What happens when a Cikarang factory fails a Toyota audit

Tuesday morning, 8:14am

The email arrives in Ibu Ratna's inbox at 8:14 on a Tuesday.

It is from the vendor quality team at PT Toyota Motor Manufacturing Indonesia. Toyota is her factory's largest customer, accounting for roughly 60 percent of annual revenue. The subject line reads: Supplier Safety and Compliance Audit Notification.

Ratna manages Environment, Health, and Safety at a Japanese-owned auto parts manufacturer in Cikarang Barat. The facility produces stamped metal components and sub-assemblies for Toyota's Karawang plant. 1,200 employees. Three production shifts. A maintenance department of eleven. A safety team of four, including herself.

The audit is scheduled for two weeks from today.

She puts down her tea and reads the audit scope. Crane inspection records. Forklift pre-use and periodic maintenance logs. Fire suppression system certifications. Pressure vessel inspection records. PPE tracking and replacement logs. All of it, for the preceding twelve months.

She closes the email and opens her spreadsheet.

What twelve months of records actually looks like

The facility has 47 cranes and hoisting devices. 23 forklifts, of which 19 are operational. 6 pressure vessels. 11 fire suppression zones. Roughly 800 workers in mandatory PPE with a replacement cycle that is tracked, in theory, by a combination of a spreadsheet and a WhatsApp group managed by the section supervisors.

The crane inspection records exist in four Excel files, distributed across three computers. One file is on a desktop in the maintenance office. Two are on laptops, one of which belongs to a supervisor who is currently on leave. The fourth was migrated to a shared folder on the company server eight months ago, but not everyone was told about the migration, and older records were not fully transferred.

The forklift maintenance logs are partly digital and partly in paper binders organized by month. The binders for April, May, and September are stored in a cabinet in the workshop. The binder for June cannot be found. Ratna calls the workshop supervisor. He believes it may have been moved during a cleaning campaign. He is not certain.

The fire suppression certifications are PDFs. They are in a shared folder on the server. The folder contains 147 files. They are named sequentially: scan001.pdf through scan147.pdf. There is no naming convention that indicates which file covers which zone or which date.

The PPE replacement logs are in the WhatsApp group. Two years of messages. Photos of damaged equipment. Requests for new gloves. Supervisor approvals. Delivery confirmations. All of it in a messaging thread that is not searchable in any structured way and is not, in any legal or practical sense, a record.

The previous safety officer, Pak Hendra, managed much of this. He left the company six months ago for a position in Bekasi. He did not leave a handover document. There was no formal process for one. He was experienced and organized, and his knowledge lived in his head and in his files. His files are on a laptop that was wiped and reassigned.

Ratna has been in this role for six months. She has been building her own systems since she arrived. The records she has are complete. The records from before she arrived are whatever she could piece together from what Hendra left behind.

The two weeks

The preparation takes over everything.

Ratna pulls in two members of her team. They spend the first three days locating files, opening PDFs, and building a master index. The Excel files have inconsistent column names. Some inspection entries have dates in DD/MM/YYYY format. Others are in MM/DD/YYYY. Some entries have no date at all.

The crane certificates are the most critical finding. Three of the 47 cranes have inspection certificates, but the certificates are photocopies of originals that were submitted to the relevant government authority for registration. The originals are with the authority. The company's copies are not stamped. One is blurry enough that the serial number on the certificate does not clearly match the serial number on the crane's nameplate.

Ratna calls the inspection body that issued the certificates. They can provide confirmation that the inspections were conducted. The confirmation will come by email, not by official letter, because producing an official letter takes longer than two weeks. She notes this in her preparation file and hopes the auditor will accept it.

The pressure vessel records are cleaner. Four of the six vessels have current certificates from a licensed third-party inspector. Two have certificates that expired in the past four months. The vessels themselves are functioning normally. The renewals were on Hendra's schedule. His schedule did not transfer.

She arranges emergency inspections for both pressure vessels. The earliest available slot is in eleven days. That is three days before the audit. It might be enough. The inspection body cannot guarantee the certificates will be issued before the audit date.

The PPE records are abandoned. There is no way to reconstruct a compliant tracking log from WhatsApp messages in two weeks. Ratna writes a summary of the current PPE management procedure and attaches supporting photos. She knows it is not what the auditor is looking for. She submits it anyway.

What the auditor sees

The audit team arrives on a Wednesday morning. Two auditors from Toyota's vendor quality group, accompanied by a representative from the facility's parent company in Osaka, who has flown in specifically for this review.

The audit takes two full days.

The auditors are professional and thorough. They are not looking for problems. They are verifying compliance, which is a different thing. Their job is to confirm that documented procedures match actual practice and that records exist to demonstrate compliance with the relevant standards.

On the crane records, they flag three items. The blurry certificate creates a traceability concern: the serial number cannot be confirmed. The inconsistent date formats in the Excel logs mean that for a period of approximately six weeks, it is not possible to confirm that inspections were conducted at the required frequency. The gap in April through June is noted.

On the pressure vessels, the two certificates that are pending renewal are a finding. The fact that inspections have been scheduled is noted as a corrective action in progress, not as a resolution. Findings are scored. Corrective actions in progress receive partial credit.

On the PPE records, the finding is straightforward. The documentation does not meet the audit standard. The auditor notes that the actual PPE management practice may be compliant. The records, however, are not.

The forklift records receive a marginal pass. The paper binders, minus the missing June volume, cover most of the required period. The auditor notes the gap. It does not create a critical finding, but it contributes to the overall score.

The consequence

The previous audit score was 92. A score above 90 is required for standard supplier status at Toyota's Indonesian operations.

This audit scores 71.

A score below 75 triggers a conditional status review. Under conditional status, no new purchase orders can be placed until the supplier submits and completes a corrective action plan. The plan must be reviewed and approved by Toyota's vendor quality team. The review process takes, on average, six to eleven weeks.

For Ratna's facility, this means roughly two months without new Toyota orders while the corrective action process runs. The facility has existing orders in production. Those continue. But the pipeline dries up.

The parent company in Osaka requests a full incident report. The country manager requests a meeting. Ratna prepares a presentation explaining what happened and what is being done. She presents it at 7pm on a Friday to an audience on a video call in three time zones.

Her job is not formally at risk. But she knows what a second conditional status review would mean.

The corrective action plan takes eight weeks to close. Toyota resumes placing orders in week ten. The revenue impact across the affected period is significant. The relationship with the buyer is formally restored but practically cautious. New orders come in at lower volumes for the next quarter while the relationship rebuilds.

The equipment was safe throughout. The cranes worked. The pressure vessels were functioning within specification. The workers had their PPE. The physical reality of the facility was compliant.

The records were not.

What would have been different

Picture the same audit, with one change. Every crane, forklift, fire system, and pressure vessel has a digital identity tag attached to the physical asset. Every inspection was logged against that identity, in the field, at the time it was conducted.

The auditor arrives. She scans the tag on crane number 7 with her phone. The screen shows the full inspection history for that crane: every periodic inspection for the past three years, with dates, inspector names, certifications, and photos. The current certificate is attached. It is valid for four more months. The serial number on the digital record matches the serial number on the crane because the record was created when the tag was attached to the crane.

She scans eleven more cranes in the time it previously took to find the right Excel file.

The pressure vessel records are current because the system flagged the approaching expiry and Ratna scheduled the renewal before it lapsed. The PPE tracking is logged per worker, per issue date, with photos. The forklift logs exist because the form appeared on the operator's phone at the start of each shift, and completing it was faster than explaining why it was not completed.

The audit takes six hours, not two days. The score is 94. The Osaka representative flies home without asking questions.

The preparation time was not two weeks of scrambling. It was the ordinary work of managing the assets, conducted every day, as a byproduct of the work itself.

The scenario KALIRA was built for

Ratna's situation is not unusual. Variations of it play out in supplier audits across Indonesian manufacturing every quarter. Japanese, Korean, and European buyers audit their Indonesian suppliers with increasing rigor. The standards have not changed. The scrutiny has increased.

The factories that pass are not necessarily safer than the ones that fail. They are better at capturing evidence of what they do. The gap between them is not a gap in practice. It is a gap in systems.

KALIRA is the system that closes that gap. Not by asking more of the people who do the work, but by capturing the record as the work happens. Every tag scan is a timestamp. Every inspection form submission is a verifiable entry. Every certificate attached to an asset record is findable in seconds, not in days.

When the audit notice arrives, the preparation is already done.