What is a social compliance audit?
A social compliance audit is an independent assessment that checks, through document review, a site tour and worker interviews, whether working conditions, occupational health and safety and business ethics at a production site meet local law, the buyer’s code of conduct and internationally recognised social compliance criteria.
What does social compliance audit mean?
A social compliance audit is an independent, evidence-based assessment of how a factory or subcontractor workshop treats its workers. The auditor examines working hours, wages, social security registration, occupational health and safety, the risk of child and forced labour, discrimination and business ethics.
The benchmark has three layers: local law (in Turkey, Labour Law No. 4857, Occupational Health and Safety Law No. 6331 and Social Security Law No. 5510); the buyer’s code of conduct; and international criteria built on ILO conventions, the UN Guiding Principles on Business and Human Rights and the OECD guidelines. Where local law and the brand code differ, the provision that protects workers more is usually applied.
In textiles and apparel these audits take place both in main production factories and in subcontractor workshops doing sewing, ironing or packing, because a brand’s risk often sits in the tiers it cannot see.
Why do brands require social compliance audits from suppliers?
Brands audit suppliers to show that their products are made under conditions that respect human rights and to spot supply chain risks early. The audit report is hard data for sourcing decisions and supplier selection.
This expectation increasingly has a legal basis. The EU Forced Labour Regulation (EU 2024/3015) bans products made with forced labour from the EU market from 14 December 2027, while the EU Corporate Sustainability Due Diligence Directive (CSDDD) and Germany’s Supply Chain Act (LkSG) expect large companies to identify risks in their supply chains. Turkish suppliers exporting to Europe feel these obligations directly through their customers’ requirements.
Large retailers selling in the Turkish domestic market also apply their own codes of conduct to suppliers and their subcontractors. The audit is how they show those codes are not just paper.
Who carries out social compliance audits?
Audits are carried out by the brand’s own compliance team, by an independent audit firm acting for the brand, or by an audit company working under a specific scheme. The ordering brand decides which.
In scheme audits the scheme owner sets the rules: amfori BSCI reports are uploaded to the amfori Sustainability Platform; SMETA audits are performed by Sedex-approved Affiliate Audit Companies; WRAP audits are done by WRAP-accredited monitoring firms; and SA8000 certificates are issued by certification bodies accredited by SAAS.
OBCO Audit is an independent firm that audits against brand codes of conduct and internationally recognised social compliance criteria, and helps suppliers prepare for these audits.
What is checked in a social compliance audit?
Scope varies by brand and scheme, but in textile supply chains these topics appear in almost every audit:
- Working hours and overtime: under Turkish Labour Law No. 4857 the normal working week is at most 45 hours; overtime may not exceed 270 hours a year and requires the worker’s consent.
- Wages: minimum wage, overtime paid with at least a 50 percent premium, no unlawful deductions, payment on time.
- Social security: every worker registered with SGK before starting work, with records matching actual working time.
- Child and young workers: no children under 15, age verification documents, protection of workers under 18.
- Forced labour: no retention of identity documents, no debt bondage, freedom to resign.
- Discrimination, harassment and disciplinary practices.
- Freedom of association, worker representation and a grievance mechanism.
- Occupational health and safety: under Law No. 6331, a risk assessment, emergency plan and training; plus exits, fire equipment, machine guards and first aid.
- Environment: waste management, chemical storage, required permits.
- Business ethics: anti-bribery, accurate records, no falsified information.
- Subcontracting: no work passed on without the brand’s approval, and an up-to-date subcontractor list.
How does a social compliance audit work?
- 01
Opening meeting
The auditor explains scope, timing and confidentiality rules to management and how workers will be selected for interviews.
- 02
Site tour
Production areas, warehouses, chemical storage, toilets, canteen and any dormitories are visited; exits, fire equipment and machine safety are checked on site.
- 03
Document review
Personnel files, SGK records, time records and payroll, overtime consents, leave records and OHS documents are sampled and cross-checked.
- 04
Worker interviews
Workers are interviewed privately, without management present. Interviews confirm whether the records reflect reality.
- 05
Closing meeting
The auditor presents findings to management, who can comment on or contest each one.
- 06
Report and corrective action plan (CAP)
The report goes to the brand; the site prepares a corrective action plan with an owner and a deadline for each finding. Closure is verified through evidence or a follow-up audit.
What is the outcome of an audit?
Most social compliance audits do not end in a pass/fail certificate but in a report with findings and an improvement plan. An amfori BSCI report carries a grade from A to E; SMETA results in a corrective action plan.
Certification schemes are different: WRAP certifies the facility and SA8000 certifies a management system. When a brand audits against its own code of conduct, the brand sets the outcome and acceptance criteria.
Serious findings such as child labour, forced labour, falsified records or life-threatening safety gaps can trigger immediate consequences at many brands, such as suspended orders. The real value of an audit is making a problem visible before it becomes a crisis.
How do amfori BSCI, SMETA, WRAP and SA8000 differ?
| Scheme | Type | Outcome | Validity | Who asks for it |
|---|---|---|---|---|
| amfori BSCI | Social monitoring and audit system; not a certificate | Audit report graded A to E | A or B: next full audit within 2 years at the latest. C, D or E: follow-up audit within 2 to 12 months | amfori member companies (retailers, brands, importers) |
| SMETA (Sedex) | Audit methodology; not a certificate | Audit report and corrective action plan, shared on the Sedex platform | No fixed certificate validity; the buyer sets re-audit frequency | Sedex member buyers |
| WRAP | Facility certification (focused on sewn products) | Certificate; no levels since 1 March 2026 | 1 year; unannounced audits possible during validity | Buyers requiring WRAP certification |
| SA8000 | Social accountability management system standard | Certificate issued by an accredited certification body | 3-year certification cycle with surveillance audits | The organisation’s own choice or a buyer requirement |
How do brand codes of conduct relate to these standards?
Brand codes of conduct usually rest on the same international foundations: the ILO core conventions, the UN Guiding Principles and the OECD guidelines. A workshop well prepared for a BSCI, SMETA or brand audit is therefore largely prepared for the others.
The differences are in the detail: some brands set stricter limits than the law on overtime, wages or subcontractor approval; some accept a particular scheme’s report while others recognise only their own audit. The best starting point is to obtain the brand’s current code of conduct and ask which reports it accepts.
Frequently asked questions
Turkish law does not impose a general social compliance audit requirement; the obligation comes from the buyer’s supplier agreement. However, most topics checked (working hours, SGK registration, OHS) are already legal obligations.
- Can an audit be unannounced?
Yes. The brand or scheme decides whether audits are announced. WRAP, for example, states that certified facilities are subject to unannounced assessments. Records should therefore be audit-ready every day.
- How long does an audit take?
It depends on headcount and scope. In a small subcontractor workshop it is usually completed within a day; larger sites may need several auditors and days.
- Is a BSCI or SMETA report a certificate?
No. amfori and Sedex both state explicitly that BSCI and SMETA are not certifications. They are audit reports aimed at continuous improvement.
Sources
- amfori: amfori BSCI (resmî sayfa ve SSS) ↗
- amfori: amfori BSCI audit rating overview (Aralık 2023) ↗
- Sedex: SMETA Audit ↗
- WRAP: Certification Explained ↗
- WRAP: Update to WRAP Certification Program (1 Mart 2026) ↗
- SAI: Notification 1: Transition Timeline for SA8000:2026, Issue 2 (21 Nisan 2026) ↗
- 4857 sayılı İş Kanunu (mevzuat.gov.tr) ↗
- 6331 sayılı İş Sağlığı ve Güvenliği Kanunu (mevzuat.gov.tr) ↗
- 5510 sayılı Sosyal Sigortalar ve Genel Sağlık Sigortası Kanunu (mevzuat.gov.tr) ↗
- EUR-Lex: Regulation (EU) 2024/3015 (Forced Labour Regulation) ↗