TL;DR: A packaging supplier’s safety and risk documentation is a direct indicator of production discipline — gaps in FMEA scoring or hazard matrices usually surface as quality escapes, not just audit findings.
TL;DR: In our factory FMEA reviews, any failure mode scoring a Risk Priority Number above 100 triggers a mandatory corrective action before that process step is released to production.
What Symptom Patterns Tell You About a Supplier’s Safety Culture #
When brand partners start seeing recurring quality failures — ink adhesion dropouts on UV-coated cartons, structural delamination in rigid box panels, inconsistent cure on water-based varnish — the instinct is usually to blame the material or the press operator. Rarely does the investigation start with the supplier’s safety and risk documentation. That’s a mistake, because the two are directly connected.
Here are three observable symptom clusters that packaging buyers encounter, and what each one usually signals at the documentation level:
Symptom 1 — Intermittent print defects that correlate with shift changes. Typically: streaking, hickeys, or colour inconsistency that appears on the first 200–400 sheets of a run after an operator handover. Root cause candidates: inadequate chemical handling SOP for ink/solvent changeover, missing PPE protocol leading to contamination from hand contact, or no documented ink viscosity baseline in the work instruction.
Symptom 2 — Adhesive bond failures in rigid boxes after 60–90 days. Structural delamination where the foil or laminate lifts from the greyboard substrate, often concentrated near corners. Root cause candidates: hot-melt adhesive applied outside the 160–180°C window specified in the risk assessment, moisture content of greyboard not checked against the ≤8% threshold before bonding, or no FMEA entry for substrate humidity variation as a process input.
Symptom 3 — Surface finishing inconsistency — matt varnish appearing glossy in patches. Root cause candidates: UV lamp energy drift below the 80–120 mJ/cm² cure threshold, operator exposure risk driving rushed changeovers that skip cure verification steps, or emergency response procedures that halt the line without a documented restart protocol.
The diagnostic table below maps symptom to documentation gap:
| Observable Symptom | Likely Documentation Gap | Risk Level (RPN Range) |
|---|---|---|
| Shift-change print defects | Missing chemical handling SOP / PPE matrix | 60–120 |
| Adhesive bond failure at corners | No FMEA entry for substrate humidity variation | 80–160 |
| UV varnish cure inconsistency | Absent restart protocol in emergency response procedure | 100–200 |
| Delamination after 60 days in field | Hot-melt temp deviation not logged as critical control point | 120–250 |
| Colour shift across production lots | No ink viscosity baseline in operator work instruction | 40–90 |
The Root Cause That Gets Misdiagnosed: FMEA Scoring Without Process Ownership #
The most common failure we see during supplier qualification reviews — including our own internal audits under what we call the QR-14 process risk gate — is an FMEA document that exists but carries no operational weight.
Here is the mechanism: a packaging supplier produces an FMEA spreadsheet during a customer audit, often assembled by a quality manager working from memory or from a previous customer’s template. The document lists failure modes, assigns Severity (S), Occurrence (O) and Detection (D) scores on a 1–10 scale, and calculates RPN values. On paper, it looks complete. What the document doesn’t capture is whether the process operators who run the laminator or the UV coater have ever seen it, or whether the control actions listed actually exist on the production floor.
The specific gap that causes re-occurring failures is the Detection score being set optimistically. A Detection score of 2 (near-certain detection) gets assigned to a failure mode that relies on a visual operator check — a check that is not formalised in the inspection instruction, is not performed at a defined frequency, and is not recorded anywhere. In practice, that failure mode has a Detection score closer to 7 or 8. Recalculate: an S=7, O=5, D=8 process that was recorded as S=7, O=5, D=2 changes its RPN from 70 to 280. That’s the difference between a monitored risk and a critical uncontrolled hazard.
The measurement method for confirming this root cause during a supplier audit is straightforward. Pull the FMEA and ask the production supervisor to walk you to the station where the listed control action is performed. Ask the operator — not the quality manager — to demonstrate the check. If the operator is unfamiliar with the control action or performs it differently from what the FMEA specifies, the Detection score is wrong. Per AIAG-VDA FMEA methodology, a Detection score of 3 or below requires documented evidence of control effectiveness, not just a description. If that evidence is absent, treat the RPN as uncalibrated.
The threshold for action: any RPN above 100 on a critical packaging process step (lamination bond, UV cure, adhesive application, structural gluing) should have a documented corrective action plan with a named owner and a closure date. If it doesn’t, that’s the root cause of whatever quality symptom brought you to this analysis.
Corrective Actions Ranked by Impact and Feasibility #
-
Recalibrate Detection scores against actual shop-floor controls. Pull each FMEA entry where Detection ≤ 3 and verify the control physically exists and is performed at the stated frequency. This takes one production audit day and costs nothing. It fixes the diagnostic accuracy of the entire document. This addresses roughly 70% of inflated RPN miscalculations based on our internal reviews of incoming supplier FMEAs across 18 qualification audits in 2023–2024.
-
Implement a chemical hazard matrix cross-referenced to PPE requirements by workstation. This doesn’t need to be complex — a single A3 laminated sheet at each station listing the chemicals in use, their hazard classification under GHS/UN Globally Harmonised System Rev. 10 (2023), and the required PPE (glove type, eye protection, respiratory requirements). Most adhesive and solvent-related contamination defects we’ve traced back to inadequate PPE compliance at the operator level, not material failure.
-
Write and post emergency response procedures for each high-energy process station. UV curing units, hot-melt adhesive systems, and lamination nip rollers each need a one-page posted procedure covering: shutdown sequence, personnel evacuation, spill containment, and documented restart verification. The restart verification step — confirming process parameters are back within specification before production resumes — is the single step most commonly absent. Without it, quality variability post-incident is uncontrolled.
-
Assign RPNs above 100 to a named corrective action owner with a 30-day closure target. Any RPN 100–200 should have a 30-day plan. RPNs above 200 should trigger immediate production hold on that process step pending interim control. This is our internal threshold, aligned with general AIAG-VDA guidance and our QR-14 gate criteria.
-
Conduct FMEA review with the production team, not just the quality team. Expensive in time (a full process FMEA review for a lamination line typically takes 6–8 hours with the right people in the room), but the only reliable way to get accurate Occurrence and Detection scores. Trade-off: you can get a documentally complete FMEA faster by having quality staff draft it alone, but the resulting scores will be optimistic and the corrective actions will be untethered from what operators actually do.
Prevention — What to Specify Upfront #
When issuing a supplier brief or PO for a packaging type with safety-sensitive process steps (foiling, lamination, UV coating, hot-melt assembly), specify in the brief that you require:
- Current FMEA for the relevant process line, with RPN calculation visible and all entries with RPN ≥ 100 accompanied by corrective action records
- Chemical hazard register for the job, including SDS references for inks, adhesives, and coatings per REACH Regulation (EC) No 1907/2006 Article 31 (SDS requirements)
- PPE matrix by workstation, current revision
- Emergency response procedure for the highest-energy process step involved
Request these documents before sample approval, not after. Reviewing them post-production is audit theatre.
Specification Notes for Brand Partners #
When you brief us on a new packaging project, the safety and risk documentation we build starts at the briefing stage, not during production. To develop an accurate risk profile for your job, we need: substrate type and weight (greyboard grade, paper stock, film specification), surface finish process (UV, aqueous, foil — each carries different hazard classifications), adhesive type if structural assembly is involved, and any food-contact or child-use declarations that affect chemical selection.
The most common gap in briefs we receive is the absence of end-use environment data. A rigid gift box going into a temperature-controlled retail environment has a very different risk profile from the same box going into a humid Southeast Asian distribution chain. Substrate moisture uptake, adhesive creep under sustained load, and delamination risk all depend on end-use conditions — and without that information, our FMEA Occurrence scores for humidity-related failure modes are estimates, not calibrated values.
Our standard sampling timeline for a new structural packaging type is 15–20 working days from confirmed specification. Jobs requiring new adhesive or coating qualification add 5–8 working days for our internal material risk review. The document package we issue with samples includes the process FMEA summary, material SDS index, and PPE matrix for the production line assigned to your job.
FAQ
Does a supplier’s FMEA actually affect the quality of what gets shipped to me?
Yes, directly. An FMEA with miscalibrated Detection scores means the supplier doesn’t know which failure modes are actually being caught before shipment. If a lamination bond failure has a Detection score of 2 but no documented inspection step backs that up, defective units can pass through without being caught. The FMEA isn’t paperwork — it’s the map of where the quality system has gaps.
What RPN threshold should I require from a packaging supplier before approving their process?
Any RPN above 100 on a process step that directly affects your product (bonding, coating, print registration) should have a documented corrective action with a named owner and closure date. RPNs above 200 should require evidence that an interim control is in place. These thresholds align with AIAG-VDA guidance and are what we apply to our own production lines under our QR-14 gate review.
Is a chemical hazard register the same as an SDS file?
They serve different functions. An SDS (Safety Data Sheet) documents the hazard properties of a specific material per GHS classification. A chemical hazard register is a site-level or job-level summary that lists which materials are in use at which workstation, the applicable PPE requirements, and the emergency response contact for each hazard class. The register cross-references the SDS files but is operationally actionable in a way a stack of SDS documents is not. Both should be available for review.
Our previous supplier said they had FMEA documentation but couldn’t share it for confidentiality reasons. Is that normal?
A supplier declining to share customer-specific FMEA data for a different client’s product is reasonable. A supplier declining to share the process FMEA for their own production line is not — that document belongs to the process, not the customer. The confidentiality objection is sometimes used to avoid sharing documentation that doesn’t actually exist or hasn’t been maintained. Ask specifically for the process FMEA (not a product-specific FMEA) and the most recent corrective action log for RPN items above 100.
If a supplier passes a SEDEX or ISO 9001 audit, doesn’t that mean their safety documentation is already verified?
ISO 9001:2015 requires that organisations determine and document risks and opportunities (Clause 6.1), but it does not prescribe FMEA methodology, RPN thresholds, or hazard matrix formats. SEDEX audits focus primarily on labour and ethical trade standards, not process safety documentation depth. Passing either audit tells you the management system framework exists — it doesn’t validate whether the FMEA Detection scores are calibrated against real shop-floor controls, or whether the emergency response procedures have been tested. Those require a process-level technical review, not a management system audit.
Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.
