Supplier Management: How to Spot Quality Issues Before Costs Skyrocket

Christian (00:00)
welcome back to the compliance lab on the QT9 Q-Cast where we take one messy real world scenario and turn it into a system that you can actually run. I'm your host, Christian Reyes. Today's lab, supplier quality and defects, the ripple that spreads through your operation when a bad lot comes through the door, and why the true cost has almost nothing to do with the price on the PO. This is the heart of our core this is the heart of our Q3 theme.

Scaling regulated operations through closed loop traceability and supplier risk control.

By the end, you'll have a simple test for whether your supplier management software can actually contain the ripple.

If you don't think a single supplier quality problem can become one of the most expensive things on your books, look at this past spring. On March 3rd, 2026, Casey Pharmaceuticals, a private label manufacturer in Pomona, California, initiated a nationwide recall of more than 3.1 million bottles of over-the-counter eye drops. The FDA later classified it as a class 2 recall, citing a lack of assurance of sterility. Here's the part that matters.

Those bottles came from one manufacturing site across eight recalled product lines and packaged under dozens of store and private label brands: Walgreen, CVS, Kroger, Riteaid, and more. And then onto shelves nationwide. And that's the supplier-to-lot to customer exposure map in one picture. One upstream manufacturing quality problem propagating through a whole network of buyers, each now asking them the same question on their own shelves. Which lots?

Which stores, which customers are affected. The ones who can answer in ours look very different right now from the ones reconstructing it by hand. And it's not a one-off. Cedric's 2026 recall index counted 3,295 recalls last year, with defective units up to 26%, from $681 million to 858 million. Regulators also leaned hard on recall execution, with heavy fines and even prison sentences for late defect reporting.

Slow tracing isn't just operational pain anymore. It's enforcement exposure. And the whole drug chain is moving in this direction. Under the Drug Supply Chain Security Act, prescription drug trading partners are being pushed towards package-level electronic interoperable tracing. Many deadlines have already passed, and one final small dispenser exemption runs through November 27th, 2026. DSCSA covers prescription drugs, but not these over-the-counter drops.

But the direction is unmistakable. Trace a unit from supplier lot to the point of sale on demand. Now shrink that national story down to your own doc. Every one of those buyers is about to pay the real invoice for a defect that they did not create, and that's today.

Start with the mindset shift. The PO price is what you paid to acquire the material. It's not what the material costs you. And the gap between those two numbers is where supplier quality really lives. When a lot is good, the gap is basically zero. When it's bad, it explodes. And it explodes in places that never get tied back to the supplier. The line, the schedule, the quality team's calendar, and eventually the customer.

Think of the PO price as the tip of an iceberg. Everything underneath the waterline is the real invoice, the bill that nobody mails you, but you pay anyways. So let's follow the ripple outward, stage by stage. Stage one, the dock. Best case, you catch it at receiving. Even then, it's not free. You've got inspection time, back and forth with the supplier, a replacement order, and usually premium freight to save that build. That's the good outcome.

And it already costs you more than the line item on the P.O. Stage two, the floor. Worst case, it a little bit worst case, it gets into production. A line stops, you have to tear down assemblies, rework what you can, scrap what you don't, retest. That's labor, machine time, and material, plus work in process frozen while you figure out what's safe to build. Stage three is the schedule. When the order ships late, so you have to expedite and run over time.

And the next job slips because the capacity it needed just got eaten. A bad lot doesn't cost you just one job, it costs you the jobs behind it too. Stage four, the quality system. Every bad lot spawns paperwork, and paperwork is really labor: a nonconformance, a material review board, root cause, a supplier corrective action, kappa, updated inspection plans, and maybe retraining. Hours from your most expensive people pulled off of everything else.

Stage five is the customer. And if it escaped the building, we're talking complaints, returns, sorting at the customer site, containment, maybe a recall, and warranty claims. Plus the costs on no spreadsheet anywhere, the customer's trust, and your spot on their approved supplier list. And that's the ripple. One lot, five stages, and the PO covered roughly none of it. There's a rule of thumb for exactly this: the 110-100 rule.

It's not an accounting standard, but it is a useful mental model. Catch the defect at the source, the supplier you're receiving doc, and call it a dollar. Catch it on your own floor, built into the product, and it's 10. Let it reach the customer and it's 100. Same defect, the only variable is how far it traveled before someone caught it. A bad lot doesn't get cheaper as it moves through your plant. It compounds. So the whole game is catching and containing it early.

The doc is a one dollar problem, the customer is a hundred dollar problem.

So let's put a number on it. Round numbers, but you'll recognize the shape. Lot B247, PO line 500 brackets, $12 each, $6,000 total. The lot's bad, and let's say an out-of-tolerance cleaning process. Here's the real invoice. Receiving catches some of it. Reinspection plus an expedited replacement, and call that a couple thousand. But some hit production across four different work orders.

So you have to tear down and rework two assemblies, scrap a batch and retest everything. Several thousand more. One finished lot already shipped, so now there's a customer sort, return freight, and a containment call. A few thousand more, plus a very uncomfortable phone call. Your quality team burns a better part of a week on the nonconformance, root cause, and the resulting supplier corrective action. Add it up, and that $6,000 PO just costs you $30,000, $40,000.

That is the real invoice. And notice the supplier only ever sees the six thousand.

Now, what decides whether that invoice stays small or runs away from you? And that's two gaps. Gap one, traceability that only runs backward. Most shops can answer where did this come from? Unit work order, PO, and supplier lot number. That direction is easy. But if your supplier management software only runs backward, it is only solving half the problem. The expensive direction is forward. That one lot split across different work orders.

Becoming several unfinished lots shipped to several customers. And the breadcrumbs are scattered across an inventory transaction, a paper job traveler, and a shipping record that nobody reconciled. You can trace to the PO in seconds. You can't trace to the customer in hours. Every hour you can't is the invoice growing. The fix: build the genealogy both ways. So show me everywhere lot V247 went.

Is a single query and not a full reconstruction. Gap two, supplier risk that isn't wired to the lots on your floor. A supplier gets approved and then the system goes quiet. The scorecard's a quarterly spreadsheet, the risk signal is going to live in your QMS, and the lots live in your ERP system, connected only by someone remembering to check both. That is the lesson from the eyeDrop case. A warning signal can exist in the quality record without appearing on the exposure map.

The FIX supplier management software that does more than store approvals. It needs a living, breathing, risk-tiered scorecard with automatic requalification triggers wired to live lot genealogy. So when your supplier goes high risk, your exposure lights up instantly. The lots, the work in process, the finished goods, the customers affected.

So let's pull it together. That supplier looked cheap at $12 a bracket, but the real cost of doing business with them includes events like this, which means your scorecard can't just track on-time delivery and reject rate. It has to capture the cost of poor quality that these defects create. Supplier management software earns its name when it ties scorecards to actual lot exposure. The cheapest PO and the most expensive supplier are very often the same supplier.

And you only see that if you can trace the lot, because you can't bill back, score, or even size a ripple that you cannot follow. Closing the loop means four things move together. Trace the lot to size the damage, open the supplier corrective action and adjust the risk rating to prevent the repeat. Feed the real cost back into how you score that supplier and remember the lesson the next time purchasing makes a decision. Trace it, cost it, correct it, and remember it.

A bad lot you can't trace is just a cost you absorb and forget until it happens again.

So here's your challenge this quarter. Take your last real supplier defect, one lot, and build the real invoice, not the PO price. The whole thing: receiving, rework, scrap, expedite, the schedule hit, quality team hours, the customer impact, one honest number. While you're at it, time how long it takes you to trace that lot to every customer who got it. And that's your recall readiness. Then ask whether your supplier scorecard actually reflects the number.

If it doesn't, you're rating that supplier on a fraction of what they actually cost you. Because the takeaway is simple. The price on the PO is what you agreed to pay. The real invoice is what the lot actually costs, and supplier quality is the gap between them. Closed loop traceability is the only thing that will make that gap visible.

Supplier management software should make that gap impossible to ignore. If this episode helped, please like, comment, and subscribe. I'm Christian Reyes, and this has been the QT9 QCast Compliance Lab. Until next time, keep improving and stay compliant.