Validated Audit Process (VAP)

The Validated Audit Process (VAP) is the EICC's standard for effective, shareable audits.

Validated Audit Process (VAP)

One of the most fundamental programs the EICC provides to its members is the Validated Audit Process (VAP). Established in 2009, the VAP program has completed more than 1,000 audits, finalized its fifth audit protocol, and released its first comprehensive audit findings report. As the program has grown it has become more complex, with hundreds of auditors from nine firms executing the protocol in more than 20 countries. The current EICC VAP, version 5.0, was ratified in 2014 and went into effect on April 1, 2015.

Audit Guidance Documents

These documents are selected chapters from the 5.0 audit operations manual. Please note the entire audit operations manual is not publicly available. If you have any questions, please contact us.

More About VAP Audits

Audits carried out on EICC member facilities and their suppliers' facilities are completed by independent, third-party auditors specially trained in social and environmental auditing and the VAP audit protocol. The EICC offers trainings for auditors and corporate audit program managers in VAP audits. The trainings are run by internationally-recognized, non-profit supply chain sustainability group Verité at multi-day, in-person trainings that take place several times per year. Please see the EICC events calendar for a complete listing of these trainings.

A typical VAP audit at a single manufacturing facility may last 2-5 days and includes a thorough document review, interviews with management and employees and a visual site survey. Auditors are specially trained to spot hard-to-find audit protocol violations like instances of forced labor, and are specialists in understanding contexts where some violations are more common, such as excessive working hours in areas with high migrant worker populations.

VAP auditors’ reports must be submitted to the EICC Audit Program Manager for review and quality control. The EICC Audit Program Manager comes from leading social responsibility consulting firm Sumerra. Sumerra does not conduct their own audits but manages the VAP audit process, including overseeing quality control of VAP audit reports. 

Where VAP audits uncover non-compliances to the audit protocol, those findings are rated by severity as “minor,” “major” or “priority.” All three categories of findings have specified periods of time during which the facility in question must remedy the findings and implement systems to prevent reoccurrences. Remedy and prevention plans are part of corrective action plans (CAPs) as referenced above.

A key initial impetus for the founding of the EICC, and one of its continued benefits to its members today, is the practice of sharing audits. Many EICC members share common suppliers, and those suppliers also share common suppliers. Whenever a single EICC member audits its own or a supplier’s facility, the member can share the audit findings with other customers of that facility that are also EICC members. Sharing audits saved EICC members and their suppliers over $2 million in 2013, which not only creates business efficiency but also ensures that cost is less of a barrier for companies seeking to ensure that their and their suppliers’ facilities are living up to the EICC Code of Conduct and protecting workers and their communities.

Additional Resources


VAP introduction and overview

Assessment Tools

Self-assessment tools

Audit Resources

EICC Code of Conduct
Glossary and Frequently Asked Questions

Contractual Documents

Auditee Agreement
Authorized Recipient Attachment (Attachment B)
Agreement for Exchange of Confidential Information

Scheduling a VAP Audit

Please schedule the audit online via EICC-ON (in the "audits" section).
Don't have your EICC-ON login information? Contact us.

Translated Resources

To see what translations are available for EICC’s different tools, view this overview document.


EICC VAP Program Manager
VAP Audit Backup and Escalation
Invoicing: Steve Moloney