Factory monitoring protocol for German mid-market retailer sourcing Bangladesh
In brief: An annual BSCI certificate is not LkSG monitoring. BAFA does not read a January audit when it asks what happened in June. LkSG requires a risk-management system that operates all year — risk analysis, preventive measures, remedial action — with evidence between audit dates.
5 inputs
Per quarter, per factory
Bank, wages, capacity, utilities, subcontracting — documented every quarter.
1 / year
BSCI snapshot
One day on the floor, extrapolated to 24 months. BAFA does not accept this as monitoring.
1,000+
LkSG threshold
Employees in Germany — the mid-market line that crossed in January 2024.
German mid-market retailers sourcing Bangladesh garments now sit inside LkSG. The Bundesamt für Wirtschaft und Ausfuhrkontrolle, BAFA, does not accept an annual BSCI certificate as supply chain monitoring. It accepts evidence that something was being watched in March, in June, in September. That requires a factory monitoring protocol Bangladesh sourcing partners actually run — not a certificate filed in January and forgotten. This is what mine looks like.
What LkSG actually asks a German mid-market retailer to produce?
Most German mid-market retailers I have onboarded since the January 2024 LkSG threshold dropped to 1,000 employees came in carrying the same documentation pack: a BSCI A or B audit for each Tier 1 factory dated within the year, and a signed supplier code of conduct. That is the compliance starter set. It is not what BAFA reviews against the law.
LkSG asks the brand to demonstrate a risk-management system that operates continuously — risk analysis, preventive measures, remedial action, complaints channel — and to publish an annual report covering it. The phrase that matters is risk-management system. A system runs all year. A certificate from January does not. I have read the LkSG annual reports that have been published since the act came into force in January 2023 for the largest companies. The ones BAFA has not pushed back on share one feature: they cite ongoing monitoring records between audit dates. The weak ones cite audit certificates and stop there. The German supply chain act documentation requirement sits in that gap.
Why the annual BSCI certificate fails the test?
The BSCI audit is a one-day inspection. The auditor walks the floor, reviews documents, interviews workers, scores the factory A through E. The score is valid for two years. Brands then file it and treat the factory as monitored.
It is not monitored. It was inspected on one day and the result was extrapolated to the rest of the year. I have written about why BSCI audit scores do not predict delivery — the same gap applies to LkSG. A factory can score A in January, lose its bank credit line in April, run on overtime in May to cover cash flow, and quietly subcontract in June to meet a deadline. The A score sits in the file. Nothing in the brand's compliance folder shows that any of this was being watched. When the BAFA report is due, the brand has a certificate, not a monitoring record. Those are not the same document.
What is the quarterly rhythm I run per active factory?
Every active factory in my buying house is monitored on a quarterly cycle across five inputs. Each input produces a document. Each document goes into the factory's monitoring file with a date and a signature.
First: bank solvency certificate from the factory's bank, refreshed every six months, with the credit facility confirmed active. Second: wage payment timing — date wages paid for each of the three preceding months. Healthy is by the 7th. Warning is the 15th. Serious is past the 20th. Third: capacity utilisation across the same three months. Healthy is 60 to 85 per cent. Above 95 means no buffer. Fourth: utility payment status — electricity and gas bills, current or overdue. Utility delay precedes delivery failure because utility providers tolerate late payment longer than fabric suppliers do. Fifth: subcontracting verification — unannounced midpoint factory visits with floor photographs of every order in production. The full Bengal Origin Co. financial vetting protocol sits underneath this rhythm.
What BAFA accepts as monitoring
Quarterly bank solvency certificate
Wage timing record, three months back
Capacity utilisation per month
Utility payment status, current or overdue
Midpoint inspection with floor photos
Quarterly risk note, dated and signed
Annual BSCI certificate, on its own
Supplier code of conduct, signed
Verbal assurance from the buying house
Last year's pre-shipment inspection
An email saying "all factories audited"
Self-declaration from the factory
What goes in the LkSG evidence file?
The brand's LkSG evidence file, for the Bangladesh portion of the supply chain, holds three things from me per quarter per factory.
A monitoring summary — the five inputs above, green, amber, or red, signed and dated. A supporting document pack — the bank certificate, the wage timing record, the production reports, the utility status confirmation, the midpoint inspection photographs. A risk note — what changed since last quarter, what action was taken, what is being watched into the next quarter.
A brand can hand BAFA that file for January, March, June, September, December and the question what were you doing to monitor your Bangladesh supply chain in Q2? has an answer with documents attached. The certificate from January satisfies the audit requirement. The quarterly file satisfies the monitoring requirement. BAFA reads both differently.
When the monitoring catches something?
In Q2 of 2025 one of my factories shifted wage timing from the 7th to the 19th across two consecutive months while capacity utilisation pushed to 97 per cent. The BSCI certificate was current, A-grade. The bank certificate was current. The monitoring file showed the change before the brand did.
I moved the brand's open order to the designated backup factory at 30 per cent completion, with the original factory absorbing the transfer cost under the written subcontracting prohibition clause in our service agreement. Delivery slipped by eleven days, no quality issue, no compliance issue, no LkSG exposure for the brand. The wage-timing signal is what gave us the eleven-day window instead of a missed shipment. The brand's LkSG report for that year cited the incident with documentation as evidence of remedial action working. BAFA does not see that often.
What This Means for European Brands
If you are a German mid-market retailer Bangladesh buying house relationship, ask one question of your current sourcing partner: show me what you would put in the LkSG evidence file for Q2. Not the audit certificate — the monitoring file.
Most cannot produce one. Most have never been asked. The first LkSG annual report deadline for the new mid-market threshold is approaching, and the gap between having a compliance certificate and having a defensible monitoring record is where the BAFA risk sits. The protocol takes weeks to stand up, not months. It needs to be in place before the reporting period closes, not when the report is due.
If your first LkSG report is due this year and your Bangladesh documentation is still a folder of audit certificates, the gap is real and the calendar is short. Further reading on the documentation requirement and the underlying financial vetting protocol is published at bengalorigin.co/sourcing-intelligence/.
If your first LkSG report is approaching and your Bangladesh supply chain monitoring file is thinner than the audit folder, I am happy to walk through what the quarterly protocol looks like in practice.
Talk through your setup →