SMETA and BSCI Social Audits in Pakistan: What They Cover, What They Actually Miss, and What to Do About the Gaps

It also tells you less than you may assume. And the gap between what buyers assume SMETA tells them and what SMETA actually tells them is, for CSDDD compliance purposes and for actual supply chain social impact, consequential.

Let's be specific about what SMETA is, what it provides, what it doesn't, and what a more complete approach looks like.

What SMETA is and how it works

SMETA, the Sedex Members Ethical Trade Audit, is a social compliance audit framework developed by Sedex, a nonprofit organization that facilitates supply chain data sharing among its member companies. SMETA 4-pillar covers four areas: labor (including wages, working hours, forced labor, child labor, discrimination, freedom of association, and disciplinary practices), health and safety, environment, and business ethics.

Audits are conducted by SMETA-approved audit firms, third-party companies with trained auditors. The audit process typically involves one to two days at the facility. During that time, auditors review payroll records and employment contracts, walk the production floor to observe conditions, inspect fire safety equipment and records, assess chemical handling and storage, review environmental compliance documentation, and importantly, interview workers. Some SMETA protocols require off-site worker interviews specifically to allow workers to speak without management present.

The completed audit generates a report that goes into the Sedex platform. Member buyers can access this report when they add a supplier to their Sedex network. The report categorizes findings as critical (serious non-compliance requiring immediate action), major (significant non- compliance), minor (lower-level issues), or observations (areas for improvement).

BSCI, the Business Social Compliance Initiative now operated by Amfori, works similarly. It uses a supplier code of conduct and an audit framework conducted by Amfori-approved audit firms, with results stored in the Amfori platform. Both frameworks are legitimate. The auditors are professionals. The information produced is real. The structured approach to labor rights assessment has contributed to genuine improvements in working conditions at many supplier facilities.

Where the structural limitations are

The limitations of SMETA and BSCI aren't primarily about the quality of the auditing. They're structural limitations of what facility-level, point-in-time audits can see.

Limitation one: sub-contracting invisibility

A SMETA or BSCI audit covers the specific facility on the audit day. If that facility sub-contracts any of its production to another site, the sub-contracted facility is not covered by the audit. The workers producing your products at the sub-contractor's facility are invisible to your social compliance programme.

In Pakistan's garment sector, sub-contracting is common and often informal. It tends to increase at peak production periods, when a supplier's own facility is at capacity and they need to find additional production capacity quickly. During these peak periods, which are precisely when buyers need quick turnaround on large orders, the informal sub-contracting network tends to expand.

An audit conducted in the slower season at a facility that handles peak production through sub- contractors may find the facility fully compliant. That same facility's sub-contractor, handling 20% of the production during the audit period's corresponding peak season, may not be.

Limitation two: home-based worker invisibility

Pakistan has a significant home-based textile workforce, primarily engaged in hand embroidery, beadwork, and embellishment work. This work contributes to higher-value export garments, particularly in the ethnic wear, occasion wear, and lifestyle fashion segments. The workers doing this embellishment are, by definition, working in their homes. They are not in a factory. They don't appear on a factory's payroll as full-time employees. They don't appear in a SMETA audit.

The ILO estimates Pakistan's home-based worker population in the tens of millions. A significant share of this population works in textile-related activities. The informality of home- based work creates conditions where fair wages, reasonable working hours, safe working conditions, and freedom to decline work without penalty are hard to assure and harder to verify.

Limitation three: audit timing and preparation effects

The most sophisticated limitation of annual facility audits is what happens between audits. A supplier that knows when the audit is scheduled (which is common in pre-announced audit programmes) can prepare: cleaning up violations, coaching workers on what to say, ensuring that documentation that might not normally be kept current is updated before the auditor arrives. The audit snapshot shows a managed presentation of the facility rather than its typical operating condition.

Unannounced audits, where auditors arrive without advance notice, are more revealing precisely because the facility is showing its normal operating state. However, unannounced audits are more organizationally complex to coordinate and more disruptive to supplier relationships, which is why they're less common in standard programmes.

The frequency limitation compounds the timing problem. An annual audit provides 1 data point per year about a facility's labor conditions across 365 operating days. Worker surveys, grievance mechanisms, and continuous monitoring tools provide data across a much larger proportion of the actual operating period.

What the EU CSDDD actually requires beyond audit-based evidence

This is where the compliance gap becomes not just an ethical concern but a legal one for international buyers.

The EU's Corporate Sustainability Due Diligence Directive doesn't ask whether you have an audit. It asks whether you have identified and addressed actual and potential adverse human rights and environmental impacts in your value chain. The distinction between "have an audit" and "have identified and addressed impacts" is significant.

CSDDD Article 7 on preventing potential adverse impacts requires companies to take "appropriate measures to prevent potential adverse impacts." For a buyer sourcing from Pakistan, "appropriate measures" must be proportionate to the identified risk. At Tier 1 formal export factories: annual SMETA audits are appropriate measures, assuming the audit programme includes worker interviews, appropriate frequency, and follow-up on findings.

For the home-based embellishment workers and the sub-contracting network: annual Tier 1 audits are not appropriate measures for risks at those tiers, because those audits can't see those tiers.

CSDDD's recital language is instructive: it acknowledges that companies cannot be expected to conduct full due diligence through the entire supply chain at the same depth. It does require that companies exercise "influence" over higher-risk situations even where they don't have direct contractual relationships.

A buyer who knows their Tier 1 supplier uses home-based embellishment workers, has this documented in the supplier's sub-contractor disclosure form, and takes no specific steps to understand or address the working conditions for those workers has not exercised influence proportionate to the identified risk.

Building a more complete social compliance programme for Pakistan

Here's what "more complete" looks like in practice, built on SMETA as a foundation rather than a replacement for it.

Step one: mandatory sub-contractor and processing disclosure

Make it a contractual requirement, not a voluntary request, that every Tier 1 Pakistani supplier discloses in writing: all production sub-contractors, all wet processing facilities (dye houses and finishing mills), and all embellishment sub-contractors, including any home-based work programmes.

Update this disclosure semi-annually. Make changes in the sub-contractor network reportable within a specified timeframe (e.g., 30 days). Include penalties for undisclosed sub-contracting in the supplier agreement.

This doesn't solve the visibility problem immediately. But it creates a documented record of the supply chain structure and establishes contractual accountability for that structure.

Step two: SMETA extension to high-risk Tier 2 facilities

Not all sub-contractors and processing facilities need full SMETA audits. But wet processors (dye houses and finishing mills) typically warrant one, because chemical exposure, effluent discharge, and working conditions in chemical-intensive environments represent concentrated risk.

Building a rolling audit programme that includes Tier 2 wet processors as well as Tier 1 factories, on a 2-3 year audit cycle rather than annual, extends meaningful visibility to the highest-risk Tier 2 facilities.

Step three: worker voice mechanisms that work between audits

Worker hotlines, grievance reporting systems accessible by SMS or app (in Urdu and other local languages), and worker survey programmes conducted by independent third parties are all mechanisms that generate data between audit visits.

The Issara Institute and Labour Behind the Label are organizations that operate worker voice programmes in South Asia, including Pakistan. Some international brands have incorporated these tools into their Pakistan compliance programmes with measurable impact on early identification of issues.

Step four: Better Cotton for the fiber tier For the cotton farming tier of the supply chain, where child labor in cotton picking and bonded labor in certain agricultural contexts are documented concerns, the Better Cotton Initiative provides a third-party certification and training programme with farm-level monitoring.

Better Cotton certification doesn't eliminate all risk at the farming tier. But it creates a monitored framework with better practice guidance, farmer training, and third-party farm assessment that adds more assurance than no programme at all.

Step five: integrating social and environmental compliance data

The most advanced Pakistan compliance programmes connect social compliance data with environmental compliance data, because the risks are often correlated. A dye house with poor effluent management also tends to have poor chemical handling practices around workers. A facility with inadequate health and safety infrastructure for workers also tends to have inadequate chemical storage and emergency response infrastructure.

Connecting SMETA findings with ZDHC chemical compliance data and ClearStream effluent results gives a more complete picture of a facility's overall compliance culture than any single data stream provides.

The honest assessment of where most buyers are

Most buyers sourcing from Pakistan have a Tier 1 social audit programme. Most don't have Tier 2 visibility. Most don't have systematic home-based worker programmes. Most are using social audit compliance as their CSDDD documentation, when CSDDD requires a broader due diligence system.

This is an honest assessment, not a criticism. Building a more complete programme requires investment, supplier cooperation, and organizational will. The companies that have built more complete programmes typically did so either because a specific incident created urgency or because their ESG leadership recognized the gap and made the organizational case for investment before an incident.

The regulatory urgency created by CSDDD is now creating a third driver: legal compliance requirement. The window to build a more complete programme before CSDDD obligations fully bite is narrowing.

For social and environmental compliance support including ZDHC effluent testing and supplier sustainability documentation, contact Tti Labs at customerservices@ttilabs.net.