SMETA ethical audit and SEDEX consultant in Malaysia
Ethical trade & social complianceSMETA 2-pillar / 4-pillar
Prepare for the audit your retail or FMCG buyer actually asks for, not a certificate that does not exist.
What it is
SEDEX (Supplier Ethical Data Exchange) is a membership platform buyers and suppliers use to share ethical sourcing data, and SMETA (SEDEX Members Ethical Trade Audit) is the audit methodology conducted against it. SMETA is not a certification; it produces an audit report shared with registered buyers through SEDEX, covering either two pillars (labour, health & safety) or four pillars, adding environment and business ethics. Retailers and FMCG brands commonly require it of Malaysian suppliers as a condition of doing business, particularly where migrant labour is part of the workforce.
Who needs it in Malaysia
- Manufacturers and exporters supplying retail and FMCG buyers
- Suppliers to UK, EU, and multinational retail or FMCG buyers are commonly asked to register on SEDEX and complete a SMETA audit before an order is confirmed, making it a supply chain entry requirement rather than an optional add-on.
- Employers of migrant workers
- Factories and plantations employing migrant workers face particular scrutiny under SMETA's labour standards pillar, covering recruitment fees, passport retention, and freedom of movement, areas where Malaysian operations have drawn buyer and NGO attention.
- Companies with existing ISO 45001 or ISO 14001 systems
- Organisations already certified to ISO 45001 or ISO 14001 have much of the underlying evidence a SMETA audit needs, since the audit examines actual working conditions and records rather than a separate documented management system.
- Group entities audited across multiple sites
- Manufacturing groups with several factories often need a consistent SMETA approach across sites, since buyers compare audit findings site by site and inconsistent labour practices at one site can affect orders group-wide.
Our process
Pre-audit gap review against the SMETA checklist
We review your site against the SMETA 2-pillar or 4-pillar checklist your buyer specifies, covering labour standards, health and safety, and, where required, environment and business ethics, and hand over a dated, written action list.
Forced labour and recruitment fee due diligence
We review recruitment agency agreements, worker contracts, and passport handling practices against Malaysia's forced labour indicators, correcting recruitment fee and document retention issues before an auditor finds them.
Working hours and Employment Act alignment
Overtime records, rest day practice, and payroll are checked against the Employment Act 1955 as amended in 2022, since working hours findings are among the most common SMETA nonconformances in Malaysian facilities.
Health and safety, and environment and ethics where scoped
Workplace safety records, grievance mechanisms, and, for a 4-pillar scope, environmental permits and anti-corruption controls are reviewed and corrected ahead of the audit date.
SMETA audit day support
We prepare your management and workers for the site walkthrough, document review, and worker interviews an APSCA-affiliated auditor conducts, and help you respond to draft findings before the report is finalised on SEDEX.
Timeline
A single-site factory with reasonable existing labour practices typically completes SMETA preparation in six to ten weeks, since much of the work is corrective rather than building a new management system. Sites with recruitment fee, working hours, or documentation issues often need three to five months to correct root causes and gather evidence of sustained compliance before the audit.
What affects the cost
- Whether the audit is scoped 2-pillar or 4-pillar
- Number of sites and worker headcount per site
- Presence of migrant workers and recruitment agency relationships to review
- Auditor fees, quoted separately by the APSCA-affiliated audit firm your buyer accepts
- Extent of corrective action needed on working hours or recruitment fees
- Whether SEDEX membership registration is already in place
How BUKTI helps
- BUKTI keeps your working hours records, worker contracts, and recruitment fee documentation current, so missing evidence is never the finding a SMETA auditor raises.
- Corrective actions from a previous audit run through BUKTI's CAPA workflow, with closure evidence tracked automatically before the next audit cycle.
- Management review inputs, from grievance case status to overtime trends, are compiled in BUKTI so preparation starts with organised data instead of a scramble before the auditor arrives.
FAQ
Is SMETA a certification we can put on our website?
No. SMETA is an audit methodology, not a certification scheme, and there is no SMETA certificate to display. The audit produces a report shared with registered buyers through SEDEX; what you can say is that you have completed a SMETA audit, not that you are 'SMETA certified'.
What is the difference between SEDEX and SMETA?
SEDEX is the membership platform where ethical trade data is stored and shared between registered buyers and suppliers. SMETA is the audit methodology used to generate that data, conducted on site by an APSCA-affiliated auditor and uploaded to your SEDEX profile.
What is the difference between 2-pillar and 4-pillar SMETA?
2-pillar covers labour standards and health & safety. 4-pillar adds environment and business ethics. Your buyer specifies which scope they require; we confirm this with you before preparation begins so we build the right evidence.
How do the 2022 Employment Act amendments affect our audit?
The 2022 amendments changed maximum weekly working hours and related provisions. SMETA auditors check payroll and time records against current Employment Act requirements, so working hours nonconformances are common where overtime practice has not been updated to match.
How much does SMETA preparation cost?
Cost depends on whether the scope is 2-pillar or 4-pillar, site and headcount, and how much corrective action recruitment or working hours records need. Auditor fees are quoted separately by the audit firm; we give a written, fixed-scope quote for preparation after reviewing your site.
How often do we need to repeat the audit?
Buyers typically require a SMETA audit valid for one to two years, depending on the risk rating your previous audit received. BUKTI keeps the underlying records current between audits so the next cycle starts from a stronger position.
Related standards
Where we work
Perlis, Kedah, Penang, Perak, Selangor, Kuala Lumpur, Putrajaya, Negeri Sembilan, Melaka, Johor, Pahang, Terengganu, Kelantan, Sabah, Sarawak, Labuan. ISO consultants in every Malaysian state.
Ask about this standard
Buyer asking for a SMETA audit before your next order?
Tell us the pillar scope your buyer specified and your site headcount. We will scope a realistic preparation timeline.