Product Compliance Program Maturity Assessment
Product compliance programs often grow by accident. This quick assessment shows where yours stands across ownership, data, supplier management, change control and traceability, and what to fix first.
1. Who owns product compliance in your company?
2. How do you know which laws apply to each product?
3. Where is component material compliance data stored?
4. How do you handle supplier declarations?
5. What happens when a design or supplier changes?
6. How do you track changes to regulations and substance lists?
7. How are technical files and declarations kept?
8. How do you respond to customer compliance questionnaires?
9. How do you verify supplier data is true?
10. Could you recall or notify customers quickly if a part were found non-compliant?
How to use the assessment
Answer for how things work today, not how the procedure says they should work. Ask two or three colleagues from quality, engineering and purchasing to answer independently and compare the results, because differences show where the process is not visible. The score is a percentage of the maximum, and each band comes with practical next steps.
What the ten questions measure
The questions follow the life of compliance data: who is accountable, which laws apply, where component data lives, how suppliers are managed and verified, how change is controlled, and how fast you can react to an incident. These are the same areas auditors and large customers probe when they assess a supplier, so a weak area is likely to appear in a questionnaire.
Reading your result
A low score is not a verdict on people, it usually reflects missing tools and time. Focus on the lowest scoring questions rather than raising the average. Change control and traceability are often the best investments, because they prevent new gaps while you clean up old ones. Repeat the assessment after six months to see movement.
Common mistakes
Companies sometimes buy a compliance tool before defining ownership and process, or treat compliance as a one time project at product launch. Others rely entirely on supplier statements. A modest program with clear ownership, controlled data and a working change process beats a large unused system.
Frequently Asked Questions
Is this assessment an audit?
No. It is a self assessment for planning. It does not replace an audit against a standard or legal advice, but it helps decide where to focus effort and which evidence to prepare.
How often should we repeat it?
Every six to twelve months, and after major events such as a new product line, a new market or an acquisition. Compare scores per question, not only the total.
What score should we aim for?
Most manufacturers do well in the managed band for the regulations that apply to them. The optimised band mainly suits companies with many products, many markets or demanding customers.
Who should answer?
Have compliance, quality, engineering and purchasing each answer, then discuss differences. A single respondent may rate the program higher than it works in daily practice.
If your gaps are mostly data in different systems, Netray can help connect ERP, PLM and supplier data into a read-only compliance view.
Related Tools
New Product Introduction Compliance Gate Checklist
A gate review checklist covering market scope, standards, restricted substances, markings, technical file and post-market duties before a product is released.
Developer ToolsBOM Compliance Declaration Gap SQL Query Generator
Builds a SQL query and a summary query that list BOM components without a current compliance declaration for a chosen regulation.
Developer ToolsComponent Declaration Status Python Script Generator
Creates a standard-library Python script that reads a BOM export and a declarations export and writes a gap report CSV.
Compliance & ContractsProduct Safety and Conformity Marks by Country Reference
Lookup of regulatory and safety marks used in major markets, with the jurisdiction, what the mark shows and whether it is mandatory or voluntary.
More Compliance & Contracts tools
See all- SAP SoD Residual Risk Score Calculator
- SAP Firefighter ID Usage Review Log
- IBM i (AS/400) User Profile Access Review Worksheet
- SyteLine Security and User Access Audit Checklist
- Infor XA (MAPICS) User Access Review Worksheet
- China ERP Data Security and Compliance Assessment
- ERP Vendor Data Processing Agreement Outline
- GDPR ERP Data Migration Checklist
- EU Machinery Regulation 2023/1230 Readiness Checklist