Card supplier qualification: the approval record and its limits

Supplier qualification is not the decision to buy. It is the record of which legal entity was approved, for which construction, on what evidence, and what the approval does not cover.

Choosing a factory and qualifying one are two different jobs done at two different moments. The questions that separate a serious quotation from a weak one belong to the first job, and the twelve questions to ask before you order sets them out. This guide is about the second job: what gets written down after the shortlist, so that the approval still means something when the buyer who made it has moved on and somebody reorders against it eighteen months later.

The Kaway qualification record is one page per approved supplier that names the contracting entity, the approved construction, the evidence held, the open issues and the limits of the approval. The sections below are its fields, in the order they are filled in.

01. Qualification starts where the shortlist ends

A shortlist ranks suppliers against each other. A qualification record fixes one supplier to one scope. The two are often run together and then neither is written down, which is how a buyer ends up with a supplier everybody calls approved and nobody can say approved for what.

The handover point is the moment a quotation is accepted. Up to there the work is comparison: three quotations for the same card that do not match, because each one has read the brief differently. After that the work is documentation: the specification that was quoted, the sample that was approved against it, and the evidence that supports anything the end client will be told. Specifying a card order covers what has to be in the brief for either job to be possible at all.

02. The approved party is a legal entity, not a building

The organisation being approved is the one named on the quotation and on the invoice, not the building in the photographs. Those are frequently not the same, and that is normal rather than suspicious.

A contracting company in one jurisdiction can own or operate a plant in another. A company can be incorporated in one place and manufacture in another. Both facts are true at once, and a qualification record has to hold both: the entity that carries the obligation, and the site where the work happens.

The distinction matters most on certificates, because a certificate belongs to whoever registered it. Kaway's wooden cards are produced at an FSC certified facility (FSC-C195226), and the registered certificate holder is the company that operates the plant rather than Kaway Group Limited. A record that compresses that into supplier is FSC certified has lost the only detail an auditor would ask about. Write the claim the way the certificate supports it, and note the holder.

Three fields cover this part of the record. The contracting entity, with its registered name. The production parties, including any subcontracted step and how it is controlled. The party that answers a complaint about a delivered batch, which is not always the party that quoted.

03. Approval attaches to a construction, not to a catalogue

Approving a supplier for one card does not approve everything that supplier lists. The approval is for a construction, and a construction is the body material, the thickness, the chip, the finish and the encoding taken together.

A 0.76 mm PVC card carrying a MIFARE DESFire EV3 chip and encoded for an ASSA ABLOY VingCard lock is one construction. A wooden card at 1.20 to 1.30 mm with laser engraving is another, made on a different line from a different material with a different inspection problem. A supplier can be excellent at the first and untested at the second. If the record says approved supplier rather than approved for this construction, nothing stops the second order going out against evidence that was never collected.

Write the construction into the record in the same words the specification uses, and keep the approved sample reference beside it. When the end client later asks for a variant, the record shows immediately whether the variant is inside the approval or outside it.

04. Evidence, and what actually counts as it

Evidence is a document about the product in front of the buyer. A capability described in a brochure is an assertion, and the two go in different columns.

Four things qualify as evidence at this stage. A sample made in the quoted construction, not a catalogue sample in a similar one. An inspection record that names the test and the result, not a photograph of a pallet. A test method reference, so the number means something: an acceptance quality limit is only interpretable against a sampling scheme such as ISO 2859-1. And a certificate read with its scope, which is the part most often skipped.

A quality plan that connects each requirement to a test is the document that turns a specification into evidence a supplier can produce repeatedly, and what to inspect before accepting a pallet is the buyer side of the same exchange. A supplier who proposes the inspection record before being asked is giving the strongest signal available at this stage.

05. Scope an audit to the risks of the job

An audit is a sampling exercise with a declared scope, not a verdict on a company. Scoped to the risks of the proposed order it is useful. Left open it produces a folder nobody reads.

Four scopes cover most card orders. Process control, where the question is how a setting is held constant across a run. Traceability, where the question is whether a finished card can be tied back to its material batch and its chip lot. Data handling, which matters as soon as the order carries names, photographs or encoding keys. And subcontracting, where the question is which steps leave the site and who checks them when they come back.

Record who performed the audit and what was reviewed, with dates. A site visit, a video tour or a set of photographs is observation, and observation is worth having, but it is not a certification and should not be filed as one. Approval of a site does not imply that every product made there, or every process described during the visit, was assessed.

06. What the record has to contain

Eight fields make a qualification record usable by somebody who was not in the room. Anything shorter tends to collapse into the word approved, and anything longer stops being filled in.

The field that earns its place is number seven. A record that lists only what was met reads as a blanket approval the moment the person who wrote it leaves. A record that also states what the approval does not cover keeps working without them.

07. When qualification has to be done again

Requalification is triggered by a change, not by a calendar alone. Six changes send a supplier back to the record.

The construction changes, including a chip substitution proposed late in a run. The production arrangement changes, because a step moved to a subcontractor or to a different site. The contracting entity changes its name, its ownership or its invoicing company. A batch fails, and the failure points at a process rather than at an accident. A requirement that was conditional becomes load bearing, which is what happens when an end client starts repeating a claim in a tender. And the record passes its own review date with nothing having been tested since.

Two of those come from the commercial side rather than the technical one, and they are easy to miss. comparing suppliers on total cost rather than price per card covers the moment a buyer is tempted to move a qualified construction to a cheaper quotation without repeating any of this.

08. Worked example

Illustrative scenario, not a Kaway case study.

A buyer qualifies a supplier for a 0.76 mm PVC card with a MIFARE DESFire EV3 chip, encoded for the reader model its client runs. The record names the contracting entity, the approved sample, the encoded test result and one open issue about packaging. Field seven says the approval covers that construction only.

Fourteen months later the client asks for wooden cards and wants to put an environmental claim in its own brochure. The buyer who ran the original approval has changed job. Because field seven exists, the new buyer can see in a minute that this is outside the approval, and that two things are needed rather than a fresh supplier search: a sample in the new construction, and the certificate read with its scope so the brochure claim matches what the document supports. The supplier stays. The approval is extended, narrowly and on evidence.

09. Technical references

• ISO 2859-1:2026 is the sampling scheme an acceptance quality limit has to be read against, which is why this guide treats a bare AQL figure as incomplete evidence: iso.org/standard/2859-1.
• The International Card Manufacturers Association is the trade body for the card manufacturing industry, and membership is one of the checkable facts about a contracting entity: icma.com.

10. Where Kaway fits

Kaway Group Limited was incorporated in Hong Kong in 2015. Kaway manufactures in-house at the plant in Dongguan, China. Encoding is done at the plant. Every chip is read-tested individually before shipping (100%, not sampling).

Minimum order is 500 units. Standard production is 12 calendar days for PVC and wooden cards. Ask for a free sample to test it first: that request is what fills field four of the record. Quote requests are answered the same working day. Wooden cards are produced at an FSC certified facility (FSC-C195226). Send the specification and the delivery date required to start the evidence side of a qualification.

11. Frequently asked questions

Does a factory photograph qualify a supplier?

No. Qualification connects the contracting entity, the proposed construction, the relevant evidence and the party responsible for delivering the job. A photograph shows a building, and the building is rarely the thing carrying the obligation.

Is a trading company automatically a worse supplier than a manufacturer?

No, and treating it as a rule hides the real question. A trading company can control a job well and a manufacturer can be untested on the construction being asked for. What matters is who is responsible for the delivered batch and what evidence exists for this product.

Does approving one card approve the rest of the catalogue?

No. Approval attaches to a construction: material, thickness, chip, finish and encoding together. A wooden card and a PVC card from the same supplier are separate approvals because they are made on different lines and inspected differently.

How long does a qualification stay valid?

Until something on the record changes or the review date passes with nothing tested since. Six changes trigger a requalification, and the most commonly missed ones are commercial: a new invoicing entity, or a production step quietly moved to a subcontractor.

Can we qualify a supplier without visiting the plant?

Yes, and most qualifications are done that way. A sample in the quoted construction, an inspection record naming the test and the sampling scheme, and certificates read with their scope carry more weight than a tour. An audit is worth adding when the job carries a specific risk that documents cannot settle.