The Safety-Critical Parts Purchasing SOP

Purpose

This procedure makes sure every part whose failure can hurt somebody enters the shop through a channel that can answer for it: a supplier who knows where the lot came from, will take it back with evidence, and will pass on a recall. It also makes the unavoidable emergency buy visible, approved by a named person and documented well enough that the part can be traced and replaced if it turns out to be wrong. Without it, the shop's sourcing is whatever each tech did on a Friday night, and nobody finds out which jobs carry a marketplace breaker until one of them fails. Why the channel is part of the rating is owned elsewhere; see related: Provenance Is Part of the Rating.

Scope

Covers purchases of the categories on the shop's safety-critical list, by anyone, on any shop account or card, including parts a tech buys personally and expenses back.

Does not cover: parts the customer buys and hands you (see related: the library's customer-supplied part cards), what to do once a part is suspected counterfeit (see related: The Suspect Counterfeit Quarantine SOP), or general supplier relationships and pricing (see related: the library's vendor and supplier relationship cards). Non-critical parts follow the shop's normal purchasing and are not reviewed here.

Roles and responsibilities

Procedure

1. Keep the safety-critical list, by category. The list names the part categories where a counterfeit or wrong part can injure someone or start a fire, and it is reviewed quarterly. A common starting list: overcurrent devices (breakers, fuses), GFCI and AFCI devices, gas valves, regulators and appliance connectors, flame safeguard and ignition controls, temperature and pressure relief valves, refrigerant, respirators and other PPE, meters and test leads, fall protection, garage door springs and cables, smoke and CO alarms, and potable-water parts that must carry lead-free and drinking-water certification. Acceptance: a dated list signed by the owner within the last 3 months, each category naming at least one approved channel. Wrong looks like a category the shop installs weekly that is missing from the list; stop rule: any category added mid-quarter takes effect the day it is added, not at the next review. Hazard: none, desk work.

2. Approve suppliers per category, and verify the authorization. A supplier goes on the list for a category only when the shop has confirmed it is an authorized distributor for the brands it sells in that category, through the manufacturer's distributor locator or a letter from the manufacturer, recorded with the date. Acceptance: every supplier-category pair shows the verification source and a date within 12 months. Wrong looks like a supplier approved because "everyone uses them"; stop rule: an unverified pair is suspended for that category until verified, and open orders in it are moved to a verified supplier. Hazard: none, desk work. See related: Authorized Distributors and Why the Channel Matters.

3. Buy and receive through the list. Orders for listed categories go only to approved supplier-category pairs. Receiving checks each delivery against the order: part number, quantity, intact packaging, the listing or approval mark present, and the lot or date code written into the receiving log. Acceptance: every received line has a lot or date code logged, or "none printed" logged, which is itself a flag. Wrong looks like a delivery substituted with a different brand or a "none printed" line on a category that normally carries one; stop rule: that line is held unopened and goes to the purchasing lead before it reaches a shelf, and a substitution follows the backorder procedure (see related: How to Handle a Supplier Substitution on a Backorder). Hazard: refrigerant cylinders and spring sets are heavy and pressurized or tensioned; move cylinders upright on a cart with the valve cap on, and never cut the banding on a spring set except at the door with the hardware's instructions in hand.

4. Request an exception before an off-list buy, never after. When no approved channel can supply a listed part in time, the tech calls or texts the purchasing lead before buying, naming the part, the proposed source, the reason, and what happens to the customer if they wait. The purchasing lead may approve; the owner approves if the purchasing lead is the requester or cannot be reached within 30 minutes. A tech never approves his own exception. Acceptance: an exception record with an approval name and time that precedes the receipt time. Wrong looks like a receipt timestamped before the approval; stop rule: a part bought without prior approval goes straight to quarantine and is not installed, unless leaving it out leaves the customer in immediate danger, in which case the owner decides by phone and the call is logged. Hazard: none at the request; the danger that justifies an exception (no heat in a freeze, a failed relief valve) is named in the record so the urgency can be judged.

5. Document the emergency buy before it is installed. For an approved exception, the tech photographs the part's label, listing or approval mark, lot or date code and packaging, keeps the itemized receipt naming the seller, looks up the listing mark in the lab's online directory or the approval in the approving body's list, and records all of it on the job. Acceptance: photos, receipt and a lookup result ("found, matches" or "not found") attached to the job before install. Wrong looks like a lookup of "not found" or a receipt with no seller name; stop rule: "not found" means the part is not installed, and the job waits for an approved channel or a different part. Hazard: install carries its own trade isolation; for an overcurrent device, de-energize and prove dead on a known live source before and after, per NFPA 70E Article 120 (120.5 in the 2021 edition, renumbered in 2024), with work practices at 29 CFR 1910.333(b)(2), and on restoring stand to the side of the panel as the breaker closes.

6. Run the monthly review against the money, not the memory. On the first working week of the month, the purchasing lead pulls every shop card statement, account invoice and expense claim for the prior month, marks each listed-category line, and matches it to an approved pair or an exception record. Acceptance: every listed-category line resolves to "approved channel" or "exception, record #", and the count of each is written down. Wrong looks like a listed-category line with neither; stop rule: the part is located (shelf, truck or job) within 2 working days, treated as unverified, and if installed the job is listed for a decision by the owner. Hazard: none, desk work.

7. Act on what the review shows. Count exceptions by category and supplier. Two or more exceptions in one category in a month means the approved channel is not covering demand: add a second approved supplier or raise truck stock for that part. Any repeat off-list buy by the same person is a conversation, then a written warning under the shop's policy. Acceptance: the review summary lists each finding with an action and an owner, signed by the owner. Wrong looks like the same category flagged three months running; stop rule: a third consecutive month escalates to the owner as a stocking decision, not a purchasing one. Hazard: none, desk work.

The record this produces

Four records. The signed safety-critical list. The approved supplier list with each pair's verification source and date. The exception log: request time, requester, approver, approval time, part, source, reason, photos, receipt, lookup result, and the job it went into. The monthly review summary with its counts and actions. They are read by the purchasing lead every month, by the owner each quarter, by the quarantine owner when a lot goes bad, and by an insurer or investigator after a loss who wants to know where a part came from and who allowed it.

Worked pass: the October review

Step 6. The purchasing lead pulls October: 212 purchase lines across two supplier accounts, three shop cards and four expense claims. 61 lines fall in listed categories. 58 match approved supplier-category pairs. 2 match exception records. 1 matches nothing. 58 plus 2 plus 1 is 61.

The two exceptions:

• E-31. A 40-gallon tank's temperature and pressure relief valve failed on a Saturday; both approved suppliers closed. Request at 10:12, approved by the purchasing lead at 10:20, bought at a big-box store at 10:55. Photos, itemized receipt, and the valve's certification mark found in the certifier's directory, attached before install. Clean.
• E-32. Refrigerant for a no-cool call in a heat advisory, the approved supplier out of stock. Approved by the owner at 16:40 because the purchasing lead was the tech requesting it; bought at another HVAC counter. Directory and lot recorded. Clean.

Step 6 fails on the third line. A shop card shows a 20 A single-pole breaker bought from an online marketplace seller on October 18 by the tech on truck 3, with no exception record. The stop rule applies: the part is located within 2 working days. The tech confirms he installed it on October 19 replacing a failed breaker at a customer's subpanel, because the approved supplier did not carry that panel's breaker line and he did not want to leave the circuit off over a weekend. The job record has the panel photo but no lot, label or lookup.

The review runs on November 3, so the breaker has been in service for two weeks. The owner decides the same day: it is treated as unverified, and a tech returns on November 5 with a breaker of that panel's own line from an approved supplier, de-energizes and proves the subpanel dead on a known live source before and after, swaps it, and on restoring stands to the side as the main closes, then confirms the circuit's loads run and the new breaker's handle position matches its state. The removed breaker goes into quarantine under its own tag so the evidence file can determine what it was (see related: The Suspect Counterfeit Quarantine SOP).

Step 7. Findings: one off-list buy without approval (truck 3 tech, first instance, a conversation logged), and one gap in coverage: neither approved supplier stocks that subpanel's breaker line. Action: the purchasing lead verifies a third supplier as an authorized distributor for that line and adds it for overcurrent devices, and two of those breakers go onto truck stock. Exceptions by category: one relief valve, one refrigerant, so no category crossed the two-a-month trigger. The owner signs the summary.

References

• NFPA 70E Article 120 (120.5 in the 2021 edition, renumbered in 2024), and OSHA 29 CFR 1910.333(b)(2), for de-energizing at an overcurrent device swap
• See related: Authorized Distributors and Why the Channel Matters
• See related: How to Build a Trusted Supplier List for Safety-Critical Parts
• See related: The Price That Is Too Good