Factory Audit Questions for Cabinet Fabrication: Cabinet Fabrication vs Bought-In Module Assembly

Editorial Team September 15, 2026

A kiosk factory audit must verify one thing above all: whether the plant cuts, forms and finishes its own enclosure metal, or only bolts bought-in modules into a shell it ordered elsewhere. Answer that, and the rest of the capability claim becomes checkable. Use factory audit questions for cabinet fabrication that tie every claim to a named production step and a document you can read on site.

Why “Manufacturer” Is an Ambiguous Word in a Kiosk Capability Statement

Direct answer: An audit must verify which production steps the plant physically performs, and which it subcontracts or buys finished. The word “manufacturer” survives on capability statements whether a supplier laser-cuts its own steel or unboxes a complete cabinet. The audit question is not whether the company is real, but where on the chain it actually adds metal, electronics and labour.

Supplier capability statements are marketing documents, not verified evidence. A published listing can market fabrication, PCBA and sub-assembly as separate modular service layers — meaning the buyer can contract one layer and assume the others are included. That assumption is the expensive mistake.

Three plant categories give you vocabulary for the rest of this review:

Fabricator — performs sheet-metal cutting, forming, welding and finishing in-house, on its own equipment.
Integrator — owns final assembly and test, sources enclosures and sub-assemblies from fabricators.
Assembler — mounts finished purchased modules into a purchased shell; minimal or no metalwork.

The Fabrication-to-Box-Build Chain: Six Steps You Can Audit Separately

Direct answer: Kiosk sheet metal fabrication capacity audit work decomposes into six steps, each with an owner and an artefact. Contracting a self-service kiosk OEM ODM partner without knowing which steps they own means you inherit their subcontractors’ lead times and defects without a claim path. Audit every step, even the ones you think are obviously theirs.

Sheet-metal cutting and forming. Laser or turret punch, then press brake bending. Evidence: process routing sheet naming the machine and the operation sequence.
Welding and frame build. Chassis, safe box structure, mounting bosses. Evidence: weld fixture list and weld inspection record.
Finishing. Powder coat or wet paint, in-house or outsourced. Evidence: coating supplier name, cure temperature and thickness spec.
PCBA or bought-in board sourcing. Own SMT line or contract manufacturer. Evidence: supplier-approved list and first-article inspection report.
Sub-assembly. Printer, reader and cash module brackets built up before final fit. Evidence: sub-assembly work instruction with revision number.
Box build and final integration. Whole unit wired, powered, tested. Evidence: test log keyed to the serial number.

Note that custom kiosk enclosure fabrication vs assembly differ in change control, not just in price. When the plant owns step 1, an enclosure design change is an internal engineering revision. When it does not, that change is a purchase order to a third party with its own queue.

Audit Question Set 1: Sheet-Metal and Enclosure Fabrication

Audit question	Genuine fabricator can show	Pure assembler typically cannot
What cutting and bending equipment is on site?	Machine asset list, maintenance log, and an operator running a job during the visit	No machine assets; will cite “our partner factory” without naming equipment
What is your maximum bend length and sheet thickness?	Rated press-brake capacity in tonnes and bend length, matched to a job card	Vague answers; no press brake in the building
Who coats the finished cabinet?	Either an in-house line with cure records, or a named coating subcontractor with process specifications	No named coater; finish described only as “powder coated”
How is cold-rolled steel gauge controlled?	Incoming mill certificates for cold-rolled sheet, with gauge verified against a drawing	No material certifications retained per batch
How does material traceability work back to my unit?	Process routing sheet linking heat or lot number to serial number	Traceability begins only at final assembly

Kiosk enclosure design decisions — panel gauge, dimensional layout against reach ranges, and cabinet material — are fixed at the enclosure level, and most of what decides whether a unit holds up in the field is settled there (^[1]). Cabinet material in the 1.5 mm to 2.5 mm cold-rolled sheet range is the norm for indoor check-in and registration units, with cash-handling safes built to a heavier 1.5 mm to 3.0 mm steel specification (^[5], ^[3]).

Audit Question Set 2: Module Integration, Sub-Assembly and Box-Build Ownership

Kiosk box-build and sub-assembly ownership decides who writes the work instruction, who inspects the result, and who pays for rework when a bill validator jams in the field. Ask the plant to name the author of each sub-assembly instruction; the answer reveals whether they build the assembly or mount a unit someone else finished.

Audit question	Genuine integrator can show	Assembler-only plant typically cannot
Who writes the sub-assembly work instruction for the printer module?	In-house instruction with revision history and an author inside the plant	Instruction supplied by the module vendor; plant holds no revision control
How is kiosk peripheral integration tested before box build?	Bench test rig with a pass/fail record per module	Functional test only after full assembly
Who fabricates the EMV card reader bracket?	In-house bracket drawing and bend program	Bracket is a purchased part; plant cannot change its geometry
How is bill validator and coin acceptor alignment controlled?	Dimensional jig with a defined tolerance and inspection record	Alignment set by hand, no jig, no recorded tolerance
Who performs final end-to-end payment test?	Test log signed per serial, with a gateway transaction reference	No per-unit payment test record

The practical difference is change control. A plant that owns the sub-assembly can re-engineer a mounting bracket in days and re-run a first-article inspection. A plant that only mounts finished units must go back to the bracket’s actual manufacturer — often the same vendor supplying your competitor.

Incoming Inspection and Traceability for Bought-In Modules

Direct answer: Cash handling kiosk module traceability rests on four documents. Cash-handling modules are the dominant source of field service calls: bill validators and coin mechanisms fail in predictable patterns from worn rollers, dirty sensors and deferred maintenance, with per-incident repair costs of $50 to $400 and coin mechanism cleaning or repair alone at $40 to $100 (^[4]). Annual cash-handling maintenance is cited above $3,000 versus under $1,000 for cashless equivalents, which is why the traceability of each module matters commercially, not just administratively.

Request these four artefacts before award:

Incoming inspection records for each cash handling and cashless payment kiosk peripheral — lot number, serial number, date, inspector, result.
Supplier-approved module list naming the actual manufacturer of each validator, acceptor, printer, scanner and card reader.
Non-conformance log with disposition, so you can see whether failed modules are returned to the supplier or silently reworked onto a build.
Module serial capture at install, so a delivered unit can be traced back to one bill-validator unit.

A worked tracing path makes the requirement concrete: take one delivered kiosk serial number, follow it to the box-build test log, from there to the sub-assembly record, and from there to the incoming inspection record for the specific validator serial inside that unit. If that path breaks anywhere, a field fault three years later cannot be tied to the module batch that caused it.

For card readers, require PCI-PTS compliance evidence and a physical mounting bracket specification; for cash safes, ask for the UL or CEN standard the safe is built and tested to (^[3]). ISO 9001:2015 audit records are a starting point, not a substitute — a certification scope statement tells you which processes are covered (^[2]).

Red Flags in Capability Claims: What Vague Language Usually Hides

Decompose the capability statement line by line. Each vague claim usually fails to name one specific fabrication step, and one question resolves it.

Claim as written	Step it fails to name	Question that resolves it
“Full in-house manufacturing”	Cutting, forming, welding, finishing	Which of these four operations happen inside this building?
“Custom kiosk hardware manufacturing”	Enclosure fabrication and PCBA	Show me the routing sheet for an enclosure job from last month
“Advanced sheet-metal capability”	Capacity figures per machine	What is your press brake tonnage and laser cutting hours per week?
“Strong supply chain for cash modules”	Incoming inspection and serial capture	Show the incoming inspection record for the last validator lot received
“One-stop solution”	Which layers are contracted out	Which service layers do you resell versus perform?
“Integrated kiosk enclosure design and production”	Design authority versus drawing execution	Who holds the drawing and who approves revisions?

Three quick rules when reviewing any claim:

No named step — the claim is unverified.
No capacity figure — treat the capability as untested, not proven.
No artefact — treat it as unverified rather than false, and record the gap in your scoring.

A 2026 directory observation worth carrying into diligence reviews: branded kiosk panels, terminals and lockers are frequently built in China and then labelled locally. Treat that as a market signal making the fabrication boundary a live diligence question, not as proof about any individual supplier in front of you.

What to Ask (and What to Record) Before You Award

Lift these into your RFQ or audit schedule. Each one maps to an artefact from the tables above.

Which of the six chain steps does this plant perform on site, in which building?
Provide the machining asset list with press brake capacity, bend length and laser hours per week.
Provide one process routing sheet from a completed enclosure job.
Name the coating supplier and provide cure records for the last production lot.
Provide the incoming inspection record for the most recent cash module lot, including serial capture.
Name the author and revision of each sub-assembly work instruction in this build.
Provide a non-conformance log extract with disposition for the last 12 months.
Show the tracing path from one delivered serial number back to its validator, printer and reader serials.

Score buildings, not brands. A plant can hold multiple buildings and one may be an assembly hall while another stamps and welds.

Treat the result as a risk tier rather than a pass or fail. Fabricator coverage means you can negotiate enclosure changes directly with the party that cuts the metal. Integrator coverage means you inherit a tier of suppliers you have not seen. Assembler-only coverage is not disqualifying, but it should change your contract terms: sub-assembly work instructions and module serial logs become deliverables you specify, not documentation you request by favour.

For hotel self-check-in kiosks and hospital registration kiosks, the envelope is usually simple and the module set narrow, so an integrator can be a reasonable choice. For cash-accepting builds — bill payment, retail checkout kiosks and unattended ticketing kiosks — the safe-box fabrication and validator alignment work sits squarely in the fabrication layer. Verify it there, and see our OEM factory audit checklist for buyers for the general structure, plus evidence for readiness claims, memory allocation claims and the tablet customization audit for the electronics-side counterparts.

Content reviewed: 2026-09-15.

Evidence confidence

Confidence: Medium. This rating reflects cross-checking 5 sources across 5 independent domains. It measures evidence coverage, not certainty; verify safety-critical work against manufacturer instructions and local requirements.