Coffee supply chains often look clean on a quote sheet. Once you map the actual handling points, they can become much less simple. The company selling the coffee may not farm it, mill it, store it, roast it, pack it, or export it. A broker or trading company can still be a useful partner, but the importer needs to know who controls the facility where the real operational risk sits.

Start by naming the supplier’s role. Are you auditing a farm or cooperative, wet mill, dry mill, processor, exporter, broker, warehouse, roaster, packer, private-label manufacturer, or brand owner? If several companies handle the coffee, list each one and decide which sites require evidence. A document review may be enough for one partner, while a storage site, roastery, or packing facility may need photos, records, video, or an independent visit.

Then define the trigger for the audit. New supplier onboarding is the obvious moment, but it is not the only one. Audit before a first bulk shipment, before a private-label launch, during an annual supplier review, after a failed lab test, after a serious complaint, after a regulatory update, or when the supplier changes facility, ownership, process, subcontractor, or product scope.

Destination market matters as well. U.S.-oriented imports may require stronger food safety records, consistent shipment data, retail label readiness, and COAs that help manage detention risk. EU-oriented shipments may require deeper traceability, legality records, farm geolocation, and EUDR-ready due diligence evidence where applicable.

Before you contact the supplier, define what counts as pass, conditional pass, and fail. Without that discipline, the audit can turn into an open-ended document chase. By the time missing records become urgent, the cargo may already be packed, the deposit may be paid, and your leverage may be much weaker.

This section should become the backbone of your audit file. Ask for documents, photos, records, sample labels, and lot-specific evidence. The goal is not to collect the largest folder possible. A supplier who can clearly explain how records connect is often more reliable than one who sends dozens of disconnected PDFs.

1. Supplier Identity and Legal Legitimacy

Confirm who you are buying from and who controls the coffee. Request the legal company name, registered address, tax or business registration details, export license or authorization where applicable, facility address, contract entity, invoice entity, and bank account details.

These details do not always need to point to the same company. A trader may sell coffee from a partner mill. A private-label packer may use an outside warehouse. That can be acceptable when the relationship is disclosed, documented, and operationally clear. It becomes a red flag when the supplier refuses to name the production or storage site, changes bank details without a clear reason, or cannot explain who owns each step of the process.

Also ask for named contacts for quality, export documents, complaints, and corrective actions. If roasting, packing, storage, testing, or export paperwork is subcontracted, you should know before approval, not after a problem appears.

2. Quality Management and Production Controls

Quality control should be visible, repeatable, and tied to real production records. Request the quality manual or policy, SOPs for receiving and processing coffee, incoming checks, in-process checks, final release procedures, internal audit records, nonconformance logs, and complaint history.

For coffee, calibration deserves close attention. Moisture meters, scales, thermometers, roasting controls, cupping equipment, and lab instruments all influence release decisions. If key equipment is not checked and maintained, the supplier’s quality data becomes harder to trust.

For roasted coffee, review how roast profiles are approved, monitored, adjusted, and released. A supplier should be able to show how a target profile becomes a batch record and how deviations are handled. For private label, check how your specification becomes a production instruction, how version control is managed, and who approves finished goods before dispatch.

3. Coffee Safety, Storage, and Contamination Controls

Coffee is not handled like fresh produce, but poor storage can still create serious problems. Humidity, pests, odor transfer, cleaning chemicals, lubricants, damaged bags, mixed lots, and weak segregation can all affect quality or trigger disputes.

Ask for a HACCP plan or equivalent food safety plan, sanitation records, pest-control reports, cleaning chemical controls, allergen controls for flavored or co-packed products, and third-party food safety audit reports if available.

For green coffee, check moisture targets, storage humidity, bag condition, ventilation, pallet use, pest exposure, and odor control. For roasted and packed coffee, check packaging integrity, oxygen barrier controls where relevant, finished-goods handling, shelf-life evidence, carton condition, and batch coding.

Photos and video can make the audit more concrete. Ask to see labeled lots, clean floors, separated chemicals, protected bags or cartons, loading areas, and the equipment used for moisture or quality checks. The supplier’s records should match what you can see.

4. Traceability, Origin, and Shipment Documentation

Traceability should connect the coffee you buy to the records behind it. Ask the supplier to show how a lot code links to origin, purchase records, processing batch, storage location, test results, packing date, invoice, packing list, and export documents.

For certified, organic, single-origin, or sustainability-claimed coffee, check that certificates match the supplier, product type, crop or production period, and lot. A certificate that is valid in general but not connected to your shipment has limited value.

EU importers should request farm-level traceability and legality evidence where required. That may include farm lists, geolocation data, deforestation-risk documentation, supplier declarations, and due diligence records. Do not assume a certification alone will satisfy every destination-market obligation.

5. Packaging, Labeling, and Private-Label Readiness

Packaging controls are part of supplier reliability, not just a design detail. For bulk coffee, review bag type, liner use, net weight controls, markings, palletization, container loading practices, and protection against moisture. For retail-ready coffee, ask for packaging specifications, artwork approval workflow, label review records, shelf-life support, barcode control, batch coding, and carton markings.

Private-label importers need extra discipline here. Confirm who owns artwork changes, how label versions are controlled, how obsolete labels are removed from the line, and how the supplier prevents mixed packaging. For flavored or blended products, request ingredient records and allergen controls where relevant. A small label error can become a shipment problem, a relabeling cost, or a customer complaint.

A supplier audit should not become a full legal guide, but it should collect the records your compliance team, broker, or advisor may need before shipment. The earlier you ask for those records, the easier it is to separate a supplier who is genuinely export-ready from one who only appears ready on a price sheet.

For U.S.-oriented shipments, request FDA-facing food safety documentation, facility and foreign supplier information where applicable, consistent product descriptions, COAs, and retail label readiness for packaged coffee. Detention risk can rise when records are weak around pesticide residues, mycotoxins in poorly stored green coffee, undeclared ingredients in flavored products, or mismatched shipment details.

For EU-oriented shipments, ask whether the supplier can support traceability, legality of production, deforestation-free evidence, and audit-ready due diligence records where required. If the supplier cannot provide farm-level or origin-chain data, you need to know early, not after purchase contracts are signed.

Certificates help, but they are not enough on their own. Treat them as supporting evidence. You still need lot-level records, valid dates, matching product scope, and a clear connection to the shipment you are buying. Before shipment, confirm current destination-market rules with official guidance or a qualified compliance advisor.

A practical scoring system keeps the audit from becoming a matter of opinion. It also makes supplier decisions easier to explain internally, especially when procurement, quality, compliance, and sales teams are looking at the same supplier from different angles.

Automatic stop signs include unverifiable legal identity, refusal to identify the production or storage site, falsified documents, no lot traceability, expired or mismatched certificates, repeated failed tests, serious sanitation issues, undisclosed subcontracting, or COAs that do not match the exact lot.

Conditional approval can work when the supplier is credible but incomplete. For example, you may allow progress after they provide missing photos, a current pest-control report, a corrected label proof, a third-party audit, lab test results, or CAPA evidence.

Tie the decision to commercial risk. A small trial order of conventional bulk roasted coffee carries different exposure than a private-label retail launch or a high-value container tied to origin and sustainability claims. The audit score should reflect that difference.

The audit report should include evidence, photos, document references, finding severity, responsible owner, deadline, and next step. Keep it specific. “Improve traceability” is too vague. “Provide lot records linking invoice 1048 to farm group, processing batch, COA, and packing list by July 15” is useful.

For corrective actions, ask for root cause, action taken, proof of completion, verification method, and due date. If the supplier says a problem is fixed, decide how you will confirm it. That may require a photo, revised SOP, training record, third-party audit, lab test, or re-audit.

Use a supplier scorecard after approval. Track quality, delivery, document responsiveness, traceability completeness, complaint history, test results, and CAPA closure. Re-audit high-risk suppliers before the first order, strategic suppliers annually, and any supplier after a major complaint, failed test, shipment hold, facility change, or undocumented process change.

Contracts should reflect audit lessons too. Add clear quality specs, right-to-audit language, document delivery timelines, testing responsibilities, claim handling, and termination rights for serious nonconformance. The audit is not only a gatekeeping tool; it should improve the way you buy from the supplier if you decide to move forward.

The first mistake is relying on certificates without lot evidence. A certificate may show that a system exists, but it does not prove that your exact coffee lot meets your specs or destination-market needs.

Another common mistake is auditing the sales company instead of the facility. If the broker looks professional but the warehouse is unknown, the real storage and contamination risks remain unchecked.

Importers also confuse audits, inspections, and lab tests. A supplier audit checks the system and evidence. A pre-shipment inspection checks a specific shipment. Lab testing checks a specific sample against selected parameters. Product compliance review checks destination-market requirements. In practice, you often need more than one control.

Finally, do not wait until cargo is ready to ship before asking for regulatory or traceability records. That is when every missing document becomes expensive. The best time to find a gap is before the supplier is approved, before packaging is printed, and before the shipment is committed.

Subject: Supplier audit documents request before coffee supplier approval

Hello [Name],

Thank you for sharing the quotation and product details. Before we approve the supplier file, we would like to review your audit documents for the coffee we are considering.

Please send the available documents that apply to your role in the supply chain: business registration, export license or authorization, facility details, third-party food safety audit if available, HACCP or food safety plan, quality SOPs, sanitation records, pest-control records, calibration logs, recent COAs, traceability records, sample labels, packaging specifications, export documents, and recent photos or video of the production and storage areas.

For this project, the destination market is [country/region], so please also include any market-specific records you can support, such as labeling evidence, lot-level test results, origin records, or EUDR-related traceability where applicable.

If you do not currently have a third-party food safety audit, please let us know. We can begin with a self-assessment and supporting evidence, but we may request an independent audit before larger orders.

Best regards,

[Name]

Can I rely on a third-party certification?

You can use a third-party certification as part of the audit, but not as the whole audit. Check whether the certificate is current, authentic, issued to the correct company, and relevant to the exact product and facility. Then ask for shipment-level evidence: lot code, COA, production or packing record, traceability record, and any claim-specific documents. A certificate is strongest when it connects clearly to the coffee you are buying.

What if the supplier does not have a third-party food safety audit?

Do not reject them automatically, but slow down. Ask for alternative evidence first: food safety plan, sanitation logs, pest-control records, facility photos, SOPs, complaint records, and COAs. For a small trial order, that may be enough to continue with caution. For private label, retail-ready coffee, strategic volume, or higher-risk findings, commission an independent audit before approval.

How often should I re-audit a coffee supplier?

Re-audit before approving a high-risk new supplier, annually for strategic suppliers, and immediately after a major complaint, failed lab result, shipment hold, facility change, ownership change, or repeated documentation delay. The cadence should match risk, not the calendar alone.

A good coffee supplier audit turns claims into evidence before deposits, labels, contracts, or shipments are exposed. The strongest checklist connects identity, facility controls, coffee quality, food safety, traceability, market-specific documents, scoring, and follow-up.

If you are looking for a Vietnamese coffee supplier for wholesale, bulk coffee, brand import, retail, or private-label discussions, MR.VIET can be part of your shortlist. MR.VIET is an established Vietnamese coffee brand with more than 10 years on the local market, distinctive packaging, own production, and export-ready experience for Europe, including EUDR-aware documentation processes. Contact MR.VIET to discuss wholesale supply, bulk coffee, brand import, or private-label options, while still running your own audit, testing, and compliance review.