Supplier qualification under 21 CFR 111.75(a)(2) and NSF/ANSI 455-2 requires an initial on-site or documented audit, a quality agreement, a risk classification (Tier 1 active/botanical, Tier 2 functional excipient, Tier 3 commodity), and a re-qualification cycle (typically Tier 1 every 2 years, Tier 2 every 3 years, Tier 3 paper requalification annually). Skipping the on-site for a Tier 1 active is the audit gap behind most supplier-driven recalls.

Regulatory anchors

21 CFR 111.75(a)(2)
NSF/ANSI 455-2

How V5 handles it

QMS — quality engineered into every action, not bolted on.

Because V5 owns the operator action, the QMS sees the data the second it’s captured — not at the end of the shift.

Document control with hard kiosk-level training enforcement.

Versioned SOPs are only useful if operators are actually trained on the current version. V5 enforces it at the kiosk.

Score your compliance gap — then download the validation pack.

A guided self-assessment walks you against the regulator clauses that apply to your industry. The validation pack — IQ/OQ/PQ scripts, traceability matrix, risk assessment, intended-use statement — generates from the same evidence so you can hand it to an auditor on day one.

Supplier portal — chase nothing. Score everything.

Suppliers log in, see what you need, submit it against your spec, and watch their scorecard. SCARs are raised, replied to and closed in the portal — not in your inbox.