A supplier list is not evidence of control. When procurement teams, language service providers, and institutional buyers validate translation suppliers, they need to establish whether a provider can consistently meet defined service, competence, confidentiality, security, and delivery requirements. This distinction matters in tenders, regulated assignments, public-sector procurement, and ISO certification audits, where unsupported claims of supplier approval can be challenged.

Supplier validation should therefore be treated as a controlled qualification process, not as a one-time commercial decision. The objective is to create sufficient, current, and traceable evidence that a supplier is suitable for the scope of work assigned and is being monitored after approval.

Why supplier validation is an audit issue

For a language service provider, external translators, revisers, subject-matter reviewers, interpreters, desktop publishing providers, and technology partners may all affect the conformity of the final service. An organization cannot demonstrate effective quality management if it relies on external resources without knowing whether those resources meet its own documented requirements.

ISO 17100 places particular attention on the competence of personnel performing translation and revision activities. Where these activities are performed by external providers, the language service provider remains accountable for ensuring that the required competence, qualifications, and experience are available. Supplier validation is therefore closely connected to resource management, project management, documented information, and quality assurance.

For buyers of translation services, the same principle applies from a procurement perspective. A translation supplier may hold certification, present a strong proposal, or have an established market reputation. These factors can inform selection, but they do not replace a documented assessment of whether the supplier is appropriate for the buyer’s languages, subject fields, security environment, volume requirements, and contractual obligations.

Define what must be validated before reviewing suppliers

Validation starts with defined acceptance criteria. Without them, supplier approval becomes subjective and difficult to defend. The organization should identify what is necessary for the intended service scope before collecting evidence from candidates.

The criteria should reflect the actual risk of the work. A supplier supporting general marketing content may require a different level of review than a provider handling clinical documentation, legal evidence, financial disclosures, defense-related material, or personal data. Higher-risk assignments typically require more detailed verification, more stringent confidentiality controls, and closer ongoing monitoring.

For translation suppliers, the qualification criteria commonly cover language combinations, domain competence, translator and reviser competence, documented quality processes, capacity, technology compatibility, information security, confidentiality, and complaint handling. Where machine translation post-editing is within scope, the organization should also consider controls aligned with ISO 18587, including the competence of post-editors and the suitability of the workflow.

A practical qualification procedure should state who may approve suppliers, what evidence is required, what conditions result in conditional approval, and when re-evaluation is due. It should also distinguish between individual linguists, translation companies, interpreting agencies, and specialist subcontractors. Applying identical controls to every supplier category can create unnecessary administration or leave material risks insufficiently addressed.

How to validate translation suppliers with objective evidence

A defensible process normally combines document review, capability assessment, risk evaluation, and performance-based confirmation. A questionnaire alone is rarely sufficient, particularly where the supplier will perform critical translation, revision, interpretation, or post-editing activities.

Verify legal, commercial, and contractual suitability

The initial review should confirm the supplier’s legal identity, contractual authority, invoicing details, insurance requirements where relevant, and acceptance of confidentiality and data-processing obligations. For institutional buyers, this may also include conflict-of-interest declarations, sanctions screening, business continuity arrangements, and subcontracting controls.

The contract should define the service scope and make clear whether subcontracting is permitted. If a translation supplier uses external linguists, the buyer or contracting language service provider needs assurance that equivalent confidentiality, competence, and quality requirements flow down through the supply chain. A supplier cannot be treated as controlled merely because it has signed a general non-disclosure agreement.

Assess competence against the assigned scope

Competence assessment should be specific. A résumé stating that a linguist is experienced is not, by itself, a sufficient basis for approval. The organization should verify relevant education, professional qualifications, years of translation or domain experience, language combinations, prior work in the subject field, and evidence of revision competence where revision is required.

Under an ISO 17100-aligned approach, translator and reviser competence should be assessed against defined professional competence requirements. The organization should retain records demonstrating how it determined that each person was suitable. This may include qualification documents, tested work samples, references, documented experience, or an evaluated trial assignment.

Trial translations can be useful, but they should not become the only control. A short test may not reveal whether the supplier can manage terminology, follow client instructions, maintain consistency over large volumes, protect confidential data, or deliver under agreed project conditions. Test results should be evaluated using documented criteria and reviewed by competent assessors.

Review the supplier’s operating controls

For company-level suppliers, examine how translation projects are planned, assigned, reviewed, corrected, and closed. Relevant evidence may include process descriptions, competence records, quality objectives, corrective action records, complaint procedures, and examples of project documentation with sensitive information removed.

Certification to ISO 17100 or another recognized standard can provide useful external assurance. However, certification should be reviewed carefully. Confirm the certificate’s validity, issuing body, scope, locations or legal entities covered, and whether the certified scope actually includes the services being purchased. A certificate does not automatically prove that every language combination, specialist field, or subcontractor is suitable for a particular assignment.

Where interpreting services are included, the evaluation should address interpreter selection, assignment conditions, briefing requirements, and records of relevant professional competence. ISO 23155 provides a useful framework for community interpreting services and may be especially relevant where institutions require structured controls for vulnerable service users or public-facing assignments.

Apply a risk-based approval decision

Not every supplier should receive the same approval status. A controlled register can classify suppliers as approved, conditionally approved, restricted, suspended, or disqualified. The status should be linked to the services, language pairs, subject areas, and limitations for which the supplier has been evaluated.

Conditional approval may be appropriate when a supplier has demonstrated basic suitability but requires monitored performance before full approval. For example, a new supplier may be restricted to non-critical work, one language combination, or projects subject to enhanced revision. This is often more proportionate than either rejecting a potentially capable supplier or approving them without sufficient operational evidence.

The approval record should identify the decision-maker, approval date, supporting evidence reviewed, risk rating, applicable restrictions, and re-evaluation date. This record is particularly valuable during an audit because it demonstrates that supplier selection was based on controlled criteria rather than informal judgment.

Monitor suppliers after approval

Initial qualification is only the beginning. A supplier who met requirements two years ago may no longer have the same resources, security controls, availability, or quality performance. Ongoing monitoring confirms whether approved status remains justified.

Performance indicators should be relevant to the supplier’s role. Translation providers may be assessed on quality findings, revision results, delivery performance, responsiveness, compliance with instructions, complaint frequency, confidentiality incidents, and corrective action effectiveness. Interpreting suppliers may require additional measures related to attendance, assignment fulfillment, professional conduct, and client feedback.

The monitoring method should avoid false precision. A single minor error does not necessarily indicate supplier failure, while a consistent pattern of terminology defects, missed deadlines, or unaddressed complaints may require action even if average scores appear acceptable. Quality managers should review trends, severity, and the effectiveness of corrective actions.

Supplier re-evaluation intervals should be risk-based. Critical suppliers may require annual review or review after major incidents. Lower-risk suppliers may be assessed less frequently, provided performance records remain satisfactory. A significant change in ownership, key personnel, systems, certification status, data-processing arrangements, or subcontracting practices should trigger an earlier review.

Prepare evidence that can withstand a tender or audit

The central test is simple: can the organization show how it selected, approved, controlled, and re-evaluated the supplier? Evidence should be organized so that a procurement evaluator or certification auditor can follow the decision trail without relying on verbal explanation.

A complete supplier file will normally include the qualification criteria, completed assessment, competence evidence, contractual documents, risk assessment, approval decision, performance records, re-evaluation results, and records of corrective actions or restrictions. The depth of the file should be proportionate to the risk and scope of supplied services.

Organizations seeking ISO 17100 certification should integrate supplier validation into the wider management system rather than maintaining it as a separate procurement exercise. Internal audits should test whether personnel use only approved suppliers, whether approvals match the services assigned, and whether performance concerns lead to timely action. This is where documented procedures become operational proof.

Effective supplier validation does not eliminate all delivery risk. It establishes that risk is identified, assessed, controlled, and reviewed using evidence. When a client, tender authority, or auditor asks why a translation supplier was trusted with critical work, the organization should be able to provide a clear and documented answer.