Amazon and Marketplace Supplier Audits: What Platforms Require and How to Be Ready

When the marketplace audits the factory, not the listing

A category manager at a large online marketplace sends a short message to your sales team: provide a valid social compliance audit for the production site within a set window, or the listings come down. There is no phone call and little room to negotiate. For many suppliers in Turkey, that message is the moment social compliance stops being a paperwork exercise and becomes a condition of selling.

Selling on a major platform used to be a purely commercial relationship built on price, stock, fulfilment and reviews. That has shifted. The largest marketplaces now treat the people and conditions behind a product as part of the product itself. Amazon, Walmart, Otto, Zalando and a growing list of platforms publish supplier or supply chain standards and ask sellers to prove, through an independent audit of the actual production site, that those standards are met. The audit looks past your brand and your storefront and into the factory floor where the goods are made.

Two forces are pushing this. The first is reputational, because a marketplace cannot afford a forced-labor or factory-safety story attached to products it sells under its own name or hosts for third parties. The second is regulatory. Germany's Supply Chain Due Diligence Act already obliges large companies to find and act on human-rights and environmental risks in their supply chains, the EU Corporate Sustainability Due Diligence Directive extends that duty across the single market, and the EU Forced Labour Regulation will let authorities pull non-compliant goods from sale. Marketplaces sit above thousands of suppliers, so they pass the due-diligence obligation down to the firms that run the production sites.

What a supplier code actually asks of you

Behind every marketplace program sits a code, and the codes echo each other because most trace back to the International Labour Organization conventions. Read past the cover page and the same families of requirement appear: working hours and rest days, wages and benefits paid lawfully and on time, no child labor with verified ages on file, no forced or bonded labor and a genuine freedom to leave, freedom of association, health and safety covering fire exits, machine guarding, protective equipment and chemical handling, decent conditions in any dormitory or canteen, environmental permits and waste handling, and a management system that shows all of this is controlled rather than improvised.

The practical shift for a supplier is that good intentions are not auditable. An auditor confirms only what can be evidenced: time records that reconcile with payroll, age documents on file, a fire drill that actually took place, a chemical inventory with safety data sheets. A factory can treat its workers well and still fail because it cannot prove it.

What sets an audit in motion

Suppliers often picture an audit as a one-time entry ticket. In a marketplace setting it behaves more like a recurring condition, and several events can trigger it, sometimes with little notice.

• Onboarding as a supplier of the marketplace's own-brand or private-label goods, where a social audit is usually mandatory before the first purchase order.
• The risk profile of the product category and the production country, since apparel, footwear, toys and hand-assembled electronics draw scrutiny faster than low-risk goods.
• Joining a specific program or moving into a regulated market, where a buyer's own due-diligence duty cascades onto you.
• The audit calendar itself, because most schemes set a re-audit interval and a weaker result shortens it.
• A grievance, a tip-off or a press report about a site, any of which can prompt an unannounced visit.

That last point deserves emphasis. Several recognized programs now default to an announcement window rather than a fixed date, precisely so the auditor sees an ordinary working day. A site that behaves well only when it knows the auditor is coming is exactly the situation these programs are built to expose.

One audit, many buyers: the recognized schemes

The encouraging news for a supplier juggling several marketplaces is that you rarely need a separate audit for each one. Platforms converge on the same short list of recognized programs, and a current report from one is usually accepted by the others. The names you will meet most often are an amfori BSCI audit, the Sedex methodology behind a SMETA audit, and the certifiable SA8000 standard. Where a platform runs its own program, such as an Amazon supplier audit, it will still usually accept a recent report from one of these frameworks rather than insist on a fresh visit.

The differences between the schemes matter less to a seller than the overlap. The framework audits grade a site against a shared social baseline and produce a dated report, while the certifiable standard sets a higher bar and ends in a third-party certificate. The practical move is the same in every case: confirm which report your largest buyer accepts, commission that one, and reuse it across the platforms that recognize it instead of paying for the same visit twice.

Getting ready before the clock starts

The suppliers who pass a marketplace audit cleanly are rarely the ones with the newest building. They are the ones who prepared in the right order and did not wait for the request email. A workable sequence starts well before any auditor is booked.

Begin by pinning down what will actually be audited. Marketplaces assess a production site, not a company name, so the first question is which factory and which legal entity fall in scope. A trading company that subcontracts to three workshops has three sites to manage, not one, and getting this wrong is the most common way an audit is wasted. Then choose the scheme your key buyers recognize before you book anything, so a single visit serves every platform you sell on.

With that settled, run an honest internal gap assessment against the relevant code, ideally with someone who has sat on the auditor's side of the table. An independent social compliance audit run as a pre-audit surfaces the findings while you still have time to fix them, rather than on the day itself. Fix the records before the building: a working-hours and payroll picture that does not reconcile is the fastest route to a poor rating, and it cannot be repaired on the morning of the visit. Age verification files, employment contracts, social-security registration, overtime consent and pay slips need to be complete and consistent across every system that holds them.

The records an auditor opens first

If you concentrate effort anywhere, make it the documentary backbone of the social system: time records that reconcile with wages, evidence that no one below the legal age is employed, proof that hours and overtime stay within limits, and the permits a fire officer or labor inspector would expect to see. Only after the paperwork holds together does it pay to turn to the physical floor, where blocked or locked fire exits, missing machine guards, unlabeled chemicals and absent protective equipment are the findings that recur audit after audit and are usually inexpensive to close once someone owns them. A spotless site with a thin paper trail still earns a weak rating, because an auditor cannot verify what was never written down.

After the visit: findings, ratings and the cycle that follows

An audit does not end with a simple pass or fail. Most frameworks grade the site and list findings by severity, from minor observations up to zero-tolerance issues such as child labor, forced labor or an immediate danger to life. A zero-tolerance finding can suspend a supplier on the spot and is reported straight to the buyer. Everything else flows into a corrective action plan with deadlines, and the supplier has to show evidence that each item is closed, often through a follow-up visit or a desktop review.

The rating then sets the rhythm. A strong result buys a longer interval before the next audit, while a weak one brings the auditor back sooner and can put listings or purchase orders on hold until the site recovers. Treating the corrective action plan as the real deliverable, rather than the audit day, is what turns a yearly scramble into a stable position across every marketplace you supply.

Selling through Amazon, Walmart, Otto or any large platform increasingly means being ready to open your factory to an independent auditor on the buyer's timetable rather than your own. When a marketplace asks for an audit, or you can see the request coming, the calm path is to confirm the recognized scheme, run a pre-audit, and put the records right first. Eurocert audits suppliers against the major social-compliance frameworks and can help you align a single report with what your marketplaces will actually accept.