How to Document Procurement Decisions for Audit

Procurement of compostable packaging — like other purchasing decisions — needs to be documented for audit purposes. Whether the audit is internal (governance review, sustainability committee), external (ISO 14001 surveillance, customer audit), or regulatory (state-level PFAS compliance, federal procurement audit), the documentation requirements are similar: a clear record of who decided what, when, on what basis, and what evidence supported the decision.

This guide walks through the documentation practices that hold up to audit scrutiny. The intended audience is sustainability managers, procurement professionals, and operations leaders responsible for compostable packaging purchasing decisions.

Why documentation matters

Auditors look for evidence that procurement decisions were made deliberately, with appropriate criteria, and with verifiable supporting evidence. Casual or informal decisions don’t pass audit — even if the decisions themselves were good.

For compostable packaging specifically, several reasons make documentation particularly important:

Certifications are time-bound. BPI certifications, TÜV certifications, and other validation expire and require renewal. Audit trails need to show which certification was current at the time of purchase.

PFAS compliance. In California, New York, and increasingly other states, PFAS-free claims need supporting evidence. Documentation must include the testing certificates or attestation that supported the claim.

Sustainability reporting. If your organization reports on sustainability commitments (CDP, B Corp, ISO 14001), the compostable packaging spend and outcomes are part of the report. Documentation supports the reported figures.

Supplier accountability. If a supplier delivers off-specification product or makes false certification claims, documentation supports remedies. Without documentation, the customer is harder to defend.

Procurement governance. Many organizations require documented justification for purchases above certain thresholds. Compostable packaging often exceeds these thresholds.

What to document for each procurement decision

For each compostable packaging purchase, maintain documentation covering at minimum:

1. The decision and decision-maker

• Date of decision
• Person or committee making the decision
• Decision authority (PO number, contract reference, etc.)
• Product(s) selected and quantities

2. The selection criteria

• Functional requirements that the product had to meet
• Sustainability criteria (certifications required, PFAS-free, recycled content, etc.)
• Cost criteria (price ceilings, target cost)
• Operational criteria (lead time, minimum order, supplier reliability)

3. The options considered

• List of suppliers/products that were evaluated
• Why each was selected or rejected
• Decision matrix if multiple criteria were weighed
• References to RFP responses, proposals, or quotes

4. The supporting evidence

• Certifications: BPI, TÜV, ASTM, etc., with expiration dates
• Test reports: PFAS testing, dimensional testing, performance testing
• Supplier attestations
• Third-party verification

5. The contract and pricing

• Final negotiated price
• Volume commitments
• Service level agreement (SLA) terms
• Payment terms

6. Approvals

• Required approvals from finance, sustainability, operations
• Signatures or digital approval records
• Date of each approval

7. Follow-up tracking

• Order confirmations
• Delivery records
• Quality verification at receipt
• Issues or claims raised
• Resolution of issues

How to organize the documentation

Documentation structure varies by organization but typically follows one of these patterns:

Centralized procurement system. Many large organizations use Coupa, SAP Ariba, Oracle Procurement, or similar systems that maintain all procurement documentation in a central database. For compostable packaging, populate the standard fields and add custom fields for sustainability criteria.

Distributed by supplier. Some organizations maintain a folder per supplier with all relevant documentation. Compostable packaging suppliers get their own folder with contracts, certifications, test reports, and order history.

Distributed by product category. Some organizations organize by category (cups, plates, bags) with documentation by SKU. Each product has its own folder with sourcing details.

Hybrid approaches. Most real organizations use some combination — centralized purchase orders in a procurement system, with supplemental documentation in shared folders or in supplier-specific systems.

The specific organization matters less than consistency. Choose a structure and maintain it.

Retention periods

Different documentation has different retention requirements:

Procurement decisions and contracts: Typically 7 years after contract expiration. This aligns with most US business records retention requirements.

Tax records related to procurement: Typically 7 years.

Certifications and test reports: Indefinite, or at least 7 years after the certification expires. Original certifications may be needed for future audits or claims.

Sustainability reporting backup: Indefinite. Organizations report against past years; the backup needs to remain accessible for cross-year comparisons.

Internal governance approvals: Typically 7-10 years.

Issue and remedy records: 7 years after resolution.

Check your organization’s specific retention policy. Some industries (food service, healthcare, government contracts) have additional retention requirements.

What auditors specifically look for

Based on experience with various audit types, auditors typically focus on:

Sample purchase decisions: Auditors will request specific examples — “show me the documentation for purchase order #X.” If the documentation is comprehensive and well-organized, this is easy. If documentation is informal or scattered, this triggers deeper scrutiny.

Certification currency: Auditors verify that certifications were current at the time of purchase, not just historically valid. If a product was purchased after the certification expired, this is a finding.

Decision rationale: Auditors look for evidence that decisions weren’t arbitrary. A decision matrix or evaluation criteria is much better than “we chose this supplier because they were available.”

Supplier verification: For high-spend or high-risk categories, auditors look for evidence that suppliers were vetted. Did anyone check supplier financial health? Did anyone verify supplier facilities? Did anyone confirm certifications?

Conflict of interest: Auditors look for evidence that purchasing decisions weren’t biased by relationships, gifts, or conflicts. Multiple-quote comparisons and competitive bidding documentation help.

Compliance with sustainability commitments: If the organization has public sustainability commitments (e.g., “100% compostable by 2025”), auditors verify that purchasing decisions support those commitments.

Common documentation gaps and how to address them

Three documentation gaps that come up in audits:

Gap: “We bought from this supplier because the previous person did.”

Fix: For ongoing supplier relationships, document a formal renewal review at least every 2 years. Compare against alternatives. Document the rationale for continuing the relationship.

Gap: “The certification was current when we started, but expired during the order period.”

Fix: Establish a tracker for supplier certifications with expiration dates. Set reminders 90 days before expiration. Pre-renew certifications before they expire, especially for long-term contracts.

Gap: “We have a PFAS-free claim from the supplier but no test data.”

Fix: For products subject to PFAS regulation, require supplier test reports, not just attestation. The audit trail should include actual test data or independent third-party verification.

Specific documentation for compostable claims

For products with compostable claims (which is the entire category), the documentation should specifically include:

BPI certification PDF. The current valid BPI certification document, with expiration date. Some organizations require this with each shipment; others require it annually.

ASTM standard compliance. Reference to ASTM D6868 (or whichever standard applies) compliance, with verification path.

Compostability testing data. Where available, the underlying composting test data that supports the certification. This is less commonly required but useful for high-stakes audits.

Industrial composting acceptance. Documentation that the specific product is accepted by your specific local composting facility. Some compostable products are technically compostable but rejected by specific facilities.

Carbon footprint documentation. If you’re tracking carbon under sustainability reporting, the underlying life-cycle analysis data for the products.

For compostable food containers, compostable cups and straws, and other categories, the documentation requirements are consistent — current certifications, supplier attestations, and evidence supporting the specific claims made about the products.

What to do when auditors find issues

Most audits identify some gaps, even in well-documented programs. The key is responding constructively:

Don’t be defensive. Acknowledge the gap; explain what you’ll fix; commit to a remediation timeline.

Document the gap and the remediation. The audit response itself becomes part of the documentation record.

Update procedures to prevent recurrence. If a documentation gap is identified, fix the underlying process, not just the specific instance.

Verify the fix in the next audit cycle. Auditors will check whether previously-identified gaps were actually closed.

Documentation in practice: a sample procurement record

For a hypothetical purchase of 50,000 bagasse 9-inch plates from Eco-Products, the procurement record might include:

File 1: Purchase order with vendor, product details, pricing, delivery date, contract reference.

File 2: Selection rationale memo — “We chose Eco-Products over [alternatives] because of [reasons].” Lists the criteria evaluated.

File 3: BPI certification PDF, expiration date 2027-01-15, file dated current purchase date.

File 4: PFAS-free testing report dated 2024-09-12, showing total fluorine <0.1 ppm.

File 5: Supplier attestation of PFAS-free status, signed by supplier representative.

File 6: Quote comparison from three suppliers (Eco-Products, World Centric, Vegware) showing pricing and terms.

File 7: Internal approval emails from finance and sustainability teams.

File 8: Receipt confirmation and quality inspection report on delivery.

File 9: Composting facility acceptance confirmation from local hauler.

For a single purchase, the file set might be 10-20 documents. For a small procurement, this is manageable; for high-volume purchases, the system needs to be automated.

Tools that help

Several categories of tools support compostable packaging procurement documentation:

Procurement management systems: Coupa, SAP Ariba, Oracle Procurement. Maintain centralized procurement records.

Sustainability management systems: Watershed, Persefoni, Sustain.life. Track sustainability data including supplier carbon footprints.

Document management systems: SharePoint, Google Drive, Box. Maintain organized document libraries.

Compliance trackers: Various spreadsheet templates and specialized tools track certification expiration dates and renewal schedules.

For mid-size organizations, a well-organized SharePoint or Google Drive with consistent folder structure and a certification tracker spreadsheet is often sufficient. For larger organizations, dedicated procurement management systems pay for themselves.

The bigger picture

Procurement documentation isn’t usually exciting, but it’s foundational to sustainability claims. Without solid documentation, “we use compostable packaging” becomes harder to defend in audits, harder to report against, and harder to trace if problems arise.

The good news is that compostable packaging procurement documentation is generally straightforward. The categories of documentation are well-defined, the retention periods are standard, and the audit expectations are clear. Organizations that establish good practices early scale easily to higher volumes.

For sustainability managers and procurement professionals starting fresh, the key is to establish a documentation framework on day one and maintain it consistently. The first audit will reveal gaps; subsequent audits should show improvement; eventual mature documentation should pass audit with minimal preparation.

Compostable packaging is one of many categories with audit requirements. The documentation practices described here apply broadly to sustainability-related procurement — energy, water, waste, transportation, employee programs. Investing in good documentation for compostable packaging tends to support good documentation across other sustainability-relevant categories.

For B2B sourcing, see our compostable supplies catalog or compostable bags catalog.

For procurement teams verifying compostable claims, the controlling references are BPI certification (North America), EN 13432 (EU), and the FTC Green Guides on environmental marketing claims — these are the only sources U.S. enforcement actions cite.