SQM · Supplier quality · Vendor management
Supplier quality: approval, CoAs, SCARs and scorecards in one place.
See each supplier's approval status, certificates and SCARs alongside the lots they shipped, so receiving teams know what needs review.
Approved Supplier List that's actually live
Approval status, scope, expiration, and required documents are first-class data.
COA Verification — Automated Against Spec
Supplier COAs parsed against the item spec.
SCAR with Effectiveness Check
Supplier Corrective Action Requests follow the same gate as internal CAPA — root cause required, effectiveness verification mandatory before close.
What goes wrong today3 common problems
Supplier Approval Lives in a Folder No One Updates
Last year's audit is in a PDF on someone's desktop. The new ingredient gets received because no one checks.
COA review is manual and slow
Receiving waits for QA to open the PDF and key the values. Lots sit on the dock, the line goes idle.
SCARs Disappear into Email
The supplier says they fixed it. There's no proof, no effectiveness check, and the same defect arrives next quarter.
Everything V5 does here4 capabilities
Approved Supplier List that's actually live
Approval status, scope, expiration, and required documents are first-class data. Receiving cannot accept a lot from a lapsed supplier.
COA Verification — Automated Against Spec
Supplier COAs parsed against the item spec. In-spec releases; out-of-spec opens a deviation linked to the lot, the supplier, and the next SCAR.
SCAR with Effectiveness Check
Supplier Corrective Action Requests follow the same gate as internal CAPA — root cause required, effectiveness verification mandatory before close.
Scorecards that drive sourcing decisions
On-time delivery, COA accuracy, SCAR cycle time, defect rate — trended per supplier, per item, per site. Purchasing sees the truth before the next PO.
How it works, step by step6 steps
The supplier quality loop in V5, from onboarding to scorecard.
- Risk-Tiered Qualification. New supplier qualification gathers capability data, audit results, and certifications. The risk tier sets COA frequency, audit cadence, and verification testing intensity.
- Status Visible at Purchase. Procurement sees live scorecards at PO: OTIF, COA conformance, NCR rate, open SCARs. Lapsed re-qual blocks the PO.
- Dock Gates Conformance. Inbound lot scan reads ASL status, parses COA, samples per plan, and quarantines on non-conformance. No human discretion required.
- Genealogy Captures Lot. Supplier lot follows the material through the bill, preserved in forward and reverse genealogy. Any finished lot resolves back to every supplier input.
- SCAR with Effectiveness. Non-conformance opens a SCAR with root cause, action, and effectiveness verification. The supplier portal carries the loop; closure is signed by both sides.
- Scorecards Drive Review. Live scorecards anchor the quarterly business review with each supplier. Risk tier may move up or down based on trended performance.
What to look for when choosing
Supplier quality is where most QMS programs visibly leak: lapsed approvals, missing COAs, SCARs that never close.
ASL Tied to Receiving
Does the Approved Supplier List actually block receiving from lapsed suppliers — or is it a posted spreadsheet? ASL status is read at the dock scan. Lapsed approval refuses receipt.
COA Verification Before Release
Does the system parse COA values, compare to spec, and gate material release on conformance? COA values parse against spec at receipt. Non-conforming attributes quarantine the lot automatically.
SCAR as a closed loop
Does the Supplier Corrective Action Request track root cause, action, and effectiveness — or is it just an email? SCARs follow the CAPA lifecycle with effectiveness verification. Closure is gated on signed evidence.
Scorecards from Receiving Data
Are supplier scorecards derived live from receiving, deviations, and SCARs — or assembled quarterly in Excel? Scorecards trend live: OTIF, COA conformance, NCR rate, SCAR cycle. Procurement sees them at PO.
Re-Qualification Cadence
Does the system schedule re-qualification audits based on risk and tier — and lock the ASL when overdue? Re-qual cadence is risk-tiered and scheduled. Overdue re-qual flags the supplier and gates receiving.
Material Genealogy Back to Supplier
Can you trace from a finished lot back to every supplier, lot, and COA in its bill? Reverse genealogy resolves every supplier lot in the finished product in one query.
Supplier Portal with Controlled Docs
Can suppliers upload COAs, certifications, and acknowledgements through a controlled portal — not email? Supplier portal handles COA upload, doc acknowledgement, and re-qual evidence with full audit trail.
Risk-based segmentation
Does the system tier suppliers by risk — and apply controls proportional to tier? Risk tier drives controls: COA frequency, audit cadence, sampling intensity, escalation thresholds.
V5 Compared with Other Approaches
Supplier quality compared to a vendor spreadsheet or a procurement-bolted module from a legacy ERP/QMS.
| capability | spreadsheet | legacy Qms | v5 |
|---|---|---|---|
| ASL blocks dock | No — posted only | Sometimes, with lag | Yes, at scan |
| COA value parsing | Manual | Manual or weak OCR | Parsed and spec-gated |
| SCAR effectiveness gate | No | Optional | Mandatory |
| Live scorecards | Quarterly | Monthly export | Live at PO |
| Re-qual lockout | No | Reminder email | ASL flag + dock block |
| Supplier portal | Email attachments | Sometimes; clunky | Controlled portal, audit trail |
| Genealogy to supplier lot | Manual | Manual report | One-query reverse trace |
| Time to deploy | Day 1 | 6-12 months | 10-14 days |
Regulations this supportsYour quality team stays responsible for compliance
Supplier-control clauses auditors test verbatim.
21 CFR 820.50
Receiving in V5 enforces conformance: approved supplier, current re-qual, COA-on-spec, sampling-as-required. Non-conforming receipts quarantine automatically.
21 CFR 820.50(a)(1)
Supplier qualification is structured data: capability assessment, audit results, scorecard trend. Selection criteria are auditable, not anecdotal.
ISO 13485 §7.4.1
Purchasing info, receiving criteria, and conformance verification are linked records in V5 with audit trail end-to-end.
21 CFR 117.410 (FSMA PC)
Risk-based supplier program with verification activities scheduled, evidenced, and trended live.
ICH Q7 §17
Verification testing cadence is risk-tiered per supplier. Results trend against supplier-reported COA values; drift opens a SCAR.
Standards Referenced
- 21 CFR 211.84 (testing & approval of components — pharma)
- 21 CFR 820.50 (purchasing controls — devices)
- 21 CFR 117.420 (supply-chain program — food)
- ISO 9001 §8.4 (control of externally provided processes)
- ISO 13485 §7.4 (purchasing)
Common questions4 answers
- What does supplier quality management software do?
- It runs the lifecycle of every supplier — approval, qualification, documents (COAs, allergen statements, audits), receiving inspection, non-conformance, SCARs, and scorecards — and links each step to the lots that supplier shipped you.
- Does V5 block receipts from lapsed suppliers?
- Yes. If a supplier's approval has expired or the required document is missing, the dock scan is blocked. The receiver gets a clear reason and a path to escalate — not a workaround.
- Can V5 parse supplier COAs automatically?
- Yes. COAs are matched against the item spec; in-spec lots release, out-of-spec lots open a deviation linked to the supplier and the SCAR workflow. PDF, CSV, and EDI formats are supported.
- How does the SCAR process work?
- SCARs follow the same gate as internal CAPA — root cause analysis required, action plan with owners and dates, effectiveness verification before close. The supplier responds through a portal; nothing lives in email.
