The Certificate Your Supplier Emails You: How to Audit It Before You Order
The documents a supplier sends at quotation stage are three different things: a test report, a third-party certificate and a Declaration of Conformity, and they carry very different weight. This checklist covers model coverage, issuing-body accreditation, standard editions and the red flags that should pause an order.
The PDF that lands in your inbox labelled CE certificate is usually three different documents rolled into one, and they do not carry the same weight. A test report is raw laboratory data on one sample; a certificate is an issuing body's attestation that normally points back to that report; a Declaration of Conformity is the manufacturer's or importer's own legal statement. Buyers who treat all three as equivalent tend to discover the gap only when customs or a market-surveillance officer asks for the underlying report and the supplier cannot produce it.
Start with coverage, not the logo in the corner. A report for one handset does not automatically cover the twelve colour variants, the dual-voltage version, or the model number your private-label artwork will carry. Find the model designation printed on the report's front page and in the covered-models annex, then check the ratings table: voltage, frequency, wattage and IP rating must match the specification you are ordering. If your model is not in that annex, you are holding a document about somebody else's product.
Then verify the body that signed it. Third-party marks such as ETL, GS or a TUV mark mean an accredited organisation tested and listed the product; a self-declared CE mark for the Low Voltage and EMC directives is perfectly legal, but it places the whole technical file on the manufacturer and, once the goods land, on you as the importer. Look for ILAC or IAF accreditation in the report footer, note whether it is a CB Scheme certificate with national deviations, and search the report number in the issuing lab's public directory. Most labs keep one online, and it takes two minutes.
Standards move, and a report is only as good as the edition it cites and the design it froze. A document issued against an older edition of IEC 60335-1, or one dated before your ODM changed the motor, the LED driver, the lens or the heating element, does not describe the unit in the carton. Any change touching safety or EMC - a faster motor in a hair dryer, a higher-fluence lamp in an IPL handset, a new battery cell - normally requires a re-test or at least a documented delta evaluation. Ask who signed off that evaluation and get it in writing.
Four red flags are worth memorising. A certificate with no report number behind it. A report that names a different brand or a different supplier's model code, which is common when an ODM factory reuses one test file across many private labels. A front page attached to a screenshot of a licence held by a third party rather than the factory. And a certificate of compliance issued by a company with no accreditation and no directory entry. None of these is automatically fraud, but each one means you, not the factory, will be explaining the product to a regulator.
So build the request into your purchase order, before tooling is paid. Ask for the full report rather than the cover page, the covered-models annex, the list of standards with editions and dates, and - once you are the importer of record - a Declaration of Conformity naming your company. Keep the file for as long as your market requires; EU technical documentation runs to ten years, because surveillance requests arrive long after the shipment. Ordering one verification test on your own sample against the same standard costs a fraction of a recall, and it is the only step that actually checks the unit you sell.