How to verify a manufacturer's identity and capability

TL;DR

• Verify a manufacturer by reconciling every legal and operating role, then test each product claim against evidence at the named site. A certificate alone is not enough. ISO and IAF's expected-outcomes guidance says ISO 9001 defines requirements for a quality management system, not for its products, and that product certification does not follow from ISO 9001 certification.
• Separate the contracting seller, intermediary, manufacturer, physical plant, exporter, payment recipient, and material subprocessors. They may be one entity, related entities, or independent companies. Record the answer instead of assuming it.
• Use the official registry in the company's jurisdiction to confirm its native legal name, identifier, status, and available corporate facts. Registration proves legal existence, not process capability, quality, capacity, or control of the quoted site.
• Tie capability to the controlled RFQ: process route, materials, equipment range, critical characteristics, inspection, records, subprocessors, sample evidence, and bottleneck capacity.
• Shortcut: a paid, fixed-fee Tandom sourcing project can include manufacturer identification and screening, comparable RFQs, samples, and follow-up. The buyer retains the supplier relationship and every final approval.

This record is one gate inside the broader alternative-manufacturer and second-source qualification process. It supports a decision to proceed to a controlled next step, hold for evidence, or stop. It does not approve a supplier for production.

Map every role before deciding factory or trader

The useful question is not “factory or trading company?” It is “who contracts, makes, exports, receives payment, and controls changes for this quoted product?” A transparent intermediary may add engineering, language, consolidation, financing, or export support. A direct manufacturer may still outsource a critical process.

Use one controlled role map

Click Copy role map, then paste into cell A1 in Excel or Google Sheets. The fields become columns, and each role starts a new row. Add one row per entity or site, keep native-script and English names in separate fields, and store the source, date, reviewer, and next action for every conclusion.

Confirm each legal identity independently

Start with supplier documents, but do not stop there. Search the official jurisdiction registry using the native legal name or registration identifier. Save the result and reconcile it to the quote, contract, certificate, site, invoice, exporter, and payment instruction.

Use the registry maintained by the jurisdiction

Access, language, fees, authentication, and available fields vary. Current official examples include Singapore's ACRA Bizfile, Mexico's Registro Publico de Comercio, and Brazil's CNPJ consultation. These are examples, not a complete directory. A registry result is an identity source, not a factory audit or capability rating.

Make contradictions visible

Use Confirmed when current evidence agrees, Conditional when an assumption needs a decision, Open when evidence is missing, Contradicted when sources disagree, and Not applicable with a reason. Do not turn a blank into confirmation.

Resolve a different payee before money moves

A different payee may be a disclosed sales affiliate, collection agent, exporter, financing entity, or another approved party. It may also be an unauthorized change. The FBI's Internet Crime Complaint Center recommends using a secondary channel or two-factor authentication to verify a request to change account information in its business email compromise guidance. Record the beneficiary's legal name, bank country, relationship, reason, invoice path, and supporting documents. Apply the company's procurement, finance, compliance, and legal approval policy before any deposit or tooling payment.

Run restricted-party and import-risk screens separately

Identity evidence tells you which names to screen. It does not clear the transaction. Screen the parties, relevant ownership facts, sites, and supply-chain roles under the buyer's risk-based process, then route possible matches to the accountable specialist.

Use Treasury's current OFAC Sanctions List Service for official list data and search access. For a relevant China supply-chain fact pattern, start with the current DHS UFLPA resources. Apply the actual program rules and buyer policy instead of treating one list as a complete supplier clearance.

If the product may fall under an antidumping or countervailing duty order, preserve the exact names and use the AD/CVD manufacturer and exporter rate guide after the separate scope review. That guide explains rate selection. This verification guide does not reproduce or replace it.

Test capability against the part, not the brochure

A supplier is capable only relative to a controlled requirement. Use the same drawing, revision, BOM, material, process, quality, packaging, volume, and delivery basis that the supplier quoted. If those inputs are loose, first build a quote-ready manufacturing RFQ.

The NIST MEP Supplier Scouting Playbook distinguishes an exact-item match, a similar-item match, current process capability, and capability that still needs retooling. Its results still require requester vetting. Keep those evidence levels separate when a supplier says, “we can make it.”

Keep QMS evidence in its lane

ISO's guidance explains that ISO 9001 covers a quality management system and does not define the specific product you are buying. Verify a certificate with the issuer or current accredited certification records, including its entity, site, scope, and status. Then test the part separately. A valid certificate with the wrong site or scope does not answer the requirement.

Give the audit a product-specific job

The current ISO 19011:2026 public overview describes guidance for audit principles, audit programs, conducting audits, and auditor competence. Define the supplier-audit objective before scheduling the visit:

1. Identify the legal entity, address, product, RFQ issue, route, and buyer decision the audit supports.
2. Name the requirements, evidence sample, responsible people, and areas that must be accessible.
3. Confirm the site and staff, then follow a selected real job through the material and information flow.
4. Test equipment, inspection, traceability, subprocess, nonconformance, and change controls against the requirement.
5. Record evidence, source and date, contradiction, owner, due date, and the condition for closure.
6. Keep the result conditional until every required buyer owner completes approval.

A live video walk can answer basic location and equipment questions. It is not automatically equivalent to independent record sampling or an on-site audit. Match the method to product and business risk.

Copy the requirement-to-evidence matrix

Click Copy requirement matrix, then paste into cell A1 in Excel or Google Sheets. The fields become columns, and each requirement starts a new row.

Challenge capacity at the bottleneck

Monthly plant output is not available capacity for your part. Start with the buyer's release quantity and required date. Ask the supplier to show how the quoted route fits through its constrained operation during the proposed production window.

Use a simple decision gate

• Proceed to a controlled sample when identities and roles are reconciled, no unresolved screen blocks the next step, site evidence is credible, and the sample plan will test the remaining claims.
• Hold when a material identity, payment, site, subprocessor, certificate, process, test, or capacity fact remains open or contradicted.
• Stop when the supplier refuses required transparency, misrepresents a material fact, proposes an unapproved payment change, cannot support a mandatory capability, or fails a buyer-controlled exclusion gate.

A sample is another evidence step, not production approval. Define whether it must come from the proposed site, process, material, tooling, subprocessor, equipment, and inspection route. Record what a pass permits and which gates remain.

Worked example: a transparent intermediary can pass the first gate

A US industrial buyer needs a machined pump housing to drawing Rev R4. Seller S coordinates production. Manufacturer M operates plant P. Exporter E handles the proposed export route. Seller S is also the proposed payment recipient. Coating site C performs one material outside process.

The decision is proceed to a controlled sample with conditions, not “supplier approved.” Seller S adds a disclosed coordination layer, while the buyer retains direct technical and quality access to M and P. Production approval remains blocked on sample evidence, coating capacity, buyer risk reviews, and the normal technical, quality, commercial, legal, and purchasing gates.

If several suppliers reach this stage, preserve each open condition in the overseas manufacturing quote comparison instead of giving the lowest price a false technical pass.

Common pitfalls

Searching only the English trading name

The buyer finds a similarly named company or no record. The quote, contract, certificate, invoice, and beneficiary cannot be reconciled to one legal entity.

Treating an active registry record as factory proof

The team approves a real legal entity without establishing who will make the product, where it will be made, or whether the site has the required process.

Making factory-direct status the award criterion

A transparent intermediary is rejected while a nominally direct factory hides subprocessors or lacks technical access. The buyer optimizes a label instead of control.

Paying an unexplained beneficiary

A last-minute account change bypasses the approved chain. Finance cannot reconcile it to the contract and invoice, so the deposit is held or exposed to unauthorized diversion.

Accepting a certificate with the wrong entity, site, or scope

The file records “certified” even though the proposed plant and process were never covered by that evidence.

Auditing the presentation route instead of the product route

The visit sees clean floors and prepared records but never traces the quoted part. A material subprocessor or inspection gap stays hidden until sample or production.

Using an equipment list without matching process limits

A machine category appears on the list, but its range, tooling, control, material, or inspection method does not fit. The gap surfaces after sample money is committed.

Calling nameplate output available capacity

Plant totals ignore the bottleneck, booked load, changeovers, yield, maintenance, material, and outside-process queue. The required production window is missed.

Approving one sample as repeatability evidence

A carefully made sample uses different equipment, staff, tooling, material, subprocessor, or inspection. The buyer has a conforming piece without a repeatable route.

Leaving subprocessors outside change control

A material process moves without buyer review. Traceability and prior validation no longer describe the delivered production route.

Screening the seller but not the rest of the chain

A manufacturer, exporter, payee, owner, site, or upstream source required by buyer policy is omitted. A possible match appears only after PO or payment review.

Treating exporter and manufacturer as interchangeable for AD/CVD

The sourcing file preserves one company name. The import team cannot test a named manufacturer, exporter, or combination, forcing a late rate correction or hold.

Glossary

Contracting seller

The legal entity that enters the purchase contract with the buyer. It may not be the manufacturer, exporter, or payment recipient.

Manufacturer

The legal entity responsible for operating or controlling the production process for the quoted product at a named site.

Production site

The physical address where a material manufacturing, assembly, inspection, test, or packaging operation occurs.

Exporter

The entity proposed to appear in the export-document flow for the contemplated shipment.

Payment recipient

The legal beneficiary designated to receive a deposit, tooling payment, invoice payment, or other funds.

Intermediary

A trading company, sales affiliate, agent, or service provider between the buyer and manufacturer with a disclosed role.

Subprocessor

An outside company or site performing a step that can affect conformity, lead time, or traceability.

Official registry

The company-registration source maintained or authorized by the relevant jurisdiction.

Role map

A controlled record connecting every legal entity and site to its contracting, manufacturing, exporting, payment, or subprocess role.

Quality management system (QMS)

The organization's system for planning, controlling, evaluating, and improving work that affects quality.

Certificate scope

The activities, sites, products, services, or sectors described by a certificate.

Second-party audit

An assessment performed by a customer or on the customer's behalf against defined requirements.

Product-specific capability

Evidence that a named site, process, people, equipment, controls, and subprocessors can meet the buyer's requirements.

Bottleneck operation

The constrained process step that limits output for the proposed route and period.

Available capacity

Capacity remaining for conforming units during the required window after actual commitments and constraints.

Production-representative sample

A sample made under the site, material, process, tooling, subprocessor, and inspection conditions defined for qualification.

FAQ

Practical answers for US teams verifying the legal entity, factory, payment path, quality evidence, capability, and capacity behind an overseas industrial quote.