A SMETA audit is the inspection retail buyers ask about before they ask about price — a standardized, on-site examination of how a factory treats the people who work in it, run under the world's most widely used social audit methodology. If your brand sells through major retail, sooner or later a buyer will ask your manufacturer for one. This guide explains what they are really asking for, from the side of the table that gets audited.
The origin story explains the power dynamic. Sedex — the organisation behind the methodology — was founded in 2001 by a group of retailers who wanted one shared way to check labour standards instead of dozens of overlapping questionnaires. SMETA, the Sedex Members Ethical Trade Audit, is the protocol that came out of it: one audit, run by an approved audit company, shareable with every buyer who asks. NSF, one of those approved auditors, counts the Sedex platform at more than 55,000 members across 180 countries, with over 280,000 audits delivered.
For a factory, a SMETA visit is an open-doors exercise measured in days. For a buyer, the resulting report is the closest thing the industry has to an X-ray of a supplier's working conditions. Both sides read it better when they know what is actually in it.
I. What SMETA Is — and What It Is Not
Start with the distinction most suppliers get wrong in their own marketing. SMETA is not a certification. There is no pass mark, no certificate, and Sedex's own guidance is explicit that the methodology deliberately avoids a pass/fail model — the outputs are a detailed report and a corrective action plan, designed for transparency and improvement rather than a badge. A factory that says "we are SMETA certified" is, at best, using shorthand loosely; what it can legitimately say is "we are audited under SMETA, and here is our report." The methodology itself is grounded in the Ethical Trading Initiative's Base Code, which in turn rests on the conventions of the International Labour Organization plus applicable local law, and audit firms date its current iteration, SMETA 7, to a 2024 release.
The second distinction matters just as much for cosmetics buyers: SMETA is a social audit, not a quality audit. It examines people, premises, and practices — not whether the emulsion is stable. Product quality lives next door, in GMP audits against ISO 22716 and in the systems described on a factory's quality assurance page. A serious manufacturer holds both, because a retail program will ask about both — one protects the product, the other protects the people who make it.
II. The Four Pillars, and What Auditors Actually Walk Through
SMETA audits come in two scopes. The 2-pillar audit covers the mandatory core — Labour Standards and Health & Safety. The 4-pillar version adds Environment and Business Ethics — the fuller scope a retail program can specify, and many now do. On the ground, the pillars translate into concrete checks:
| Pillar | What the auditor examines on site |
|---|---|
| Labour Standards (mandatory) | Working hours and wage records, contracts, age verification and child-labour controls, forced-labour indicators, discrimination, freedom of association, disciplinary practices |
| Health & Safety (mandatory) | Fire safety and escape routes, chemical handling and storage, PPE use, machine guarding, emergency procedures, dormitories and sanitation where applicable, building safety |
| Environment (4-pillar) | Environmental permits, waste segregation and disposal, wastewater and emissions, resource use |
| Business Ethics (4-pillar) | Anti-bribery and corruption controls, conflict-of-interest policies, fair dealing |
Notice what dominates the mandatory core: records and physical reality. Auditors cross-check the payroll against the time system against what workers say; they walk the floor looking at extinguishers, exits, and eyewash stations. The pillars are abstractions; the audit is not.
III. One Audit Day, From Opening Meeting to Closing
A SMETA visit follows a choreography that audit firms describe consistently. It opens with a management meeting — scope, schedule, ground rules. Then the site tour: production floors, warehouses, canteens, dormitories if the factory has them, with the auditor photographing conditions as found. Then the document review, which is where preparation shows: working-hour and payroll records, personnel files and age documentation, safety training logs, permits, and equipment certificates. Production paperwork such as batch manufacturing records belongs to the quality audit next door, but the two disciplines rhyme — factories that document one side well rarely improvise the other.
The step that gives SMETA its teeth is the worker interviews. Auditors select employees themselves and speak with them confidentially, without management present, comparing what they hear against what the files say. It is the hardest part of an audit to stage-manage, which is exactly the point. The day ends with a closing meeting where findings are presented and classified by severity, so nobody leaves surprised by the report.
IV. The Report, the CAPA and the Sedex Platform
What comes out of a SMETA audit is a report plus a corrective action plan — the CAP — listing each finding, its severity, and the fix with a deadline. This is where the no-certificate design becomes practical: the question a buyer asks is not "did you pass" but "what was found, and what has been closed." A finding honestly recorded and corrected on schedule reads better to experienced buyers than a suspiciously spotless report, for the same reason a deviation section gives a batch record its credibility.
The report then lives on the Sedex platform, where the factory can grant visibility to any buyer that requests a link — the original promise of the system: one audit, shared with many customers, instead of a new inspection for every retailer. Reports follow a standard format, are produced by approved audit companies only, and where a local language is used they run dual-language with English — a practical detail worth knowing for brands auditing Chinese suppliers.
V. Reading a Supplier Like a Buyer — and the IWAY Layer
When a retail QA team opens a supplier's SMETA report, four checks come first:
| Check | Why it matters |
|---|---|
| Audit date and SMETA version | A report ages; recent audits under the current methodology carry more weight |
| Pillar count | Whether the scope was the 2-pillar core or the full 4-pillar review your program expects |
| Findings — open versus closed | The CAP status is the real story; unresolved critical findings are the red line |
| Auditor and audit type | Which approved firm ran it, and whether it was announced, semi-announced, or unannounced |
Above the SMETA baseline, major buyers layer their own codes. IKEA runs suppliers through IWAY, its own supplier code of conduct with its own auditors and thresholds; other retail groups operate equivalent programs. For a factory, these stack rather than substitute — the social-compliance file becomes a portfolio. That portfolio, alongside the quality file, is what buyers of scale are really weighing when they shortlist cosmetics OEM and ODM manufacturing partners: not whether a factory can pass one visit, but whether openness to scrutiny is how it normally operates.
Frequently Asked Questions
Is a SMETA audit a certification?
No — and the distinction is worth policing in supplier conversations. SMETA produces an audit report and a corrective action plan, not a certificate, and Sedex explicitly avoids a pass/fail model. When a factory claims to be "SMETA certified," ask instead for what actually exists: the date of the last audit, the pillar scope, the audit firm, and the current status of the corrective action plan. Those four answers tell you everything the imaginary certificate would have.
Should a buyer ask for a 2-pillar or 4-pillar audit?
The 2-pillar audit covers the mandatory heart of the methodology — labour standards and health and safety — and for many programs that core is the non-negotiable minimum. The 4-pillar version adds environment and business ethics, and many larger retail programs ask for it, particularly where environmental legislation touches their own reporting. The practical answer: specify the scope in your supplier requirements, because "we have a SMETA" can mean either.
How does a brand actually get a supplier's SMETA report?
Through the Sedex platform, by asking the supplier to establish a relationship link that grants your company visibility of its audit and corrective action plan — that sharing mechanism is the reason the system exists. Suppliers can also provide the report directly under confidentiality. Either way, check three things on receipt: the audit date, the pillar scope, and whether the corrective actions from the last visit are closed.
What if a factory has no SMETA history at all?
It is a question, not automatically a verdict. Ask what social audits it does hold — several retailer and industry schemes cover similar ground — and whether it will undergo a SMETA for your program, which a capable factory can arrange with an approved audit firm. The genuine warning sign is a factory that resists any social audit in any format; openness to scrutiny is cheap for those with nothing to hide.
Conclusion and Next Steps
The SMETA audit is retail's shared language for a simple question: what is it like to work in the factory that makes your product? Read properly — date, scope, findings, closures — it tells a buyer more about a supplier's operating culture than any brochure, because it was written by an outsider who walked the floor and spoke to the people on it without a manager in the room.
Ausmetics operates on the audited side of that table by choice: a Sedex-audited manufacturer that has also been through IKEA's IWAY program, alongside ISO 22716 (GMPC) certification on the quality side, across 28+ years of manufacturing in Guangzhou for retailers of the calibre of Kmart and Mannings. Retail buyers and established brands building a supplier file can start with Ausmetics' OEM cosmetics partner capabilities, or contact Ausmetics to request the audit conversation directly — scope, reports, and all.