| ISO 9001 Quality Management System | Shows that the factory operates a documented quality-management system based on controlled processes, risk management, corrective action, and continual improvement. | Valid certificate, certification scope, covered site address, issuing certification body, audit dates, quality manual, internal-audit records, and corrective-action reports. | Check the certificate directly with the certification body or its public certificate database. Confirm that the actual production site and smart-lock activities are within scope. | Certificate is valid, site-specific, within its surveillance cycle, and supported by current production records rather than only a framed certificate. | Certificate belongs to another facility, expired certificate, vague scope, unverifiable issuer, or no evidence of corrective-action follow-up. |
| CE Compliance for the European Economic Area | Indicates that the responsible economic operator has declared conformity with applicable European Union requirements for the specific product configuration. | EU Declaration of Conformity, technical file index, applicable directives or regulations, risk assessment, test reports, product labeling, and user instructions. | Match the model number, hardware revision, radio module, power supply, and factory address across the declaration, test reports, label, and supplied product. | For wireless smart locks, verify applicability of the Radio Equipment Directive 2014/53/EU; also review EMC 2014/30/EU, RoHS 2011/65/EU, and other applicable legislation. | CE logo presented without a Declaration of Conformity, reports for a different model, missing radio-frequency assessment, or undocumented hardware changes. |
| FCC Part 15 Compliance | Addresses United States requirements for unintentional radiators and, where applicable, intentional radio transmitters such as Bluetooth, Wi-Fi, or other wireless interfaces. | FCC test report, FCC ID where required, equipment authorization details, antenna information, operating frequency, labeling, and user-manual statements. | Search the FCC equipment authorization database when an FCC ID applies. Confirm that the installed radio module, antenna, firmware, and enclosure match the tested configuration. | Test report identifies the exact product and radio configuration, includes applicable conducted and radiated emissions tests, and contains required compliance statements. | Generic “FCC approved” claims, missing FCC ID when one is required, unauthorized antenna substitution, or reports that cover only a different module. |
| RoHS Substance Control | Helps demonstrate restriction of specified hazardous substances in electrical and electronic equipment placed on applicable markets. | Material declarations, supplier RoHS declarations, homogeneous-material test reports, restricted-substance control procedure, and component-level records. | Review representative materials such as plastics, cable insulation, solder, coatings, batteries, circuit boards, and metal plating. Confirm testing laboratory identity and report traceability. | Evidence covers the current bill of materials and revision, not merely a product-level statement copied from an unrelated model. | Outdated reports, incomplete material coverage, no change-control process, or reliance on a supplier declaration with no supporting records. |
| IP Rating Under IEC 60529 | Describes the enclosure’s tested protection against solid foreign objects and water under defined laboratory conditions. | IP test report, test standard and edition, sample description, test sequence, pass/fail results, enclosure revision, gasket specification, and mounting orientation. | Compare the tested enclosure with the production design. Inspect seals, cable entries, battery doors, screw torque controls, and any openings created during installation. | The claimed code is supported by a report for the complete assembled product. For example, IP65 means dust-tight protection and protection against water jets; it does not automatically mean immersion protection. | IP code shown without a test report, component-only testing presented as product testing, or a claim that IP65 permits immersion. |
| Incoming Material Inspection | Confirms that critical parts such as locks, motors, sensors, batteries, PCBs, displays, and wireless modules are checked before assembly. | Incoming inspection plans, approved supplier list, sampling records, component specifications, nonconformance reports, and quarantine-area records. | Select recent lots and trace them from supplier delivery documents to inspection results and production release status. | Critical safety, power, and communication components have defined inspection criteria and documented lot traceability. | Unlabeled materials, mixed lots, no quarantine process, or visual inspection used as the only control for electronic components. |
| Production and Assembly Control | Shows that assembly parameters affecting reliability and security are controlled and repeatable. | Work instructions, torque settings, firmware-loading records, soldering controls, calibration certificates, line inspection records, and engineering-change notices. | Observe a live production line and verify whether operators use current instructions and whether tools requiring calibration are identified and controlled. | Every production revision has a controlled work instruction, defined critical parameters, operator training records, and documented change approval. | Handwritten undocumented adjustments, obsolete instructions, uncontrolled firmware, or critical torque and sealing operations without records. |
| Functional and Security Testing | Checks whether each finished smart lock performs its intended mechanical, electronic, and connectivity functions before shipment. | End-of-line test specification, test fixtures, access-control test records, motor-current limits, battery-voltage checks, app or gateway pairing tests, and failure analysis. | Review sampled production records and run independent tests covering locking, unlocking, emergency operation, low-battery behavior, reset, and wireless pairing. | Acceptance limits are written, test equipment is calibrated where applicable, failed units are segregated, and retest results are recorded. | Only cosmetic inspection, no low-battery or emergency-function test, shared passwords, or failed units returned to production without documented disposition. |
| Environmental and Reliability Testing | Provides evidence that the design can withstand expected temperature, humidity, mechanical operation, and transport conditions. | Reliability plan, cycle-test records, temperature and humidity test results, drop or vibration reports where relevant, battery endurance method, and failure investigation. | Confirm that test conditions reflect the intended market and installation environment. Check sample identification and post-test functional results. | Tests use defined conditions, sample quantities, duration, acceptance criteria, and product revisions; results are linked to corrective actions when failures occur. | Unspecified “lifetime test,” no test duration, no sample traceability, or reliability claims unsupported by controlled records. |
| Final Inspection and Traceability | Ensures shipped products can be linked to production lots, component batches, firmware versions, inspection results, and shipment records. | Serial-number rules, carton labels, final inspection reports, packing checklists, production traveler, firmware version records, and shipment release approval. | Select a finished unit and trace it backward to the assembly date, critical component lots, operator or line, test results, and applicable engineering revision. | A defined traceability path exists from finished product to critical materials and test records, with documented control of nonconforming products. | Serial numbers are duplicated, records cannot be retrieved, mixed firmware versions are shipped, or cartons lack model and revision information. |
| Post-Market and Corrective Action | Demonstrates that the manufacturer can analyze field failures, contain affected lots, and implement preventive improvements. | Complaint log, return-rate analysis, root-cause reports, corrective-action records, replacement policy, software-update process, and recall or field-notice procedure. | Review anonymized historical cases and confirm that corrective actions were verified for effectiveness and communicated to relevant production and service teams. | Issues are categorized, assigned an owner, investigated using a documented method, and closed only after effectiveness is confirmed. | No complaint trend analysis, repeated failures with no permanent action, or software and hardware changes released without regression testing. |