LKprototype 
INTRODUCTION
Choosing a CNC machining supplier and auditing a CNC machining manufacturer are related decisions, but they are not the same decision.
Supplier selection helps a buyer compare potential sources based on technical capability, commercial terms, lead time, communication, and overall sourcing fit. A manufacturer audit asks a narrower and more demanding question:
Can this specific manufacturer demonstrate, with objective evidence, that it can manufacture this specific part under controlled conditions?
That distinction matters because a professional audit should go beyond:
website appearance
machine photographs
total machine count
certification logos
sample parts
sales presentations
quotation confidence
The purpose is to connect every important manufacturing claim to evidence that is relevant to the actual part, material, tolerances, production volume, inspection requirements, and supply risk.
Buyers who are still comparing potential sourcing partners can first review our guide on how to choose a CNC machining supplier.
This article focuses on the next stage: verifying whether a selected CNC machining manufacturer is ready to support the defined manufacturing scope.
QUICK ANSWER: HOW DO YOU AUDIT A CNC MACHINING MANUFACTURER?
Audit a CNC machining manufacturer by converting its capability claims into evidence that can be reviewed against the requirements of your specific part. Verify the manufacturing site, machine and process fit, tolerance capability, drawing revision control, material traceability, inspection methods, first-article process, nonconformance control, subcontracted operations, available capacity, lead-time assumptions, and technical-data controls.
The goal is not to prove that a factory is universally capable. It is to determine whether the available evidence supports approval for a defined part, revision, process route, volume, and production scope.
WHAT SHOULD A CNC MANUFACTURER AUDIT ACTUALLY PROVE?
A factory audit is not intended to prove that a manufacturer is perfect.
It should answer a more practical question:
Does the available evidence support the manufacturer's ability to meet the defined requirements of this program?
Manufacturing capability is always scope-dependent.
A manufacturer may be well suited to an aluminum prototype but may not yet have demonstrated the process controls required for a titanium production component.
Likewise, a supplier may routinely hold general machining tolerances without having demonstrated capability on a particularly tight bore, thin wall, positional tolerance, or multi-datum relationship.
For that reason, audit findings should be recorded requirement by requirement rather than reduced to a single general impression.
Use five possible findings:
PASS — evidence supports the requirement for the defined scope.
CONDITIONAL — the requirement appears supportable, but a defined condition still requires verification.
CORRECTIVE ACTION REQUIRED — a control gap must be closed before the relevant release stage.
FAIL / NOT APPROVED FOR THIS SCOPE — the available evidence does not support the requirement.
NOT APPLICABLE — the requirement does not apply to the program.
One unsupported critical requirement should not disappear inside a long list of minor strengths.
CNC MACHINING MANUFACTURER AUDIT FRAMEWORK
A useful audit converts every important manufacturer claim into something that can be verified.
| AUDIT AREA | MANUFACTURER CLAIM | EVIDENCE TO REQUEST | WARNING SIGN |
|---|---|---|---|
| Factory identity | We manufacture the parts ourselves | Legal entity, producing site, facility evidence, responsible technical contact | Manufacturing location or responsibility is unclear |
| Machine and process fit | We have the required equipment | Part-specific process route, machine type, work envelope, setup approach | Only a generic machine list is provided |
| Tolerance capability | We can meet the drawing tolerances | Comparable measured data, proposed inspection method, first-article evidence where appropriate | Capability is supported only by a marketing statement |
| Drawing control | We always work to the correct revision | Released drawing, revision reference, controlled production documentation | Revision status cannot be demonstrated |
| Material control | We use the specified material | Material certificate where required, lot or heat identification, traceability method | Documents cannot be linked to material used |
| Inspection | We inspect the parts | Characteristic-level inspection plan, suitable measurement equipment, calibration status | Inspection scope or measurement method is undefined |
| Capacity | We can support production volume | Capacity relevant to required machines, staffing, inspection, and schedule | Total machine count is used as the only evidence |
| Subcontracting | Outside processes are controlled | Approved sub-tier process, requirement flowdown, incoming verification | Subcontracted operations are unclear or undisclosed |
The working logic throughout the article is:
Manufacturer Claim → Audit Question → Objective Evidence → Finding → Buyer Action
THE 12 QUESTIONS TO ASK A CNC MACHINING MANUFACTURER
QUESTION 1: WHERE WILL MY PARTS ACTUALLY BE MACHINED?
Quick Answer
Identify the legal entity accepting the order, the facility where machining will take place, and any other company or location involved in production.
The goal is not to eliminate manufacturing networks, partner facilities, or subcontracting. It is to understand who performs the work, where the work takes place, and who controls the manufacturing and quality requirements.
Why It Matters
The company that issues a quotation is not always the same entity that physically machines the parts.
A sourcing organization may operate:
its own factory
multiple manufacturing sites
approved partner factories
subcontracted special processes
a combination of internal and external operations
Any of these arrangements can work.
The risk appears when the buyer believes one manufacturing model is being used while the actual production route is different.
The producing site also matters when reviewing:
quality-system certificates
machining capability
available equipment
inspection resources
production capacity
special-process control
corrective-action responsibility
What to Ask
What legal entity will accept the purchase order?
At which facility will the parts actually be machined?
Which operations are performed at that site?
Are any machining operations performed at another facility?
Which finishing, heat-treatment, inspection, or special processes are subcontracted?
Who has technical responsibility for the manufacturing process?
Who coordinates corrective action if a quality issue occurs?
Evidence to Request
Useful evidence may include:
legal company name
manufacturing-site address
business registration where relevant
live factory walkthrough
quality certificate showing the applicable entity and site
named engineering contact
documented process route
written disclosure of subcontracted operations
Red Flags
Examples that justify deeper verification include:
the producing location cannot be clearly identified
different documents name different entities without explanation
technical questions cannot reach manufacturing personnel
the manufacturing location changes after the order without disclosure
certification is presented for a different site or entity without explaining the relationship
These are verification issues, not automatic evidence of misconduct.
Buyer Action
Record the legal entity, producing site, and responsible technical contact in the supplier file.
Where multiple facilities or subcontractors are involved, document which operation is performed at each location and which organization is responsible for meeting the applicable purchase requirements.
QUESTION 2: WHICH MACHINES AND PROCESSES WILL ACTUALLY PRODUCE MY PART?
Quick Answer
Do not evaluate CNC capability from machine count alone.
Ask the manufacturer to map the major features of your part to a realistic manufacturing route, including machine type, setup strategy, workholding, secondary operations, and inspection.
Why It Matters
A factory may own many CNC machines without having the right combination of:
axis configuration
work envelope
spindle capability
turning capability
tooling
fixturing
programming experience
inspection capability
for a particular component.
A manufacturer that owns 5-axis equipment does not automatically need to produce every component in one 5-axis setup. The appropriate process depends on geometry, tolerance relationships, accessibility, surface requirements, volume, and manufacturing risk.
What matters is whether the proposed route makes sense for the actual drawing.
What to Ask
Which CNC process will be used for this part?
Which machine type is planned for each major operation?
How many setups are expected?
Which features require repositioning?
How will the part be held?
Are turning, milling, EDM, grinding, or other secondary processes required?
Which operations are performed internally?
What is the planned inspection sequence?
Evidence to Request
Ask for a part-specific process explanation including, where appropriate:
process route
machine type
axis configuration
work envelope
setup sequence
workholding concept
identification of subcontracted operations
The manufacturer does not need to disclose proprietary CAM programs or confidential programming data.
Red Flags
Capability is explained only by total machine count.
No one can describe the expected setup strategy.
The proposed machine envelope does not fit the component.
Critical feature relationships are ignored when discussing setup changes.
A complex part is described only as a generic “CNC machining” operation.
Buyer Action
Map the proposed manufacturing route against the drawing.
Pay particular attention to features whose tolerance relationships cross multiple setups. Where the route creates obvious process risk, resolve it during DFM or quotation review rather than after machining begins.
QUESTION 3: CAN THE MANUFACTURER DEMONSTRATE THE REQUIRED TOLERANCE CAPABILITY?
Quick Answer
Evaluate tolerance capability against the actual feature, material, geometry, setup, and measurement method.
A general website statement about minimum achievable tolerance does not demonstrate capability on every feature of every part.
Why It Matters
Tolerance capability depends on more than the numerical tolerance value.
Relevant factors include:
feature size
feature geometry
material
wall thickness
tool access
setup count
datum strategy
thermal effects
workholding
machine condition
measurement method
Holding a tight tolerance on a short precision bore is a different manufacturing problem from holding the same numerical tolerance across a large thin-wall structure.
The audit should therefore ask:
Has the manufacturer demonstrated capability on something sufficiently similar to the characteristic that matters on my part?
What to Ask
Which drawing characteristics are considered the most difficult?
Which setup controls those characteristics?
What measurement method will be used?
Has the manufacturer produced comparable features before?
Can measured data from comparable work be reviewed?
Will a prototype, pilot part, or first article be used to verify high-risk characteristics?
Evidence to Request
Depending on project risk, useful evidence may include:
dimensional reports from comparable features
actual measured values rather than only pass/fail status
identified measurement equipment
proposed inspection method
first-article or pilot inspection results
measurement-system suitability evidence for particularly tight or critical characteristics
Statistical process capability studies should not be treated as a universal requirement for one-off prototypes or very small sample sizes where they would provide limited information.
Red Flags
Tolerance capability is supported only by a general marketing statement.
No measurement method is proposed for the tightest feature.
Comparable inspection evidence cannot be discussed at all.
The proposed inspection method is unsuitable for the feature or required accuracy.
A tight tolerance is accepted without reviewing geometry, material, setup, or measurement conditions.
Buyer Action
Identify the characteristics with the highest manufacturing or measurement risk and make them explicit during quotation.
Where uncertainty remains, use a prototype, pilot order, or first article to verify those characteristics before releasing larger production volume.
QUESTION 4: HOW ARE DRAWINGS, CAD FILES, AND ENGINEERING REVISIONS CONTROLLED?
Quick Answer
Verify that the manufacturer can identify which drawing and CAD revision has been released to production, prevent superseded versions from being used, and control engineering changes after release.
Why It Matters
A capable machining process can still produce the wrong part if the wrong technical definition reaches production.
Common sources of revision risk include:
a new drawing sent while an order is open
a CAD model updated without the corresponding drawing being updated
a drawing updated without clarifying its relationship to the model
local copies stored by different employees
obsolete files remaining accessible to production
purchase-order requirements not updated after an engineering change
The audit should therefore examine how technical information is released and controlled, not just where files are stored.
What to Ask
Which document identifies the released revision?
Who authorizes release to production?
How does production know which revision is current?
How are obsolete revisions removed or blocked?
How are engineering changes communicated after production starts?
What happens if the CAD model and 2D drawing appear inconsistent?
How are conflicting technical requirements resolved?
Evidence to Request
Examples include:
released drawing
revision block
controlled work order or traveler
setup sheet referencing the released revision
engineering-change record
example of a superseded document being withdrawn
Red Flags
Operators rely on files stored in personal folders or email threads.
No clear released revision can be identified.
Superseded drawings remain beside current drawings with no status control.
Production changes are communicated verbally with no record.
Responsibility for resolving CAD/drawing conflicts is undefined.
Buyer Action
State the drawing and CAD revision explicitly in the RFQ and purchase documentation.
Where multiple technical sources define the part, establish in writing how conflicts will be resolved before production begins.
QUESTION 5: HOW DOES THE MANUFACTURER CONTROL MATERIAL IDENTITY AND TRACEABILITY?
Quick Answer
Verify that the specified material can be identified when received and, where traceability is required, linked through cutting, machining, outside processing, inspection, and shipment.
Why It Matters
A material description may contain several independent requirements:
alloy
grade
temper
condition
material specification
heat treatment
heat or lot identity
Confirming that stock is simply “aluminum” or “stainless steel” does not establish that it matches the required alloy, grade, or condition.
The required level of traceability should match the program risk and customer requirements.
A one-off prototype may require less formal documentation than a regulated, safety-critical, or repeat-production component.
What to Ask
How is incoming material identified?
How are different grades and conditions segregated?
How is identification maintained after bar or plate stock is cut?
Does heat or lot identity remain linked to the work order?
What documentation accompanies outside processing?
What material records can be supplied with the finished parts?
How long are records retained where retention is required?
Evidence to Request
Where appropriate:
material certificate
mill test report
certificate of conformance
heat or lot number
receiving record
traveler or production documentation
material segregation method
special-process certificate
Red Flags
Material grades are stored together without clear identification.
A material certificate exists but cannot be linked to the stock used.
Heat or lot identity is lost after cutting despite traceability being required.
Material substitution can occur without customer approval where approval is required.
Subcontracted processing breaks the traceability chain.
Buyer Action
Define the required level of material traceability before quotation.
For production or higher-risk parts, follow one material identifier from receiving documentation through the production traveler and outside processing to the final shipment record.
QUESTION 6: HOW ARE CRITICAL FEATURES INSPECTED?
Quick Answer
For each critical characteristic, confirm what will be measured, which measurement method is appropriate, when it will be measured, and how the result will be recorded.
Why It Matters
Inspection equipment must match the characteristic being measured.
Possible methods include:
micrometers
calipers where appropriate
pin gauges
bore gauges
height gauges
optical measurement systems
CMM
surface-roughness measurement
dedicated gauges
Owning a CMM does not mean every feature should be measured by CMM, just as owning a micrometer does not make it appropriate for every tight tolerance.
The relevant question is whether the proposed measurement system is suitable for the specific characteristic and required accuracy.
What to Ask
Which characteristics are considered critical?
What instrument will be used for each?
At which production stage will they be measured?
What inspection frequency is planned?
Will actual measured values be recorded?
How is measurement equipment calibrated and controlled?
For especially tight or high-risk tolerances, how is measurement-system suitability confirmed?
Evidence to Request
Depending on the project:
inspection plan
ballooned drawing or characteristic list
dimensional report
instrument identification
calibration status
sample inspection records
measurement-system evidence for critical characteristics where justified
Red Flags
Inspection is described only as “100% inspection” with no defined characteristics.
No measurement method is assigned to critical features.
Calibration status cannot be verified.
Inspection reports contain only PASS/FAIL where actual values are required.
Measurement capability has not been considered for extremely tight or high-risk characteristics.
Buyer Action
Create a clear relationship:
Requirement → Measurement Method → Inspection Frequency → Recorded Evidence
For high-risk characteristics, agree on this before production rather than allowing the measurement strategy to be determined after parts are finished.
QUESTION 7: WHAT FIRST-ARTICLE OR INITIAL INSPECTION EVIDENCE WILL I RECEIVE?
Quick Answer
Define the first-article or initial-inspection requirement before production begins.
The report should cover the characteristics, drawing notes, documentation, and approval requirements agreed for the project rather than relying on an undefined statement such as “FAI included.”
Why It Matters
A first article can act as a verification point between process planning and broader production release.
Depending on the project, it may be used to verify:
drawing revision
critical dimensions
characteristics required by the agreed FAI scope
material
finish
manufacturing route
inspection method
documentation completeness
The required level of first-article documentation depends on the customer, contract, industry, program risk, and any applicable standard.
Not every CNC project requires the same FAI format or the same level of characteristic coverage.
What to Ask
Is first-article inspection required for this order?
Which characteristics and notes must be included?
Will actual measured values be reported?
Which drawing revision will the report reference?
Which material and finish documentation must accompany it?
Who reviews and approves the first article?
What happens if a characteristic does not conform?
Which changes trigger re-verification?
Evidence to Request
Examples may include:
agreed FAI format
dimensional report
drawing-characteristic reference
actual measured values
material identification
finish or special-process documentation
inspection-equipment identification where required
approval or disposition record
Where AS9102 or another specific first-article standard is contractually required, follow that requirement. Do not treat AS9102 as a universal requirement for all CNC machining projects.
Red Flags
“FAI” is promised but its content is undefined.
Only pass/fail indicators are supplied where actual measurement data is required.
The report does not identify the drawing revision.
Required drawing notes are omitted.
Production proceeds before required deviations or nonconformances are resolved.
No trigger exists for repeating relevant verification after significant changes.
Buyer Action
Define the first-article scope in the purchase requirements before manufacturing begins.
Where appropriate, use first-article acceptance as a production-release gate and state which material, process, machine, drawing, supplier, or other significant changes require renewed verification.
QUESTION 8: HOW DOES THE MANUFACTURER HANDLE NONCONFORMING PARTS?
Quick Answer
Verify that the manufacturer can identify, segregate, document, disposition, investigate, and close nonconforming product under controlled authority.
A completed real-world record is usually stronger evidence than a procedure alone because it shows how the system has actually been applied.
Why It Matters
All manufacturing processes exhibit variation, and nonconformances can occur.
The audit question is therefore not whether a manufacturer claims to have zero problems. It is whether a nonconformance is:
detected
identified
segregated or otherwise controlled
prevented from unintended release
dispositioned by authorized personnel
communicated when required
investigated where appropriate
followed by corrective action when justified
checked for effectiveness before closure where required
A written procedure shows the intended system.
A completed nonconformance and corrective-action record can show how that system works in practice.
What to Ask
How are nonconforming parts identified and segregated from conforming product?
Who has authority to disposition a nonconformance?
Under what conditions is customer notification or approval required?
How are concessions or use-as-is dispositions controlled?
When is root-cause analysis required?
How is corrective-action effectiveness verified?
Can an anonymized or otherwise authorized recent example be reviewed?
How are repeat issues identified?
Evidence to Request
Useful evidence can include:
completed nonconformance record
documented disposition
defined disposition authority
segregation method
corrective-action record
root-cause evidence
effectiveness-verification record
repeat-issue or trend monitoring where appropriate
Red Flags
Nonconformances are described as so rare that no usable example can be shown.
No anonymized or authorized record can be reviewed.
Disposition authority is unclear or inconsistent.
Corrective action repeatedly stops at “operator retrained” with no evidence that the underlying cause was addressed.
Repeat issues are not tracked.
Customer notification requirements are undefined.
Buyer Action
Request an anonymized or otherwise authorized nonconformance record and confirm that it shows the issue, disposition, responsible authority, corrective action where applicable, and closure evidence.
Where the purchase requirements require notification of nonconforming product, state that requirement explicitly in the applicable purchase or quality documentation.
Monitor repeat issues during pilot or early production. A repeated failure on the same characteristic may indicate that the previous corrective action did not adequately address the cause.
QUESTION 9: WHICH PROCESSES ARE SUBCONTRACTED AND HOW ARE SUB-TIER SUPPLIERS CONTROLLED?
Quick Answer
Ask for the complete list of subcontracted operations on your part, the sub-tier supplier used for each, and the certificates returned for those operations. Undisclosed subcontracting is the finding.
Why It Matters
Subcontracting is normal and often necessary. Heat treatment, anodizing, plating, EDM, and specialist grinding are frequently outsourced, and a small shop that outsources them is not less competent for doing so.
The risk is different. When a process is subcontracted, direct operational control is reduced and must be maintained through supplier qualification, requirement flowdown, and verification.
What to Ask
Which operations on my part will be subcontracted?
Which sub-tier suppliers are used, and how were they approved?
What requirements are flowed down to those suppliers, in writing?
What verification is performed on incoming subcontracted work before it moves to the next operation?
Who owns correction if a sub-tier supplier causes a defect in my parts?
Are certificates returned for heat treatment, coating, or other special processes?
Evidence to Request
Evidence | What it shows |
|---|---|
A subcontracting list naming operations and suppliers | The route is disclosed and traceable |
Sub-tier approval criteria or an approved-supplier record | Supplied processes are controlled, not improvised |
A purchase order or flowdown document from the sub-tier | Requirements reach the supplier in writing |
Incoming inspection records for returned work | The manufacturer verifies what it receives |
Special process certificates returned with the work | The subcontracted operation is documented |
Red Flags
The manufacturer initially states that everything is done in-house, then revises the answer when asked directly.
Sub-tier suppliers are selected per job with no approval process.
No requirements are flowed down beyond part geometry and due date.
Subcontracted work returns and moves straight into the next operation without inspection.
Responsibility for sub-tier-caused defects is described as the supplier's problem.
Buyer Action
Require written disclosure of subcontracted operations and the sub-tier suppliers used. Confirm that the manufacturer retains responsibility for the result regardless of who performs the work. Where the subcontracted process is critical to your part's function, ask for the certificate and treat its absence as a corrective action rather than a minor omission.
QUESTION 10: CAN THE FACTORY SUPPORT PROTOTYPE, PILOT, AND REPEAT PRODUCTION CAPACITY?
Quick Answer
Ask what hours are actually available on the machines and inspection resources your route needs, in your delivery window. Installed capacity and available capacity are different numbers.
Why It Matters
Capacity is the most frequently mishandled question in supplier evaluation, because the answer that matters is finite and specific. A shop with substantial installed machine time may have almost none of it available on the specific machine your part requires during the month you need it.
Three constraints usually bind before raw machine hours do. The specific machine in the route may be loaded. The inspection resource — a CMM, or a particular programmer — may be the true bottleneck. And skilled labor for setup and programming may limit how fast capacity can be added, because adding a shift does not instantly add qualified staff.
What to Ask
How many hours are currently available on the machines in my route during my delivery window?
What is the current load on the inspection resources my part will use?
What is your bottleneck resource in this window, and what is its utilization?
How does adding a second shift change your available capacity, and could you staff it?
How would you prioritize my job if a larger account comes in alongside it?
What signals would cause you to decline an order for capacity reasons?
Evidence to Request
Evidence | What it shows |
|---|---|
Machine-level utilization or load data | Capacity is tracked rather than estimated |
Named bottleneck resource for this route | The manufacturer understands its own constraint |
Examples of past ramp performance | The factory has handled similar volume increases |
Shift structure and staffing plan | How capacity would be increased if needed |
Scheduling approach for job prioritization | Your job's priority is defined in advance |
Red Flags
Capacity questions are answered with total machine count.
Utilization data is described as unavailable or confidential with no alternative evidence.
The manufacturer claims no constraints whatsoever, at any volume.
Priority is described as depending on the customer rather than on a scheduling rule.
Ramp-up is promised without any reference to staffing or inspection throughput.
Buyer Action
Request capacity in hours rather than units, and specifically for the resources in your route. Confirm the bottleneck and what it means for your worst-case delivery date. For a production ramp, agree on milestone quantities with review points, so the relationship is tested at pilot volume rather than at full release. Treat an evasive capacity answer as a material risk rather than a neutral one.
QUESTION 11: HOW IS THE COMMITTED LEAD TIME BUILT?
Quick Answer
Ask for the lead time broken into its components: material procurement, machining, finishing, inspection, and shipping. Ask which stages are inside the quoted number and what assumptions drive each.
Why It Matters
A single lead-time figure compresses several independent processes into one number, which makes it impossible to test. When the number slips, you cannot tell whether material procurement, a subcontractor, inspection backlog, or freight caused the delay.
Decomposed lead time is also easier to compare honestly, since manufacturers often start the clock at different points. Some count from order confirmation, others from receipt of a deposit, others from receipt of drawings and material confirmation.
What to Ask
How is the quoted lead time broken down by stage?
Which events start the clock, and what customer inputs are assumed to be already complete?
What is the assumed material procurement time, and does it assume the material is in stock?
What finishing, heat treatment, or coating time is included, and is any of it subcontracted?
What inspection time is included, and at what stage?
What is the tolerance on the delivery date, and what happens if it is missed?
Evidence to Request
Evidence | What it shows |
|---|---|
A stage-by-stage lead-time breakdown | The number is built from components, not asserted |
Material availability status for your specification | Whether lead time depends on stock or a purchase cycle |
Schedule examples from comparable jobs with actual dates | Historical performance rather than intention |
Shipping method and transit time assumptions | The delivery date has a defined endpoint |
Any stated expedite options and their limits | Whether acceleration is possible, and at what cost |
Red Flags
The lead time is a single number with no breakdown available.
The clock start is ambiguous, or different people state different start points.
Material lead time is assumed to be zero because "it is usually in stock".
Subcontracted finishing time is omitted from the quoted figure.
No delivery tolerance is offered and no recovery plan exists for a slipped date.
Buyer Action
Request the decomposed lead time in writing and record the assumptions. Identify which stage carries the most risk for your specification, and confirm it separately. For time-critical programs, agree on a milestone schedule with intermediate confirmations rather than a single delivery date. If lead time is the deciding factor in your selection, the detailed guide to CNC machining lead time covers how the components are assembled and what causes them to move.
QUESTION 12: HOW DOES THE MANUFACTURER PROTECT TECHNICAL DATA AND MAINTAIN BUSINESS CONTINUITY?
Quick Answer
Verify two things separately: how your files and data are controlled inside and outside the organization, and what happens to your program if the manufacturer's circumstances change. Both require concrete answers, not reassurance.
Why It Matters
For a custom part, your drawings and CAD files are your intellectual property, and they are more portable than physical property. The same files that allow a manufacturer to produce your part could, in an uncontrolled environment, allow someone else to produce the same part for a different buyer. Data control and continuity are treated as operational controls here; contract enforceability is a legal question and belongs with your counsel.
Continuity matters differently. A single owner-operated shop with deep experience and no succession plan is a different risk than a mid-sized factory with documented processes and multiple engineers. Neither is automatically wrong, but the risk should be identified before your production depends on it.
Technical Data Control
Ask how files are stored, who can access them, how they leave the building if they must, and what happens when a project ends. Practical controls include restricted file access by project, network-based transfer rather than personal email or consumer file-sharing accounts, confidentiality agreements signed by the individuals who will see the files, and a defined retention or destruction process at project close. For multiple projects from different customers, physical and logical separation practices are also worth confirming.
Business Continuity
Ask what happens if the lead programmer leaves, if the owner retires, if a fire or flood affects the facility, and how your tooling, fixtures, and program files would be transferred to another supplier if that became necessary. The most useful answer is a written register of what exists, where it is stored, and who can release it. The second most useful answer is a named second contact with technical authority.
What to Ask
Who inside the company can access my drawings and CAD files?
How are files transferred internally and externally, and which channels are prohibited?
Are confidentiality agreements signed by employees who see the files, not only by the company?
What happens to my files and tooling when the project ends?
What is your succession or continuity plan for key technical staff?
If my program had to move, what would you provide and how quickly?
Do you maintain separate production areas or file structures for competing customers?
Evidence to Request
Evidence | What it shows |
|---|---|
A signed mutual NDA with named signatory and scope | Confidentiality is formally established |
File access or permission structure by project | Access is limited rather than universal |
A sample confidentiality agreement used with staff | Employees are individually bound |
Written retention and destruction process | Data has a defined end of life |
Tooling, fixture, and file register | Transferable assets are documented |
A named secondary technical contact | Continuity does not depend on one person |
Red Flags
Drawings are requested over personal messaging or consumer file-transfer accounts.
All staff can access all customer projects with no separation.
Confidentiality is described as covered by company policy with no individual agreements.
No answer is available for what happens to files and tooling at project end.
Business continuity questions are deflected as unnecessary.
The only technical authority is the owner, with no documented backup.
Buyer Action
Put confidentiality in writing before transferring files, with a named signatory and a defined scope. Confirm the operational controls that make the agreement meaningful — access restriction, transfer method, staff agreements, and end-of-project handling. For production programs, ask for the continuity register and name a second technical contact. Both are low-cost requests that reveal a great deal about how the manufacturer treats customer information.
REMOTE AUDIT VS ON-SITE FACTORY AUDIT
A common inefficiency in supplier auditing is jumping to a site visit before using cheaper verification methods, or the opposite — accepting desk-based evidence for things that can only be confirmed by walking the floor. The table below sets out the split.
Method | What it can verify | Limitations |
|---|---|---|
Document review | Certificates and their scope, inspection reports, calibration status, process routes, procedures | Documents show the system as written, not as practiced |
Live video walkthrough with a fixed camera | Layout, machine presence, metrology area, material storage, staffing during the call | The view is controlled by the host; movements can be staged |
Technical interview with an engineer | Whether technical questions reach someone with real process knowledge | Competence of one person does not represent the whole shop |
Sample part inspection | Whether the manufacturer can produce your geometry to your tolerance | A one-off part is not a production capability guarantee |
On-site audited visit | Shop-floor practice, works order flow, segregation, housekeeping, live data | Cost and scheduling; a single visit is still a snapshot |
WHAT CAN BE VERIFIED REMOTELY?
Most of the audit's substance can be verified without travel, if the requests are specific. Certificates and their scopes, inspection reports and their level of data, calibration records and due dates, process routes, inspection plans, and material certificates are all documents. A live video walkthrough can confirm that the described facility exists and that machines are running.
The limits are worth stating plainly. Remote verification cannot confirm how the shop floor actually behaves when no one is presenting. It cannot confirm that the traveler in use at the machine matches the revision you approved. It cannot measure the distance between the sample report and routine practice.
WHAT MAY REQUIRE AN ON-SITE AUDIT?
On-site verification earns its cost in four situations: when the part is safety-critical or regulated, when the program is large enough that a failed approval is expensive to unwind, when remote evidence has been incomplete or slow to arrive, and when you will need to demonstrate to your own customer that the supplier was assessed.
On site, three checks matter most. Follow a works order through the shop and compare it against the released drawing. Look at material storage and segregation rather than at the material sample. Watch how a nonconformance would actually be handled — where a suspect part would physically go. These are the observations that documents cannot provide.
HOW TO USE A REPRESENTATIVE JOB DURING THE AUDIT
The single most informative audit technique is to ask the manufacturer to walk you through one real job from start to finish — ideally a job similar to yours in material, complexity, or volume. Not a presentation about capability. An actual job, with its actual paperwork.
This works because a representative job exposes the interaction between systems. Ask for the order, the released drawing revision, the material certificate and its lot number, the process route, the setup sheets, the inspection plan, the measured data, the subcontracted operation certificates, the final inspection record, the shipping documentation, and any nonconformance that occurred along the way. Then check whether the pieces connect: does the lot number on the certificate appear on the paperwork that accompanied the parts through machining? Does the revision on the setup sheet match the revision on the drawing you were shown?
Most audit findings surface in the gaps between those documents. A manufacturer with a coherent job file usually has a coherent system. A manufacturer that can explain its processes but cannot assemble one complete job record has procedures without execution — which is the more common and more consequential problem.
Pro Tip: Pick the representative job yourself, and pick one the manufacturer did not propose. A job presented by the manufacturer shows you the process working at its best. A job you select shows you the process working.
CNC MANUFACTURER AUDIT EVIDENCE MATRIX
The matrix below consolidates the twelve questions into a single working document. Fill it in during the audit; the completed version is your decision record.
Question | Claim to Verify | Evidence | Red Flag | Buyer Action |
|---|---|---|---|---|
1. Manufacturing site | "We are a manufacturer" | Business registration, facility walkthrough, certificate scope naming the site | Quoting entity, certified entity, and producing entity differ without explanation | Record entity and site; require certificate of conformance from the producing entity |
2. Machine and process fit | "We have the right machines" | Written process route, machine list with axis configuration and envelope, fixture approach | Route given as a single line or unmappable to your features | Compare route to drawing feature by feature; confirm named machines exist and are available |
3. Tolerance capability | "We hold tight tolerances" | Measured inspection data on comparable features and material, with instrument identified | Pass/fail flags instead of values; no measurement uncertainty | Set a capability gate before RFQ; plan first article on the tightest characteristic |
4. Drawing and revision control | "We work to the latest drawing" | Released drawing with revision block, setup sheet referencing it, change notification example | Drawings sent by email with no revision tracking; customer asked to confirm revision | Send drawings with explicit revision; make change approval contractual |
5. Material identity and traceability | "We use the specified material" | Material certificate with lot or heat number, the same number on the traveler, segregation practice | Certificate not linked to production paperwork; grades stored together unlabelled | Require certificate of conformance and traceability, with a stated retention period |
6. Inspection of critical features | "We inspect everything" | Inspection plan mapped to drawing characteristics, calibration records, measurement uncertainty | Verbal plan; overdue calibration; | Require characteristic-level plan and confirmed calibration before production |
7. First article inspection | "We verify before production" | FAI report with every characteristic, measured values, instrument, and approval signature | Flags only; drawing notes omitted; no approval signature | Write FAI coverage and format into the purchase order; do not release production without it |
8. Nonconformance control | "We handle problems properly" | One real nonconformance record with disposition, root cause, action, and closure | No record producible; disposition by whoever is available; "operator retrained" only | Require notification of nonconforming product; track repeat issues in the first run |
9. Subcontracting control | "Everything is in-house" | Subcontracting list, sub-tier approval records, flowdown documents, returned certificates | Answer changes when asked directly; no flowdown; sub-tier defects called the supplier's problem | Require written disclosure; confirm the manufacturer retains responsibility |
10. Capacity and load | "We can meet your delivery" | Machine-level load in your window, named bottleneck resource, staffing plan | Capacity answered with machine count; no utilization data; no constraints admitted | Request capacity in hours for your route; agree pilot milestones before full release |
11. Lead-time composition | "Our lead time is X" | Stage-by-stage breakdown, material availability, included finishing and inspection time, transit assumptions | Single number; ambiguous clock start; zero assumed material lead time | Require the breakdown in writing; agree milestones for time-critical programs |
12. IP and continuity | "Your data is safe" | NDA with named signatory, access control by project, staff agreements, retention and destruction process | File transfer over personal channels; no access separation; no end-of-project handling | Sign confidentiality before file transfer; request continuity register and a second contact |
HOW TO CLASSIFY AUDIT FINDINGS
A set of observations is not yet a decision. Classifying each finding converts the audit into an approval that describes exactly what is and is not supported. The five states below should be recorded per requirement, not as an overall grade.
PASS
The evidence directly demonstrates the requirement for this scope. Record what the evidence was and where it is filed, along with the scope it supports. A pass is always scoped — it means the requirement was demonstrated for this part, this material, and this volume.
CONDITIONAL
The requirement is met subject to a stated condition. Common examples: the first article must confirm a marginal characteristic, capacity must be re-confirmed at a named milestone, or a sub-tier certificate must be provided with the first shipment. A conditional finding is only useful if the condition is specific and has a named verification point.
CORRECTIVE ACTION REQUIRED
The requirement is understood and achievable, but the control is missing, undocumented, or inconsistently applied. Issue a corrective action that names the gap, the required action, the responsible party, and the closure date. Where the gap affects a critical characteristic, treat the manufacturer as unapproved for that scope until the action is closed and verified.
FAIL / NOT APPROVED FOR THIS SCOPE
The evidence contradicts the requirement, or the manufacturer cannot or will not provide evidence after a reasonable request. This is a decision about a specific scope. It does not mean the manufacturer is incapable of all work, and it should be recorded that way, so the decision can be revisited if the scope changes.
NOT APPLICABLE
The requirement does not apply — a different material, a different process, a contract without the clause. Say so explicitly and record the reason. Marking a requirement not applicable prevents future readers from interpreting an empty line as an unaddressed gap.
WHY AUDIT DECISIONS MUST REMAIN SCOPE-SPECIFIC
Approval attaches to what the evidence covered. If the material changes from aluminum to titanium, if the volume moves from ten parts to ten thousand, if the drawing revision changes a critical feature, or if a key operation moves to a different machine or sub-tier supplier, the previous evidence no longer covers the current program. That is not a reason to distrust the manufacturer. It is the reason audits expire.
Practically, this means your approval record should state four things: the part and revision, the process route, the volume range, and the expiry conditions. Anything that changes those four items reopens the audit for the affected requirements only.
PROTOTYPE AUDIT VS PRODUCTION AUDIT
The same twelve questions apply to both, but the required evidence differs by stage. Applying a production audit to a one-off prototype wastes effort. Applying prototype habits to a production ramp skips the controls that matter at volume.
PROTOTYPE PROJECTS
Focus on the four requirements that determine whether you get usable parts and information fast: machine and process fit for your geometry, tolerance capability on your critical features, material availability in the specified grade and condition, and how quickly engineering questions get answered by someone with technical authority.
Prototype scope usually justifies accepting lighter documentation. What it does not justify is skipping the capability question, because a prototype produced on the wrong process cannot validate a design for production. Two specifics are worth confirming even at prototype stage: that the material is the specified grade and temper rather than a substitute, and that the drawing revision being quoted is the revision you intend to build from.
PRODUCTION PROJECTS
Production scope requires the full set, with emphasis in four places. First-article inspection becomes a gate rather than a report. Material traceability must survive to shipped parts, not just to stock. Sub-tier control matters more, because a defect introduced at a coating or heat-treat supplier can affect an entire batch. And capacity must be confirmed in hours against your ramp schedule, not as a general statement of ability.
An intermediate step earns its cost on production programs: run a small pilot order under production conditions, with production documentation and inspection, before releasing full volume. The pilot is where the audit's assumptions meet real output. If the manufacturer proposes to go straight from prototype to full production with no intermediate control point, ask what evidence from the prototype would support that jump.
WHAT DOCUMENTS SHOULD BUYERS REQUEST FROM A CNC MANUFACTURER?
The table below sets out what each document is good for, and — just as importantly — what it does not prove. Most audit errors come from treating a document as evidence of more than it can support.
Document / Evidence | When it may be useful | What it proves | What it does not prove |
|---|---|---|---|
Business registration or licence | Entity verification at the start of an audit | The legal entity exists and its name matches the quotation | That the entity manufactures anything |
Quality system certificate | Assessing whether a management system is certified | A management system was certified within a stated scope by a named body | That your part, material, or process falls inside that scope |
Scope statement for that certificate | When the certificate exists but the site matters | Which activities, sites, and entities are covered | That the specific process used on your part is covered |
Sample dimensional inspection report | Evaluating tolerance capability | Actual measured values were obtained on a comparable part | That your part will achieve the same values |
Calibration certificates | Confirming measurement credibility | The instrument's traceability status and validity date | That the inspection plan covers the right characteristics |
Measurement uncertainty statement | Where a tolerance is tight relative to the instrument | Whether the measurement can support the tolerance band | That the process is capable of holding it repeatedly |
Material certificate | Verifying the specified grade and condition | The delivered material's composition and condition, with heat or lot identity | That the material in your finished part came from that lot |
First article inspection report | Production release decisions | Every drawing characteristic was measured and evaluated | That later parts will match it without process control |
Process certificates for subcontracted operations | Where heat treatment, coating, or plating is involved | The subcontracted operation was performed and documented | That incoming verification was done on the returned parts |
Nonconformance and corrective action records | Assessing problem handling | The manufacturer records, dispositions, and closes issues | That repeat issues are prevented without trend monitoring |
Certificate of conformance | Shipment documentation | The manufacturer declares conformance to the specified requirements | Independent verification of that declaration |
Process route or operation sheet | Machine and process fit assessment | The manufacturer planned the part operation by operation | That the route will be followed as written |
A document request list is only useful if each request has a purpose. Asking for everything produces a folder nobody reads. Asking for the four or five documents that address your riskiest requirements produces a decision.
WHAT DOES ISO CERTIFICATION ACTUALLY TELL A BUYER?
ISO 9001 certification tells you that a quality management system has been certified by a certification body within a defined scope. That statement is narrower than most buyers assume, and it is worth knowing exactly where its edges are.
Five things need checking before a certificate carries weight in an approval decision.
The legal entity. Certificates are issued to entities, not brand names. If the certificate names a parent company, a trading arm, or a group entity while your parts are made elsewhere, the certificate does not cover the operation you are relying on.
The manufacturing site. Multi-site certificates list covered locations or operate under a defined structure. Confirm that the site producing your part is one of them.
The scope statement. The scope describes the activities covered. A scope worded around a different product family, process, or service may not cover the specific operation on your part.
The issuing body and validity. Confirm the certification body identified on the certificate, the certificate's validity dates, and its surveillance status. A certificate past its surveillance cycle or suspended is a different fact from a current certificate.
The edition. Quality management standards are revised, and more than one edition can be valid during a transition period. Rather than assuming a single current edition, check which edition the certificate names and whether the transition timeline affects its validity — the certificate itself, and the issuing body's published information, are the authoritative sources.
None of this is an argument against certification. A certified manufacturer has submitted to independent assessment of its quality system, which is real and useful evidence about management discipline. The point is what the certificate does not do: it does not verify that your specific part, on your specific drawing, will meet your specific tolerance.
Treat the certificate as one line of evidence about the manufacturer's quality system, and keep the part-specific verification — tolerance evidence, inspection planning, first-article discipline, material traceability — separate and specific. Buyers who conflate the two are the ones who discover the gap at the wrong moment.
COMMON CNC FACTORY AUDIT RED FLAGS
The flags below are grouped by severity for decision-making purposes. They are stated as evidence patterns rather than accusations, because most of them indicate a control gap rather than bad intent.
Flags that should block approval for the affected scope
A critical characteristic cannot be measured with the stated instrument within the required uncertainty.
No released drawing revision can be identified for the job under discussion.
Material identity cannot be linked from the certificate to the parts, and no process exists to create that link.
The manufacturer cannot produce a single complete job record for a comparable job.
A subcontracted operation critical to part function is performed with no documentation returned.
The entity issuing the certificate of conformance is not the entity performing the work, with no documented relationship.
Flags that warrant corrective action before release
Inspection reports show pass or fail flags instead of measured values.
Calibration certificates are overdue or cannot be linked to specific instruments.
The process route is described verbally but never documented.
Capacity answers address machine count rather than available hours.
Sub-tier suppliers are selected per job with no approval criteria.
Nonconformance records exist but corrective actions lack effectiveness verification.
Flags that should trigger deeper questioning
Technical questions are answered by a sales contact rather than an engineer.
Drawings and files are transferred over personal channels.
Utilization or scheduling data is described as unavailable in principle.
The manufacturer claims no constraints at any volume or timeline.
Superseded documents are retained in the same location as current ones.
Business continuity questions are deflected as unnecessary.
Any single item in the lowest group is a question, not a conclusion. An item in the highest group is a decision point. The severity classification exists so that a reader is not tempted to average a serious gap against a long list of minor strengths.
BEFORE PLACING A PRODUCTION ORDER
The sequence below converts an audit into a release decision. Each step has an exit criterion; the program does not advance until the criterion is met. Skipping a step does not save time — it moves the risk to a more expensive stage.
Step | What it means | Exit criterion |
|---|---|---|
1. Manufacturer identified | A specific legal entity and manufacturing site, not a category of supplier | Entity and site recorded in the supplier file |
2. Audit scope defined | The part, revision, material, volume range, and processes to be covered | Written scope agreed internally before evidence is requested |
3. Evidence reviewed | Documents requested against the twelve questions and evaluated | A finding recorded for each requirement, with a classification |
4. RFQ issued | A quotation built on the verified route and assumptions | A quote whose assumptions match the audited route |
5. Technical questions resolved | Open engineering questions answered by someone with technical authority | No unresolved question on a critical characteristic |
6. Prototype or pilot order placed | A first order under production-representative conditions where risk justifies it | Parts produced with production documentation and inspection |
7. First article accepted | Characteristic-level inspection report reviewed and approved | Signed acceptance covering every drawing characteristic |
8. Corrective actions closed | Every corrective action verified, not merely answered | Closure evidence reviewed for each action |
9. Production released | Approval issued for a defined scope with a stated expiry condition | Written approval naming part, revision, route, and volume range |
10. Performance monitored | Delivery, quality, and nonconformance data reviewed at intervals | Review cadence defined, with triggers for re-audit |
Two steps deserve emphasis. Step 8 is where programs most often slip: a corrective action that has been answered is not the same as one that has been verified, and a closure without evidence is a promise. Step 9 is where approval is most often left ambiguous: an approval that does not state its scope and expiry conditions gets treated as permanent by default, which is precisely how an unexamined supplier becomes a risk.
If you are preparing drawings and requirements for the first time with a new manufacturer, the CNC machining RFQ guide covers how to package technical inputs so that quotes are comparable and assumptions are visible.
HOW LKPROTOTYPE SUPPORTS MANUFACTURER VERIFICATION
Verification is easier when a manufacturer expects it. LKprototype's CNC machining for prototype and production parts supports both prototyping and repeat production, which means the same process questions apply from the first part to the production order.
On the operational side, several of the audit questions in this article map to things a buyer can ask about directly: which machines and setups are planned for a part, how a drawing revision will be handled once released, what inspection method is proposed for a critical characteristic, and whether a specific operation is performed in house or by an approved partner. Engineering review before quotation is the point at which these questions are cheapest to resolve, because the process route, materials, tolerances, and finishes can still be adjusted.
Where a requirement cannot be met as drawn, the productive conversation is about what the drawing actually needs. Not every tight tolerance carries function, and a tolerance relaxed in a non-functional area often removes a production risk without affecting the part's behavior. That conversation is easier to have during DFM review than after the first article.
This article is written to be usable regardless of which manufacturer you are evaluating, including LKprototype. The audit logic does not change with the name on the quote.
CNC MACHINING MANUFACTURER AUDIT CHECKLIST
Use this checklist as a working document. Each item should resolve to a yes, a no, or a finding with a classification.
FACTORY AND BUSINESS IDENTITY
Legal entity name confirmed and matched to the quotation
Manufacturing site addresses identified for each operation
Business registration reviewed
Facility confirmed by live walkthrough or visit
Subcontract or partner arrangements disclosed in writing
Certificate of conformance issuer identified and matched to the producing entity
MACHINING CAPABILITY
Written process route obtained for the specific part
Each operation mapped to a machine with stated configuration and envelope
Setup count and workholding approach documented
Fixture approach reviewed for critical features
Machine availability in the delivery window confirmed
Fallback plan identified for machine downtime
DRAWING AND REVISION CONTROL
Released drawing revision identified and confirmed in writing
Production documentation references the approved revision
Superseded revisions withdrawn from production access
Engineering change notification process documented
CAD file access permissions reviewed
Change approval authority and re-quote triggers defined
MATERIAL AND TRACEABILITY
Material certificate obtained for the specified grade and condition
Heat or lot number identified on the certificate
Same identifier traced onto production documentation
Segregation practice reviewed for different grades and conditions
Subcontracted heat treatment or coating documentation confirmed
Certificate of conformance and retention period agreed
INSPECTION AND METROLOGY
Inspection plan mapped to drawing characteristics
Critical and key characteristics explicitly identified
Instrument named for each critical characteristic
Calibration certificates current and linked to specific instruments
Measurement uncertainty confirmed against the tightest tolerance band
Inspection records retention confirmed
FIRST ARTICLE AND PRODUCTION RELEASE
First article inspection coverage rule agreed, including drawing notes
Report format confirmed to show measured values, not flags
Internal review and approval signature required
Nonconformance procedure defined if the article fails
Re-verification triggers listed, including material, process, machine, and revision changes
Production release gate documented
NONCONFORMANCE AND CORRECTIVE ACTION
Segregation practice for nonconforming parts reviewed
One real nonconformance record examined
Disposition authority matrix reviewed
Root cause and corrective action process reviewed
Effectiveness verification required for closure
Repeat-issue tracking confirmed
SUBCONTRACTED PROCESSES
Complete subcontracting list obtained
Sub-tier suppliers identified and approval criteria reviewed
Requirement flowdown documents reviewed
Incoming verification of returned work confirmed
Process certificates required for special processes
Responsibility for sub-tier defects confirmed in writing
CAPACITY AND DELIVERY
Available hours confirmed for machines in the route
Inspection resource load confirmed
Bottleneck resource identified
Ramp plan and staffing approach reviewed
Lead time broken down by stage with stated assumptions
Milestone or pilot schedule agreed for production programs
IP AND BUSINESS CONTINUITY
Confidentiality agreement signed with a named signatory
File access restricted by project
Staff-level confidentiality agreements confirmed
File transfer channels approved and alternatives prohibited
Retention and destruction process defined for project close
Tooling, fixture, and file register available
Secondary technical contact named
FAQS
HOW DO YOU AUDIT A CNC MACHINING MANUFACTURER?
Convert each claim into evidence you can examine. Establish the legal entity and the actual manufacturing site, obtain a written process route for your part, review measured inspection data on comparable features, verify drawing revision control and material traceability, confirm inspection capability and calibration, examine the first-article process, review nonconformance handling, identify subcontracted operations, test capacity against your delivery window, and confirm lead-time composition plus data and continuity controls. Classify each finding and approve only the scope the evidence supports. A representative-job walkthrough, where you follow one real job through its full paperwork, is the fastest way to see whether the system operates as described.
WHAT SHOULD I ASK A CNC MACHINING MANUFACTURER BEFORE PLACING AN ORDER?
Ask which machines and processes will produce your specific part and how many setups are required; which drawing revision will be used and how revisions are controlled; where the material will come from and how lot identity is maintained to the finished part; which critical characteristics will be inspected and with which calibrated instrument; what first-article evidence you will receive; how nonconformances are dispositioned and corrected; which operations are subcontracted and by whom; and what hours are available on the required resources in your delivery window. Each question should be answered with a document or a measurement, not with reassurance.
HOW CAN I VERIFY THAT A CNC SUPPLIER IS A REAL MANUFACTURER?
Check whether the manufacturing site can be identified as a specific facility, whether the legal entity on the quote matches the entity on the quality certificate, whether technical questions reach an in-house engineer who answers in drawing terms, and whether you can see the process rather than only the product. Ask for a live walkthrough showing machines running, the metrology area, and the material receiving and storage areas, and ask an unscripted question about a job currently on the floor. Intermediaries and manufacturing networks are not inherently a problem — they can consolidate processes and simplify logistics — as long as the relationship is disclosed and it is clear who controls quality and owns corrective action. The issue is never the intermediary; it is believing you are dealing with a factory when you are not, and skipping the checks that would follow.
WHAT DOCUMENTS SHOULD I REQUEST FROM A CNC MANUFACTURER?
Documentation requirements depend on project risk, your customer's requirements, your industry, and the contract. A reasonable starting set includes the quality-system certificate with its scope and named entity, a sample dimensional inspection report showing actual measured values, calibration certificates for the instruments used on your critical characteristics, material certificates for the specified grade and condition, a first-article report for production work, process certificates for subcontracted operations, and one real nonconformance or corrective action record. The point is not to collect documents but to request each one with a purpose in mind — the table earlier in this article sets out what each document proves and, just as importantly, what it does not.
HOW DO I VERIFY A CNC MANUFACTURER'S TOLERANCE CAPABILITY?
Ask for measured evidence rather than a stated capability. Request a dimensional report on a part with features similar to yours, in the same material family, measured by an identified instrument, and check that the report shows actual values rather than pass/fail flags. Then confirm the method proposed for your tightest characteristics and its measurement uncertainty relative to the tolerance band. Tolerance achievement depends on feature geometry, size, material, setup count, thermal conditions, datum structure, and measurement method — so a general capability statement and a specific result are not interchangeable. For high-risk characteristics, a correlation study on retained parts before production is a cost-effective way to test capability directly.
DOES ISO 9001 CERTIFICATION GUARANTEE CNC PART QUALITY?
No. ISO 9001 certification provides evidence that a documented quality management system has been certified by a certification body within a defined scope. It does not demonstrate that the facility making your part is within that scope, that the specific process or material is covered, that the specific part conforms to its drawing, or that the claimed tolerance is achievable on your features. Before relying on it, verify the legal entity, the manufacturing site, the scope statement, the issuing body, the certificate's validity, and which edition is named — editions change, and more than one may be valid during a transition period. A certified manufacturer can still fail to demonstrate revision control on your job.
SHOULD I AUDIT A CNC FACTORY BEFORE ORDERING PROTOTYPES?
A full production audit is usually unnecessary before a prototype order. What is worth confirming at prototype stage is narrower and still important: that the process route fits your geometry, that the material is the specified grade and condition, that your critical tolerances can be measured with a credible method, and that engineering questions reach someone with technical authority. Skipping the capability question at prototype stage is the mistake with real consequences, because a prototype produced on a process that cannot scale tells you nothing about production. For suppliers you intend to use at volume, treat the prototype order as the beginning of the audit rather than as a substitute for it.
WHAT IS THE DIFFERENCE BETWEEN A CNC MANUFACTURER AUDIT AND SUPPLIER SELECTION?
Selection answers which candidates are worth pursuing: it compares multiple manufacturers on capability, commercial terms, and fit, and it produces a shortlist. An audit answers whether a specific manufacturer can produce a specific part under controlled conditions — it works on one manufacturer and one scope, uses evidence review, document examination, technical interview, and live or on-site verification, and produces a scoped decision with findings and corrective actions. Selection narrows the field; the audit decides what can be released. A manufacturer can pass selection comfortably and still fall short on an audit of revision control, traceability, or capacity for your specific demand.
CONCLUSION: APPROVE THE PROCESS, NOT THE SALES CLAIM
A CNC machining manufacturer should be evaluated on evidence that relates to your specific part and your specific production scope. Not on website quality, machine count, certificate logos, or the confidence of a quotation.
That principle resolves the practical question the audit exists to answer. A manufacturer that can produce your geometry once may not be able to produce it a thousand times under controlled conditions. The difference is not talent — it is control: revision control, material identity, inspection definition, first-article discipline, nonconformance handling, sub-tier oversight, capacity planning, and continuity. Each of those is verifiable, and each of them is verifiable before you place the order.
The decision logic that makes an audit defensible is worth stating plainly, because it is also the logic that protects you if the decision is reviewed later:
Requirement → Question → Evidence → Finding → Corrective Action → Approval
A requirement is defined and written down. A question turns it into something a manufacturer can answer. Evidence turns the answer into something you can examine. A finding records what the evidence showed and where the requirement does not apply. Corrective action closes specific gaps by a stated date with a stated verification method. Approval attaches to the scope the evidence supports — and it is re-examined when material, process, volume, or revision changes.
That sequence is useful even when the answer is uncomfortable, because it converts a disagreement about trust into a discussion about documents. And it is useful when the answer is favorable, because it gives you a record of why.
When you are ready to put a specific scope in front of a manufacturer, the most efficient form of the request is also the most specific: submit the CAD files and drawings, name the material and condition, state the tolerances that matter, specify the quantities, define the required finish, describe the inspection and documentation you need, and state your delivery requirements. A manufacturer that welcomes engineering review will answer with a process route, a measurement method, and a named engineer. That response — not the sales claim — is the start of a verification you can actually rely on.
Send the drawing, material, tolerance, inspection, quantity, and delivery requirements for CNC machining review and quotation.
