Major retail audits: meeting Inditex, Primark and Disney requirements

An apparel factory near Istanbul lands its first purchase order from a household-name brand, then opens the onboarding pack and finds the celebration was premature. The brand is not asking for a certificate the factory can buy and frame. It wants the site enrolled in the brand's own compliance programme, audited against the brand's own code of conduct, and every production facility named before a single garment is cut. The SMETA report the team worked hard for last year helps the conversation, but it does not close the deal on its own. The brand runs its own programme, on its own terms.

This is the part of social compliance that catches good suppliers off guard. Above the shared industry schemes sits a second layer: the proprietary audit programmes that the largest retailers and brand owners run for the factories that make their products. Inditex, Primark and Disney each operate one, and each has its own name, its own rulebook and its own way of saying no. The encouraging part is that all three rest on the same foundation, so a factory that prepares properly for one is most of the way to the others. The danger sits in a few brand-specific lines that, if missed, stop an order cold.

Why the biggest brands run their own programmes

A retailer that places large, recurring orders carries the reputational risk when a factory in its chain is found using child labour or chaining a fire exit shut. A generic audit shared on a platform tells that retailer something useful, yet it hands over little control of scope, frequency or the issues the brand cares about most. So the largest buyers build their own programmes on top of the industry baseline: a code of conduct the supplier signs, an approved-factory list, an audit they commission or recognise, and a rating that decides whether orders keep flowing. The programme is not a product you purchase. It is a relationship you enter, and it lasts as long as you supply the brand.

Underneath the logos, the rulebooks rhyme. All three trace back to the core conventions of the International Labour Organization and an ETI-style base code: no child or forced labour, freedom of association, no discrimination, wages and hours within the law, a safe workplace, and real employment rather than disguised day labour. The evidence an auditor asks for barely changes from one brand to the next: the same payroll, age-verification and safety records that anchor any credible social audit. Worker interviews sit at the centre of all three, because a clean file means little if the floor tells a different story. That shared core is the reason preparing once, and properly, pays off several times over. Many brands also accept a current platform audit, so the Sedex SMETA audit and the amfori BSCI audit a factory already holds can carry part of the load.

Inditex: traceability and a rating that gates orders

Inditex, the group behind Zara and its sister brands, assesses suppliers against its Code of Conduct for Manufacturers and Suppliers, and the spine of the programme is traceability. Every facility involved in making the product, down through the tiers, has to be declared and approved before production begins. An undisclosed workshop is treated not as a paperwork slip but as a breach of trust, because the entire programme depends on the brand knowing where its garments are genuinely made. Audit results feed a tiered supplier rating, and the weakest band effectively blocks new orders until the factory remediates, which gives the rating real commercial weight. Health and safety carries firm red lines too, including process restrictions the brand has adopted to protect workers. What the assessment examines and how the rating behaves is set out on our Inditex audit page.

Primark: approval before production, transparency after

Primark, part of Associated British Foods, works from a Supplier Code of Conduct anchored in the ETI Base Code, and its programme leans on two ideas: approve the factory before it makes anything, and stay transparent about where production sits. A site usually has to pass an ethical assessment and gain approval before the first order rather than after, which front-loads the scrutiny onto the sourcing decision. Primark also publishes its supplier list, so a factory's place in the chain is a matter of public record, and that visibility raises the cost of any later surprise. In practice the brand recognises credible third-party audits and runs its own local ethical-trade teams to verify findings and support remediation, with the weight on fixing problems rather than walking away at the first nonconformity. What the programme covers and how approval works is described on our Primark audit page.

Disney: disclosed facilities and the licensing dimension

Disney sits apart because it mostly licenses its characters rather than sourcing directly, so the obligation flows through licensees to the factories that make the merchandise. The framework is the International Labor Standards programme, and its gatekeeper is FAMA, the Facility and Merchandise Authorization process. Before a factory may produce Disney-branded goods, it has to be declared and authorized, and it then sits on a permanent facility list the company tracks. As with Inditex, an undisclosed facility making branded product ranks among the most serious failures in the system, and higher-risk locations carry extra conditions. Disney recognises a set of established audit programmes for the social assessment itself, which means an existing platform audit can often satisfy the labour-standards check once the facility is properly authorized. The authorization and audit steps for licensed production are covered on our FAMA and Disney audit page.

What the brand programmes share, and where they part

Set the three side by side and the overlap is larger than the difference. The labour and safety clauses come from the same ILO and ETI roots, the audit anatomy is the familiar sequence of opening meeting, document review, site walk, worker interviews and closing, and the corrective-action discipline afterward looks much the same. They part in three places worth knowing before an auditor arrives. The first is traceability and subcontracting: Inditex and Disney in particular treat an undisclosed facility as a programme-level breach, not a minor finding. The second is the gate: Primark and Disney want the factory approved or authorized before production, so the calendar matters as much as the condition of the floor. The third is ownership of the result. A brand-programme rating lives with the brand and governs your orders with that brand alone, unlike a certificate you hold and present to anyone who asks.

Preparing once for buyers who each want their own audit

For a factory selling to several big names, the real threat is audit fatigue, the slow erosion of management time spent hosting visit after visit. A handful of habits keep it in check.

• Disclose every facility before you accept the order. Unauthorized subcontracting is the single fastest way to lose a brand, and it cannot be repaired after an auditor uncovers it.
• Build one social management system to the ETI Base Code, then treat each brand's extra clauses as a short delta rather than a fresh project. The shared core is most of the work already done.
• Keep one document pack audit-ready year-round, built around the same payroll, age-verification and safety records that anchor any credible social audit. The brand-specific checklist lives on each programme's own page, such as the Inditex audit detail, so you build to a published list rather than from memory. Most major nonconformities trace back to records, not intentions.
• Reuse the audits a brand accepts. Where a buyer recognises a platform result, a current SMETA or BSCI can carry the labour-standards check, so you do not pay for the same week of disruption twice.
• Close corrective actions to root cause. Brands study how you resolve findings as closely as the findings themselves, and a credible closure record shortens the next visit.

The practical shift is to stop seeing Inditex, Primark and Disney as three unrelated hurdles and start seeing them as three doors onto the same well-run factory. Get the social management system, the documentation and the facility disclosure right, and most of each programme is satisfied before the brand-specific layer is even added. If you are facing a first audit from any of these brands, our specialists across the Inditex audit, the Primark audit and the FAMA and Disney programme can map the request sitting in your inbox to the preparation that genuinely moves the needle.