Information for external providers
Plain-language summary
Tell suppliers exactly what you need before they supply it: the processes/products/services, approval rules, competence requirements, interactions, your monitoring of them, and any verification you or your customer will do at their site.
What the clause is really asking
Communicate (after checking adequacy): requirements for what is provided; approval of products, methods, equipment, release; competence; provider interactions; control and monitoring applied; verification/validation activities planned at their premises.
What auditors look for
Auditors sample POs and agreements: are requirements complete and current (right spec revision)? Approval and release rules stated? Site-visit rights established where you rely on them?
Typical evidence
POs with full requirement references; supplier quality agreements; spec transmittal records.
How to comply — recommendations
Standardise PO text to reference the current spec revision and your supplier quality agreement. Keep proof of which revision was sent — revision confusion is the eternal supplier dispute.
Common nonconformities
POs referencing obsolete drawings; quality requirements assumed 'known'; no agreement on release or approval mechanics.
Related clauses
IATF 16949: extended by 8.4.3.1 (see combined row)
In the book
Chapter 8 — Operation — Where the Product Is Won or Lost treats this clause family in full: what it is really asking, what auditors look for, the evidence that satisfies, how to make it work on a real floor, and where companies stumble.
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.