BSCI, SEDEX and WRAP: Social Audits Buyers Ask About

A social compliance auditor walking the sewing floor

Ask a garment buyer what keeps them awake and social compliance arrives quickly. Three names dominate the conversation: amfori BSCI, Sedex with its SMETA audits, and WRAP. They overlap heavily, certify nothing in quite the same way, and get requested in combinations that make factory managers sigh. This guide explains what each one actually is, what its audits examine, and how a buyer should read the results.

The compliance desk behind this guide works with buyer audit programmes on clothing made in Bangladesh for the USA, the UK, Germany, Canada and Australia.

Our company background is on our about us page, the audit-adjacent support sits within our services, and programme discussions open on our get a quote page.

amfori BSCI: A Code, a Platform, a Grade

The Business Social Compliance Initiative, run by amfori, is built around a code of conduct drawn from international labour and human rights instruments: freedom of association, fair remuneration, occupational safety, no child labour, no bonded labour, environmental protection among its principles. Member brands commit their supply chains to the code and share audits through the amfori platform.

A BSCI audit ends in a graded rating rather than a certificate: the scale runs from A, outstanding, down through B, C and D to E, unacceptable, with a separate zero-tolerance protocol for imminent threats to life and similarly grave findings, which triggers immediate escalation regardless of the grade elsewhere.

For buyers the elegance is mutual recognition inside the membership: one audit, visible to the factory’s connected customers on the platform, instead of five brands auditing the same sewing floor in the same month. For factories the grade’s improvement cycle, re-audit windows and follow-up visits, structures the remediation calendar.

Sedex and SMETA: A Database and a Method

Sedex is not an audit standard at all; it is the membership platform on which supply-chain ethical data lives. The audit most buyers mean when they say Sedex is SMETA, Sedex’s own audit methodology, carried out by approved audit companies and uploaded to the platform for connected buyers to view.

SMETA comes in two depths. The two-pillar audit covers labour standards and health and safety, with an environmental assessment module attached. The four-pillar version adds fuller environmental and business-ethics pillars. Either way the output is a report and a corrective action plan, not a pass certificate; Sedex deliberately leaves acceptance decisions to each buyer reading the findings.

The platform’s real product is visibility: a factory completes one SMETA audit and shares it with every connected customer, each of whom applies their own thresholds to the same evidence.

WRAP: A Certificate With Principles

Worldwide Responsible Accredited Production is the certification native of the three. WRAP certifies individual facilities against its twelve principles, which cover legal compliance, forced and child labour prohibitions, working hours, compensation, health and safety, environment and customs compliance, with a strong historical base in the Americas trade.

Certification comes in levels: Platinum, Gold and Silver, with differing validity periods, the higher levels earned by sustained compliance across consecutive audits. Unlike the platform schemes, WRAP issues a certificate a factory can point to, and buyers in the US market in particular have long treated it as a recognisable baseline.

The facility must still survive the audit’s unannounced character and the monitoring between certifications; the certificate is a snapshot with an expiry date, and responsible buyers read it that way.

What Auditors Actually Look At

Strip away the brand names and the audit day converges: document review of payroll, hours, contracts and policies; a floor walk covering machine safety, fire systems, chemical storage and dormitory or canteen conditions where they exist; and confidential worker interviews, the element factories cannot rehearse.

The findings that matter cluster predictably: working-hours records that do not reconcile, safety systems present on paper and absent on the floor, grievance channels nobody trusts, wage calculations nobody can reproduce. Mature factories keep these files audit-ready as ordinary management, because the schemes reward systems, not performances, and because workers experience those systems directly every single working day.

Corrective action plans follow every audit, with findings graded by severity and deadlines attached; the buyer’s real quality signal is how a factory closes a plan, on time, with evidence, without cosmetic paperwork.

Where the Three Overlap, and Where They Do Not

The substantive overlap is large: all three trace back to the same international labour conventions, all three examine wages, hours, safety, discrimination, discipline and the absolute prohibitions on child and forced labour. A factory with genuinely sound systems will produce recognisably similar evidence for any of them.

The differences are architecture, not morality: BSCI grades and shares through a brand membership, Sedex shares raw reports and leaves judgement to buyers, WRAP certifies facilities at levels with expiries. Grading scales, validity periods, worker-interview protocols and environmental depth vary, which is why a buyer cannot treat the logos as interchangeable without reading what sits behind the one in front of them.

Regional gravity differs too: BSCI and Sedex dominate European programmes, WRAP carries particular weight in the Americas, and many global buyers accept two of the three to spare factories duplicate audits.

Audit Fatigue and the Case for Sharing

The industry’s open secret is audit fatigue: a popular factory can host dozens of audits a year, each consuming management days, floor access and worker interviews, many asking near-identical questions in near-identical formats. The cost lands in somebody’s unit price eventually, and the marginal safety gained by the fifteenth audit of the same fire exits is honestly small.

The platform models exist precisely to fight this: audit once, share widely, let each buyer apply their own thresholds to shared evidence. The approach works when buyers genuinely accept shared reports, which is a discipline on the buying side, not the factory side.

Buyers serious about both ethics and economics publish their acceptance matrix, which schemes, which grades, which validity windows, and factories plan their audit calendar against it like any other production input.

Payroll and working hours records under audit review

Reading a Report Like a Buyer

A professional read starts at the findings, not the headline: how many, of what severity, in which chapters. A factory with a middling grade and a short list of minor, well-evidenced corrections is often a safer partner than one with a glossy result and findings that suggest the paperwork was staged.

Next, look at trajectory: repeat findings across audits are the red flag that matters, because they show a management system that performs for audit day and relaxes after. Then the corrective plan itself: owners named, dates kept, evidence uploaded, closures verified rather than asserted.

Finally, dates: an audit’s value decays. A result approaching its validity limit tells you about last year’s factory, and scheduling the follow-up before expiry is part of the buyer’s own compliance hygiene.

Announced, Semi-Announced and Unannounced

Audits arrive in three flavours of surprise. Announced audits fix a date, which helps logistics and guarantees the right staff and documents are present, at the price of a prepared floor. Semi-announced audits give a window of weeks within which the auditors arrive unannounced on the day. Fully unannounced audits, used by WRAP among others for monitoring, test the factory exactly as it ordinarily is.

The trend across schemes is toward less warning, on the reasonable theory that a compliant factory is compliant on a wet Tuesday as much as on a scheduled Friday. Worker interviews conducted confidentially, and records cross-checked against production data, are the mechanisms that make preparation theatre hard to sustain.

For factories, the only stable strategy is the boring one: run the systems daily, and let any audit sample whatever day it lands on.

Fire safety systems checked during a factory audit

What Good Looks Like From the Factory Side

From the factory chair, a well-run audit relationship looks like ordinary good management wearing a calendar: a compliance owner who is not the owner’s nephew but a professional with authority; licence, certificate and inspection renewals tracked before expiry; safety committees that actually meet and minute it; payroll that reconciles to hours that reconcile to production.

When findings land, the strong factories treat the corrective plan as a project, not an insult: root causes named honestly, fixes budgeted, evidence filed as work completes. Auditors notice the difference between a factory embarrassed by a finding and one energised by it, and buyers reading the closure evidence can tell too.

None of this is theatre, which is exactly why it audits well. It is also, not coincidentally, how a factory keeps skilled workers, steady output and insurable premises, so the compliance investment returns money through the factory gate as surely as it returns grades on a platform.

Keeping Audit Status Alive Between Audits

The audit certificate on the wall is the least interesting part of compliance; the living system is what buyers are actually purchasing. Renewal calendars, internal audit rounds, buyer-specific code updates and corrective actions from customer feedback all run between the formal audits, and a buyer’s annual review should sample that ongoing evidence, not just the latest grade.

Schemes support the rhythm differently: platform scores and follow-up audits in the BSCI world, CAP updates inside Sedex, WRAP’s monitoring visits between certifications. Factories that feed those rhythms steadily rarely face a dramatic audit day.

Programmes built with us run on that basis: the file a buyer needs for their own audit committee exists because the system produces it as a by-product, not because a visit is coming.

Frequently Asked Questions

Is a BSCI grade the same as a certificate?

No. BSCI audits produce a rating on an A to E scale, with A outstanding and E unacceptable, plus a zero-tolerance escalation for grave findings. There is no BSCI certificate to frame; buyers read the grade, the findings and the corrective action progress on the amfori platform, and set their own acceptance thresholds against them.

What is the difference between Sedex and SMETA?

Sedex is the membership platform where ethical trade data is stored and shared. SMETA is the audit methodology used to generate that data, in two-pillar form covering labour standards and health and safety, or four-pillar form adding environment and business ethics. A factory has a SMETA audit and shares it through Sedex; Sedex itself certifies nothing.

Which scheme should a buyer ask for?

The one their own compliance policy and customers recognise, which for many European programmes means BSCI or SMETA evidence, and for many US programmes WRAP certification or SMETA. The underlying standards overlap heavily, so the practical question is recognition and audit-sharing: choose the route that lets one good audit serve the most connected buyers.

Does a good audit result guarantee a compliant factory?

No audit can do that. Audits are dated snapshots built from documents, observation and interviews, and between them, conditions depend on the factory’s own management systems. Read audits as evidence with dates and corrective plans attached, keep acceptance thresholds clear, and treat a factory’s remediation behaviour as the truest signal of all.