Who Actually Makes the Window? Subcontracting Disclosure for Frames, Glass and Finishes

1. Map every transformation and control step

Ask where the product changes, not only where the finished frame is photographed. Begin with system/detail engineering and profile source. Continue through extrusion, thermal-break insertion, finish, machining, reinforcement, frame/sash assembly, glass cutting, heat treatment, coating, lamination, insulating-glass fabrication, hardware and seal supply, glazing, final inspection, performance testing, labelling, packing and loading. Add design, calculation, inspection and laboratory services when they affect acceptance.

For each step, record the legal operator, physical site, process scope, supplied item identifier, upstream and downstream owner, specification and acceptance record. Distinguish supplier, subcontractor, component manufacturer, processor, affiliated company, laboratory and logistics provider. The ISO/IAF APG External Providers paper uses a broad concept of external sources including suppliers, partners, parent or sister organizations and customers; shared ownership does not make the process internal for control purposes.

Do not demand disclosure beyond legitimate project need without protecting confidential business information. A buyer may not need a proprietary commercial price or process recipe. It does need enough identity and route information to assess critical risks, applicable certificates/listings, specification transfer, traceability, change and contractual responsibility.

2. Classify criticality before choosing controls

Not every external purchase needs the same scrutiny. Rank the consequence of nonconformity, detectability before shipment, ability to rework, effect on safety or required performance, certification/listing implications, replacement lead time, sole-source exposure, process complexity and distance from the final assembler's direct observation. Use project facts rather than labelling every glass or coating provider high risk by default.

A component catalogue item may be easy to identify but difficult to substitute without changing machining, load or maintenance. A finish defect may be visible while pretreatment is hidden. Heat treatment and lamination may be performed at different glass sites. An outsourced calculation may affect many window marks even though it creates no physical component. Criticality follows consequence and control, not purchase value.

The APG External Providers guidance stresses risk-based controls, correct purchase requirements, regulatory inputs, provider performance and verification that specified requirements were met. The APG itself says its papers are educational and non-definitive. Use the concepts to build a project control plan, not to claim an ISO audit or prescribe a universal inspection frequency.

3. Trace the approved requirement into each external order

An approved window BOM is not proof that the subcontractor received the right specification. Sample one critical item from project requirement to supplier drawing/BOM, purchase order or processing instruction, provider acknowledgement, output certificate or inspection, incoming acceptance and final opening mark. Confirm revision and units. Watch for internal shorthand that loses material, finish, heat-treatment, coating-surface, glass orientation, hardware handing or test requirements.

The external provider should receive only the information needed to perform correctly, but that information must be complete. Include applicable drawings, specifications, standards/editions, acceptance criteria, approved materials, traceability, records, change notification, nonconformity and right-of-access or witness requirements where contractually agreed. Requirements should be reviewed before release, not corrected after production through an informal chat.

If the provider proposes an alternative, keep it outside production until the supplier has compared configuration, technical and evidence implications and obtained required authority. The assembler remains responsible to the buyer according to the contract even when a provider supplied the idea. A subcontractor approval does not automatically amend the buyer's contract or project documents.

4. Approve the process route, not just the provider name

An approved-provider list can be a useful index, but a company can be competent for one process, site, product family or specification and not another. Record the approved process and scope, site, evidence reviewed, limitations, expiry or review trigger and approving authority. Verify current business and certificate information separately where relevant. A quality-management certificate is not product or process capability evidence by itself.

Select approval methods proportionately: document review, sample, process questionnaire, applicable certification or listing, laboratory scope check, remote review, site audit, first-off witness, incoming tests and performance monitoring. A buyer audit does not become accredited certification. A passed sample does not guarantee volume. A third-party certificate remains limited to its holder, site, scheme, scope, status and permitted configurations.

FGIA's public product-certification information illustrates why programme scope matters. It distinguishes product certification, plant quality assurance and verified-component programmes, and states that certified products depend on programme testing, inspection and labelling. Its Verified Components programme ties listed component samples and testing to defined categories and ongoing listing rules. Those are programme-specific controls, not proof that any proposed provider or complete window is approved.

5. Control frames, glass and finishes through different evidence routes

Profile and frame control begins with section identity, alloy/temper and geometry where specified, die or profile code, thermal-break construction, reinforcement and the drawing/BOM used for machining and assembly. Extrusion and assembly may occur at different sites. A mill certificate can support named material/batch facts; it does not confirm finished section geometry, window structural adequacy or correct fabrication by itself.

Glass control may involve a base-glass producer, coater, heat-treatment processor, laminator and IGU fabricator. Map who performs each step and how the final make-up retains pane identity, coating surface, heat treatment, interlayer, spacer, gas where specified, sealant, safety marking and IGU label. An accredited report or IG certification remains scope-specific. Do not claim that a component programme certifies the complete installed window.

Finish control needs the applicator/site, substrate, pretreatment, coating or anodizing system, colour/appearance reference, process batch, test or licence scope, protected handling and repair/maintenance route. A powder brand or colour code does not identify pretreatment or application quality. A finish certificate from another applicator or line is not transferable merely because the colour name matches.

6. Preserve traceability through split lots, rework and assembly

Traceability should answer which accepted inputs and process routes went into a selected opening mark or batch, and which finished units used a suspect input if a problem appears. It does not always require serialising every screw. Define the trace granularity from consequence, batch structure, scheme and contract requirements. Record when large provider lots are split, combined, re-labelled, reworked or issued across projects.

Sample both directions. Pick a completed window mark and trace backward through BOM, frame/profile batch, glass/IGU identity, hardware and finish records. Then pick one external batch and trace forward to stored material, work in progress, shipped packages and affected opening marks. Forward trace is essential for containment; backward trace supports configuration and cause review.

Photographs and certificates need identifiers. A picture of glass racks without labels, or a coating certificate without a matched profile batch, cannot close the trace. Preserve status: received, inspected, accepted, quarantined, conditionally released, reworked or rejected. Physical segregation and system status should agree.

7. Make subcontractor changes a pre-release event

Write which changes require notification and approval before use: legal operator or site; critical external process; profile die/material; thermal-break route; glass processor or make-up; finish applicator/system; hardware or seal; test laboratory; certification/listing status; and any lower-tier provider that affects a named requirement. Avoid an impossible clause requiring buyer approval of every consumable. Focus on changes that can affect approved configuration, evidence, appearance, safety, performance, lead time or traceability.

The supplier should submit the reason, affected order and opening marks, old/new comparison, technical and certification impact, qualification evidence, inventory/WIP boundary, cost/programme effect and proposed first-off or inspection plan. Silence is not approval unless the contract explicitly creates that result. Emergency continuity does not authorise uncontrolled substitution; it triggers containment and escalation.

Configuration management guidance in ISO 10007 covers identification, change control, status accounting and audit. Adapt those ideas to the project without claiming certification. Maintain a provider/configuration baseline and a change register so the final as-built record can show what was actually supplied.

8. Audit one chain and issue a bounded release conclusion

Before award, select one high-risk route and perform a desk trace from proposed configuration to external provider and planned acceptance. Before mass production, repeat the trace on an actual first-off or batch. Before shipment, confirm that provider changes, nonconformities and configuration records are closed or have authorised dispositions. A factory tour of the assembly line is not a substitute for this chain review.

Use clear dispositions for each process: disclosed and supported; disclosed but conditionally controlled; disclosure incomplete; or evidence contradicted by a cited record. Do not infer fraud from a missing name. Ask for clarification, define the consequence and escalate material conflicts. Separate provider approval from product release: an approved coater can still produce a nonconforming batch, and an acceptable batch does not permanently approve the provider.

Keep the seller's contract responsibility visible. The buyer may approve or acknowledge a subcontractor without assuming management of that subcontract. Define who remains responsible for conformity, warranty, changes, records, access and remedy. Obtain legal review for clauses and regulated obligations.

Safe conclusion: The disclosed route and sampled records support control of the named processes, providers, sites and batches only to the stated scope. They do not certify every unit, undisclosed lower tier, future batch or changed configuration.

FAQ

Continue the project review

Connect this guide with the proposed window and door systems, then review how Cavorlen approaches manufacturing and quality control. When your schedule is ready, send it through the project review form.

Related buyer guides

• A Window Factory Quality-Control Checklist Buyers Can Actually Use
• An Aluminum Window Specification Checklist for International Projects
• How to Evaluate an Aluminum Window Manufacturer in China