Vietnamese supplier certifications: what to ask for and how to verify them

Ask ten Vietnamese suppliers for "certifications" and you get ten stacks of PDFs — some current, some expired, some naming a different legal entity, and occasionally one that was never issued at all. This guide is for import buyers who want to request the right certificates for their product and market, then verify every one before it carries weight in a sourcing decision.

Both halves matter. An ISO 9001 certificate says nothing about whether a fabric is safe on skin, and a social audit says nothing about product compliance — requesting the wrong document wastes weeks. And an unverified certificate is only a claim: forged and expired certificates are a documented problem across Asian sourcing, so experienced buyers treat every PDF as unconfirmed until an official register agrees.

Three kinds of "certified"

Supplier conversations derail when both sides say "certified" and mean different things. Every document you will be offered fits one of three buckets, and each bucket answers a different question.

• Management-system certificates — ISO 9001 (quality) and ISO 14001 (environmental) attest that a company runs a documented, externally audited management system. They describe how the company works — not whether any product complies with anything.
• Product-compliance evidence — CE marking with an EU declaration of conformity, REACH and RoHS test reports, OEKO-TEX Standard 100. These attach to products and materials, and most rest on laboratory testing.
• Social and environmental audits — amfori BSCI and SMETA are audit frameworks whose reports live on member platforms; SA8000 is the one genuine certification in this group. All describe conditions at one site around the audit date.

What to ask for, by market and product

The right request list depends on where you sell and what you buy. The table covers the combinations that come up most often for buyers sourcing in Vietnam.

A few warnings hide in that table. There is no official "REACH certificate" or "RoHS certificate" — compliance with both is demonstrated through test reports and the manufacturer's own declaration, so a document with either name is a lab report at best. And amfori BSCI is not a certification: it is an audit and monitoring system, and what counts is the current report on the amfori Sustainability Platform, not a framed paper.

The last warning sits on your side of the transaction. Importing into the EU carries legal duties of its own: the importer must confirm the manufacturer ran the correct conformity assessment, keep the EU declaration of conformity available for authorities, and — for many product categories under EU market-surveillance rules — ensure there is an economic operator established in the EU responsible for the product.

The verification playbook

Verification is desk work and rarely takes more than an hour per supplier. The rule underneath it all: nothing is verified until an official register says so.

1. Check the register, not the PDF. Accredited ISO management-system certificates are searchable in IAF CertSearch, the IAF's global database fed by accreditation and certification bodies. OEKO-TEX Standard 100 numbers check in seconds in the OEKO-TEX Label Check; GOTS runs a public certified-supplier database.
2. Match the legal entity and address. The certified name must be the factory taking your order — not a trading company, a parent, or a sister plant in another province. Compare against the business registration, not the website.
3. Read the scope. A scope of "trading of steel products" does not cover manufacturing them. For GOTS and GRS, the scope certificate covers the site; each shipment additionally needs a transaction certificate.
4. Check current status. Certificates get suspended and withdrawn between audits. Registers show today's status; a PDF shows the day it was printed. OEKO-TEX Standard 100, for instance, expires every twelve months.
5. Confirm the certifier's accreditation. A certificate is worth what its issuer is worth. CertSearch shows which accreditation body stands behind the certification body; scheme databases list approved certifiers only.

Social audits verify differently: have the supplier grant you access to the report inside the amfori Sustainability Platform or Sedex, where a producer can share one audit with many customers — a loose PDF export is a conversation starter, not a result. Note that the systems do not recognize each other's audits: a SMETA report does not satisfy an amfori BSCI requirement. And absence of proof cuts both ways — register coverage is broad, not complete, so query the certification body directly before concluding a missing certificate is fake.

Red flags worth acting on

• A certificate that exists only as a PDF and fails every register lookup.
• Scope mismatch — the head office or trading arm is certified while the factory that will run your order is not.
• Expired, suspended, or withdrawn status, or validity dates that look edited.
• "The certificate will be ready after you place the order." Certification typically takes months; this usually means it does not exist.
• Formatting tells: fonts that shift mid-line, misaligned fields, a certificate number that does not match the issuer's own numbering pattern.

None of these alone proves bad faith — renewals lag and paperwork gets mislaid — but each one moves the burden of proof back onto the supplier, and two together should pause the deal.

What a certificate cannot tell you

Here is the caveat most checklists skip: a genuine, current, correctly scoped certificate is still a snapshot. The auditor sampled the system on a few days; your order runs on different days, possibly on different lines, sometimes at a subcontractor the certificate never covered.

So verified certificates decide who makes your shortlist — they do not replace watching your own production. Serious buyers still run pre-production approvals, checks during the run, and pre-shipment inspection, which is what production oversight is for. Certificates are also silent on who owns your drawings and tooling; that protection lives in contracts — see protecting your IP when manufacturing in Vietnam.

Special cases in Vietnam's export verticals

Textiles and garments

OEKO-TEX Standard 100 is the default request for anything worn against skin, and the certificate number verifies online in seconds. For organic and recycled claims, GOTS and GRS work in two layers — a scope certificate for the site, a transaction certificate for your shipment — and without the second, the certified claim does not transfer to your goods.

Steel and metal products

Metal trades on EN 10204 inspection certificates rather than product marks. A type 3.1 certificate reports the mill's test results for your specific batch, validated by a representative independent of production; type 3.2 adds an independent third party who witnesses testing and countersigns. Which type to specify, and how to read mill certificates line by line, is covered in the steel sourcing guide.

Electronics and telecom fiber

Electrical and electronic goods for the EU fall under RoHS, which sits inside the CE framework — the declaration of conformity must cover it, backed by test reports on the restricted substances. REACH follows the chemistry rather than the product category, so ask for substance declarations on polymers, coatings, and cable compounds as well.

The request list to send a shortlisted supplier

Copy this, trim it to your product, and send it before any deposit:

• Business registration certificate — it anchors the legal entity name every other document must match.
• ISO 9001 (and ISO 14001 if relevant), which you then verify in IAF CertSearch yourself.
• The market pack: EU declaration of conformity and test reports, OEKO-TEX certificate number, or EN 10204 mill certificates — whichever applies.
• Platform access to the current amfori BSCI or SMETA report, not a PDF copy.
• Written confirmation that the certified site is the site producing your order, and that subcontracting requires your sign-off.

Budget a week per shortlisted supplier and most surprises surface before money moves; if you would rather not run the process alone, supplier vetting at Enbeko includes checking certificates against the registers as part of auditing every factory in person before recommending it.