Supplier Quality Agreement Guide

Executive Summary

A Supplier Quality Agreement (SQA) is a written agreement that defines how a buyer and supplier will manage product quality, quality records, inspections, deviations, nonconformities, corrective action, traceability, change notification, audits, complaints and escalation after a commercial relationship begins.

Its purpose is not to repeat the commercial contract, purchase order, technical drawing or supplier audit. Those documents define price, scope, product requirements or supplier capability. The Supplier Quality Agreement defines the operating rules used to preserve quality once the supplier is approved and production is active.

A strong SQA prevents ambiguity. It makes clear who is responsible for incoming material, process control, final release, retained records, calibration, subcontractors, product changes, complaint response and disposition of nonconforming goods.

This guide focuses specifically on how to structure that agreement. It deliberately stays separate from Article 28 on Product Change Notification, Article 26 on First Article Inspection, Article 25 on Pre-Shipment Inspection, Article 20 on Supplier Relationship Management and the Supplier Audit Checklist. Those processes can be referenced inside the SQA, but the agreement itself is the governance document that defines when and how those controls apply.

1. What Is a Supplier Quality Agreement?

A Supplier Quality Agreement is a formal quality-governance document between buyer and supplier.

It describes the minimum controls the supplier must maintain and the quality responsibilities both parties accept for the supplied product or service.

2. SQA vs. Commercial Contract

The commercial contract governs the wider business relationship: price, payment, liability, delivery and general legal terms.

The SQA should not duplicate those provisions unless a quality topic requires a specific commercial link.

3. SQA vs. Technical Specification

Technical specifications define what the product must be.

The SQA defines how conformity to those requirements will be controlled and evidenced.

4. SQA vs. Supplier Audit

A supplier audit evaluates whether the supplier's quality system and processes appear capable and effective.

The SQA defines the ongoing rules the supplier agrees to follow after approval.

5. Define the Exact Agreement Scope

The agreement should identify which legal entities, manufacturing sites, product families and services are covered.

Avoid language so broad that nobody knows whether a new site or product is automatically included.

6. Define the Quality Responsibility Matrix

A clear responsibility matrix is one of the most valuable parts of an SQA.

It prevents assumptions about who owns inspection, test approval, deviation decisions, complaints and records.

7. Define Document Hierarchy

Quality agreements often fail when different documents conflict.

The SQA should identify the order of precedence or the process used to resolve inconsistencies between contract, drawing, specification, purchase order and quality plan.

8. Require Controlled Documents and Revisions

The supplier should manufacture and inspect against current approved documents.

The agreement should define how obsolete revisions are prevented from use.

• Controlled drawings and specifications.
• Revision identification at production.
• Obsolete-document withdrawal.
• Controlled work instructions.
• Controlled inspection / test methods.

9. Define Supplier Quality-System Expectations

The SQA may reference required management-system standards or minimum quality-system practices.

It should avoid pretending that certification alone guarantees product quality.

10. Define Incoming Material Controls

The supplier should control purchased materials and components according to their effect on the final product.

The SQA can define when certificates, incoming inspection or approved sources are required.

11. Define Control of Subsuppliers

The direct supplier remains responsible for quality delivered by its own sub-suppliers unless the agreement explicitly states otherwise.

Critical outsourced processes should remain under controlled qualification and change notification.

12. Define Process-Control Requirements

The SQA can require the supplier to maintain stable, documented process controls without prescribing every manufacturing detail.

The level of detail should match product risk.

13. Define Special-Process Requirements

Certain processes may require qualification, approved sources, operator qualifications or batch evidence.

The SQA should state how those requirements are controlled.

• Heat treatment.
• Welding.
• Plating / coating.
• Soldering.
• Sterilization or cleaning where relevant.
• Other customer-designated special processes.

14. Define Inspection and Test Responsibilities

The agreement should state which inspections are mandatory before supplier release and which evidence must accompany the product.

15. Reference FAI Without Rewriting the FAI Process

The SQA may require First Article Inspection for new products or defined changes.

The agreement should state the trigger and approval authority while the detailed FAI method remains in the dedicated process.

16. Reference PSI Without Rewriting the PSI Process

The SQA may allow the buyer to require pre-shipment inspection for selected orders or risk conditions.

It should define access, cooperation, defect criteria reference and effect on shipment release.

17. Define Sampling and Acceptance Criteria Ownership

The supplier should not unilaterally change agreed acceptance criteria.

The SQA should identify where sampling plans, AQL criteria or other release rules are documented and who may change them.

18. Define Measurement and Calibration Controls

Measurement evidence depends on appropriate, calibrated equipment and controlled methods.

The agreement should require traceability appropriate to the product and risk.

19. Define Traceability Requirements

Traceability should be specific enough to support containment, recall, root-cause analysis and product history.

The exact depth can vary by product.

20. Define Record-Retention Requirements

Quality records should remain available long enough to support warranty, regulatory and product-lifecycle needs.

The SQA should define record type, retention period and retrieval expectations.

21. Define Product Identification and Status Control

Conforming, quarantined, rejected and reworked product should be physically or electronically controlled so status cannot be confused.

22. Define Nonconforming Product Control

The SQA should define what the supplier must do when product does not meet requirements.

The supplier should not ship nonconforming product without authorized disposition.

• Identify and segregate affected product.
• Stop shipment where required.
• Determine affected lots / serials.
• Notify the buyer when agreed thresholds are met.
• Request deviation if use-as-is is proposed.
• Reinspect after rework.

23. Define Deviation and Concession Rules

A deviation is permission to depart from a requirement under controlled scope.

The SQA should define who may approve it and how it is recorded.

24. Define Supplier Notification of Escapes

If the supplier discovers after shipment that nonconforming product may have escaped, rapid notification becomes critical.

The agreement should define what must be reported and within what timeframe.

25. Define Complaint Response Times

Quality complaints should have clear response milestones.

A supplier should not wait for a complete root-cause investigation before providing immediate containment.

26. Define the CAPA Process

Corrective and Preventive Action should focus on the system cause of significant or recurring quality problems.

The SQA should state when formal CAPA is required and how closure is approved.

27. Define Complaint Cost and Recovery Process Separately

Quality problems may create sorting, rework, freight, field service or customer costs.

The SQA may define how costs are documented and discussed, but detailed commercial recovery terms should align with the main contract.

28. Define Change-Control and PCN Requirements

The SQA should identify the categories of supplier change that require notification or prior approval.

This creates the contractual quality expectation behind the PCN process.

29. Define Obsolescence and End-of-Life Notification

The supplier should notify the buyer early when approved materials or components become unavailable.

This allows last-time-buy, requalification or redesign decisions before supply is interrupted.

• Affected product / component.
• Last order date.
• Last shipment date.
• Available inventory.
• Proposed replacement.
• Required validation.

30. Define Counterfeit and Unauthorized-Part Controls

For components vulnerable to substitution or counterfeiting, the SQA may require approved-source controls and evidence of authenticity.

The supplier remains responsible for controlling its own purchasing chain.

31. Define Product Safety and Regulatory Escalation

Potential safety or regulatory issues require faster escalation than routine cosmetic defects.

The agreement should identify immediate notification expectations and authorized contacts.

32. Define Audit Rights Carefully

The buyer may require the right to audit relevant quality processes, records or sub-suppliers under defined conditions.

Audit rights should be practical and proportionate.

33. Define Access to Production and Records

When the buyer needs witness, inspection or audit access, the supplier should support reasonable access while maintaining safety and confidentiality.

• Production access where relevant.
• Quality record access.
• Inspection witness.
• Subsupplier evidence where contractually required.
• Visitor safety and confidentiality rules.

34. Define Quality Escalation Levels

Escalation should be tied to objective conditions such as repeat defects, major escapes or unresolved CAPA.

This prevents arbitrary escalation.

35. Define Controlled Shipping or Enhanced Inspection

After serious quality failures, the buyer may require temporary enhanced controls before normal release conditions resume.

The SQA should define the principle and exit criteria.

36. Define Supplier Performance Metrics Used for Quality Governance

The SQA can identify which quality metrics will be monitored without becoming a full SRM scorecard.

37. Define Meeting and Review Expectations for Quality Issues

Routine quality review may be required for critical suppliers or during escalation.

The SQA can state expected participation and evidence without duplicating the broader SRM governance model.

38. Define Communication Contacts

Quality agreements should include or reference current contacts for quality, engineering and escalation.

Outdated contact information can delay containment.

39. Define Language and Report Format

For international supply relationships, agree the required language and response formats for reports and technical evidence.

This is especially useful for CAPA, inspection records and change notifications.

40. Define Data Integrity Expectations

Quality records should be accurate, traceable and protected from unauthorized alteration.

The agreement may require correction practices, electronic record control and retention of original evidence.

• No backdating.
• Changes traceable.
• Original results preserved.
• Electronic access controlled.
• Records retrievable within agreed time.

41. Define Training and Competence Expectations

Personnel performing critical manufacturing, inspection or special processes should be trained and qualified according to the supplier's quality system and applicable requirements.

42. Define Control of Rework and Repair

Rework returns product to full requirements using an approved process. Repair may create an accepted but non-standard condition and may require buyer approval.

The SQA should distinguish them.

43. Define Preservation, Handling and Storage

Quality can be lost after manufacturing through poor storage, corrosion, ESD, humidity or handling damage.

The SQA can define required preservation for sensitive products.

44. Define Shelf-Life and Expiry Controls

Materials with limited shelf life should arrive with sufficient remaining life and traceable expiry data where relevant.

45. Define Packaging and Labeling Quality Responsibilities

Packaging and labeling can be part of product quality when they affect protection, traceability or customer acceptance.

The SQA should identify which requirements are quality-controlled.

46. Define Product Release Authority

The supplier should know who may release product for shipment and what evidence must be complete first.

Release should not be based solely on production schedule pressure.

47. Define Stop-Ship Authority

The agreement should allow shipment to be stopped when serious quality risk exists.

Stop-ship authority and escalation should be clear enough that production pressure does not override containment.

48. Define Requalification Triggers

Certain events should trigger renewed qualification, audit, FAI, process review or enhanced inspection.

The SQA can define the trigger while the detailed method remains in the relevant procedure.

49. Define Agreement Review and Revision

The SQA itself should be controlled.

It should have revision, effective date, owner and process for future updates.

50. Define Signature and Authority

The agreement should be approved by people who have authority to commit the relevant quality responsibilities.

Signatures should not be purely administrative.

51. Keep the SQA Usable

A quality agreement should be detailed enough to remove ambiguity but practical enough that production, quality and procurement teams can actually use it.

Avoid copying an entire quality-management standard into the agreement.

52. Common Supplier Quality Agreement Mistakes

• Using a generic template without defining real product and site scope.
• Repeating the entire commercial contract.
• Repeating every technical specification.
• Failing to define document hierarchy.
• Leaving deviations and concessions undefined.
• Not defining complaint and CAPA response expectations.
• Ignoring critical sub-suppliers.
• Failing to define change-notification obligations.
• Using audit rights with no trigger or scope.
• Not defining traceability and record retention.
• Failing to define serious escape notification.
• Allowing quality escalation to depend on personal relationships.
• Failing to update the SQA after major product or supply changes.

53. Supplier Quality Agreement Readiness Scorecard

54. 30-Day SQA Development Plan

55. Practical Example: Creating an SQA for a Custom Electronics Supplier

A buyer sourced a custom industrial electronics assembly from a supplier that had already passed verification, factory audit and First Article Inspection.

The commercial contract defined price, delivery and warranty, but early production exposed recurring confusion. The supplier assumed it could change a connector source if the replacement met the drawing. The buyer expected prior approval. Complaint responses also varied from one engineer to another, and inspection records were not retained consistently.

The parties created a Supplier Quality Agreement covering the exact assembly, manufacturing site and critical sub-suppliers.

The agreement defined document hierarchy, required material and component traceability, final functional-test records, calibration control, complaint response timing, CAPA expectations, deviation authority, PCN requirements and retention of inspection evidence.

It also stated that new critical components, manufacturing-site changes and firmware changes required prior approval. First Article Inspection could be triggered by defined changes, but the detailed FAI method remained in the buyer's FAI procedure.

After implementation, the supplier no longer relied on informal email decisions. Quality issues followed one repeatable process and engineering changes were separated from supplier-originated PCNs.

The SQA did not replace the contract, drawing, audit or inspection plans. It connected them into one clear quality-governance framework.

56. Complete Supplier Quality Agreement Checklist

• Identify the exact buyer and supplier legal entities.
• Define covered manufacturing sites and product families.
• Define document hierarchy.
• Assign quality responsibilities.
• Require controlled documents and revisions.
• Define quality-system expectations.
• Define incoming material controls.
• Define subsupplier responsibility and flow-down.
• Define process-control and special-process expectations.
• Define inspection and test responsibilities.
• Reference FAI and PSI triggers without duplicating their methods.
• Define sampling / acceptance ownership.
• Define calibration and measurement controls.
• Define traceability depth.
• Define record-retention periods.
• Define product status and segregation.
• Define nonconforming product rules.
• Define deviation / concession authority.
• Define escape notification.
• Define complaint response milestones.
• Define CAPA requirements.
• Define change-control / PCN obligations.
• Define obsolescence notification.
• Define counterfeit / unauthorized-part controls where relevant.
• Define safety / regulatory escalation.
• Define audit and access rights.
• Define quality escalation levels.
• Define controlled shipping / enhanced inspection.
• Define quality KPIs where relevant.
• Define communication contacts and report formats.
• Define data integrity expectations.
• Define training and competence.
• Define rework / repair rules.
• Define preservation / shelf-life controls where applicable.
• Define packaging / labeling quality responsibilities.
• Define release and stop-ship authority.
• Define requalification triggers.
• Control SQA revision, review and signatures.

57. Frequently Asked Questions

What is a Supplier Quality Agreement?

A formal agreement defining quality responsibilities, controls, records, escalation and change-management rules between a buyer and supplier.

Is an SQA the same as a commercial contract?

No. The contract governs the broader commercial relationship; the SQA governs quality execution.

Is an SQA the same as a technical specification?

No. The specification defines product requirements; the SQA defines how those requirements are controlled and evidenced.

Should every supplier have an SQA?

Not necessarily. The need depends on product risk, complexity, dependency, regulation and the buyer's quality model.

Should the SQA include FAI?

It can define when FAI is required and who approves it, but the detailed FAI method should remain in the FAI procedure.

Should the SQA include PCN requirements?

Yes. It should define which changes require notification or prior approval.

Who should sign the SQA?

Authorized representatives who can commit the relevant quality and operational responsibilities.

How often should an SQA be reviewed?

Periodically and whenever major product, site, regulatory or contractual changes affect the quality relationship.

Can a supplier ship nonconforming product with a deviation?

Only when the buyer's authorized personnel approve the deviation under the agreed process.

What is the most important part of an SQA?

Clear responsibilities and escalation rules. The agreement should eliminate ambiguity before a problem occurs.

Can XibUp create or enforce a Supplier Quality Agreement?

XibUp can support discovery and networking with manufacturers and suppliers. The SQA remains a contractual quality-governance document between the commercial parties.

Conclusion

A Supplier Quality Agreement turns a buyer-supplier relationship from informal expectations into a controlled quality operating model.

The strongest agreements define scope, responsibilities, inspection and record requirements, nonconformity handling, CAPA, traceability, change notification, audit rights, escalation and product-release rules without duplicating the commercial contract or technical specification.

When written well, the SQA does not create bureaucracy. It reduces it by giving both companies one agreed answer to the questions that otherwise become arguments only after a defect, complaint or change has already occurred.

Related Guides

• Supplier Change Control and Product Change Notification (PCN) Guide
• First Article Inspection (FAI) Guide
• Pre-Shipment Inspection Guide
• Supplier Audit Checklist
• Supplier Relationship Management (SRM)