Vape Supplier Due Diligence 2026: The 25-Point Checklist Before You Place an Order

Most vape sourcing failures are not caused by bad products. They are caused by a gap between what a supplier says and what a supplier can prove. A container is seized because the paperwork described something else. A retailer is delisted because the test report belonged to a different hardware revision. A distributor pays a deposit to a company that turns out to be a trading shell with no factory. All of these are preventable with a structured due-diligence process done before the purchase order.

This guide gives buyers, distributors and brand owners a practical method: what to ask for, how to read what comes back, which red flags matter, and how to turn all of it into a simple go / hold / no-go decision. It also works in reverse — suppliers who want to win serious buyers can use it as a checklist for what to have ready.

Scope note. This is a general-purpose commercial checklist, not legal advice. Which documents are legally required depends on the destination market; use the market-specific guides linked below alongside it.

1. Why due diligence matters more in vaping than in most categories

Three features of this industry raise the cost of a bad supplier:

• Regulation is product-level. In many markets the product itself must be notified, registered or authorised. If the supplier cannot produce the underlying documents, you cannot lawfully sell it, however good the samples are.
• The cost of failure is asymmetric. A seizure, a recall or a delisting costs far more than the margin on the order, and it lands on the buyer or importer of record.
• The market is full of intermediaries. Many "factories" are trading companies, and many trading companies buy from several factories that are not equivalent. The entity that signs the contract may have no control over what is put in the box.

2. The five questions behind every check

Everything below answers one of five questions:

1. Who are they? (Legal identity, ownership, premises.)
2. Can they make it? (Real production capability and quality control.)
3. Is the product what they say it is? (Specification, testing, consistency.)
4. Can it be sold where I want to sell it? (Market-specific compliance.)
5. What happens when something goes wrong? (Contract, liability, traceability.)

3. Layer 1 — Identity: who are you actually dealing with?

Check	What to request	What good looks like
Legal entity	Business licence (original scan), registered name, unified social credit code (China)	Name matches contract, invoice and bank account exactly
Ownership	Company registry extract; directors / legal representative	Stable record, not newly incorporated, no recent unexplained name changes
Premises	Address, video call walk-through, utility bill or lease if needed	Real production floor consistent with claimed capacity
Role	Written statement: manufacturer, OEM brand owner or trader	Honest answer; traders are acceptable if they disclose it
Bank account	Corporate account in the contracting entity's name	No payment requested to a personal account or a third party

Rule of thumb: if the name on the contract, the name on the invoice and the name on the bank account are not identical, stop.

4. Layer 2 — Capability: can they really produce this?

• Production evidence. A live video of the actual line running your product category, not a stock factory tour.
• Capacity vs. promise. Compare claimed monthly output to headcount, number of lines and tooling. Wildly inflated claims indicate subcontracting.
• Quality system. Request a quality manual or at least evidence of incoming inspection, in-process checks and final inspection (AQL level, sampling plan).
• Component sourcing. Ask who makes the battery cell, the coil, the PCB and the liquid. A supplier who cannot name them probably does not control them. This connects directly to the risks described in our battery compliance guide.
• Subcontracting. Is any step outsourced? If so, to whom, and are they covered by the same quality agreement?

5. Layer 3 — Product proof: specification, testing and consistency

This is where most disputes begin. The key principle: evidence must match the exact SKU, including hardware revision, liquid formulation and packaging.

Document	Why it matters	Common failure
Technical specification sheet	Fixes what you are buying	Marketing copy instead of specification
Ingredient list (per flavour and strength)	Needed for notification and labelling	Single list for all flavours
Test reports (emissions, heavy metals, nicotine content as applicable)	Evidence for regulators and retailers	Report is for an earlier revision, a different flavour or an unaccredited lab
Battery safety documentation (e.g. cell certification, transport test summary)	Transport and consumer-safety compliance	Cell supplier unidentified
Child-resistance / tamper evidence documentation where required	Market-specific legal requirement	Claimed, not tested
Packaging artwork with revision number	Must match what is notified or registered	Artwork changed after approval
Batch records and traceability scheme	Recalls and complaint handling	Batch code exists but does not map to records

How to read a test report. Check (a) the laboratory's name and accreditation, (b) the sample description and date, (c) whether the product name and revision match your SKU, (d) the method standard referenced and (e) whether the report lists limits and results or only a pass/fail stamp. A one-page "pass" certificate with no data is a red flag.

6. Layer 4 — Market compliance: can it be sold where you want?

Product proof is necessary but not sufficient; each market adds its own gate.

• EU: product notification, ingredient and emissions data, plus battery and waste rules — see our EU TPD3 guide.
• UK: notification, duty and, from 2025, the disposable ban — see the UK duty guide.
• US: authorisation is the gate; a supplier without an authorised product (or a credible route) is a legal risk — see PMTA economics.
• New Zealand: notification and product architecture — see our New Zealand guide.
• Japan: the nicotine-free hardware / heated-tobacco split — see the Japan analysis.
• Southeast Asia: mostly prohibition; verify country by country — see our regional analysis.

Then ask the supplier to state in writing which of these markets the specific SKU has actually been sold in, and to provide the corresponding evidence. A supplier who says "we sell to the whole world" without specifics is describing an aspiration, not a track record.

7. Layer 5 — Contract, payment and logistics

• Contract. Specification attached as an appendix; quality acceptance criteria; remedies for non-conformity; clear responsibility for customs classification and seizure risk.
• Payment structure. Avoid 100% prepayment to a new supplier. Staged payments tied to samples, pre-shipment inspection and shipping documents are standard.
• Pre-shipment inspection. Use an independent inspector for first orders; the cost is small compared with a rejected container.
• Samples vs. mass production. Specify that mass production must match the approved golden sample; keep a sealed retention sample.
• Customs and labelling. Product description, HS code, country of origin and labels must agree across invoice, packing list and packaging. Our logistics and HS-code guide explains the mechanics.
• Tax exposure. Know how the destination taxes the goods, since this affects landed cost — see tax structures.

8. The 25-point checklist

Score 2 = verified with evidence, 1 = claimed but not yet verified, 0 = missing or contradicted.

Identity (5)

1. Business licence matches contract entity
2. Company registry extract reviewed
3. Premises verified by video or visit
4. Role (factory / OEM / trader) disclosed honestly
5. Bank account in contracting entity's name

Capability (5) 6. Live production video for this product category 7. Capacity claim consistent with headcount and lines 8. Quality manual or documented inspection stages 9. Key component suppliers named (cell, coil, PCB, liquid) 10. Subcontracting disclosed and controlled

Product proof (8) 11. Technical specification for the exact SKU 12. Ingredient list per flavour and strength 13. Test reports from a named, accredited lab 14. Reports match hardware revision and formulation 15. Battery safety documentation 16. Child-resistance / tamper evidence where required 17. Packaging artwork with revision control 18. Batch traceability scheme works in a test lookup

Market compliance (4) 19. Written statement of markets where this SKU has sold 20. Evidence of notification / registration where claimed 21. Willingness to name a responsible entity for each target market 22. Awareness of current rules in the target market (ask a specific question and judge the answer)

Contract and logistics (3) 23. Specification and acceptance criteria in contract 24. Staged payment accepted 25. Customs description consistent across all documents

Scoring. Maximum 50. Above 40 with no zeros in Identity or Product proof: proceed to trial order. 30–40: hold and close the gaps. Below 30, or any zero on items 1, 5, 14 or 25: no-go until resolved.

9. Red flags that justify walking away

• Refusal to show the factory or to do a live video call.
• Price far below every comparable quote, especially for compliant, rechargeable, refillable products.
• Pressure to pay quickly or to a different entity than the contract party.
• Test reports with no laboratory details, inconsistent dates or edited-looking formatting.
• "We handle customs, don't worry." Responsibility cannot be transferred by assurance.
• A supplier who is vague about which product architecture is allowed where. If they cannot explain it, they cannot comply with it.
• Different people give different answers to the same technical question.

10. Running due diligence efficiently

• Standardise. Send the same document request to every candidate so results are comparable.
• Start with the cheapest filters. Identity and bank-account checks cost nothing and eliminate many candidates.
• Verify one thing independently. Pick a single claim — a certificate number, a lab name, a customer reference — and confirm it with the third party directly.
• Re-check periodically. Hardware revisions, formulations and regulations change; due diligence is a cycle, not an event.
• Keep the file. In a dispute or an audit, the documented process is your defence.

11. For suppliers: what to have ready

If you are on the other side of this process, the checklist above is your sales kit. A supplier who can hand over a complete, consistent document set in one email wins faster, negotiates better and loses less to price competition. Assemble it once per SKU, keep it version-controlled, and update it every time hardware, liquid or packaging changes.

12. Bottom line

Due diligence is not paperwork for its own sake; it is how you convert a supplier's claims into evidence you can rely on. Done well, it takes days, not weeks, and it is the cheapest risk control in the vape supply chain. Pair this guide with the market-entry checklist and the global regulation map, and you will know both whether the supplier is credible and whether the market is open.