Compliance documentation for German mid-market retailer sourcing Bangladesh
In brief: BAFA does not accept a BSCI certificate as proof of supply chain due diligence — it accepts a documentation file most German mid-market brands have not yet built.
5 docs
Per Active Factory
BAFA looks for five recurring documents per factory, refreshed on a schedule.
1 of 5
Typical Gap
Most German mid-market setups have one of the five — usually the BSCI certificate.
6 months
Solvency Refresh
Bank solvency certificate must be dated within the last six months.
If you are a German mid-market retailer sourcing Bangladesh garments under LkSG, the question that matters is not whether your factory has a BSCI certificate. The question is what BAFA reads when it opens your file. I have spent the last eighteen months going through compliance documentation with German sourcing managers, and I can tell you what is missing. It is the same five documents, every time.
What BAFA Asks For Is Not What Most Brands Have?
LkSG entered force for companies with 1,000+ employees in Germany on 1 January 2024, and BAFA — the federal office for economic affairs and export control — is the enforcement body. BAFA explicitly does not accept an annual third-party audit as the documentation the law requires. The annual public report you file under §10 LkSG is read against operational records, not against an audit certificate.
The brands I speak to have the BSCI certificate. They have a code of conduct signed three years ago by someone at the factory whose name no one at the brand recognises. They do not have the per-factory monitoring file BAFA opens when there is a complaint, a press story, or a routine review. That gap is not a paperwork problem. It is the documentation BAFA reads as evidence that your due diligence is real or absent.
For the underlying question of why audit scores do not close this gap, the long version is in why BSCI audit scores do not predict delivery.
Why BSCI Alone Does Not Survive a BAFA Review?
BSCI is a point-in-time labour audit. It tells BAFA what was true on the day of the audit at one address. It does not tell BAFA whether the factory had its bank facility cut three months later, whether it subcontracted half the order to a non-audited site, or whether wages were paid on the 7th of the month or the 22nd.
The German Supply Chain Act requires ongoing monitoring, not annual confirmation. I cover the operational version of this in what mid-market brands must document under LkSG. The short version is: BAFA wants to see that you knew about a risk between audits and acted on it. A certificate dated April does not document anything that happened in July.
The LkSG compliance file BAFA actually reads
Bank solvency certificate within 6 months
Quarterly wage timing log per factory
Capacity utilisation declaration per quarter
Signed subcontracting prohibition per order
AQL 2.5 pre-shipment inspection report
Evidence of remedial action when an indicator slips
Annual BSCI audit certificate
A signed code of conduct, undated
An email from the buying house saying 'all good'
A factory profile PDF with no dates
A Sedex membership number, no SMETA report
Photographs of the factory exterior
What is the Five Documents BAFA Actually Reads?
This is the file I now build for every German mid-market retailer working with us. Five documents per active factory. Refreshed on a schedule.
One — bank solvency certificate dated within six months. This is the formal document from the factory's bank confirming an active working capital facility. In Bangladesh, factories operate on back-to-back letters of credit, not own cash. Without this certificate, you do not know the factory can finance the next order. We require it before any order and refresh it every six months. The underlying mechanics are in how Bangladesh factory financing works.
Two — quarterly wage timing log. Wages paid by the 7th of the month is healthy. Delayed to the 15th is a warning. Beyond the 20th is a serious financial indicator. BAFA reads this as evidence you are monitoring labour conditions between audits, not just on audit day.
Three — capacity utilisation declaration per quarter. Healthy range is 60-85%. Above 95% means there is no buffer, which is when subcontracting risk spikes. A factory running at 110% of stated capacity is moving work somewhere else. The declaration documents that you asked the question.
Four — signed subcontracting prohibition per order. Written, not verbal. Attached to both the purchase order and the service agreement. I did not have this in 2022 when a factory partner lost its bank financing and quietly moved my clients' work to cover its losses. The understanding was verbal. A verbal understanding, under financial pressure, is worth nothing. The full account is at the 2022 supply chain failure that built Bengal Origin Co..
Five — AQL 2.5 pre-shipment inspection report. Conducted by SGS, Bureau Veritas, or Intertek. Never by the factory. Report within 24 hours of completion. This is the closing document on the order and the one that confirms what shipped matches what was specified.
Why the Buying House Sits in LkSG Scope?
Under LkSG, the buying house is the direct supplier. The factory is the indirect supplier — what the law calls a Tier 2 supplier. Risk analysis, preventive measures, and remedial action all flow through the buying house. If the buying house does not produce the five documents, the retailer is exposed.
Most German mid-market brands sourcing Bangladesh do so through a buying house. The question I am asked most often by German sourcing managers is whether their current setup satisfies LkSG. The honest answer is: it satisfies the contractual relationship requirement. It does not satisfy the operational monitoring requirement, which is where every gap I see now sits.
A buying house that says "we know the factories" is not providing due diligence documentation. A buying house that provides five documents per active factory on a quarterly cycle is.
What This Means for European Brands
If you are a German mid-market retailer and you have not received a Bangladesh compliance file with these five documents in the last quarter, you do not have the monitoring records LkSG requires. The annual BSCI certificate is one of perhaps a dozen documents BAFA might look at — but on its own, it documents one audit day, not ongoing due diligence.
The fix is not more audits. The fix is the file. Five documents, per active factory, refreshed on a schedule, with dated evidence of remedial action when an indicator slips. That file is what closes the gap between the certificate you have and the documentation the law assumes you have.
Before your next quarterly review, pull one active factory's file and check it against the five. If four of the five are missing, you now know where the work is. Further reading on the underlying buying-house due diligence sits at how Bengal Origin Co. vets factories financially and across bengalorigin.co/sourcing-intelligence/.
If you are a German mid-market retailer and want to see what a five-document LkSG file actually looks like for one of your active Bangladesh factories, I am happy to walk you through it.
Request a Factory Credential Pack →