I learned this checklist the expensive way, though not at Jinlong. In 2019, early in my career, I watched a buyer friend lose a 40-foot container of small appliances at Rotterdam customs over a CE certificate that was completely genuine and completely useless: the notified body was real, the test report was real, and the production address on the certificate's scope page named a sister factory 400 kilometers from the one that had actually built the goods. The container sat in bonded storage for seven weeks while lawyers argued. The buyer's mistake was not trusting the supplier. The mistake was verifying nothing, because the certificate had looked so professional in the sales deck.
That experience shaped how I now coach buyers through supplier qualification, and it shapes the structure of this article. Because the human brain reads a certificate as a verdict rather than a claim, the checklist below is built as a falsification tool: every item starts with the reassuring signal, then gives you the specific method that proves or breaks it. None of the first four sections requires a plane ticket. All of them require the discipline to distrust a PDF that looks official.
Item 1: The CE certificate — is the notified body real, and does the report name your SKU?
The reassuring signal: a glossy CE certificate with a four-digit notified-body number, an official-looking seal, and your product category printed in confident type. This is the document suppliers lead with, because it is the one buyers least often check past the first page.
The falsification method: two queries and three document fields, about one hour of desk work. First, take the four-digit notified-body number from the certificate and look it up in the European Commission's NANDO database. Confirm the body exists, that its notification covers the Low Voltage Directive 2014/35/EU and the EMC Directive 2014/30/EU, and that its scope includes household appliances. A surprising number of certificates cite bodies that are real but notified for machinery or medical devices, not appliances.
Second, demand the test report behind the certificate, not the certificate itself. Suppliers expect to be asked for the certificate; the request that changes the conversation is asking for the report. On the report, check three fields. The testing laboratory's name should match an accredited lab, not the supplier's own internal lab unless that lab is itself accredited for these standards. The product model list should name your specific SKU or the platform family it belongs to, not a generic category. The test standard editions should be current: for a vacuum cleaner, you are looking for EN 60335-1 and EN 60335-2-2 at recent editions, and EN 55014-1 for emissions.
Because the certificate is a summary and the report is the evidence, every verification shortcut that stops at the certificate inherits whatever the summary chose to omit. The failure I see most often is not a forged certificate; it is a genuine certificate whose report names a sister model, and the buyer discovers the gap only when the retailer asks for documentation during a market-surveillance query. Ask for the report in the first email, and watch which suppliers produce it within a day.
Item 2: The IATF 16949 certificate — does the registered site match your dispatch address?
The reassuring signal: an IATF 16949 logo on the supplier's slide deck, usually accompanied by the phrase "automotive-grade quality system." For vacuum cleaners, which are not automotive parts, this certification is commercially powerful and legally optional, which is exactly why it deserves scrutiny.
Let me ground this in a concrete example. When a buyer asks to verify our own IATF 16949 certificate at Jinlong, I do not send the glossy cover page. I send the scope page, which reads: manufacturing of injection molds and plastic parts for automotive (IATF 16949:2016), plus home appliances, at our single registered site at 188 Tanjialing East Road, Yuyao, Zhejiang. That single address is the whole point. Our 129 injection molding machines, which range from 15 to 1600 tons of clamping force, our 1,000-set-per-year tool room with its CMM coordinate measuring machines and Charmilles EDM equipment, and our motor division all sit under that one certified address. A buyer who receives a certificate whose scope page names a different address, or names a holding company with no production equipment, has just learned that the certificate does not cover the factory that will actually build their product.
The falsification method: five minutes on the IATF certificate database, which the IATF Global Oversight offices maintain. Enter the certificate number and read the registered site address carefully. Then compare it, character by character, against the address that will appear on your commercial invoice and packing list. The failure pattern is a holding-company certificate: the certificate names the group headquarters, while your goods ship from a production subsidiary whose address appears nowhere in the certified scope.
I want to be precise about what this check proves and what it does not. A matching address does not prove the factory runs IATF discipline daily; it proves the factory is inside the certified system. A mismatching address proves something stronger and more useful: that the IATF claim, for your purchase order, is marketing. Because the audit scope is the only part of a quality certificate that an auditor has actually visited, the scope page is worth more than every other page of the certificate combined. When I audit our own file for buyers at Yuyao, the scope page is the page I hand over first, at 188 Tanjialing East Road, and I expect the same discipline from any supplier I would sign with.
Item 3: ISO 9001, 14001, 45001 — are the certificates current, and issued by an accredited body?
The reassuring signal: three ISO certificates framed in the factory lobby, photographed for the website, with expiry dates comfortably in the future. Almost every serious Chinese manufacturer has these, which is precisely why the check matters: ubiquity breeds complacency.
The falsification method: verify the certification body's accreditation before you verify the certificate. A legitimate ISO certificate names the certification body, and that body should be accredited by a national accreditation body that is itself a member of the IAF. For certificates issued in China, the accreditation body is CNAS; the certificate should carry the CNAS mark. If the certification body is one you have never heard of and carries no accreditation mark, the certificate is wallpaper regardless of its dates.
Then check the expiry dates against the surveillance-audit cycle. ISO certificates run on a three-year cycle with annual surveillance audits, and a certificate that has quietly lapsed between audits is a real pattern I have seen twice in supplier qualification. The database lookup here is less centralized than NANDO or IATF, so the practical method is to email the certification body named on the certificate with the certificate number and ask for confirmation. A legitimate body answers within days. Because an ISO certificate is only as strong as the accreditation chain behind it, verifying the accreditor matters more than verifying the certificate.
Item 4: The test reports — do the lab name, sample description, and standard editions survive a close read?
The reassuring signal: a binder of test reports, sometimes offered proudly during a factory visit, each report thick enough to feel authoritative. Thickness is not evidence. Three fields are.
The falsification method: read the reports the way an auditor reads them, not the way a salesperson hopes you will. On each report, check the laboratory name against accreditation: internationally, look for names like TUV, SGS, Intertek, or Bureau Veritas, or a Chinese national lab with CNAS accreditation for the specific standard. Check the sample description against your product: a report on "handheld vacuum, model X" does not cover "stick vacuum, model Y," and the gap matters legally. Check the standard editions against currency: a 2015 report against a superseded edition of EN 60335 is evidence of history, not of current compliance.
Let me show you what this looks like in practice. When we certify a vacuum cleaner for the EU market, the test report cites EN 60335-1 (household appliance safety, general requirements) and EN 60335-2-2 (the particular standard for vacuum cleaners), plus EN 55014-1 for electromagnetic emissions. The product certifications we maintain at Jinlong include GS (the German voluntary safety mark), CE, EMC, UL (for North America), CCC (for China domestic), RoHS (hazardous substance restriction), and WEEE (end-of-life recycling). Each of those letters on a supplier's slide deck corresponds to a specific report with a specific lab's name on it. If a supplier claims GS but cannot produce the TUV or Intertek report behind it, the GS claim is decorative.
There is a subtler failure here that experienced buyers learn to spot, and it is the borrowed report: a report whose applicant is the supplier, but whose product photographs show a different housing than the one you are buying, because the platform was bought in and rebadged. Because a test report certifies a specific physical sample rather than a product family in the abstract, any physical difference between the tested sample and your SKU is a gap your retailer can drive a market-surveillance query through. Compare the report's photographs against your sample, feature by feature. It takes ten minutes and has saved at least one buyer I know from a very awkward recall conversation.
Item 5: The business license and dispatch address — do three documents name the same legal entity?
The reassuring signal: a business license scan, sent promptly, showing a registered company with a plausible name and a registered capital figure that sounds substantial. This document is real in almost every case. The question is whether it is the company you are actually contracting with.
The falsification method: the triangulation check, which is the highest-leverage thirty minutes on this entire checklist. Take three documents and lay them side by side: the business license, the bank account details on the proforma invoice, and the company chop on the draft sales contract. All three must name the same legal entity, in the same characters, at the same registered address. Then add a fourth: the export customs registration, which any factory shipping under its own name will have, and which should name the same entity again.
The failure pattern this catches is the trading company wearing a factory's clothes. A trading company is not automatically bad, but a trading company that presents itself as the factory is a governance problem, because the entity you are suing if things go wrong is not the entity that controls production. Because liability follows the legal entity on the contract, a mismatch between the license, the bank account, and the chop means you do not actually know who you are contracting with. When buyers visit us at Yuyao, this is the check I encourage them to run on us first, precisely because a factory with nothing to hide answers it in one email.
The limitation you should hold honestly
Here is the part most checklists omit, and it matters. Passing all five checks proves that a supplier's documents are genuine, correctly scoped, and consistently named. It does not prove that Tuesday's production run will follow them. Documents certify systems; they do not supervise them. Because a certificate describes what was true at audit time rather than what is true at your production time, the checklist is a first filter, not a final verdict. Use it to remove the suppliers who fail cheaply, then spend your verification budget on a pre-production inspection and a first-article review with the two or three suppliers who pass. That sequence, desk check then floor check, is the one that has kept every program I have run out of the Rotterdam bonded warehouse.
How to use this checklist on your next RFQ
Send the five document requests with your RFQ, not after it: the CE test report, the IATF certificate with scope page, the ISO certificates with accreditation marks, two sample test reports, and the business license with export registration. The suppliers who respond completely within two working days are telling you something about their document discipline that no factory tour can. The suppliers who respond with the sales deck instead are telling you something too. And if you want a calibration exercise, run the checklist on us first; the folder is ready, the scope pages match the dispatch address, and I will send it before you ask twice.
One practical addition that buyers often miss: ask for the factory's equipment list with serial numbers, not just the certification list. A factory that has been making molds for thirty years, as our Yuyao tool workshop has since 1985, will produce a list of CNC machines, EDM units, and CMM machines with purchase dates and serial numbers in about ten minutes. A trading company pretending to be a factory cannot produce this list, because the equipment does not exist. The equipment list is not a certification, but it is the physical evidence that the certifications describe something real.
External databases and standards behind each check
- Notified-body verification for CE: the European Commission's NANDO database.
- IATF 16949 certificate verification and scope pages: IATF Global Oversight.
- The product safety standards the test reports should cite: EN 60335-1 and EN 60335-2-2, catalogued via IEC.
- Accreditation-chain logic for ISO certificates: the International Accreditation Forum, whose member national bodies (CNAS in China) anchor the chain.
Site links referenced in this checklist
- About Jinlong, with the certification list whose scope pages I hand to buyers first.
- Vacuum cleaner OEM product page, the platforms the CE reports in our folder actually name.
- Contact, if you want the calibration exercise: request the folder and time the response.
Why I built this as a falsification tool
Because every checklist I was given early in my career told me what to collect and none told me how to break it, I have written the breaking method into every item. Because the expensive failures I have watched were scope mismatches rather than forgeries, the checklist weights scope pages and entity names above seals and signatures. Because a buyer's scarcest resource is the time between RFQ and PO, every method here runs from a desk before the flight is booked. If a supplier fails item 5, none of the other four matter, which is why it is the one I run first even though it is listed last.
About the author
Wanchen Xuan is a foreign trade specialist at Ningbo Jinlong Electric Appliance Co., Ltd.. She sits on the supplier side of audits now, hosting buyer qualification visits at the Yuyao campus, but she learned compliance verification on the buyer side and still checks every certificate's scope page before its cover. Connect on LinkedIn.