope. Evaluation measures actual performance and supports decisions to retain, develop, restrict or replace that supplier.

Should every supplier use the same questionnaire?

No. Control depth should reflect risk and impact. Carriers, technology providers, warehouses and general service providers require different technical criteria.

How often should suppliers be reassessed?

The organization should set intervals according to criticality, performance and change. Critical suppliers or those with recurring failures require closer monitoring.