Is a Desk Audit Enough When Approving a New Co-Manufacturer?

We are setting up a new co-man, I have been provided with their SQF cert and audit report along with all of the other information we requested (OG cer, SQF cert/audit report, SOP's, Pest control, EMP, Hazard Analysis and HACCP flow, FDA registration)... is doing a desk audit enough with all this documentation? No one from Quality has visited the site, only execs. 

I've always desk audited then was onsite for the first production run (at minimum).  A GFSI audit is a good start but building a relationship and trust that this plant can produce your product safely and within your specs is a must IMO.  I would also be looking into the contractual agreement to make sure that there is liability insurance and details regarding recalls.  I've had co-mans that looked great on paper and really bad as far a physicality of the plant itself or some other elephant in the room.  If only the C-Suites have visited I would assume that the level of detail needed with a food safety and quality scope were not conducted, unless you have a higher up QA that was also onsite for a full plant tour.  

After all this site is making your product so everything should be vetted out.  

Desk auditing of those items is sufficient.  You have to be able to demonstrate you have verified compliance, so asking for records that prove they're following the SOP's you've secured are a key part of approving a co-manufacturer.  Double check the code under 2.3.3 and make sure your own SOP outlines everything you're doing to approve them.

One of the keys in 2.3.3 is that a co-man can have any GFSI audit scheme to help you co-man low risk items, but they must have a SQF cert if engaged in manufacturing high risk items.  For low or high, it's on you to prove they are meeting SQF guidelines through your own checks of their systems.