Supplement Contract Manufacturer Audit Checklist: 21 CFR 111 + NSF 173 / USP <2750> + the 12 Walk-Away Red Flags
Brand-owners contract out 80%+ of US dietary supplement manufacturing — and inherit every cGMP gap their CMO leaves behind. The FDA does not distinguish 'brand-owner' from 'manufacturer' when it issues a 483 or a recall: both names go on the warning letter. A pre-contract audit is the single highest-ROI quality activity a supplement brand runs. This guide is the auditor's working checklist — 21 CFR 111 walked Subpart by Subpart, NSF/ANSI 455-2 and USP <2750> bolt-ons mapped, the documents to demand on day one, the in-plant walk in the order an FDA investigator does it, and the 12 red flags that mean walk away from the contract.
Day one document request — the 17 documents that tell you everything
The Subpart-by-Subpart walk (21 CFR 111)
NSF 173 / USP <2750> — the retailer-mandatory bolt-ons
The in-plant walk — in the order an FDA investigator does it
The 12 red flags — when to walk away
The quality agreement — what to insist on before signing
Standards covered in this guide
Each standard, retailer code or assurance scheme referenced above has its own deep-dive page with scope, audit detail and common pitfalls.
Supplier qualification under 21 CFR 111.75(a)(2) and NSF/ANSI 455-2 requires an initial on-site or documented audit, a quality agreement, a risk classification (Tier 1 active/botanical, Tier 2 functional excipient, Tier 3 commodity), and a re-qualification cycle (typically Tie...
The Certificate of Analysis (CoA) verification programme is the recurring in-house re-test that establishes — then maintains — supplier qualification under 21 CFR 111.75(a)(2). A defensible programme tests every incoming lot for identity (always) and, on a documented sampling ...
21 CFR 111.75(a)(1)(i) requires at least one appropriate test or examination to verify the identity of any dietary ingredient used as a component, before use. Supplier CoA alone is not sufficient unless the supplier is qualified under 111.75(a)(2) and the qualification is peri...
The Master Manufacturing Record (MMR) under 21 CFR 111.205 must be prepared for each unique formulation and each batch size of a dietary supplement, and must contain: name & strength; complete list of components by established name; accurate statement of weight or measure of e...
The Batch Production Record (BPR) under 21 CFR 111.255 is the executed record for one batch, prepared from and matching the MMR. It must capture identity & weight/measure of each component used, in-process and finished-product specifications, equipment used, date and time of e...
An Annual Product Review (APR) — adapted from 21 CFR 211.180(e) but a best-practice expectation for any commercially mature dietary supplement SKU — is the once-a-year statistical review of every batch produced, covering yields, OOS/OOT events, complaints, deviations, change c...
Where this lives in V5 Ultimate
The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.
Frequently asked
Is NSF 173 or USP <2750> legally required?
How often should I audit my CMO after the initial qualification?
What is the single most common FDA 483 in supplement plants?
How long does a defensible CMO audit take on site?
See it on your shop floor.
Free trial, no credit card, onboard in days, not months.
- 10 CFR 35 medical use readiness — NRC licensing for radiopharmaceuticals
- 21 CFR 111 Readiness: Dietary Supplement cGMP Subparts E & F
- 21 CFR 211 Drug cGMP Readiness Guide
- 21 CFR 212 PET drug cGMP readiness — FDA inspection playbook
- 21 CFR 589 BSE / Ruminant Feed Ban Readiness Guide
- 21 CFR 820 to ISO 13485 Mapping Guide (Including QMSR Harmonisation)
