Credential pack contents for German mid-market retailer sourcing Bangladesh
In brief: A BSCI certificate is one document in the pack. It is not the pack. BAFA, the brand's internal compliance team, and a CSDDD enforcement officer will all read the same file. If the only thing inside is an audit certificate, the answer to every ongoing-monitoring question is missing.
13
Documents Per Factory
What I keep on file before any German mid-market retailer asks.
48 hrs
Query Response
The window BAFA and internal compliance teams expect.
6 months
Refresh Cadence
Bank solvency, wage logs, and utility status do not survive longer.
A credential pack for a German mid-market retailer sourcing Bangladesh garments is not a folder of certificates. It is the file BAFA, the brand's internal compliance team, and a CSDDD enforcement officer will all read against the same questions. I keep thirteen documents per factory because that is what I would want to produce inside 48 hours of any of those queries — not the day after, not the week after.
What "credential pack" actually means under LkSG?
The Lieferkettensorgfaltspflichtengesetz has been in force since January 2023 for the largest German companies and January 2024 for the mid-market threshold of 1,000 employees in Germany. Most of the German mid-market retailer Bangladesh buying house relationships I see were built on BSCI audit certificates and a SMETA report. That was enough in 2019. It is not enough now. LkSG requires ongoing monitoring, preventive measures, remedial action, and an annual public report. The credential pack is the operational artefact that lets a brand answer "where is your evidence?" without having to ask the buying house to assemble one. A certificate is a moment in time. A pack is a system.
What is the thirteen documents I keep on every factory?
For each active factory in the Bengal Origin Co. network, the file contains: a bank solvency certificate dated within the last six months; a three-month wage payment log showing actual disbursement dates; a written capacity utilisation declaration; the current utility payment status for electricity and gas; BSCI corrective action records with closure evidence, not just the audit score; LEED facility documentation if the factory holds it; GOTS scope certificates if the factory holds them; the signed subcontracting prohibition for the active order; midpoint production floor photographs at the 50% completion mark; the pre-shipment AQL 2.5 inspection report from SGS, Bureau Veritas, or Intertek; REACH compliance for finishing — including separate facilities where finishing is subcontracted; the factory's grievance mechanism log; and the prior 12 months of remedial action evidence.
Why the audit certificate is one document, not the pack?
A BSCI A or B score, a SMETA 4-pillar, and a valid OEKO-TEX Standard 100 will tell a brand the factory passed a labour and chemical audit on the days the auditors were on site. That is useful. It is not what BAFA is going to ask. BAFA will ask what happened between those audit dates. The audit certificate cannot answer that. The wage payment log can — if wages slipped from the 7th of the month to the 15th to the 20th over three months, the financial stress was already visible. The grievance mechanism log can — if no cases were logged in twelve months, that is a flag, not a credit. I have written separately about why BSCI audit scores do not predict delivery, and the same logic applies to ongoing compliance: point-in-time is not monitoring.
Credential Pack vs Audit Certificate
Bank solvency certificate, under 6 months old
Three-month wage payment log
Capacity utilisation declaration
Utility payment status, quarterly
Signed subcontracting prohibition
12 months of remedial action evidence
Financial health between audit dates
Whether wages are being paid on time now
Whether work has been moved to another floor
Grievance cases raised since the audit
Whether finishing is REACH-documented
Whether corrective actions actually closed
How the pack maps to a BAFA query?
A BAFA officer's questions follow a predictable order. Who is the supplier. Who is the supplier's supplier. What risks have been identified. What preventive measures have been taken. What has happened when a risk materialised. The bank solvency certificate and capacity utilisation declaration answer the financial reliability question. The wage log and grievance mechanism log answer the labour rights question. The subcontracting prohibition and midpoint floor photographs answer the Tier 2 traceability question — which is also the question CSDDD asks of any Bangladesh sourcing partner. The REACH finishing documentation answers the chemicals question. The remedial action evidence answers the most important one: when something went wrong, what did you actually do.
What I learned about credential packs in 2022?
In 2022, a factory partner lost its bank financing mid-production and quietly subcontracted three orders to cover operational costs. The brands had a current BSCI certificate. They had a SMETA report. What they did not have, because I did not produce it, was a bank solvency certificate refreshed every six months, a written subcontracting prohibition that named penalties, or a wage payment log that would have shown disbursement dates slipping. The credential pack I describe above is not a theoretical document list. Every item in it exists because something it would have caught was missed. The 2022 case is documented in full in the supply chain failure that built Bengal Origin Co.. I do not separate the credential pack from that history because it is the history.
What This Means for European Brands
For a German mid-market retailer, the credential pack contents Bangladesh sourcing teams should expect are not negotiable any more — the LkSG annual report is public, and the gap between "we work with audited factories" and "here is the ongoing monitoring evidence" is the gap an enforcement officer will read. Ask your current buying house for the thirteen documents. If the bank solvency certificate is older than six months, if the wage log does not exist, if the subcontracting prohibition is verbal — those are not minor gaps. They are the gaps that turn into headlines. The pack should be on the brand's side of the file, not just the buying house's.
The standard I work to is that any of the thirteen documents can be produced for any active factory within 48 hours of request. If your current setup cannot meet that, the gap is operational, not philosophical. Further reading on the system behind the pack: how Bengal Origin Co. vets factories financially and the German Supply Chain Act documentation requirements for mid-market brands.
If you are a German mid-market retailer reviewing whether your current Bangladesh sourcing partner can produce the thirteen-document credential pack inside 48 hours, I am happy to discuss what closing that gap looks like in practice.
Request a Factory Credential Pack →