Supplier corrective action closure across QMS, supplier portal and ERP: a system map of records and linking keys

Short answer

Reconstructing a supplier corrective action across systems takes five keys: the SCAR number, the supplier ID, the part number with its revision, the lot or receipt number, and dated status changes including reopen events. The customer's QMS and the supplier portal often share only the first two. The lot number, held in the ERP and the inspection record, is what ties a SCAR to the defect that opened it and to the verification that closed it, and it is the key most often typed by hand.

Visual briefFull-size diagram
A matrix of four systems (ERP, inspection, QMS and supplier portal) against four keys, with each key line running across the systems that carry it: vendor code, part and revision, lot number and SCAR number, ending in one joined Illustrative case.
Illustrative system layout and identifiers. Field names and which system holds each key vary by company.

This page is part of the supplier corrective action closure guide. It maps where each SCAR record sits and which identifier carries a case from one system to the next.

Four systems, one SCAR: who holds what

A corrective action request is a conversation between two companies, written down in several places. On the customer's side, records typically split across four systems, plus email for anything outside them.

SystemRecord it holdsLinking keyUsual owner
ERPPurchase orders, goods receipts, lot numbers, vendor masterVendor code, part number and revision, lot or receipt numberPurchasing and materials
Incoming inspectionInspection results, defect counts, measurements, photosLot number, part number and revisionIncoming inspection lead
QMSSCAR request, status history, reopen entries, closure approvalSCAR number, vendor code, part numberSupplier quality head
Supplier portalContainment, root cause and corrective action responses, attachmentsSCAR number, supplier's own account IDPortal administrator
Email and shared drivesPre-portal requests, side discussions, spreadsheets of check resultsSCAR number in subject lines, if usedOften nobody

ISO guidance on documenting a nonconformity describes a report form with separate sections for root cause, correction, corrective action and verification of implementation and effectiveness. When a company's QMS mirrors that structure, each step lands in its own field and joins become easy. When the QMS has one free-text box, the same facts exist but must be read rather than matched.

Five keys and how well each joins

Rate each key before describing the history. The weakest key that a case needs sets the quality of the whole join.

KeyCarried byJoin qualityQuestion to ask
SCAR numberQMS, portal, email subject linesGood when the portal syncs automaticallyWere any requests issued by email outside both tools?
Supplier IDERP vendor master, QMS, portal accountFair; codes can differ between systemsWas the vendor master merged or cleaned up?
Part number and revisionERP, inspection, QMS, sometimes the supplier's own part numberFairIs there a cross-reference to supplier part numbers?
Lot or receipt numberERP, inspection record, supplier verification responsesPoor if typed by handWas the lot recorded at every verification?
Dated status changes and reopensQMS audit trail, portal historyVariesCan a reopen be told apart from a new SCAR?

The last row matters most for value. A reopened SCAR, where the first fix failed and a second was tested, is the most informative record in the set. If the QMS records reopens as new SCARs with no link back, the history splits into apparently unrelated defects. The worked exception case shows what a reopen looks like when it is kept intact.

One SCAR joined across all four (Illustrative)

A fictional 620-person HVAC equipment maker issues a SCAR for porosity in aluminum castings. Every identifier below is invented to show how one case reads when each join holds.

StepSystemRecordKey handed to the next step
Castings received against a purchase orderERPGoods receipt for part HX-220 rev C, lot 24-1187, vendor V-0412Lot 24-1187
Inspection finds porosity on sectioned samplesIncoming inspectionDefect record for lot 24-1187 with sample counts and photosLot and part HX-220 rev C
SCAR raised and stock quarantinedQMSSCAR-3391 for V-0412, part HX-220 rev C, lot 24-1187SCAR-3391
Supplier responds with containment and root causeSupplier portalResponse on SCAR-3391 citing degassing practiceSCAR-3391
Next lots verifiedIncoming inspection and ERPResults for lots 24-1240, 24-1302 and 24-1355, all passingLot numbers, part revision
SCAR closedQMSClosure approval on SCAR-3391, citing the three lotsSCAR-3391

Read down the right-hand column: each row hands a key to the next, and the closure cites the exact lots that proved the fix. If the verification lots had not been recorded, the closure would still exist, but nobody could show which deliveries it rested on.

Where SCAR chains break

Four patterns explain most broken joins. Each is a question for the company, not a fault to report.

  1. Two vendor codes. The ERP vendor master and the portal identify the supplier differently, and a merger or cleanup changed codes midway. The fix is usually a mapping table, if one was kept.
  2. Supplier part numbers. The supplier's response cites its own part number. Without a cross-reference, the response cannot be tied to the customer's revision.
  3. Responses left in the portal. The QMS shows the request and closure, while the supplier's reasoning and attachments stay on the portal. When the portal contract ends, the middle of the case can go with it.
  4. Lots missing from verification. Verification is recorded as "accepted" without the lot numbers inspected, so closure cannot be traced to evidence. That matters because the ISO/TC 176 vocabulary frames corrective action as removing a cause to prevent recurrence, and ISO 9001 auditing guidance expects the effectiveness of the action to be verified; without lot numbers, the record cannot show either.

What each QMS, portal or ERP can export, and how long history is retained, varies by vendor and contract; the company should confirm it with its own providers. The Epicor Kinetic historical data guide shows the kind of ERP questions to raise.

Questions for the supplier quality head

Keep every question at metadata level. Nothing here needs a file, a screenshot or a login.

  • Roughly how many requests a year, since when, and in which tools?
  • Does the QMS form have separate fields for root cause, correction, corrective action and verification?
  • Are lot numbers recorded on the defect record and on each verification?
  • Are supplier responses pulled back into the QMS, or held only on the portal?
  • How are reopens recorded, and roughly how many cases reopened?
  • Who administers each system, and who could authorize a licensing discussion?

The introduced company needs 50+ full-time employees at peak (contractors excluded), documented operating history, rights to license and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 90% of the data is in English. How supplier confidentiality affects the portal responses, which cases a buyer would want and whether an offer follows stay unknown until SourceX's review. The SCAR referral brief template turns these answers into a handoff, and the root cause analysis records page covers the analysis files that sit beside SCARs. If a site is closing or the business is being sold, manufacturing plant closure and how to sell a manufacturing business cover those triggers.

Next step

Refer a company. Earn up to $100,000. Default reward: 25% of Actual Supplier Payout, capped at $100,000 cumulatively per referred company. Eligibility and payment conditions apply, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

If a manufacturer's corrective actions can be followed from receipt lot to supplier response to verified closure on shared keys, register as a partner, check it against who qualifies and read the program terms before introducing its supplier quality head.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardYour 25% of the actual supplier payout. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Is the QMS alone enough to reconstruct a SCAR?

Sometimes, if the supplier's responses were pulled back as attachments and verification results were entered per lot. More often the QMS holds the request and the closure, the portal holds the supplier's reasoning, and the ERP holds the lots. All three are needed for a full case.

What if older SCARs were run by email?

Say so as a separate class with its years. Email-era SCARs usually still carry a SCAR number and part number in the subject line, which makes a partial join possible, but the verification records may sit in spreadsheets with no owner.

Sources

  1. committee.iso.org/files/live/sites/tc176sc2/files/documents/IS…
  2. committee.iso.org/files/live/sites/tc176/files/PDF APG New Dis…
  3. committee.iso.org/files/live/sites/tc176sc1/files/Terms in TC …
  4. refer.sourcex.si/terms

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 90% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment