# VDA 6.3 Process Audits Explained: Structure, Scoring, and How to Prepare

> Learn how VDA 6.3 process audits work, what auditors evaluate, how scoring works, and how manufacturers can prepare with reliable process evidence.

VDA 6.3 audits assess whether automotive processes are consistently controlled and capable of meeting requirements. For suppliers, the challenge is not just following procedures but being able to demonstrate how processes perform with reliable evidence.

That evidence is often spread across machines, [PLCs](/landing/plc/), sensors, [MES platforms](/use-cases/mes/), and quality systems. FlowFuse can connect these production systems and bring operational data together, making it easier to access the evidence needed to monitor and demonstrate process performance.

This guide covers VDA 6.3 process elements, scoring, audit evidence, common findings, and how to prepare.

<cta-image alt="make process data easier to access during audits - book a demo" cta="demo" src="/blog/2026/08/images/vda-6-3.cta.png">



</cta-image>

## What VDA 6.3 audits

VDA 6.3 was developed by the Verband der Automobilindustrie (VDA) to evaluate process performance across the product and process lifecycle. The [VDA QMC](https://vda-qmc.de/en/education/vda-6-3-process-audit-at-a-glance-id-380/) describes it as a reference manual for conducting process audits across the automotive supply chain.

VDA 6.3 is different from [IATF 16949](https://www.iatfglobaloversight.org/). IATF 16949 focuses on the automotive quality management system, while VDA 6.3 examines whether a specific process is planned, controlled, and capable of producing the required output. VDA 6.5, by comparison, focuses on the product itself.

Auditors review documented procedures, inspect the production floor, question process owners, and compare records with actual conditions. Having IATF 16949 certification does not guarantee a strong VDA 6.3 result.

## When is VDA 6.3 used?

VDA 6.3 can be used at different stages of the supplier and production lifecycle. A potential supplier may be assessed before a contract is awarded, while established suppliers may be audited during product development or series production.

Process audits can also be triggered by major process changes, recurring quality problems, or customer requirements. The scope depends on the purpose of the audit, so an audit does not necessarily cover every process element from P1 to P7.

## The seven process elements

VDA 6.3 divides the audit into seven process elements:

<table>
<thead>
  <tr>
    <th>
      Element
    </th>
    
    <th>
      Name
    </th>
    
    <th>
      What it covers
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      P1
    </td>
    
    <td>
      Potential Analysis
    </td>
    
    <td>
      Capability of a prospective supplier before awarding work
    </td>
  </tr>
  
  <tr>
    <td>
      P2
    </td>
    
    <td>
      Project Management
    </td>
    
    <td>
      Planning, scheduling, and control of development projects
    </td>
  </tr>
  
  <tr>
    <td>
      P3
    </td>
    
    <td>
      Planning of Product and Process Development
    </td>
    
    <td>
      Requirements, feasibility, and risk analysis
    </td>
  </tr>
  
  <tr>
    <td>
      P4
    </td>
    
    <td>
      Carrying Out Product and Process Development
    </td>
    
    <td>
      Development, FMEA, validation, and release
    </td>
  </tr>
  
  <tr>
    <td>
      P5
    </td>
    
    <td>
      Supplier Management
    </td>
    
    <td>
      Selection, evaluation, and monitoring of sub-suppliers
    </td>
  </tr>
  
  <tr>
    <td>
      P6
    </td>
    
    <td>
      Process Analysis / Production
    </td>
    
    <td>
      Production inputs, controls, resources, and outputs
    </td>
  </tr>
  
  <tr>
    <td>
      P7
    </td>
    
    <td>
      Customer Care / Customer Satisfaction / Service
    </td>
    
    <td>
      Complaints, field performance, and corrective actions
    </td>
  </tr>
</tbody>
</table>

P1 is generally used when assessing a potential supplier or new location and is not scored with P2–P7. For established production, the audit typically covers P2–P7.

P6 focuses on the production process and examines six areas: process inputs, work carried out, personnel resources, material resources, effectiveness, and process outputs. These areas cover everything from incoming materials and process instructions to operator qualifications, equipment, process controls, and the quality of the finished output.

## How a VDA 6.3 audit works

A VDA 6.3 audit starts with preparation and definition of the audit scope. The auditor reviews relevant information and identifies the processes and personnel to be assessed.

Before the audit, potential process risks should be identified so they can be assessed during the audit. VDA 6.3 uses the **Turtle Model** as one way to structure this risk analysis. It examines what enters and leaves the process, how the work is performed, which personnel and resources support it, and how process effectiveness is measured. The model can be applied to different process elements, including P6.

![Turtle diagram for VDA 6.3 process audits, showing a central process surrounded by six questions covering input, output, resources used, personnel involved, and process results](/blog/2026/08/images/turtle-diagrm.png)*Turtle diagram for VDA 6.3 process audits, showing a central process surrounded by six questions covering input, output, resources used, personnel involved, and process results*

During the audit, the auditor examines documents, observes the process, asks employees questions, and reviews objective evidence. Findings are recorded and the applicable questions are scored.

The audit ends with a closing meeting where the results and identified weaknesses are discussed. Corrective actions may then be assigned, followed by a review of whether those actions have addressed the findings.

## How VDA 6.3 scoring works

Audit questions are scored according to how well the requirement is met:

<table>
<thead>
  <tr>
    <th>
      Score
    </th>
    
    <th>
      Meaning
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      10
    </td>
    
    <td>
      Requirement fully met
    </td>
  </tr>
  
  <tr>
    <td>
      8
    </td>
    
    <td>
      Requirement largely met
    </td>
  </tr>
  
  <tr>
    <td>
      6
    </td>
    
    <td>
      Requirement partially met
    </td>
  </tr>
  
  <tr>
    <td>
      4
    </td>
    
    <td>
      Requirement inadequately met
    </td>
  </tr>
  
  <tr>
    <td>
      0
    </td>
    
    <td>
      Requirement not met
    </td>
  </tr>
</tbody>
</table>

The auditor bases the score on objective evidence from the process. Individual question scores are then used to calculate the result for the relevant process elements and the overall audit.

The classification is:

- **A:** 90% or higher — capable
- **B:** 80–89% — conditionally capable
- **C:** Below 80% — not capable

Specific downgrade rules can also affect the classification when serious weaknesses are identified. The overall percentage should therefore not be considered in isolation. The A/B/C classification and 10-8-6-4-0 scoring model remain part of VDA 6.3:2023.

## What auditors look for

Auditors compare documented requirements with what is happening on the production floor.

They may check control plans against the current process, FMEA and [control plan](/blog/2026/08/control-plans) linkage, [SPC](/blog/2026/08/statistical-process-control) data and capability values such as Cp and Cpk, reaction plans for out-of-control conditions, operator training records, corrective actions and their effectiveness, and production and inspection records.

The main risk is a gap between documentation and actual production. When production data is spread across different machines and systems, it can be difficult to connect that data back to the documented process and demonstrate that the required controls were followed.

For example, a control plan may identify a bore diameter as a critical characteristic, while the measurement system stores that value under a different name with different limits. If the systems are not connected, proving that the characteristic was checked correctly can require manual data matching.

By connecting these systems, FlowFuse can help make the production data behind these checks easier to access and trace.

## Common reasons suppliers lose points

Common findings include outdated control plans after process changes, missing links between FMEAs and control plans, capability values below requirements without an effective reaction plan, weak oversight of sub-suppliers, corrective actions closed without effectiveness evidence, training records that do not match the current process, and production data that cannot be traced to the relevant characteristic or operation.

These issues often develop when process changes are not reflected across documents, systems, and training records.

[Layered process audits](/blog/2026/08/layered-process-audit) can help identify these gaps between formal VDA 6.3 audits. Short, regular checks on the production floor can catch bypassed controls, outdated work instructions, and missing records earlier.

## How to prepare for a VDA 6.3 audit

Run an internal audit against the applicable VDA 6.3 requirements before the external audit. Focus on evidence from the current production process.

1. **Check process documentation.** Make sure control plans, [work instructions](/blog/2026/07/digital-work-instruction), and FMEAs match the current process.
2. **Review production data.** Check SPC charts, capability values, inspection records, and deviation logs. Make sure the data can be retrieved quickly.
3. **Check the production floor.** Verify that equipment, materials, process parameters, identification, and controls match the documented process.
4. **Review corrective actions.** Confirm that open and recently closed actions include evidence that the corrective action was effective.
5. **Prepare process owners and operators.** Make sure the people involved can explain their processes and understand the controls that apply to their work.

The best preparation is to keep process documentation, production data, training, and corrective actions aligned throughout the year rather than preparing only before the audit.
