How to Verify a CNC Machining Supplier in China Before You Order

A supplier you can order from is one whose every claim arrives with a document you can check: a registration record that matches the contract, a certificate that names the site doing the work, a bank beneficiary that matches the seller. Skip those checks and the failure is quiet. You pay for a pilot that proves nothing because nobody defined what passing meant, or you find the ISO certificate belongs to a different address, or the money leaves for an account nobody can explain.

This guide gives you ten checks you can run from your desk, with no factory visit. Each one names the artifact to request, the independent source to compare it against, and the point at which you stop.

One disclosure before you start: this guide is published by LKprototype, a CNC machining and low-volume manufacturing company based in Dongguan, China. We benefit commercially when buyers request quotes through the links in this article. The checks below are written to be run against any supplier, including us, and several of them are the checks our own customers should apply to us.

Before you start, have your drawing package, the supplier's exact Chinese name and credit code, and a named contact who can join a live call.

Key Takeaways

• Ten checks, each tied to a specific document and an independent source you can query yourself.

• Every step ends with a pass/fail test, so a failed supplier is visible before money moves.

• The whole procedure runs remotely: registry lookups, certificate databases, one video call, and a document review.

The pattern of failure is repetitive, and the details barely change between projects. In one case a supplier sent a clean ISO 9001 certificate; the certified address was a registered office block in the city, while the parts were cut in a workshop forty kilometres away that no certificate mentioned. In another, the bank beneficiary on the proforma invoice matched the trading company, but the request to change it to a new account in Hong Kong arrived by email two days before the deposit was due. Both look fine on a website. Neither survives a fifteen-minute comparison against a source the supplier does not control.

If you are still narrowing the field, our guide to choosing a CNC machining supplier for prototype and production covers the earlier shortlisting stage.

QUICK ANSWER: HOW DO YOU VERIFY A CNC MACHINING SUPPLIER IN CHINA?

To verify a CNC machining supplier in China, confirm the legal entity, actual manufacturing site, certificate scope, subcontracted processes, technical evidence, contracting and payment identities, drawing controls, pilot-order results, and shipping responsibilities before approving the supplier.

Already have a supplier or drawing package to review? Send your CAD, material, quantity, critical requirements, and inspection scope for an engineering review.

What you need before you start

Gather four things before the first lookup, because each later step compares against them. Without a fixed reference, a mismatch has nothing to mismatch against.

• The drawing package, including every note that calls out a special process, a material specification, or a surface finish.

• The supplier's exact registered Chinese name and Unified Social Credit Code, copied from the business license, not retyped from an email signature.

• A named contact with the authority to answer technical and commercial questions, and a scheduled call slot.

• The proforma invoice or draft contract, so you can compare the entity, the bank details and the delivery terms against what you find.

Budget a few hours of desk work plus one call. The difficulty is intermediate: nothing here needs an engineer on site, but the comparisons are exacting.

1. Confirm the supplier is a legally registered company

Confirm the legal identity first, because everything after it is checked against that name. A registration record is the floor of due diligence, not proof of capability.

Look the company up in the national enterprise credit registry (GSXT), the free official portal run by China's market regulator. The record carries the legal name, the credit code, company type, registered address, legal representative, business scope, status, shareholders and any penalties or abnormal-operation listings. What the registry does and does not show matters: a guide to the system is clear that registration says nothing about factory ownership, equipment, or whether production is outsourced.

Then check the code itself. The Unified Social Credit Code (统一社会信用代码) is 18 characters long, mixing digits and uppercase letters but never the letters I, O, Z, S or V. It splits into five parts: a registration-department code, an organization-category code, a six-character region code, a nine-character entity identifier, and a final check digit computed under ISO 7064 MOD 31-3, all defined by GB 32100-2015.

Verify your result: the legal name, credit code and registration status on the license match the draft contract character for character. If they do not, stop and ask why.

2. Establish that the supplier owns and runs the site you are shown

The registered address, manufacturing address, and shipping address do not have to be identical, but their relationship should be documented and explainable. The buyer's goal is to verify where the parts will actually be manufactured and which legal entity is responsible for the order.

Ask for evidence of the actual manufacturing site where appropriate, and document how the registered, manufacturing, and shipping addresses relate to one another. These addresses do not have to be identical. The objective is to understand which site will manufacture your parts, which legal entity is responsible for the order, and why any different addresses appear in the commercial or shipping documents.

Then run a short video call with a fixed route. Ask the contact to walk, in one continuous session, past the machines your part needs, the inspection area, the material storage, the shipping bay and a nameplate on the machine that will run your job. Continuous movement is the point: it is much harder to stage a walk-through than a still photo.

Verify your result: you can identify the actual manufacturing site, confirm its relationship to the registered company, and explain any differences among the registered, manufacturing, and shipping addresses. The video call shows the machine type and inspection resources relevant to your project.

3. Tell a factory from a trading company on paper

A trading company is not automatically a problem, but you need to know which model you are buying so you know who controls the process.

Business-scope wording can help you understand the company's registered activities, but it does not by itself prove where production occurs or establish the complete export arrangement. Ask which entity will manufacture, contract, invoice, export, and receive payment.

For a structured version of this conversation, use our twelve-question manufacturer audit as the script for the call in Step 2.

Verify your result: you can state in one sentence which model you are dealing with and which processes leave the building.

4. Check that a certificate actually covers this site and this work

A certificate is evidence about a management system at a named site, not a guarantee that your parts will conform. Read it as a scope document.

Use the current CertSearch platform to verify available accredited certification records, including certificate status, standard, scope, certified locations, certification body, and accreditation information, which lets you confirm that a certification is valid, that the certification body is accredited, and that the accreditation body is a signatory to the IAF multilateral recognition arrangement. It also runs a watchlist that alerts you if a certificate is suspended, withdrawn or expired.

Then check the clock. Under the three-year certification cycle in ISO/IEC 17021-1, a certified organization gets a two-stage initial audit, surveillance audits in years one and two, and a recertification audit in year three before expiry, with the first surveillance falling no more than twelve months after the certification decision. A certificate with no surveillance history behind it deserves a question.

For special processes, Nadcap special-process accreditation, administered by PRI, covers 26 critical process categories, from heat treating and chemical processing to materials testing and measurement and inspection.

Verify your result: The certificate holder and certified site are identified, the relationship to your contracting entity is understood, and the certificate scope is relevant to the operations you are relying on, the site matches the Step 2 address, and the scope names the process you are buying.

5. Map what will be subcontracted and how it is controlled

Subcontracting is normal in CNC work; undisclosed subcontracting is the risk. Ask for the map, not a promise.

List the processes on your drawing that a machine shop typically sends out: heat treatment, anodizing, passivation, grinding, and any special process the drawing names. Then ask which of them leave the building, who performs each, and what approval that source holds.

Ask how the supplier approves and monitors outside processors, how the current drawing and process requirements are communicated to them, how certificates and inspection records are retained, and how nonconformances are handled. If the supplier holds AS9100D, the requirement to control externally provided processes sits in clause 8.4, and the flow-down of drawing revision, special-process approval and record retention is what you are checking against. For non-aerospace work the same logic still applies; ISO 9001 clause 8.4 provides the baseline, while Nadcap or customer-specific approvals apply only where the drawing, contract or industry requires them. Specialized approvals should not be treated as universal requirements for every CNC machining project.

Verify your result: the disclosure list covers every special process on the drawing, and each subcontracted process has a named source with a stated approval status, compared against the standard or approval scheme the drawing or contract invokes.

6. Demand technical evidence that matches your part

Ask for technical evidence that matches the requirements and risk of your actual part, rather than accepting a general capability statement.

For a typical commercial CNC project, useful evidence may include:

- a dimensional report covering critical characteristics

- material traceability where required

- an explanation of how difficult features will be manufactured

- the planned inspection method for critical dimensions

- finish or special-process evidence where it matters to acceptance

The right evidence depends on the project. Formal first article inspection, specialized material certificates, expanded calibration traceability, or other quality documentation should be requested only when required by the drawing, contract, customer, industry, regulation, or project risk. Where those are required, the reference points are specific rather than vague: first article inspection under aerospace flow-down uses the AS9102 forms (Form 1 for part accountability, Form 2 for product accountability, Form 3 for characteristic accountability), mill certificates follow EN 10204 3.1 for inspection certificates issued by the manufacturer's independent inspection representative, and calibration traceability follows an unbroken chain to national or international standards with stated measurement uncertainty, such as NIST-traceable calibration for equipment used in the US.

A useful verification question is:

CLAIM → QUESTION → EVIDENCE

For example:

Claim: “We can hold this tolerance.”

Question: “How will this feature be manufactured and measured?”

Evidence: project-specific inspection planning, measured results from the pilot, or other relevant evidence.

If you need a deeper capability review, see our [CNC machining manufacturer audit].

If you are comparing several suppliers, use our [CNC machining quote comparison]to keep technical scope and price on the same basis.

Verify your result: the supplier has provided technical evidence appropriate to your actual project, and the evidence addresses the characteristics that matter to function, quality, and acceptance. For each claim, name the document you received, the independent source you compared it against (a standard, a certificate database, a calibration record), and the condition under which you would stop.

7. Reconcile the Contract, Invoice, and Payment Identity

The contracting entity, invoice issuer, and bank beneficiary should be reconciled before payment. They do not always have to be the same legal entity, but any difference should have a documented and independently verified explanation.

Different entities may legitimately appear in an international transaction. A manufacturer may use an affiliated trading company, export entity, or other commercial structure. The buyer's task is to understand who is responsible for manufacturing, contracting, invoicing, receiving payment, and handling the commercial relationship.

A mismatch is not proof of fraud. However, unexplained or unexpected changes to payment details should trigger additional verification before money moves.

If bank details change after quotation or contract approval, verify the change through a contact channel that was established before the change was announced. Do not rely only on the email or message that supplied the new account information.

A useful document check is:

DOCUMENT	ENTITY SHOWN	BUYER QUESTION
Website	Brand or company name	Which legal entity operates this brand?
Business license	Chinese legal entity	Is this the company responsible for the order?
Quotation	Quoting entity	Who issued the commercial offer?
Contract / PO	Contracting entity	Who is legally responsible for the order?
Invoice	Invoice issuer	Why is this entity issuing the invoice?
Bank beneficiary	Payment recipient	What is its relationship to the contracting entity?

Verify your result: the contracting entity, invoice issuer, and bank beneficiary are reconciled in writing, and any difference has a documented explanation that you have independently verified.

8. Protect CAD Files and Technical Data Before the RFQ

Supplier verification should start before you send the full engineering package. A CNC quotation may require detailed geometry, tolerances, materials, and finishing information, but that does not mean every person or subcontractor in the supply chain should automatically receive unrestricted access to the complete dataset.

Start by defining which files are controlled:

- 3D CAD models

- 2D drawings

- PMI or MBD datasets

- tolerance and GD&T requirements

- material specifications

- assembly information

- proprietary manufacturing notes

- customer-specific requirements

Then ask how the supplier handles them.

At minimum, clarify:

1. Who inside the company can access the files?

2. Will any CAD or drawings be forwarded to subcontractors?

3. Does subcontractor access require your approval?

4. How is the current revision identified?

5. How are superseded files removed from active production?

6. Can the supplier identify which revision was used for a specific order?

7. How are files transferred and stored?

8. What happens to project data after the work is completed?

An NDA or other confidentiality agreement may be appropriate, particularly for proprietary products or unreleased designs. For China-specific projects, some buyers also use agreements that address non-use and non-circumvention in addition to confidentiality, but the agreement should match the actual project and should not be treated as a substitute for operational controls.

The most important practical control is revision discipline. A supplier that signs a strong agreement but machines from an obsolete drawing still creates risk.

If the project includes subcontracted finishing, heat treatment, inspection, or other outside processing, ask whether the subcontractor receives the complete drawing or only the information needed for that operation.

Verify your result: you know who can access the engineering data, which outside parties may receive it, how revisions are controlled, and how obsolete files are prevented from returning to production. Ask for this in writing, and name the person inside the supplier who owns revision control.

For a complete technical package, see our [CNC machining RFQ guide].

9. Use a Pilot or Sample Order as a Verification Gate

A pilot or sample order converts supplier claims into project-specific evidence. It should not be treated simply as a small production order; it should be designed to answer the questions that still remain after your document and factory checks.

Depending on the project, a pilot order can help verify:

- drawing interpretation

- revision control

- material execution

- critical dimensions

- fit and function

- surface finish

- inspection reporting

- packaging

- communication

- deviation handling

- document control

- delivery execution

Define the acceptance criteria before machining starts.

For example, state:

- which drawing revision controls the order

- which characteristics are critical

- what material and finish are required

- which measurements must be reported

- what material or process evidence is required

- how deviations must be submitted

- who has authority to approve the sample

- what result authorizes the next stage

There is no universal pilot quantity. The number of parts should follow the validation objective. A fit check may require only a small number of pieces, while destructive testing, repeated assembly testing, finish evaluation, or repeatability checks may require additional samples.

One successful sample also does not prove long-term production capability. It proves only what was actually tested and documented during that defined build.

This is why pilot approval should be treated as a gate:

**DOCUMENT VERIFICATION

→ PILOT ORDER

→ INSPECTION EVIDENCE

→ DEVIATION REVIEW

→ APPROVAL

→ NEXT-STAGE RELEASE**

Verify your result: the pilot has written acceptance criteria, the required evidence is available (for a commercial project that may be a dimensional report on the critical characteristics; where aerospace or medical flow-down applies, expect the AS9102 forms), deviations are resolved, and everyone understands what approval does—and does not—authorize.

For a detailed sample-order framework, see [what to specify when ordering CNC machining sample parts].

10. Define Logistics and Cross-Border Handoff Before Approval

A supplier can machine the part correctly and still create a poor sourcing outcome if the shipping scope is unclear. Before approving a new CNC machining supplier in China, define where the supplier's responsibility ends and where yours begins.

Confirm the agreed Incoterm under Incoterms 2020 rules and name the place, then document the practical handoff. Under EXW the buyer's responsibility starts at the seller's premises, under FCA it starts when goods are handed to the carrier the buyer nominates, and under FOB and DAP the transfer point sits elsewhere again; the rules only work when the named place is written next to the three-letter term.

Clarify:

- who books the freight

- where the shipment is handed over

- who prepares export documentation

- who provides the commercial invoice and packing list

- who is responsible for export clearance

- who arranges insurance where applicable

- what packaging requirements apply

- whether inspection must be completed before shipment

- who receives and reviews shipping documents

- which party should be contacted if the shipment is delayed or damaged

Do not assume that terms such as EXW, FCA, FOB, DAP, or DDP mean the same operational process without the named location and agreed responsibilities being written down.

Also confirm which entity appears as:

- seller

- invoice issuer

- exporter or shipper

- bank beneficiary

- manufacturer where required on documentation

These parties may legitimately differ, but their roles should be understandable before the purchase order is released.

Shipping terms should not be used as a substitute for customs, tax, tariff, or legal advice. The purpose of this check is narrower: make sure the commercial and physical handoff is defined before the first shipment.

Verify your result: the Incoterm and named place are written into the commercial documents, the responsible parties for freight and export documentation are clear, and any difference between the manufacturer, seller, shipper, and invoice entity has been explained.

At this point, the full verification sequence is complete:

**1. LEGAL IDENTITY

→ 2. MANUFACTURING SITE

→ 3. FACTORY / TRADING MODEL

→ 4. CERTIFICATE SCOPE

→ 5. SUBCONTRACTING

→ 6. TECHNICAL EVIDENCE

→ 7. COMMERCIAL / PAYMENT IDENTITY

→ 8. CAD / DATA CONTROL

→ 9. PILOT ORDER

→ 10. LOGISTICS / HANDOFF

Common mistakes that sink a remote verification

Most failed verifications fail on process, not on the supplier. These are the recurring ones.

• Accepting a license PDF as the whole check. A license confirms registration; it says nothing about machines, staff or who runs the process.

• Reading a certificate without its scope. The holder, the site and the process wording are the three things that matter, and a valid certificate for a different address proves nothing about your order.

• Treating a video call as a capability test. A call confirms the site exists and holds the machine types you need. It does not confirm the supplier can hold your tolerance.

• Skipping the pilot acceptance criteria. A pilot order with no written pass/fail definition produces an opinion, not evidence.

• Letting the bank details arrive by email and get confirmed by email. Verify any change through a channel you established before the order.

• Leaving IP protection to a generic NDA. An NNN agreement adds non-use and non-circumvention to confidentiality, and it should name the Chinese counterparty by its exact registered name.

Verify your result: you can point to a document for each of these six points, or you know which one is still open.

What a passed verification looks like

A passed verification is a file, not a feeling: every claim in the supplier's pitch has a matching artifact, and every artifact has been checked against an independent source.

Concretely, the file holds a registry printout whose name and credit code match the contract, three addresses that resolve to one site, a certificate whose holder and scope fit the work, a subcontracting map with named approved sources, a first article or dimensional report with actual values against a ballooned drawing, an EN 10204 3.1 material certificate, a calibration chain with uncertainties traceable to a national standard, and a reconciled bank beneficiary.

Define the pilot acceptance criteria before machining: which characteristics will be checked, which evidence is required, what deviations are acceptable, and what result authorizes the next stage. The sample quantity and inspection scope should follow the validation objective rather than a universal sampling rule.

Which makes a documented pilot a practical first order rather than a special concession. If you would like a second opinion on the evidence you have collected, or a quote to compare against it, send us the drawing package and the file.

Verify your result: a colleague who has never spoken to the supplier could read the file and reach the same conclusion you did.

To make that possible, structure the file the same way for every supplier you evaluate. Tick each item only when you have the document and have compared it against its independent source; leave it blank and treat the supplier as unverified if either is missing.

Frequently Asked Questions

How can I check if a Chinese CNC company is legally registered?

Start with the supplier's exact Chinese legal name and Unified Social Credit Code, then compare them with the company's business license and the National Enterprise Credit Information Publicity System (GSXT). Check the registration status, registered address, legal representative, and business scope, and make sure the contracting entity can be clearly linked to the company you found. Registration confirms that the entity exists; it does not prove that it owns the CNC machines, operates the factory shown on its website, or has the technical capability required for your parts.

How do I know if a CNC supplier in China is a real factory?

Do not rely on a business license or factory photos alone. Ask for the actual manufacturing-site address, then verify it through a live video walkthrough that shows the machining area, inspection equipment, material storage, and the equipment relevant to your project. Ask which operations are performed at that site and which are subcontracted. The registered address, manufacturing address, and shipping address do not need to be identical, but their relationship should be explainable. The goal is to confirm where your parts will actually be made and who controls the process.

How do I verify a Chinese CNC supplier's ISO certificate?

Check the certificate holder, certified location, standard, scope, status, certification body, and accreditation information rather than accepting a PDF at face value. Use a recognized certificate-verification database where the record is available, and compare the certified entity and site with the company and manufacturing location you verified earlier. A valid ISO 9001 certificate shows that a management system has been certified within a defined scope; it does not prove that a specific CNC part will meet its tolerances or that every process used for your order is covered.

Should the bank beneficiary match the CNC factory name?

Not necessarily, but any difference should be explained and documented before payment. A manufacturer may use an affiliated trading company, export entity, or other commercial structure, so the factory name, contracting entity, invoice issuer, and bank beneficiary may not always be identical. What matters is that you understand the relationship among them and verify any account information independently. If bank details change after quotation or contract approval, confirm the change through a previously established contact channel rather than relying only on the message that announced it.

How can I protect CAD files when sourcing CNC machining from China?

Use both contractual and operational controls. Share only the files needed for quotation or manufacturing, identify the current revision clearly, and use an NDA or other appropriate confidentiality agreement where needed. Ask who can access the files, whether drawings will be forwarded to subcontractors, how new revisions replace old files, and how obsolete files are prevented from returning to production. For sensitive projects, define subcontractor disclosure and technical-data access before the RFQ. No agreement eliminates every risk, so document control and access control matter as much as the contract.

How long does a remote verification take?

Plan on a few hours of desk work for the registry, certificate and document checks, plus one scheduled video call and the time the supplier needs to produce an FAI report or material certificate. The document requests are usually the long pole, so send them together at the start.

Can a trading company be a legitimate CNC machining supplier China buyers should consider?

Yes. A trading company can hold commercial relationships and coordinate several workshops, and some buyers prefer that single point of contact. What you must establish is which processes leave the building and who controls them, because the responsibility for conformity stays with the party you contracted.

Do I need a factory visit instead?

Not for the checks in this guide. A visit adds value for complex assemblies or very tight tolerances, but the registry, certificate, subcontracting, FAI and payment checks are all documentary and can be completed remotely. A continuous video walk-through covers the site-existence question.

What should a CNC machining pilot order include?

A defined set of characteristics to measure, the equipment and method for measuring them, a sampling plan with an acceptance limit, a material certificate (EN 10204 3.1 where material conformity must be certified by the steelmaker's independent inspection representative), and a written pass/fail decision. Where aerospace or medical flow-down applies, add the AS9102 first article forms. Without those, the pilot produces parts but no evidence. Our guide to minimum order quantity for CNC machining explains how pilot quantities interact with pricing.

Is ISO 9001 enough on its own?

No. ISO 9001 certifies a management system at a named site. It does not certify that a specific tolerance will be held, that a special process is accredited, or that the certificate covers the address making your parts. Use it as one input among the ten checks.

Conclusion

Verification is a sequence of comparisons, and each one is cheap on its own: a registry lookup, a certificate database query, a scope reading, a bank-detail reconciliation. What makes the procedure work is running all ten before the first payment, and writing down the pass/fail result for each so the decision rests on a file rather than a conversation.

Start with the two checks that cost nothing and eliminate the most: the registry record in Step 1 and the certificate scope in Step 4. If both hold, request the FAI report and the subcontracting map together, then run the video call while those documents are in transit. By the time the pilot order is discussed, you will know whether you are buying from a supplier you can describe precisely.

LKprototype is based in Dongguan, China and provides CNC prototype and low-volume machining services under an ISO 9001 quality system. Buyers can submit CAD files, drawings, material, quantity, finish, critical characteristics, and inspection requirements for project review before quotation, and can ask for the evidence described in this article — the certificate and its scope, a sample dimensional report, and the current approved-processor list for any finishing step — before placing an order.

Looking for a CNC machining supplier in China? Send your CAD model, drawing, material, quantity, finish, critical requirements, and target delivery date. LKprototype can review the manufacturing scope before quotation.