A supplier audit is an independent review of a vendor's billing, performance, and adherence to the terms of the relationship, whether or not those terms are captured in a single formal contract. It is a broader term than contract compliance audit, which tests billing specifically against contract language. A supplier audit can also cover things a contract doesn't fully specify: whether service levels are actually being met, whether a vendor's own subcontractors are being managed appropriately, and whether pricing has stayed competitive as the relationship has matured.
What a supplier audit reviews
Scope varies by industry and supplier type, but most supplier audits test a consistent set of areas:
- Billing accuracy against quoted or contracted rates, including labor, equipment, and materials.
- Scope adherence, confirming that billed work matches what was actually authorized and performed.
- Performance against service levels, where the relationship includes defined obligations.
- Documentation quality, since a supplier that can't produce clean backup for its invoices is a different risk profile than one that can.
- Subcontractor and third-party charges, which are a common source of markup errors and pass-through costs that were never agreed to.
How often to audit, by supplier tier
Not every vendor needs the same scrutiny, and auditing everyone on the same schedule wastes effort on low-risk relationships while under-serving the ones that matter. A tiered approach works better:
- Large or strategic suppliers (major EPC contractors, primary equipment vendors, high-spend service providers): audit every three to four years, or after any major change to the relationship.
- Mid-tier and regional suppliers: every five to six years is generally sufficient, based on Revenew's experience auditing complex, asset-intensive industries.
- New or recently onboarded suppliers: an early audit, within the first 12 to 18 months, catches setup and billing errors before they compound over a multi-year relationship.
This cadence balances two competing pressures: auditing too rarely lets errors accumulate for years, while auditing too aggressively strains vendor relationships without proportional return.
Not sure which suppliers need a closer look first?
Revenew's Supplier Risk Self-Assessment Tool is a free, ten-question evaluation that scores your current supplier compliance and risk exposure, so you know where the biggest opportunities sit before committing to a full audit. Take the Supplier Risk Self-Assessment
Industries where supplier audits matter most
Supplier audits carry outsized value in capital-intensive industries with complex, global vendor networks. In mining, for example, sprawling equipment and materials contracts, developing data systems, and remote operations combine to create real transparency gaps between what's billed and what's actually delivered. The same pattern shows up in oil and gas, manufacturing, and pharmaceuticals, where supplier networks are large, contracts are complex, and no single internal team has full visibility into every vendor relationship.
Revenew's Mining Auditor's Guide and our analysis of auditing headwinds in mining go deeper on how to structure vendor evaluation in that specific environment. For pharmaceutical supply chains, our Pharmaceutical Supplier Risk Self-Assessment Tool gives internal teams a starting point for identifying which relationships warrant a full audit first.
Supplier audit vs. contract compliance audit: which do you need?
If a specific, well-documented contract governs the relationship, a contract compliance audit is the more precise tool: it tests billed reality against contract language, line by line. A broader supplier audit is the right starting point when the relationship spans multiple work orders, informal agreements, or evolving scope, or when you want a first look at a vendor before deciding whether a deeper contract-specific review is warranted. In practice, many engagements start as a supplier audit and narrow into a formal contract compliance review once the highest-risk areas are identified.
The discipline that keeps supplier terms enforced between audits is vendor contract management, and our contract audit checklist shows the line-item tests a supplier audit applies.
Getting started
Revenew has run supplier audits since the firm's founding 25 years ago, across 86 countries and every major capital-intensive industry. Our Contract Compliance Reviews deploy a full audit team, not a single generalist, and run 140 audit tests per engagement.
Request a No-Risk Review to find out what a supplier audit would uncover in your vendor network.