Declarations and due diligence
Supplier and vendor compliance management
Almost every answer you give about a product is a supplier’s answer, repeated. The hard part is not collecting it once — it is knowing, two candidate list updates later, which of those answers stopped being true and which finished products depend on them.
- Requests go to the suppliers a change actually concerns, not to the whole list
- Declarations dated against the version of the restriction list they answered
- Component data rolled up, so a finished product inherits what its parts say
- Stale evidence surfaced before a customer or an authority finds it
See it on your supply chain
One bill of materials, your declarations, what has gone stale. 30 minutes.
Before you send
Take the two-minute assessment first — five questions across the main parts of ISO 37301 — and we will open the call on your own score, markets and regimes instead of on the basics.
Where it breaks
The work
From a request to an answer
you can stand behind
Collection
Requests addressed to the right contact at the right supplier, for the specific parts in question, with a format they can actually fill in rather than a free-text email.
Formats
Full material declarations in IPC-1752A and IEC 62474, Conflict Minerals Reporting Templates, RoHS and REACH statements of conformity, and test reports. Parsed into data, not filed as attachments.
Roll-up
Part-level answers resolved up the bill of materials to the finished product, so the question "is this product RoHS compliant" has an answer with its working shown.
Currency
A declaration is true against the list it was made under. When the candidate list moves, the parts whose evidence predates it are flagged — and so are the products that depend on them.
Gaps and risk
Which parts have no declaration, which suppliers never answer, and which finished products are exposed because of it. A gap you can see is a gap you can chase.
Evidence on demand
When a customer audit or an authority asks, the chain is there: the part, the supplier statement, its date, the rule in force at the time, and the declaration it supports.
FAQ
Supplier compliance, answered
- What is supplier compliance management software?
- Software that collects, stores and keeps current the compliance data a manufacturer depends on from its suppliers — full material declarations, substance statements, conflict minerals reporting, test reports and certificates — and links that data to the parts and finished products it concerns. Without it, the data exists as email attachments and the question "which of our products are affected by this restriction" takes weeks to answer.
- How do manufacturers collect compliance data from vendors?
- Through standard declaration formats: IPC-1752A and IEC 62474 for material content, the Conflict Minerals Reporting Template for 3TG smelter data, and supplier statements of conformity for RoHS and REACH. The practical difficulty is less the format than the follow-up — chasing non-responders, re-requesting when a substance list changes, and knowing which requests actually matter. Certean targets requests at the parts a change touches, so a candidate list update goes to twelve suppliers rather than four hundred.
- What is the CMRT and who has to complete one?
- The Conflict Minerals Reporting Template is the industry-standard form, maintained by the Responsible Minerals Initiative, for reporting the smelters and refiners of tin, tantalum, tungsten and gold in a supply chain. US issuers file under Dodd-Frank Section 1502; EU importers of those metals have their own due diligence obligations. In practice the template cascades down the supply chain, so a manufacturer both receives CMRTs from its suppliers and produces one for its customers.
- Why does supplier data go out of date?
- Because the restriction lists move and the declarations do not. A statement that a part contains no substances of very high concern above the threshold was true against the list in force when it was signed. Two candidate list updates later it may be false and nothing in the file says so. The fix is to date every declaration against the version of the list it answered, and to re-check rather than re-trust.
- Does this replace a supplier quality or procurement system?
- No. Procurement systems manage the commercial relationship and supplier quality systems manage performance and audits. This is about regulatory evidence: what a part is made of, what the supplier has declared about it, when, and against which rule. It integrates with the PLM and ERP where the part and supplier records already live rather than duplicating them.
What the declarations are checked against is on the material compliance page, and what moves them is regulatory change monitoring.
Get started
Find out which declarations have expired
Bring one bill of materials and the declarations you hold for it. Thirty minutes.
See where you stand