Outsourced production, retained duties: who answers when someone else makes it

Market-facing duties tend to follow the brand

Whoever puts a product on a market under their own name is usually the party regulators approach about its safety, its labelling accuracy, its registration and any corrective action needed in the field. Outsourcing the production does not move that conversation to the plant. Brand owners occasionally assume a certificate held by their manufacturer covers them and discover otherwise when a market surveillance authority writes to the name on the box. The practical implication is that a brand owner needs its own technical understanding of the product rather than a folder of supplier assurances it has never examined.

Site-facing duties stay with whoever runs the building

Environmental permits, waste handling, emissions to air and water, machinery safety, worker protection, fire and chemical storage obligations attach to the operator of the premises. A brand owner cannot discharge them and generally cannot be held to them, but it can be damaged by them: an enforcement action closing a line, a serious injury reaching the press alongside your name, or a permit condition limiting the process your product depends on. That is why site compliance belongs in supplier selection and periodic review even though the legal duty is not yours.

The quality agreement is where the middle ground is settled

Between those zones sit specification ownership, incoming material approval, testing and release, deviation handling, complaint investigation, retained samples, record retention and access, and the crucial question of notification before anything changes. In regulated sectors a written technical or quality agreement, separate from the commercial contract, records who does what for each of these. Where none exists, the default is discovered during an incident: the brand owner asks for batch records and learns they were destroyed, or that a material substitution was made without notice because nothing said otherwise. Revisit it as volumes grow, since arrangements written for a pilot rarely survive full production unchanged.

Change control is the clause that earns its keep

The most damaging surprises in outsourced production are changes the manufacturer considered routine: a new resin grade, a different plating supplier, a second site brought online for capacity, a subcontracted operation, a tooling repair that alters a dimension. Each can affect regulatory status, certification scope, customer approvals or declared characteristics. A change notification clause with a defined lead time, a list of what counts as notifiable and a right to withhold agreement is worth more than any audit right, because it operates before the product ships rather than after. Its value still depends on somebody reading the notifications when they arrive.

What outsourcing does not transfer at all

Liability towards purchasers and users of the product, the duty to act if it turns out to be unsafe, and reputational exposure remain with the party that sold it, whatever the supply contract says between the two companies. Indemnities allocate cost between the parties; they do not change who the authority or the injured customer approaches, and they are only as good as the manufacturer's ability to pay. Because the allocation of statutory duties varies by product regime and territory, get the specific position confirmed by counsel before relying on a contractual arrangement.

Frequently asked questions

Our manufacturer holds the certifications. Is that enough for our customers?

It covers their production activity within the scope written on their certificate, which is not the same as covering your product or your business. Customers auditing you will ask about your own controls: how you specify, how you approve changes, how you handle complaints, and what you do to verify the manufacturer. Relying entirely on a supplier's certificate leaves you unable to answer any of that, and in regulated sectors it can leave a gap the authority regards as yours.

Can we require the manufacturer to keep records for us?

You can agree it, and you should specify what is retained, for how long, in what form, how you get access and what happens if the relationship ends or the company is sold. The risk people overlook is discontinuity: a manufacturer that closes, changes owner or migrates systems may lose the ability to produce records long before the retention period you assumed has run. Where records matter to your own obligations, consider holding copies rather than relying on access rights alone.

Should the brand owner audit the manufacturing site or rely on certificates?

Certificates and third-party audit reports are useful inputs but they were commissioned to answer someone else's questions. A visit focused on your product — the actual line, the material controls, the records for your batches, the people who run it — tells you things no report will. In regulated sectors, periodic assessment of an outsourced manufacturer is typically expected of the party responsible for the product, so the question is usually depth and frequency rather than whether to look.