Vendors who can't surprise you anymore.
A vendor directory built for QMS work. Audits, NCRs, and corrective actions land on the right profile automatically — so the next quarterly review answers itself.
Acme Forge Ltd · steel forgings & brackets
One vendor. One profile. A clean record per site.
A supplier is one record in your system — name, category, contact info — with a separate working history at every facility you do business with them at. The history reflects the relationship as it really is: when did Birmingham start using them, when did Toledo come on board, what's happened at each site since.
The categories your team thinks in.
A starter set of categories ships with every new org — Materials, Services, Calibration, Subcontract — but they're a list, not a fixed taxonomy. Rename them, reorder them, add the ones your industry uses, drop the ones you don't. The naming convention for the directory is yours to set, too.
Your ASL stays with QA.
Maintaining the approved-supplier list is usually a small QA-team job. Finding a vendor's contact info is everyone's. Both work — without two systems and without anyone seeing what they shouldn't.
One directory. Two cleanly different views.
For the QA team, the approved-supplier number sits alongside every vendor — searchable, editable, theirs to manage. For everyone else, it's not even there. Same directory, the same vendors, but a view that matches what each person actually needs to do.
Active, Pending, Inactive, Blocked.
Four labels that describe where each vendor sits with you. Pending is for vendors under qualification; Active is the in-use relationship; Inactive holds vendors you've moved away from; Blocked flags vendors you've disqualified. All four stay searchable — the directory is the kind of record an auditor expects to see, never deleted, just retired.
Down to the individual BOM line.
A supplier links to the products they serve, and a product carries every supplier approved for it — the relationship is many-to-many in both directions, because real parts are multi-sourced and real vendors serve more than one part.
It goes a level finer than that. An individual bill-of-materials line carries its own approved vendors, so a spring sourced from two suppliers inside an assembly reads exactly that way — rather than collapsing into a single supplier for the whole build.
Which makes the hard question answerable in the other direction too: when this vendor slips, what does it reach? Everything above them in the assemblies they feed.
Their paperwork lives here as well. A vendor’s certification, or the quality clauses you issue to them, can be registered as a controlled document tied to that supplier — approved, versioned and searchable like any other, and listed on a Documents tab on their profile.
Every NCR, every audit — already attached.
Nine modules can name a supplier: NCR, Audit, MOC, Exemption, FMEA, Risk, Meeting, JHA, and controlled Documents. The link is bidirectional — the supplier profile shows the record, the record shows the supplier. Procurement asks “how often have we raised against this vendor?” and you answer in one click, not a spreadsheet.
Actions roll up differently, on purpose. An action never attaches to a vendor directly — it belongs to the record that raised it. So the corrective actions on a supplier’s profile are the ones hanging off their NCRs and audits, which is what keeps “open actions against this supplier” honest instead of a second list somebody has to maintain.
The vendor record an auditor expects to see.
Linkable, filterable, scoped, permission-aware. Boring foundations that turn vendor records into evidence.
Supplier audit type, picker required
Picking the Supplier audit type makes the supplier picker required, so the audit's vendor is captured at creation rather than tagged on later.
NCRs attached to vendors
An NCR can be attached to a supplier from the create form's optional Supplier picker. Once attached, the NCR shows up on the supplier's profile rollup — one click from procurement's question to the answer.
The right people, every time
Decide once who owns vendor records, who maintains the ASL, and who handles facility relationships. The directory keeps the lines clean throughout.
Make every vendor a record, not a row in a spreadsheet.
Every part they supply, every NCR they caused, every audit you ran on them — one profile, one click.