Vietnam Factory Audit Guide: SMETA, BSCI, WRAP, SA8000, and Social Compliance for Buyers
Vietnam factory audits verify suppliers meet international labor, safety, and ethical standards. The major frameworks are SMETA, BSCI, WRAP, SA8000, GOTS, and OEKO-TEX. Most large retailers require a current audit before issuing a purchase order. Cosmo Sourcing, working with Vietnamese factories since 2014, prioritizes suppliers that already hold valid certifications rather than putting uncertified factories through 6 to 18 months of certification.
Why Social Compliance Matters When Sourcing From Vietnam
Vietnam is one of the largest manufacturing hubs in the world, and that growth has pulled in retailers and brands that cannot place purchase orders without a social compliance audit on file. Walmart, Target, Costco, REI, the major EU and UK retailers, and Amazon's regulated categories all run supply chain responsibility programs that require a recognized audit before the first shipment, with re-audits on a fixed cycle.
There is a Vietnam-specific split that matters. Factories that have been exporting to Western retailers for ten or more years almost always carry at least one current audit. Factories serving domestic, regional, or lower-tier export markets often do not. Audit status becomes the first filter in any buyer-facing project, and my Vietnam team in Binh Duong spends more time verifying existing audit status than commissioning new audits. For how this fits into the broader process, see our guide to sourcing from Vietnam.
The Major Social Compliance Frameworks You'll Encounter
Six frameworks cover most Vietnamese buyer requests. A key distinction up front: SMETA and BSCI are audit methodologies that produce findings reports, not pass/fail certificates. WRAP and SA8000 are actual certifications. GOTS and OEKO-TEX are product and facility certifications specific to textiles.
SMETA (Sedex Members Ethical Trade Audit)
SMETA is the most common ethical audit globally. It is owned by Sedex, a UK-based membership organization, and performed by accredited firms including SGS, Bureau Veritas, Intertek, TÜV, and Qima. The 2-pillar audit covers labor standards and health and safety; the 4-pillar adds environment and business ethics. Reports are uploaded to the Sedex platform for member buyers to access. The current methodology is SMETA 7, released in 2024, which added a more rigorous management-systems assessment and stricter evidence requirements. Validity is 12 months. A 4-pillar audit runs 2 to 5 days on-site for a medium-sized factory, with industry audit fees typically in the $2,500 to $4,000 range.
BSCI (amfori Business Social Compliance Initiative)
BSCI is the European counterpart to SMETA, operated by amfori. Like SMETA, it produces a graded findings report rather than a certificate. Grades range from A (outstanding) to E (unacceptable): A and B are valid for 2 years, while C, D, or E require a follow-up audit within 12 months. Major European discount chains and mass retailers, plus most EU apparel brands, operate supplier programs through amfori BSCI, and as of September 2024, amfori no longer accepts fully announced BSCI audits. I see BSCI as the default request from European buyers.
WRAP (Worldwide Responsible Accredited Production)
WRAP originated in apparel, footwear, and sewn-products manufacturing and remains most common in those categories, especially for US brands. Important change: as of March 1, 2026, WRAP retired the previous Platinum, Gold, and Silver tier system. New certifications now issue a single annual Certificate of Compliance, valid for one year and subject to random unannounced post-certification assessments. Legacy Platinum certificates issued before March 1, 2026, remain valid through their original two-year expiration date, so you will still see older-format certificates in the market. Vietnam has one of the largest populations of WRAP-certified factories globally, due to its garment export concentration in Ho Chi Minh City and Binh Duong.
SA8000
SA8000 is the most rigorous social compliance standard in common use, issued by Social Accountability International and structured as a management-system certification closer to ISO than a point-in-time audit. Certification lasts for 3 years and includes annual surveillance audits. The current version is SA8000:2026. One material change to flag: amfori formally discontinued recognition of SA8000 (along with Equalitas and GlobalGAP) effective February 3, 2026. Buyers who previously used SA8000 as a BSCI equivalent for amfori-member retailers now need a BSCI audit in addition to their SA8000 certificate.
GOTS and OEKO-TEX for Textiles
For textile and apparel buyers, two additional frameworks come up. GOTS (Global Organic Textile Standard) certifies organic textile processing from fiber to finished garment and covers environmental and social criteria together. OEKO-TEX Standard 100 tests finished textile products for harmful substances; STeP certifies facility sustainability; Made in Green combines product testing with facility certification into a consumer-facing label. Buyers sourcing organic or eco-positioned garments usually need both a social compliance audit and one of these textile certifications. For the sustainability side specifically, see our guide to ethical and eco-friendly garment manufacturers in Vietnam.
Which Audit Does Your Buyer Require?
This is the first question most buyers ask. The honest answer is that policies vary by retailer and evolve. The table below is a representative starting map. Always confirm with your buyer's responsible sourcing team.
| Buyer / Channel | Commonly Accepted Audits | Typical Trigger |
|---|---|---|
| Walmart US | SMETA 4-pillar, or Walmart Responsible Sourcing program audit | Before first PO for most private-label and controlled-brand programs |
| Target US | SMETA 4-pillar, or Target Standards of Vendor Engagement equivalents | For vendors in the SoVE program |
| Costco US | SMETA 4-pillar typical | For Kirkland private label and controlled imports |
| REI US | FLA, BSCI, WRAP, or SMETA accepted | For private label; brand-partner policies vary |
| Amazon Global | SMETA, SA8000, BSCI, WRAP, or FLA | For some Amazon private brand and Climate Pledge Friendly programs |
| Major EU retailers EU | amfori BSCI the default, SMETA accepted | Before supplier onboarding |
| UK retailers UK Tesco, M&S, Sainsbury's |
SMETA the default | For own-label and tier-1 suppliers |
| Children's-product buyers Global | SMETA / BSCI / WRAP plus product testing (CPSIA in the US, EN 71 in the EU) | Compliance audit and product testing both required |
Policies evolve. Confirm the specific requirement with your buyer's responsible sourcing team before committing to an audit or a factory.
Sourcing From Already-Compliant Factories vs. Certifying a New One
This is where my approach diverges from most framework explainers. My default is to source from Vietnamese factories that already hold current, valid audit reports or certificates rather than take an uncertified factory through the process. Three reasons.
First, timeline. A first-time SMETA or BSCI audit usually takes 3 to 8 months from gap analysis through closing findings. A first-time WRAP Certificate of Compliance typically runs 6 to 12 months. SA8000 runs 12 to 18 months because a management system standard takes time to embed. Most buyer projects cannot absorb a delay of 6 months or more before the first PO.
Second, cost. The audit itself is one piece. The bigger cost is usually remediation: fire safety upgrades, overtime tracking, grievance mechanisms, working-hour controls, and management training. Getting an uncertified factory through a first SMETA 4-pillar commonly runs two to four times the audit fee alone.
Third, risk. If remediation stalls or the factory fails the follow-up audit, the buyer has already spent months and audit fees and still cannot place the PO. The uncertified-to-compliant path works, but only when the buyer has a 12-month runway, and the factory is a strong fit on every other dimension: product capability, quality history, commercial terms, communication, and IP protection.
My position, as Cosmo Sourcing's founder with over a decade on the ground in Vietnam, is simple. If a factory has not decided on its own that social compliance is worth the investment by the time a buyer walks in the door, that tells me something about more than just audits. I would rather find a factory that has already made that commitment. We will take a factory through certification when it is otherwise a near-perfect commercial fit, and the buyer's timeline allows. Still, in most projects, the better play is to pre-qualify on existing audit status and move directly to production.
Category-Specific Compliance Beyond Social Audits
Social compliance audits are the first layer. Specific categories carry additional requirements that a SMETA or BSCI alone will not satisfy, and the exact mix depends on where your product will be sold.
Children's Products
In the US, CPSIA (the Consumer Product Safety Improvement Act) governs products for children under 12: total lead is capped at 100 ppm in accessible surfaces, limits on specified phthalates, third-party testing at a CPSC-accepted lab, and a Children's Product Certificate (CPC) that accompanies each shipment. ASTM F963 covers toy safety. In the EU, EN 71 covers toy safety across mechanical, flammability, migration of elements, and chemical criteria, and the General Product Safety Regulation governs broader consumer product safety. For Vietnam children's product buyers, we work primarily with factories that already hold current CPSIA and EN 71 testing records and routinely produce under ASTM F963. The same pre-qualified approach applies when sourcing medical products from Vietnam.
Electronics
UL listing verifies US electrical safety; many US buyers require UL-listed components or finished products. FCC Part 15 covers electromagnetic emissions for US-market devices. CE marking is required for EU market access, with compliance to the underlying directives (LVD, EMC, RED, RoHS). UKCA has largely converged with CE for most product categories. For Vietnam electronics, I look for factories that hold current UL listings on the specific product line and can produce recent FCC and CE test reports.
Textiles and Home Goods
In the US, apparel must meet 16 CFR 1610 flammability requirements, and children's sleepwear is governed by the stricter 16 CFR 1615 and 1616. California Proposition 65 requires warnings for products containing listed chemicals at or above threshold levels, affecting brands shipping to California regardless of where they are based. For EU market access, REACH covers substance restrictions across nearly all categories, and EN 14682 restricts cords and drawstrings on children's clothing. UK buyers should reference BS-prefixed standards aligned with EN standards. GOTS and OEKO-TEX address material and chemical safety, but do not substitute for flammability testing or Prop 65 compliance.
Who Pays for the Audit
The factory pays for its own audit in most Vietnam projects. The audit belongs to the factory, the management system is being evaluated, and the factory benefits from the resulting report across multiple buyers. Variations: a buyer may commission a specific audit layered on top of an existing SMETA or BSCI and pay for that one. Remediation costs always fall on the factory, though a buyer who urgently needs capacity may advance some investment in exchange for a supply commitment. For a first-time certification from scratch, the typical arrangement is factory-paid audit fees, buyer-and-factory-split remediation, and a supply agreement tied to pass-through volume.
How to Vet a Vietnamese Factory's Current Compliance
Before we place an order with a factory that claims to hold a current audit or certification, I verify four things. On a typical buyer project, my team runs this check across five to fifteen candidate factories before shortlisting.
First, request the actual report or certificate. A factory saying "we have SMETA" is not a SMETA report. Sedex generates downloadable reports; amfori BSCI stores reports on its Sustainability Platform; WRAP and SA8000 issue formal certificates. See the source document.
Second, check validity dates. SMETA is 12 months. BSCI A or B is a two-year program, and C is a one-year program. WRAP Certificates of Compliance are valid for one year (or the older Platinum for two years if issued before March 1, 2026). An expired audit is not a current audit.
Third, review the findings. A SMETA report with critical non-conformances is not the same as one with minor findings closed out. A BSCI C grade is not the same as an A. If the factory will not share the findings page, treat that as a red flag.
Fourth, understand the scope. An audit at a headquarters office or on one production line does not cover satellite facilities, subcontractor operations, or production lines added after the audit date. Verify the audit covers the site where your order will actually be produced. Compliance vetting runs alongside product capability, quality history, and intellectual property protection in Vietnam in the broader qualification process.
For the specific firms that conduct these audits in Vietnam, see our guide to inspection and audit companies in Vietnam.
Frequently Asked Questions
What is the difference between a social compliance audit and a product quality inspection?
A social compliance audit evaluates labor practices, worker health and safety, management systems, and ethical conduct. A product quality inspection examines the physical goods against the buyer's specifications. Separate disciplines, separate firms, separate deliverables. Most Vietnamese buyers need both. For the QC side, see our guide to product quality inspections in Vietnam.
Can I use one audit report to sell to multiple retailers?
Often, yes. SMETA is designed for multi-buyer use through the Sedex platform. BSCI reports can be used across Amfori members. WRAP and SA8000 certificates can be presented to any buyer who accepts that framework. Framework acceptance depends on the specific buyer, so verify in advance.
Are Vietnamese factory audits reliable?
Audit quality depends primarily on the audit firm, not the framework. Major accredited firms (SGS, Bureau Veritas, Intertek, TÜV, Qima, DQS) maintain global protocols and auditor rotation. Lower-tier firms vary. When I review a factory's existing audit, I look at the firm name as closely as the framework name.
How long does it take to find a pre-certified Vietnamese factory?
For common export categories (apparel, furniture, bags, footwear, home goods), pre-certified factories are the norm in Vietnam's major export zones, and we typically identify qualified candidates within 2 to 4 weeks of project kickoff. Specialized categories take longer, and that timeline sometimes drives the decision to certify an existing trusted partner.
What happens if a factory's audit expires mid-project?
The factory should schedule the re-audit well before the expiration date. If you are in active production when an audit expires, some buyers accept a scheduled re-audit date as bridging evidence; others pause shipments until the re-audit is complete. Build re-audit timing into the production calendar for any multi-PO relationship.
Work with Cosmo Sourcing to find compliant factories!
Vietnam sourcing with social compliance requirements sits at the intersection of commercial capability and responsible sourcing infrastructure. I started Cosmo Sourcing in 2012 and have been running our Vietnam operation from Binh Duong since 2014. We work on a fixed fee rather than commission, and every project delivers original quotes from 2 to 6 qualified factories with no markup, full factory contact details, and direct introductions. We have served thousands of clients across apparel, furniture, electronics, children's products, and regulated categories, and our default is to pre-qualify on existing compliance before committing to production. Certification verification is one of the optional add-ons we routinely include in sourcing packages when buyers want a documented compliance file for each candidate.
If you need help finding a Vietnamese factory that already carries the audits your buyer requires, or help deciding whether certifying an existing partner makes commercial sense, get in touch. Email info@cosmosourcing.com, visit cosmosourcing.com/contact-us, or learn more about our Vietnam sourcing services.
