Pemex proveedores / NRF Audit Preparation for Inspection Companies
A Pemex proveedores / NRF audit runs in 6 stages, beginning with register on pemex.. Petróleos Mexicanos (Pemex); technical standards issued by the Comité de Normalización de Petróleos Mexicanos y Organismos Subsidiarios tests the system by sampling finished work backwards to the records behind it, so preparation means reconciling records to jobs rather than rewriting manuals.
Pemex publishes more than most national oil companies. The padrón de proveedores y contratistas is a public registry described on pemex.com, and the Normas de Referencia (NRF) and the newer PEMEX-EST technical standards are published as downloadable PDFs on the same site, issued by the Comité de Normalización de Petróleos Mexicanos y Organismos Subsidiarios and applied as mandatory in Pemex acquisitions and service contracting. Registration information is transferred to SISCeP, Pemex's electronic contracting platform, and suppliers are told the registration is theirs to keep current — updated at least once a year. What Pemex does not publish is the internal evaluation scoring, weighting or any pre-approved vendor list for inspection services. What separates firms that clear an audit from firms that collect findings is not the quality of the documentation but whether it describes what actually happens. The finding recorded most often is: NDT personnel presented with employer-issued certificates where the cited NRF requires ISO 9712 or NMX-B-482-CANACERO-2016 certification
Source: Pemex's public supplier pages on pemex.com — Relación con proveedores, Registro de proveedores, Requisitos for national suppliers, Proceso de registro, and the Padrón de proveedores y contratistas transparency page — together with Pemex's 'Guía rápida para el registro y evaluación de proveedores y contratistas', for the registration steps, required corporate and tax documents, the annual update duty and the transfer of registration data to SISCeP. Normas de Referencia and PEMEX-EST standards are published at public pemex.com URLs under procura/procedimientos-de-contratacion — examples confirmed to exist there include NRF-193-PEMEX-2014, NRF-065-PEMEX-2014, NRF-010-PEMEX-2014, PEMEX-EST-IC-274-2018 and PEMEX-EST-TD-142-2017 — and are issued by the Comité de Normalización de Petróleos Mexicanos y Organismos Subsidiarios. Important limitation, stated plainly: the pemex.com host refused connections from this environment on 21 August 2026, so the NDT personnel requirements attributed here to Pemex NRFs were read from secondary summaries of NRF-193-PEMEX-2014 rather than from the primary PDF. For that reason no NRF clause numbers are quoted anywhere in this entry, and the specific NRF or PEMEX-EST cited in a given tender should be downloaded and read before relying on the detail. Verified 21 August 2026.
| Stage | What happens | What it tests |
|---|---|---|
| Stage 1 | Register on pemex. | Where the paperwork is tested against itself |
| Stage 2 | Submit the corporate, tax and financial documents Pemex publishes for national suppliers. | Where the paperwork is tested against practice |
| Stage 3 | The registration record is created and its information transferred to SISCeP, Pemex's electronic contracting system, enabling participation in open bidding. | Where the paperwork is tested against practice |
| Stage 4 | Bid against the specific procurement, whose terms cite the applicable NRF or PEMEX-EST standards — these are publicly downloadable, so. | Where the paperwork is tested against practice |
| Stage 5 | On award, demonstrate personnel qualification and certification and procedure compliance against the cited standards throughout execution. | Where the paperwork is tested against practice |
| Stage 6 | Keep the registration current — Pemex places the responsibility on the supplier and states it should be updated at least. | Where the paperwork is tested against practice |
| Renewal | Pemex states that keeping the registration information current is the supplier's responsibility and that it should be updated at least once a year. Pemex does not publish a single uniform validity period for supplier registration across all categories, so no interval should be quoted to a client without checking the current registration rules on pemex.com. On the technical side the operative mechanism is revision control rather than renewal: NRFs are revised and reissued by the Comité de Normalización, with newer editions cancelling and replacing earlier ones, and PEMEX-EST standards have been issued alongside them since 2017-2018 — so the edition cited in the tender governs. Personnel certificates renew on their own scheme's cycle; ISO 9712-based certification is typically five years. | Diarised from the certificate date, not the last audit |
How long does Pemex proveedores / NRF audit preparation take?
Document work — the written practice, procedures and quality manual — takes weeks. What cannot be compressed is documented experience and records history: on-the-job hours accrue in real time, and calibration and certification history cannot be back-filled. Firms that start when the audit is scheduled rather than announced clear it without findings.
What does Petróleos Mexicanos (Pemex); technical standards issued by the Comité de Normalización de Petróleos Mexicanos y Organismos Subsidiarios look at first?
Records, not manuals. A manual states intent; records show practice. The usual opening move is to take a completed job and trace it back to the technician's certification, the instrument's calibration, the approved procedure and the report — and see whether all four reconcile.
What are the most common Pemex proveedores / NRF findings?
NDT personnel presented with employer-issued certificates where the cited NRF requires ISO 9712 or NMX-B-482-CANACERO-2016 certification, Level 1 technicians performing examinations without documented direct Level 2 supervision, Results interpreted and signed by a Level 2 without the Level 3 approval the cited standard requires, Working to a superseded edition of an NRF where the contract cites a later one, or to a later edition where the contract fixed an earlier. Almost all of them are evidence problems rather than capability problems: the work was done correctly and the proof was not kept, or was kept somewhere the firm could not retrieve during the audit.
Can a consultant attend the Pemex proveedores / NRF audit?
Yes, and it changes the outcome. Someone who has sat through the same audit at other firms answers in the auditor's own terms, produces the right record without a search, and stops a clarification turning into a finding. The firm still owns every answer — the consultant does not speak for it.
What happens after a Pemex proveedores / NRF finding?
A corrective action with a deadline, and evidence of closure at the next audit. Repeat findings are treated far more seriously than first ones, because they show the corrective-action system itself is not working.
Does Pemex proveedores / NRF require a pre-audit or gap assessment?
Not as a requirement, but the arithmetic favours it: a gap assessment finds the same evidence problems the auditor would, without the finding attached, and while there is still time to fix them. Firms entering their first Pemex proveedores / NRF audit blind typically collect findings that a sampling exercise would have caught.
What the auditor asks to see
- Registro en el padrón de proveedores y contratistas, completed through the Registro de proveedores section of pemex.com
- Acta constitutiva and its recent modifications, bearing the seal of the Registro Público de la Propiedad y de Comercio
- Registro Federal de Contribuyentes with a current tax domicile
- Latest annual and partial income tax declarations, except for recently incorporated companies
- Catálogo of goods and services offered, as declared in the registration questionnaire
- Procedimientos de ensayos no destructivos meeting the NRF or PEMEX-EST standard cited in the contract
- Certificados de calificación y certificación del personal de END under ISO 9712, NMX-B-482-CANACERO-2016 or ISO 11484 as the cited standard requires
- Records evidencing the level and supervision rules — who performed the examination, who supervised, and who interpreted and approved the result
- Evidence of the annual update to the registration record
Findings to close before the audit
- NDT personnel presented with employer-issued certificates where the cited NRF requires ISO 9712 or NMX-B-482-CANACERO-2016 certification
- Level 1 technicians performing examinations without documented direct Level 2 supervision
- Results interpreted and signed by a Level 2 without the Level 3 approval the cited standard requires
- Working to a superseded edition of an NRF where the contract cites a later one, or to a later edition where the contract fixed an earlier
- Registration record left un-updated beyond a year, disqualifying the supplier from a bid at the worst possible moment
- Procedures not demonstrably aligned to the specific NRF or PEMEX-EST cited in the contract, only to a generic international code
- Certification scope mismatch — certified in a method but not in the product form or technique the scope of work actually requires
Related: the Pemex proveedores / NRF overview, outsourced ASNT Level III cover, written practice development, NDT procedure development, a programme gap assessment, interim Level III cover.