Introduction
A retailer's compliance questionnaire asks for the factory's social audit. The supplier sends a PDF: an audit report, a CAPR (corrective action plan), a certificate with a familiar logo. It looks complete. Months later, the retailer's own spot check finds excessive overtime and missing fire exits at the same site, and your account takes the reputational hit. Every document in our compliance library is tied to a specific construction; see how the silicone-coated parchment sheets and rolls programme aligns test reports with the exact grade supplied.
Social compliance audits — amfori BSCI and Sedex SMETA above all — are the standard currency for labor-conditions assurance in the packaging supply chain. But a document proving an audit happened is not proof that conditions are compliant, and forged or recycled audit PDFs are common enough that verification is now a buyer skill, not a formality. Buyers verifying these specifications can review the certificate library alongside supplier documentation requests.
This guide explains what each audit scheme actually covers, how the two differ, how to verify a report is genuine and current, which findings matter most, and what a supplier verification file should contain before you approve a paper packaging converter.
1. What amfori BSCI Actually Covers
BSCI, now operated under the amfori trade association, is a social auditing system built around the amfori BSCI Code of Conduct. It is a supplier-facing program: the buyer (an amfori participant) requests that a factory be audited against thirteen performance areas. Documentation scope is confirmed per SKU and destination market, as outlined on our food-grade die-cut parchment rounds page.
The core areas buyers should know:
- Forced labour and freedom of association
- Child labour and young workers, with special protections
- Working hours, including overtime limits and rest days
- Remuneration: minimum wage, overtime pay, lawful deductions
- Health and safety — the area where most nonconformities are raised, especially in converting plants with cutting machinery
- Discrimination, decent working conditions and no precarious employment through improper agency labor
Audits are carried out only by approved auditing companies, and results are graded from A to E, with a zero-tolerance list (child labour, forced labour, immediate life-threatening hazards) that triggers escalation rather than a simple grade. One important structural point: BSCI is a monitoring system, not a certification. Suppliers receive an audit report and a corrective action plan — not a "BSCI certificate". Any supplier handing you a certificate with an expiry date should be asked what document they are actually holding. The factory and certificate library lists the third-party audits and test reports behind these claims.
2. What Sedex SMETA Adds
Sedex is a data platform; SMETA (Sedex Members Ethical Trade Audit) is the audit methodology run on it. SMETA is built on the ETI Base Code plus local law, and its distinctive feature is modularity:
- 2-Pillar audit: Labour Standards plus Health and Safety — the baseline most buyers accept.
- 4-Pillar audit: adds Environment and Business Ethics, often required by food retailers with broader ESG questionnaires.
SMETA outputs include the audit report, the CAPR with corrective actions and timeframes, and — where the auditor agrees — a SMETA summary uploaded to the Sedex platform so multiple customers can view one shared report instead of each paying for its own. For buyers, working through the Sedex platform rather than emailed PDFs is the single biggest reliability upgrade available: the report is tied to a registered site (a 7-character ZC number) and the posting is controlled by the auditee.
3. BSCI and SMETA: Practical Differences for Buyers
Both schemes assess working hours, wages, child labor, forced labor and health and safety, and both use SAAS-accredited or scheme-approved audit firms. Differences matter mainly in three situations.
If your customer mandate names amfori BSCI, audit to BSCI; if it names SMETA, audit to SMETA. Interchangeability is partial — many retailers accept either, some accept only one.
Audit frequency and closure style differ: BSCI follows a two-year audit validity window with the next full audit expected then, while SMETA validity is a recommendation (typically six to twelve months for the next audit or follow-up, depending on findings) and corrective action closure can be verified by the same auditor. In practice, compare suppliers on the findings, not the scheme name: a supplier with a genuine 4-Pillar SMETA and closed noncompliances is a stronger signal than any logo.
For food paper packaging specifically, health and safety findings cluster around machine guarding on sheeters and die-cutters, dust extraction, noise, emergency exits in warehousing and chemical handling for inks and coatings — so read the H&S section with those risks in mind.
4. Verifying the Report Is Genuine
Document fraud ranges from Photoshop to a real report for a different site being reused. A layered check catches most of it.
Step 1 — check the audit firm and auditor. The report must name a scheme-approved auditing company and a qualified auditor. Contacto the audit firm with the report number to confirm it exists and matches.
Step 2 — use the platform. For SMETA, ask the supplier to share the report through Sedex with their ZC site number, or grant you a viewer link. For BSCI, the audit firm or the amfori participant who commissioned the audit can confirm it through the amfori platform — a genuine supplier whose audit was commissioned by a real buyer will have no problem doing this.
Step 3 — check internal consistency. Dates, site address, worker count and production type should match what you know. A "baking cup factory" report describing 2,000 garment workers is recycled. Check the audit date: a report older than the validity window is not current coverage.
Step 4 — check the sampling. Real audit reports show document samples (payroll months reviewed, interviews conducted, management interviews). An "audit" with no sample data may be a walkthrough only, which is a different and weaker service.
5. Red Flags and Common Problems
- "BSCI certificate" language: BSCI issues reports, not certificates. This wording is itself a flag.
- Perfect scores everywhere: real audits almost always list some findings. A spotless report deserves a call to the audit firm.
- CAPR missing: a genuine SMETA or BSCI audit produces a corrective action plan. If the supplier sends only a certificate-like summary, request the CAPR and closure evidence.
- Same report shared by two different suppliers, or photos inside the report showing a different site type.
- Zero-tolerance history undisclosed: ask directly about past zero-tolerance issues and their remediation; schemes and buyers treat well-documented remediation far better than discovered concealment.
- Agency workers invisible: converting plants legitimately use labor agencies; a report showing no agency workers at a seasonal factory suggests the audit saw only the permanent roster.
6. Building the Supplier Verification File
Before approving a paper packaging supplier, assemble and date-stamp:
- The current audit report (BSCI or SMETA, correct pillar count) with CAPR and evidence of closure for each noncompliance
- The platform reference: Sedex ZC number with sharing enabled, or amfori platform confirmation
- The audit firm's engagement confirmation, so you can verify independently
- A written commitment to re-audit within the scheme window and to notify you of any new zero-tolerance issue immediately
- Your own review notes: who checked what, when, against which database
Then set the maintenance rhythm: refresh the file after each new audit, re-verify the platform link annually, and re-review after any ownership change, site move or capacity jump — three triggers where social compliance most often drifts.
Conclusion
BSCI and SMETA give wholesale buyers a common language for labor conditions in the paper packaging supply chain, but the value is only as good as the verification behind it. Check the scheme, the audit firm, the platform record and the internal consistency of the report; read the CAPR, not just the summary; and keep a dated verification file per supplier. Suppliers who cooperate smoothly with this process are demonstrating in the moment the transparency the audit is supposed to prove. Our custom silicone-coated baking parchment paper programme is audited against the same standards referenced in this guide.
Is BSCI a certification?
No. amfori BSCI is a monitoring system that produces an audit report and corrective action plan, not a certificate. Suppliers claiming a "BSCI certificate" should be asked to show the actual report.
What is the difference between a 2-Pillar and 4-Pillar SMETA audit?
The 2-Pillar covers Labour Standards and Health and Safety. The 4-Pillar adds Environment and Business Ethics, which broader retailer ESG requirements often demand for packaging suppliers.
How long is a social compliance audit valid?
BSCI audits run on a two-year window; SMETA recommends the next audit within six to twelve months depending on findings. Either way, check the audit date against your supply period.
Can I verify a supplier's SMETA report online?
Yes. Ask the supplier for their Sedex site (ZC) number and to share the report with your account through the Sedex platform, which ties the report to a registered site.
What should I do if I suspect a forged audit report?
Contacto the named audit firm with the report number, ask for the platform record, and pause supplier approval until confirmed. Report confirmed fraud to the scheme operator.
CTA
Send LANGMAI your supplier approval checklist. The team can provide current social compliance audit documentation with platform access, CAPR closure evidence and food-contact certificates together, so quality and compliance files are closed in one pass.
Request Compliance Documentation