A cold chain audit is a structured check of a supplier's or a site's ability to keep product inside its stated temperature band, carried out against a written checklist rather than a walkthrough and a handshake. It covers two distinct targets: a supplier audit, run before or during a contract on an external partner such as a carrier, packaging vendor, or contract warehouse, and a site audit, run on an organisation's own facility.
Both produce the same kind of output: a scored or graded checklist, a list of findings, and a corrective action plan with dates attached. An audit that ends in a conversation and no written findings has not actually happened, in any sense that matters later. The checklist itself usually covers the same ground regardless of which side of the relationship is being reviewed: equipment and calibration, procedures and training, records and their completeness, and how past findings were closed out.
Supplier audits and site audits
A supplier audit looks outward: does the carrier's vehicle fleet hold calibration records for its refrigeration units, does the packaging vendor's qualification testing match what it claims on paper, does the contract warehouse's temperature mapping cover the racking configuration actually in use. It usually happens before a contract starts and then again on a fixed cycle for as long as the relationship continues. The depth of the audit tends to scale with risk: a supplier handling ambient dry goods gets a lighter review than one handling product that fails outside a narrow band within hours.
A site audit turns the same checklist inward. It reviews an organisation's own cold rooms and cold stores, its own pack-out stations, its own training records, against the same standard it expects from a supplier. A company that audits its partners hard and its own site loosely is not really running a quality program; it is running a procurement exercise with a different name. Rotating who conducts the internal review, rather than always using the same reviewer, catches blind spots a familiar reviewer stops noticing after enough repeat visits.
The evidence a review actually checks
An auditor does not take a stated temperature range on trust. The review pulls calibration certificates for sensors and thermometers, thermal validation and mapping reports for rooms and vehicles, pack-out records for qualified insulated shippers compared against their tested configuration, training records for staff handling temperature-sensitive product, deviation logs and how they were closed out, and a sample of real shipment records compared against what procedures say should happen.
The gap between a written procedure and what a sample of real records actually shows is where most findings live. A site can have a well-written pack-out instruction on file and still fail an audit if the shipment records show gel packs conditioned for the wrong duration on a regular basis.
Common findings
The same handful of gaps turn up across most audits: calibration certificates that expired and were never renewed, temperature logs with gaps where a logger battery ran out and nobody noticed, staff who can describe a procedure verbally but have no signed training record proving it, and corrective actions from a previous audit that were logged as closed without any evidence attached. A repeat finding, the same gap flagged on consecutive audits, carries more weight than a first-time finding, because it shows the previous corrective action did not actually hold.
Missing evidence is treated the same as a failure, even when the underlying practice was probably fine. An auditor cannot credit work that left no trace, because the entire purpose of the audit is to replace trust with a paper or digital trail that someone else can check later.
Self-inspection and building the evidence pack
Self-inspection is the same checklist run internally, on a fixed schedule, before an external auditor or a customer ever asks. Its value is catching a lapsed calibration certificate or a gap in training records while it is still an internal fix, rather than a finding on someone else's report.
An evidence pack is the file an audit actually runs against: calibration certificates, validation and mapping reports, procedures with current version numbers, training records, and a deviation log, organised so a reviewer can trace any claim back to its source in minutes rather than a day. Sites that keep this pack current year round pass audits quickly. Sites that assemble it the week before an audit usually find the gaps their own self-inspection would have caught months earlier. The pack is worth as much between audits as during one: it is the same file a supplier review, a customer question, or an internal investigation into a deviation ends up drawing on.