Complete reference for ethical manufacturing certification — plain English explanations, audit criteria, compliance gaps, and best practice steps for every principle.
RC2 Consulting|2026|12 Principles · 5 Sections Each · 50+ Countries · Free
A complete plain-English reference guide to all 12 WRAP principles — covering what each principle means, what auditors verify, the most common compliance gaps, and step-by-step best practice guidance. Built for facility managers, compliance officers, and operations teams preparing for WRAP certification in any country.
Each of the 12 WRAP principles is explained through four structured lenses: what it means in plain English, exactly what auditors verify on audit day, the most common compliance gaps that lead to findings, and best practice implementation steps. Click any principle below to expand it, or use Expand All for a complete audit-readiness walkthrough.
Use this guide alongside RC2's WRAP Compliance Gap Analysis — score your facility first to identify your highest-risk principles, then use this guide to understand exactly what needs to change and how to change it.
1
Read the Meaning
Plain English explanation of what each principle actually requires from your facility.
2
Know the Audit Criteria
Exactly what gets reviewed on audit day — the auditor's checklist in plain terms.
3
Spot the Gaps
The most common compliance gaps facilities make — learn before auditors find them.
4
Build the System
Actionable best practice steps and real facility examples for every principle.
All 12 WRAP Principles — Click Any to Expand
5 sections per principle
12 Principles — click any principle to expand
01
Compliance with Laws and Workplace Regulations
The foundation of WRAP certification
LegalLabor
▼
📖 What This Means
Your facility must follow all national and local laws that govern how you operate — including labor laws, environmental regulations, building codes, fire safety requirements, and any industry-specific rules. WRAP uses this as the baseline: if you're not following the law, nothing else matters. This principle applies to every country your facility operates in, meaning what's legal in one country may still violate WRAP standards if it conflicts with international norms.
🔍 What Auditors Verify
Valid business licenses and operating permits posted on-site
Evidence of regular legal compliance reviews
Employment contracts that meet or exceed local law minimums
Payroll records matching minimum wage requirements
Fire safety certificates current and valid
Evidence management is aware of recent law changes
⚠️ Common Compliance Gaps
Expired or missing operating licenses not renewed on time
Facility unaware of recent changes to local labor law
No documented process for tracking regulatory changes
Subcontractors used without verifying their legal compliance
✅ Best Practice Steps
Create a compliance calendar with all license/permit renewal dates
Assign one person to monitor regulatory updates monthly
Review all employment contracts against current law annually
Post all required licenses visibly in the facility
Document every compliance review with date and findings
🏭 Real Facility Example
Situation: A garment factory in Bangladesh passed Principles 2–12 but failed their WRAP audit because their factory operating license had expired 6 months prior and management was unaware. Lesson: RC2 recommends a shared digital compliance calendar (Google Calendar works fine) with 90-day, 60-day, and 30-day renewal reminders for every permit. One missed renewal can fail an entire audit regardless of how well the rest of the facility performs.
02
Prohibition of Forced Labor
Workers must come and go freely — no coercion of any kind
LaborHuman Rights
▼
📖 What This Means
No worker at your facility can be forced, threatened, or coerced into working against their will. This includes prison labor, bonded labor (working to pay off a debt to the employer), and any situation where workers cannot freely leave their employment. It also means facilities cannot hold workers' identity documents, passports, or personal property as a form of control. Workers must be free to resign at any time with reasonable notice per their contract.
🔍 What Auditors Verify
Worker interviews confirming freedom to leave employment
No evidence of document retention (passports, IDs held by employer)
Resignation and termination policies documented and accessible
No recruitment fees charged to workers
Dormitory workers can leave freely during off-hours
Contracts clearly state voluntary employment terms
⚠️ Common Compliance Gaps
Facility holds worker passports "for safekeeping" without written worker consent
Recruitment agencies charging workers fees before hiring — facility unaware
Dormitory-based workers locked in during overnight hours
Workers feel unable to resign due to informal debt arrangements
Resignation process not communicated to workers in their language
✅ Best Practice Steps
Establish a written policy prohibiting document retention — post in all languages used at facility
Audit your recruitment agencies annually — confirm zero worker fees
Include voluntary employment statement in every employment contract
Conduct anonymous worker surveys twice yearly on freedom of movement
Train all supervisors on forced labor indicators and reporting process
🏭 Real Facility Example
Situation: A footwear factory in Vietnam failed this principle because their third-party recruitment agency was charging migrant workers a placement fee of $200 — creating an informal debt to the employer. Management was unaware because they had never audited the agency. Lesson: RC2 recommends including a zero-recruitment-fee clause in all agency contracts AND requiring written confirmation from newly hired workers that no fees were charged.
03
Prohibition of Child Labor
No workers under the legal minimum age — with no exceptions
LaborHuman Rights
▼
📖 What This Means
WRAP prohibits employing anyone under the age of 14, or the minimum legal working age of the country if it is higher than 14. Factories must have a reliable system to verify worker ages before hiring. Young workers (ages 15–17) may be employed in some countries but cannot work night shifts, hazardous jobs, or overtime. If a facility discovers underage workers after hire, WRAP requires a remediation plan — not simply firing the child — that includes education support and family assistance.
🔍 What Auditors Verify
Age verification documents on file for every worker
Written policy prohibiting child labor — posted and translated
HR procedures for verifying age before employment begins
Young worker register (if any workers ages 15–17 are employed)
No young workers in hazardous roles or night shifts
Remediation policy exists for discovered underage workers
⚠️ Common Compliance Gaps
Accepting photocopied ID instead of verifying original documents
No process to handle situations where documents appear altered
Young workers (16–17) assigned to machinery or chemical handling
Child labor policy exists but was never communicated to hiring managers
Subcontractor or homeworker network using child labor unknown to facility
✅ Best Practice Steps
Require original government-issued photo ID for all new hires — no exceptions
Train HR staff to identify potentially altered documents
Maintain a separate young worker file for ages 15–17 with shift and role restrictions documented
Extend age verification requirements to subcontractors in writing
Create a remediation procedure — include education assistance, not termination only
🏭 Real Facility Example
Situation: A textile mill in Honduras unknowingly hired a 15-year-old using an older sibling's identity documents. The facility passed the age check because they only verified a photocopy. The issue was discovered during WRAP's worker interview process. Lesson: RC2 recommends requiring original documents AND cross-referencing with a second form of ID (school records, birth certificate) for any worker who appears young. The facility developed a biometric age-check partnership with the national civil registry as their long-term solution.
04
Prohibition of Harassment or Abuse
Every worker deserves a safe and respectful workplace
HRHuman Rights
▼
📖 What This Means
No worker should experience verbal, physical, sexual, or psychological harassment or abuse in the workplace. This covers not just manager-to-worker behavior, but peer-to-peer conduct as well. Facilities must have a clear anti-harassment policy, a confidential reporting mechanism (grievance system), and a documented process for investigating and resolving complaints. Workers must feel safe reporting issues without fear of retaliation — this is what WRAP auditors pay most attention to in this principle.
🔍 What Auditors Verify
Written anti-harassment/anti-abuse policy — posted in all languages
Grievance mechanism exists and workers know how to use it
Complaint records showing investigations were conducted
Anti-retaliation policy is documented and communicated
Worker interviews confirming awareness of the grievance process
Management training records on harassment prevention
⚠️ Common Compliance Gaps
Grievance box exists but workers don't trust it — complaints go to their supervisor (the problem)
Policy posted only in English in a non-English speaking facility
Complaints received but no documented investigation or resolution
Supervisors using quota pressure or insults to motivate production — not recognized as abuse
No training records showing supervisors were trained on policy
✅ Best Practice Steps
Install an anonymous grievance system — digital or physical — not managed by supervisors
Translate all policies into every language spoken at the facility
Train all supervisors on harassment definitions, examples, and consequences
Document every complaint with date received, investigation steps, and resolution
Conduct annual confidential worker climate surveys to detect unreported issues
🏭 Real Facility Example
Situation: A sportswear factory in Sri Lanka had a policy posted and a grievance box installed — but during worker interviews, 8 of 12 workers interviewed didn't know the grievance box existed. The box was near the manager's office, making workers uncomfortable using it. Lesson: RC2 recommends placing grievance mechanisms in neutral, private locations (near restrooms, break rooms) and conducting quarterly 5-minute orientation refreshers reminding all workers how and where to file complaints.
05
Compensation and Benefits
Workers must be paid legally, accurately, and on time
LaborHR
▼
📖 What This Means
Every worker must receive at minimum the legal minimum wage for their country and region. Overtime must be paid at the legally required premium rate. All legally mandated benefits — social security contributions, health insurance, paid leave, holiday pay — must be provided. Deductions from wages can only happen when legally permitted or when the worker has given written consent. Workers must receive clear, understandable pay slips that break down their wages, hours, deductions, and benefits.
🔍 What Auditors Verify
Payroll records cross-referenced with time and attendance records
Minimum wage compliance — including recent legal rate increases
Overtime hours paid at correct premium rate
Pay slips provided and understandable to workers
Social security and benefit contributions being remitted
No illegal or unauthorized deductions from worker pay
⚠️ Common Compliance Gaps
Facility unaware of a minimum wage increase that took effect recently
Overtime calculated on base wage only — excludes bonuses or allowances required by law
Deductions for breakage, tools, or uniforms not legally permitted
Social security contributions being withheld but not remitted to government
Pay slips confusing — workers don't understand what they're being paid
✅ Best Practice Steps
Subscribe to government labor ministry updates to catch minimum wage changes immediately
Reconcile time records against payroll records monthly — before auditors do it
Simplify pay slips — test with a production worker to confirm they understand it
Verify social security remittance receipts are filed and accessible for audit
Review all deduction types annually against current legal permissions
🏭 Real Facility Example
Situation: A cut-and-sew facility in Guatemala was found to be calculating overtime on base salary only, excluding the legally required transportation allowance from the overtime base. Workers were being underpaid on every overtime hour worked. The facility had been operating this way for 3 years without realizing it. Lesson: RC2 recommends an annual third-party payroll compliance review — the cost of the review is always less than the cost of back-pay liability and audit failure.
06
Hours of Work
Overtime must be voluntary, legal, and properly managed
LaborHR
▼
📖 What This Means
Facilities must comply with local laws on maximum working hours — typically 48 regular hours per week and no more than 12 hours overtime per week. Workers cannot be forced to work overtime and must be free to refuse without penalty. WRAP requires that workers receive at least one full day off in every seven-day period. During peak production seasons, many facilities violate this principle unknowingly by allowing hours to creep beyond legal limits. Accurate time and attendance records are essential evidence of compliance.
🔍 What Auditors Verify
Time and attendance records for a rolling 12-month period
Maximum weekly hours not exceeded — including overtime
At least one rest day per 7-day period for all workers
Overtime recorded as voluntary — workers signed consent or request
Written policy on maximum hours posted and communicated
No pattern of systematic excessive overtime during peak periods
⚠️ Common Compliance Gaps
Mandatory overtime during peak season — workers afraid to refuse
Time records show workers clocking in 7 days per week for weeks at a time
Paper time cards easy to alter — records don't match actual hours
Workers on piece-rate voluntarily staying late — facility counts this as voluntary but hours still exceed legal limits
Security guards and dormitory staff overlooked — their hours not tracked the same way
✅ Best Practice Steps
Implement biometric or electronic time tracking — eliminates manual record manipulation
Set automatic alerts when any worker approaches the legal weekly maximum
Create a formal overtime request process — workers sign indicating voluntary participation
Review all staff categories for hours compliance — including security, cleaning, and maintenance
Build production planning capacity to reduce reliance on excessive overtime during peaks
🏭 Real Facility Example
Situation: A knitwear factory in Cambodia had clean records showing 60-hour maximum weeks — but worker interviews revealed that during the October–December holiday rush, workers were regularly working 80+ hours over 7-day stretches with no rest day for 3–4 consecutive weeks. Management genuinely believed workers were choosing this voluntarily. Lesson: RC2 recommends implementing a production planning model that limits reliance on extended overtime — and RC2 works with facilities to build that capacity as part of our audit preparation services.
07
Prohibition of Discrimination
Hiring, pay, and promotion based on ability — not personal characteristics
HRHuman Rights
▼
📖 What This Means
Employment decisions — hiring, pay, promotion, discipline, termination — must be based on job-related qualifications and performance, never on race, gender, religion, age, nationality, political opinion, sexual orientation, or any other personal characteristic. This includes pregnancy discrimination, which remains one of the most common violations in apparel manufacturing globally. All workers deserve equal treatment and equal access to opportunities within the facility.
🔍 What Auditors Verify
Written equal opportunity/anti-discrimination policy posted visibly
Workforce demographic data reviewed for patterns of exclusion
Hiring and promotion records checked for discriminatory patterns
Pregnancy test requirements — auditors look for this specifically
Worker interviews confirming equitable treatment
Disciplinary records reviewed for disproportionate action against protected groups
⚠️ Common Compliance Gaps
Pregnancy testing required as condition of employment or continued work — illegal everywhere
Informal practice of not hiring workers over a certain age in certain roles
Female workers excluded from higher-paying skilled roles due to gender assumptions
Migrant workers paid less than local workers for identical work
Discipline applied more strictly to workers from specific ethnic or national groups
✅ Best Practice Steps
Explicitly prohibit pregnancy testing in hiring policy — in writing, signed by HR
Standardize job descriptions with objective, measurable qualification criteria
Conduct annual pay equity analysis — compare wages by gender, nationality, and ethnicity
Train all hiring managers on discrimination law and unconscious bias
Establish a discrimination-specific grievance channel separate from general complaints
🏭 Real Facility Example
Situation: A handbag factory in China failed this principle because job postings for supervisory positions stated "male candidates preferred." Management viewed this as a practical preference, not discrimination. During worker interviews, female workers confirmed they had never been considered for supervisor roles despite seniority. Lesson: RC2 recommends a full job posting audit — removing all language referencing gender, age, or nationality preferences — and replacing with objective role-specific requirements only.
08
Health and Safety
The most detailed and heavily weighted WRAP principle
SafetyLegal
▼
📖 What This Means
Facilities must provide a safe and healthy working environment. This is the most comprehensive WRAP principle — covering fire safety, emergency exits, chemical handling, personal protective equipment (PPE), machine guarding, lighting, ventilation, clean water, sanitation facilities, first aid, and worker health and safety training. A designated health and safety officer must be appointed. Regular safety inspections must be conducted and documented. Incidents must be reported and investigated. This principle is the most commonly cited source of audit findings globally.
🔍 What Auditors Verify
Fire exit routes clear, unlocked during working hours, and properly marked
Fire extinguisher service tags current and accessible
Emergency evacuation drill records — minimum twice per year
Chemical safety data sheets (SDS) posted at all chemical storage points
PPE provided and workers trained to use it correctly
First aid kits stocked and first aid trained staff present on each shift
Machine guarding in place — no bypassed safety systems
Accident/incident log maintained and reported
⚠️ Common Compliance Gaps
Fire exits locked or blocked by inventory during production hours
Fire drill records exist but workers cannot describe the evacuation procedure
PPE provided but workers not trained — wearing it incorrectly
Chemical SDS sheets outdated or missing for recently introduced chemicals
Machine guards removed to increase production speed — never replaced
Near-miss incidents not recorded — only injuries with lost time are logged
✅ Best Practice Steps
Conduct monthly internal H&S inspections — use a standardized checklist and document findings
Assign a dedicated H&S officer with authority to halt production for safety violations
Implement a near-miss reporting system — reward reporting to build a safety culture
Create a chemical inventory linked to current SDS sheets — review quarterly
Post emergency evacuation maps at every exit and at every workstation
Train new workers on H&S procedures before they begin work — document with signature
🏭 Real Facility Example
Situation: A major denim facility in Mexico scored well on all other principles but received a major finding on H&S: fire exits on the second floor were accessible but the stairwell was being used to store seasonal fabric bolts — reducing the exit width below the legal minimum. Additionally, 4 of 6 fire extinguishers had expired inspection tags. Both issues were discovered in the 10 minutes before the auditor walked the floor. Lesson: RC2 recommends a 48-hour pre-audit walkthrough using the actual WRAP H&S checklist — this single practice eliminates the majority of H&S findings before the auditor arrives.
09
Freedom of Association and Collective Bargaining
Workers' rights to organize must be respected — even where restricted by law
LaborHuman Rights
▼
📖 What This Means
Workers have the right to form or join organizations of their choosing — including trade unions — and to bargain collectively with management. Facilities cannot retaliate against workers for union membership or organizing activities. This principle is complex because in some countries (like China), independent unions are legally restricted. WRAP recognizes this and instead requires that facilities comply with local law while still providing workers with legitimate alternative channels to communicate concerns — such as worker committees, open-door policies, or formal suggestion systems.
🔍 What Auditors Verify
Written policy on freedom of association posted and communicated
No evidence of anti-union discrimination in hiring or discipline records
Worker representatives have access to communicate with management
Collective bargaining agreement on file (where unions exist)
Alternative worker communication channels where unions are restricted by law
Worker interviews confirming ability to raise concerns freely
⚠️ Common Compliance Gaps
Workers terminated after attempting to organize — no documentation of legitimate cause
No worker communication channel exists — no union AND no worker committee
Policy exists but workers unaware they have the right to organize
Management interfering in worker representative elections
Facility in a legally-restricted country with no alternative communication mechanism
✅ Best Practice Steps
Establish a worker welfare committee with elected worker representatives — even where unions are restricted
Train management on non-interference in worker organizing activities
Document all disciplinary actions involving known union members with extra care for legal justification
Post freedom of association policy in all worker languages with clear explanation of worker rights
🏭 Real Facility Example
Situation: A facility in Bangladesh with no active union had this principle flagged because the facility had no worker communication mechanism of any kind — no committee, no suggestion system, no open-door policy. Workers had no formal way to raise concerns with management short of quitting. WRAP required a worker committee be established before certification could proceed. Lesson: RC2 recommends establishing a formal worker welfare committee as one of the first steps in WRAP preparation — it satisfies this principle AND generates valuable worker feedback that prevents issues from escalating to audit findings.
10
Environment
Comply with environmental laws and minimize your facility's impact
EnvironmentLegal
▼
📖 What This Means
Facilities must comply with all local environmental laws and regulations — covering wastewater discharge, air emissions, hazardous waste disposal, and chemical management. WRAP does not require facilities to go beyond the law, but it does require documented evidence that legal requirements are being met. This includes proper permits for wastewater treatment, documented waste disposal procedures, and records showing compliance with any environmental regulations specific to your country or municipality. ESG pressures from brands are rapidly elevating this principle in importance.
🔍 What Auditors Verify
Environmental permits current and posted (wastewater, air emissions)
Wastewater treatment records and discharge test results
Hazardous waste disposal records with licensed contractor documentation
Chemical storage compliant with local environmental codes
Spill prevention plan documented and workers trained
No outstanding environmental violations or penalties from regulators
⚠️ Common Compliance Gaps
Wastewater discharged without treatment or with expired discharge permit
Hazardous waste (dyes, chemicals, solvents) disposed of through municipal trash — not licensed contractor
No spill response procedure — workers don't know what to do if a chemical spills
Environmental permits exist but haven't been renewed in years
Facility unaware that a new regulation applies to their operations
✅ Best Practice Steps
Create an environmental permit register with renewal dates — add to your compliance calendar
Contract with a licensed hazardous waste disposal company — keep all manifests on file for 3+ years
Test wastewater discharge quarterly and file records — don't wait for regulatory inspection
Train workers handling chemicals on spill response — document training
Conduct an annual environmental compliance review against current regulations
🏭 Real Facility Example
Situation: A dyeing and finishing facility in India had been disposing of chemical waste drums through their regular municipal waste contractor — the contractor was licensed for general waste but not for hazardous materials. The facility had done this for years without issue from local authorities. WRAP flagged it as a major finding because the disposal chain was not compliant with hazardous waste law. Lesson: RC2 recommends auditing your waste disposal contractors annually — request their hazardous waste handling license and confirm it covers your specific waste types. The liability risk of improper disposal far exceeds the cost of a licensed contractor.
11
Customs Compliance
All imports and exports must be legal, documented, and fully declared
LegalTrade
▼
📖 What This Means
All goods imported and exported by the facility must comply with applicable customs laws — including accurate declarations of country of origin, correct valuation, accurate tariff classification, and proper documentation. Facilities must not participate in smuggling, under-invoicing, mislabeling of country of origin, or any other customs fraud. This principle has become significantly more important post-2018 as global tariff disputes (particularly US-China trade tensions and current 2025–2026 tariff escalations) have increased pressure on facilities to accurately declare origin and comply with country-of-origin rules.
🔍 What Auditors Verify
Import/export records with accurate country of origin declarations
Commercial invoices matching purchase orders and shipping documents
Customs broker relationship documented — licensed broker used
No evidence of under-invoicing, double invoicing, or price manipulation
Country of origin claims supported by production records
No outstanding customs violations or investigations
⚠️ Common Compliance Gaps
Country of origin mislabeled to take advantage of preferential tariff treatment
Invoice values understated to reduce import duties — especially for sample shipments
Facility unaware that their product's tariff classification changed under new trade rules
No documented process for verifying customs compliance of shipments
Broker handles everything — facility has no internal knowledge or oversight of filings
✅ Best Practice Steps
Work only with licensed, reputable customs brokers — verify their license annually
Designate one internal person responsible for customs compliance oversight
Reconcile commercial invoices against actual transaction values quarterly
Maintain a tariff classification register for all products — review after any trade policy changes
Keep all customs documents for a minimum of 5 years — many countries require longer
🏭 Real Facility Example
Situation: A sportswear facility in Jordan was found to be labeling finished goods as "Made in Jordan" — qualifying for duty-free access to the US market — while more than 50% of the actual manufacturing value was being added in a third country. The Qualifying Industrial Zone (QIZ) rules require a specific US/Israeli input content threshold that the facility was not meeting. Lesson: RC2 recommends an annual country-of-origin rules compliance review — particularly important in 2025–2026 given rapidly changing US tariff policy — to ensure your origin claims remain valid under current trade rules.
12
Security
Protecting your facility, your workers, and the global supply chain
SecurityTrade
▼
📖 What This Means
Facilities must maintain reasonable security procedures to protect against the introduction of unauthorized materials — including illegal drugs, weapons, stowaways, and most critically, terrorist materials — into outgoing shipments. This principle is closely aligned with the US Customs and Border Protection C-TPAT (Customs Trade Partnership Against Terrorism) program. It covers physical security (perimeter, access controls, locks), personnel security (background checks, ID verification), procedural security (container inspection, seal management), and information security. Many brands and retailers require this principle as a condition of sourcing.
🔍 What Auditors Verify
Physical perimeter security — fencing, lighting, access control
Visitor log and visitor identification procedures
Container/carton inspection procedures before loading
Seal management — high-security seals used, numbers recorded
Employee background check policy for new hires
Security training records for all relevant staff
Incident reporting procedure for security breaches
⚠️ Common Compliance Gaps
Visitor log exists but visitors not required to show ID or be escorted
Container inspection conducted but not documented — no record of who inspected what
Seal numbers not recorded or reconciled against shipping documents
Perimeter lighting inadequate — dark areas around loading docks at night
Security guards not trained on what to look for — no formal security training records
Background checks conducted verbally — no documentation or third-party verification
✅ Best Practice Steps
Implement a container inspection checklist — 7-point inspection minimum — document every inspection with date, time, and inspector name
Use only ISO 17712-compliant high-security seals — log every seal number issued and applied
Establish a formal visitor management system — ID required, visitor badge issued, escort required in production areas
Train all security personnel and shipping/receiving staff annually — document with sign-in sheets
Consider C-TPAT certification as a complement to WRAP — it strengthens this principle significantly
🏭 Real Facility Example
Situation: A leather goods facility in Colombia had strong physical security — cameras, guards, fencing — but failed this principle because their container inspection process had no documentation. Guards confirmed they inspected every container before loading, but there were zero written records. The auditor's position: if it's not documented, it didn't happen. Lesson: RC2 provides a complete Container Inspection Log template as part of our security compliance package. The documentation step takes 3 minutes per container and converts a passing inspection into verifiable, audit-ready evidence. Contact RC2 to access this template directly.
International Labour Organization — Core Labour Standards Reference (2024) — ilo.org
U.S. Department of Labor — Bureau of International Labor Affairs, Social Compliance Audit Methodology (2024) — dol.gov/ilab
Social Accountability International — SA8000 Audit Criteria Cross-Reference (2023) — sa-intl.org
Ready to Prepare for Your WRAP Audit?
RC2 Consulting provides hands-on audit preparation, SOP development, gap analysis, and compliance infrastructure — so you walk into your audit with confidence.