Supplier evaluation process flowchart (ongoing performance)

What the supplier evaluation process flowchart (ongoing performance) process is

Supplier evaluation is what you do to suppliers you already buy from. On a set cycle, or when something goes wrong, you gather what the last period actually looked like (defects and non-conformances, deliveries against confirmed dates, prices against the agreed schedule, how the supplier behaved when you needed something urgently) score it against the KPIs in the contract, and decide what happens next. The useful output is a rating with a consequence attached, not a report.

It is not supplier selection, and it is not supplier approval. Selection chooses between options for a requirement that has not been placed yet, which the supplier selection decision tree covers. Approval decides whether a supplier may be used at all and for which categories and sites, which the vendor approval process covers, while vendor onboarding sets up the contract, verified bank details and master data that make a new supplier payable. How much due diligence a third party warrants is a different judgement again, in the supplier risk assessment. This page starts after all of those: the supplier is on the list, orders are flowing, and the question is whether that should continue unchanged.

Two things usually break a supplier evaluation process. The first is the data. Three functions hold different parts of it, on-time delivery gets measured against whichever date suits the person compiling the figures, and the review meeting is then spent arguing about the numbers instead of the causes. The second is the consequence. Plenty of organisations produce scorecards conscientiously and have no documented route from a poor score to anything actually happening, so suppliers work out within a cycle or two that the rating is decorative. The chart below addresses both: four parallel data pulls with named owners, and a threshold decision that leads to an improvement plan, a re-check and an escalation branch ending in conditional status or de-listing. ISO 9001:2015 clause 8.4.1 expects an organisation to define criteria for monitoring the performance of external providers and re-evaluating them, and to retain records of the results and any actions arising. It prescribes no particular flow and no interval, so treat this as a starting point to adapt rather than a compliance system in itself.

What this flowchart covers

In this template

• Five role lanes (Procurement, Quality, Receiving and operations, Finance and Supplier) across six stages: Trigger, Data collection, Scorecard, Review, Improvement and Outcome.
• Two ways in at "Scheduled or event driven?": the scheduled branch goes straight to confirming the KPIs and review period, while the event branch logs the triggering performance event in the Quality lane first, so an off-cycle review leaves the same record as a planned one.
• Four parallel data pulls, one per KPI family and one per function: defect and non-conformance data from Quality, delivery and lead time data from Receiving and operations, price and cost variance from Finance, and a service and responsiveness rating from Procurement.
• A scorecard calculated against the agreed KPIs and then sent to the supplier for a written response before the meeting, so the review discusses causes rather than whose figures are right.
• "Performance meets threshold?" after the supplier review meeting, where Meets goes directly to the approved supplier list update, and Below opens an improvement plan with milestones, supplier-side corrective actions and an "Improvement targets met?" re-check that returns a recovered supplier to the same list update.
• A three-way escalation at "Persistent failure?" (extend the plan and loop back, place the supplier on conditional status, or de-list and re-source the category) with every outcome converging on the approved supplier list update and results feeding the next sourcing decision.

When to use this template

• You have an approved supplier list but no repeatable way of checking whether the suppliers on it are still performing.
• Quality, Receiving and Finance each hold part of the performance picture, and nobody assembles it before the review meeting.
• Scorecards are produced but nothing follows from a poor one, so suppliers have learned that the rating carries no consequence.
• A customer, certification body or internal auditor has asked how you monitor and re-evaluate suppliers, and the honest evidence is an email trail.
• You are agreeing who may place a supplier on conditional status or take one off the list, and at what point that decision leaves the buyer.

How it works

1. Open the template and rename the lanes

   Replace Procurement, Quality, Receiving and operations, Finance and Supplier with the functions you actually have. If one person covers quality and receiving, merge those lanes rather than leaving one nearly empty. Keep the Supplier lane even if the supplier never sees the chart: it marks the two steps that depend on someone outside your organisation, which is where the cycle usually stalls.

2. Write your KPIs and the threshold onto the chart

   Use the note on "Confirm the KPIs and review period" to record the measures that already exist in the contract or service agreement, and define each one unambiguously — on-time delivery against the originally confirmed date or the revised one, in full or by line, received date or booked-in date. Then put a real threshold on "Performance meets threshold?", agreed jointly by Quality and Procurement, and state the review period it applies to.

3. Agree the scorecard weightings before the period starts

   Decide how quality, delivery, cost and service are weighted, and publish it. Weightings settled after the data arrives look like the answer was chosen first. Keep the measure count small enough that each one can be sourced from a system rather than reconstructed by hand, and note on "Calculate the supplier scorecard" who compiles it and from which report.

4. Define what conditional status actually restricts

   Conditional status only works if it bites. On that step, write down what it means in your organisation: no new business or new part numbers, named categories or sites only, inspection on receipt at your cost or theirs, and a fixed date at which the status is re-examined rather than quietly left to lapse.

5. Set the escalation authority and the exit route

   Name who can approve de-listing and who has to be consulted — typically Quality and the budget holder, not the buyer alone. Check the notice provisions in the contract before the branch is used, and add a step of your own if a supplier is single-source, because de-listing without a qualified replacement moves the problem rather than solving it.

Frequently asked questions

What is the difference between supplier evaluation and supplier approval?

Approval decides whether a supplier may be used at all, and for which categories, sites or part numbers. Evaluation asks how a supplier already in use has performed over a defined period, and produces a rating with an outcome attached. They run on different clocks: approval happens once and is refreshed periodically, evaluation repeats every cycle. Keeping them separate stops an active supplier record from quietly reading as blanket approval. Use the vendor approval process template for the first question and this one for the second.

How often should suppliers be evaluated?

Set the frequency by criticality and spend rather than applying one interval to everyone: frequent formal reviews for the few suppliers who can stop production or breach a customer commitment, and a lighter annual review for the long tail. Record the interval on the approved supplier list entry so it does not depend on someone's calendar. Add event triggers as well, which is what the second branch of this chart is for, since serious failures rarely wait for the review date. ISO 9001:2015 requires monitoring and re-evaluation of external providers but sets no interval, so the cadence is yours to define and justify.

What should a supplier scorecard measure?

Four families cover most of it. Quality: defect or non-conformance rate, rejected batches, corrective action turnaround. Delivery: on-time and in-full performance and adherence to quoted lead times. Cost: price against the agreed schedule, plus the costs the supplier causes you elsewhere through rework, expediting or line stoppages. Service: responsiveness, documentation accuracy and how problems are handled. Take the measures from the contract wherever possible, keep the list short enough to be pulled from systems, and weight them so a strong price cannot mask a quality problem.

Should the supplier see the scorecard before the review meeting?

Yes, and this chart makes it a step. Sending the draft in advance gives the supplier the chance to challenge a figure or supply context you do not have, such as a delay you caused by changing a specification. The meeting can then be about causes and actions rather than about whose data is correct. It also removes the most common excuse for an improvement plan going nowhere, which is that the supplier never accepted the underlying numbers.

What happens when a supplier keeps missing improvement targets?

That is the escalation branch. After a failed re-check, "Persistent failure?" offers three documented answers: extend the plan with revised milestones where progress is real but slow, move the supplier to conditional status with restricted scope and increased inspection, or de-list and re-source the category. All three end in an update to the approved supplier list, so the record reflects what was decided. Before de-listing, check the notice terms in the contract and whether a qualified alternative exists, particularly where the supplier is single-source.