When a company moves production from a distant supplier to one in Mexico, or back into its own plant, the purchase order changes, the freight lane changes, and the cost model changes. The quality system is usually the last thing anyone checks, and in my experience it is where the move succeeds or quietly falls apart.
ISO 9001:2015 does not mention nearshoring or reshoring anywhere. It doesn't have to. The standard is written around control of change, control of externally provided processes, and risk, and a sourcing move touches all three at once. This guide walks through which clauses apply, what changes in practice for each type of move, and how to run the transition so your next surveillance audit is uneventful.
What Is the Difference Between Offshoring, Nearshoring, and Reshoring?
The terms get used loosely, so here is how I use them:
- Offshoring means production or services performed in a distant country, often across an ocean, usually chosen for unit cost.
- Nearshoring means moving that work to a geographically close country, typically in the same or adjacent time zones, such as Mexico or Canada for a U.S. buyer, or Eastern European and North African countries for Western European buyers.
- Reshoring (sometimes called onshoring or backshoring) means bringing the work back to the home country, either to your own facility or to a domestic supplier.
From a quality standpoint these are three different situations. Nearshoring is still an external provider relationship, so clause 8.4 stays at the center. Reshoring to your own plant converts an external process into an internal one, so clause 8.5 (production and service provision) takes over. Reshoring to a domestic supplier is a new supplier qualification with a shorter distance. Treating all three as "just a supplier change" is a common mistake.
Why Are Companies Nearshoring and Reshoring Now?
The drivers are mostly about risk, which is convenient, because risk is exactly what ISO 9001 asks you to plan for. Tariff exposure, freight volatility, long lead times, and the pandemic-era shortages all pushed buyers to reconsider long supply lines. The trade framework itself is also in motion: the USMCA entered into force on July 1, 2020, and its Article 34.7 provides for a joint review on the sixth anniversary, July 1, 2026. Check the current status of that review through official USTR or government sources before relying on any assumption about where the rules are heading.
I would not build a quality strategy on any one tariff or trade headline. Those change faster than a qualification cycle runs. What holds up is the discipline of treating each sourcing location as a risk you have analyzed and a process you have a plan to control. If you want a deeper look at how recent disruptions should shape that thinking, see our piece on supply chain resilience lessons from recent disruptions.
Which ISO 9001 Clauses Apply When You Change Where Work Gets Done?
A sourcing move is a planned change, and several clauses of ISO 9001:2015 bear on it directly.
Clause 4.1 (understanding the organization and its context). You must determine external and internal issues relevant to your purpose and strategic direction. Trade policy, supplier-country labor markets, and logistics reliability are external issues. ISO 9001:2015/Amd 1:2024 (published February 2024, with the matching IAF communiqué on the transition) added a note to 4.1 saying relevant issues can include climate change, and added a requirement in 4.2 to determine whether relevant interested parties have climate-related requirements. For a sourcing move, that can bear on freight modes, regional energy supply, and site exposure to weather.
Clause 6.1 (actions to address risks and opportunities). The standard requires you to plan actions for risks and opportunities, and to integrate and evaluate those actions within the QMS. A sourcing decision without a documented risk view is a gap an auditor can reasonably raise. Our guide to risk-based thinking in practice covers how to keep that proportionate.
Clause 6.3 (planning of changes). When you determine the need for changes to the QMS, those changes must be carried out in a planned manner, considering purpose, consequences, resource availability, and assignment of responsibilities. Moving a product line is the textbook case.
Clause 8.1 (operational planning and control). The last paragraph requires you to control planned changes and review the consequences of unintended ones, taking action to mitigate adverse effects. It also requires you to ensure that outsourced processes are controlled (see 8.4).
Clause 8.4 (control of externally provided processes, products, and services). This is the heart of nearshoring. Clause 8.4.1 requires criteria for evaluation, selection, monitoring of performance, and re-evaluation of external providers. Clause 8.4.2 requires that the type and extent of control be proportionate to the potential impact on your ability to deliver conforming products. Clause 8.4.3 requires you to communicate requirements to the provider, including approval of products, methods, processes, equipment, competence, and your intended verification activities at their premises.
Clause 8.5.6 (control of changes). You must review and control changes for production or service provision to the extent necessary to ensure continuing conformity, and retain documented information describing the results of the review, the people who authorized the change, and any necessary actions.
Clause 8.2.3 (review of requirements). If the new location changes what you can promise customers on lead time, price, or specification, the review of requirements for products and services has to reflect it. Note that 8.2.3 does not itself require customer approval of a location change; that usually comes from the contract or a sector standard.
The standard also says something that surprises people: it does not require you to treat a supplier in a nearby country differently from one in your own. Control is based on risk and impact, not geography. What geography changes is the likelihood of certain problems, and that is where your judgment comes in.
How Does Nearshoring Change Supplier Quality Requirements?
Nearshoring keeps you in clause 8.4 territory, but the mix of risks shifts. Shorter lanes reduce transit time and make on-site visits cheaper, which means you can verify more directly. They do not remove the need to qualify the supplier. A supplier that is a four-hour drive away can still ship nonconforming product, and a new supplier is a new supplier regardless of distance.
Here is how the control picture generally differs across the three moves:
| Quality consideration | Offshore (distant) | Nearshore | Reshore (in-house) |
|---|---|---|---|
| Primary governing clause | 8.4 external providers | 8.4 external providers | 8.5 production, with 8.4 for any remaining suppliers |
| On-site verification | Costly, infrequent, often remote | Practical, can be frequent | Direct, continuous |
| Transit and preservation (8.5.4) | Long exposure, packaging and climate risk | Shorter exposure, still needs packaging requirements | Reduced to internal handling |
| Change visibility (8.5.6) | Easy to lose sight of provider changes | Better, but needs contractual notice | Fully within your own change control |
| Competence and training (7.2) | Provider's responsibility, verified by you | Provider's responsibility, verified by you | Your responsibility, and often the biggest gap |
| Calibration and measurement traceability (7.1.5) | Verify provider's calibration records | Verify provider's calibration records | Your own equipment, your own records |
| Documentation language and format | Frequent translation issues | Smaller gap, but drawings, work instructions, and nonconformance reports may still need controlled translation | Typically consistent with your existing system |
| Typical audit focus | Evaluation and re-evaluation records | Qualification records and change notification | Process validation, competence, equipment |
The last row shows where the audit focus shifts between moves. An auditor looking at a nearshoring move will usually ask for your supplier evaluation and selection records, and an auditor looking at a reshoring move will ask how you validated the process and qualified the people.
What should a nearshore supplier qualification include?
At a minimum, I would expect the following, scaled to the risk of the product:
- A documented selection rationale under clause 8.4.1 that shows criteria, including quality system status, capability, capacity, and financial and geopolitical stability.
- A review of the supplier's own certification, if any. A valid ISO 9001 certificate from an accredited body is useful evidence but not a substitute for your own evaluation. Check the scope on the certificate against the process you are buying.
- An on-site audit or a documented reason for not doing one. The reduced travel burden of nearshoring is a real advantage here, so use it.
- First article or equivalent verification. In aerospace this is formalized as AS9102 first article inspection, and automotive programs use PPAP under AIAG requirements. These are sector or customer requirements, not ISO 9001 requirements. In a standard ISO 9001 environment, you define the equivalent in your purchasing information under clause 8.4.3.
- A written change-notification agreement. Clause 8.5.6 applies to your own changes, but your supplier's changes to materials, sub-tier sources, or process locations can destroy conformity without you knowing. Require notice in the contract.
- Defined performance metrics for the monitoring that clause 8.4.1 requires. The standard does not name specific metrics; common choices are on-time delivery, incoming defect rates, and corrective action response time.
For a fuller treatment of evaluation and incoming inspection, see our article on ISO 9001 purchasing controls, supplier evaluation, and incoming inspection.
How Does Reshoring to Your Own Facility Change the QMS?
Bringing production in-house moves a process from clause 8.4 to clauses 7 and 8.5, and that shift is bigger than it looks. When a supplier ran the process, you controlled it through requirements and verification. Now you own the work instructions, the equipment, the environment, the people, and the records.
The gaps tend to fall into a few areas.
Competence and organizational knowledge. Clause 7.2 requires you to determine necessary competence and ensure people are competent, and clause 7.1.6 requires you to determine the knowledge necessary to operate your processes. If the process was outsourced for years, your own team may not hold that knowledge. Tacit know-how often lives at the supplier. A transfer plan that captures process parameters, inspection methods, and known failure modes is worth more than any equipment purchase.
Process validation. Clause 8.5.1(f) requires validation, and revalidation, of the ability to achieve planned results for processes where the output cannot be verified by later monitoring or measurement. Special processes such as welding, heat treatment, sterilization, and certain coating or bonding operations fall here. A new in-house line needs validation before it ships product.
Equipment and measurement. Clause 7.1.3 covers infrastructure and 7.1.5 covers monitoring and measuring resources, including calibration traceability to international or national standards. New equipment brings new calibration obligations.
Scope of the management system. Clause 4.3 requires you to determine the scope of the QMS, and clause 8.3 may now apply if you take on design responsibility you did not hold before. If the in-house process adds design and development activity, the exclusion you previously justified may no longer hold. Review your scope statement and any claimed non-applicability.
Capacity of the system itself. A QMS built for a company that mostly managed suppliers may be thin on production control, nonconformance handling under clause 8.7, and internal audit coverage of the new process. Plan internal audits of the new line early, rather than waiting for the annual cycle. Our overview of internal audits explains how to set that up.
How Do You Run the Transition So Quality Does Not Slip?
The standard asks that planned changes be controlled, and in practice that means a project with quality gates. This is the sequence I recommend.
1. Document the context and risk assessment first
Before a purchase order or lease is signed, record the issues that drove the decision under clause 4.1 and the risks and opportunities under clause 6.1. Include quality-specific risks: knowledge loss, ramp-up defects, supplier capacity, regulatory differences, and customer approval requirements. This record is also your best answer when an auditor asks why you chose the location.
2. Check customer and regulatory requirements before you move
Many customer contracts require approval before production moves to a new location or supplier. Aerospace, automotive, medical device, and defense customers commonly do. Customer approval of a location move is mainly a contractual or sector requirement (for example AS9100 or IATF 16949 customer requirements), not something clause 8.2.3 or 8.4.3 mandates. Those clauses do require you to determine and meet customer requirements and communicate yours to providers, so the contract terms are what you need to check. If your products carry export-control obligations, moving work across borders adds a compliance layer that ISO 9001 does not address. Our article on ITAR compliance with ISO 9001 or AS9100 explains where the quality standard stops and the regulation takes over.
3. Run parallel production through a defined period
If you can, keep the old source active while the new one proves out. Define in advance what qualifies the new source: a set number of conforming lots, capability results, or a successful audit. Write down the exit criteria so the decision to cut over rests on data.
4. Tighten inspection temporarily
For the ramp-up period, raise incoming inspection or in-process checks on the new source and relax them as the record supports it. Clause 8.4.2 lets you scale control to impact, and a new source has a limited track record by definition.
5. Update documented information
Control of documented information under clause 7.5.3 applies to everything you revise: procedures, work instructions, approved supplier lists, purchasing specifications, and inspection plans. Retire the superseded ones so no one works from an old version. This sounds basic, and it is an easy item to miss after a transition.
6. Verify, then review in management review
Clause 9.3.2 lists inputs for management review, including the performance of external providers and the adequacy of resources. Put the sourcing change on the agenda and review the early data. If the results are poor, clause 10.2 requires you to react to the nonconformity and take corrective action, including determining root cause.
What Do Auditors Look for During a Sourcing Change?
From the audit chair, a sourcing change is a good place to sample because it touches so many clauses. Expect questions like these:
- Where is the documented risk assessment for the move?
- How did you select the new provider, and where are the criteria and records?
- How do you know the process was validated or the supplier qualified before shipment?
- What did you tell the supplier about your requirements, and how do you know they received them?
- Who authorized the change, and where is that recorded?
- How are you monitoring the new source's performance now?
If you can answer each of those with a record rather than a recollection, you are in good shape. For a catalog of findings that tend to appear, see the most common ISO 9001 audit nonconformities and how to avoid them.
What Mistakes Do Companies Make When Nearshoring?
A few patterns repeat in nearshoring:
- Assuming proximity equals control, and relaxing supplier oversight because the plant is a short drive away.
- Treating a supplier's ISO 9001 certificate as complete evidence and skipping your own evaluation.
- Failing to flow down requirements, so the supplier builds to a drawing that is two revisions old.
- Underestimating the cultural and language dimension of quality communication, which affects how nonconformances get reported and escalated.
- Leaving the change record incomplete, which becomes visible only when a customer complaint arrives and no one can say what changed.
The reverse mistakes show up in reshoring:
- Assuming that owning the process means the process is stable, when it is brand new to your team.
- Underinvesting in training.
- Forgetting that a process previously verified at the supplier's door now needs its own validation and monitoring plan.
How Should You Think About the Bigger Picture?
A nearshoring project forces you to write down what you actually require of a supplier, and a reshoring project forces you to find out what you know about your own process. Trade conditions will also keep shifting, so a company that qualified a single source under today's assumptions may need to move again. A QMS with a clean, repeatable process for evaluating providers and controlling changes makes the second move cheaper than the first. If you are mapping out your supplier controls, the supplier quality resources are a reasonable place to start, and the guide on outsourced process control covers who stays responsible when work leaves your building.
If your move is already underway, the question worth asking this week is simple: could you show an auditor, with records, why the new source was chosen and how you know it is working?
Last updated: 2026-11-10. Clause references are to ISO 9001:2015 as amended by Amd 1:2024.
Frequently Asked Questions
Does ISO 9001 have specific requirements for nearshoring or reshoring?
No. ISO 9001:2015 does not mention either term. The relevant requirements come from clause 6.1 (risks and opportunities), 6.3 (planning of changes), 8.4 (control of externally provided processes, products, and services), and 8.5.6 (control of changes). Control is based on risk and impact, not on geography.
Do I still need to audit a nearshore supplier if they hold ISO 9001 certification?
Clause 8.4.1 requires you to apply your own criteria for evaluation, selection, monitoring, and re-evaluation of external providers. A valid certificate from an accredited body is useful evidence, but you should confirm the certificate scope covers the process you are buying and decide whether an on-site audit is warranted based on risk.
What changes in the QMS when I reshore production to my own facility?
The process moves from clause 8.4 supplier control to clause 8.5 production control. You become responsible for competence (7.2), organizational knowledge (7.1.6), process validation (8.5.1), calibration (7.1.5), and possibly design responsibility under clause 8.3. Your QMS scope under clause 4.3 may also need review.
Which records will an auditor ask for after a sourcing change?
Typically the risk assessment for the change (6.1), the supplier selection and evaluation records (8.4.1), purchasing information sent to the provider (8.4.3), the authorization and review record for the change (8.5.6), and evidence of ongoing performance monitoring.
Do I need customer approval before moving production to a new country?
Often yes, depending on your contract and industry. Aerospace, automotive, medical device, and defense customers commonly require notice or approval before production moves. ISO 9001 clauses 8.2.3 and 8.4.3 require you to meet and communicate customer requirements, so check your contracts before the move.
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.