Supplement Contract Manufacturer Audit Checklist: 21 CFR 111, Red Flags and the Quality Agreement
Your name is on the label, so their gaps are your gaps. A working checklist for auditing a supplement contract manufacturer before you sign.
In Short
- Brands that contract out remain responsible for CGMP compliance of what they sell.
- Identity testing of dietary ingredients cannot be replaced by certificates alone.
- Put responsibilities in a signed quality agreement.
The Dietary Supplement Operations Guide
What the label says. What the batch proves.
- The rules and who decides
- Specification to finished batch
- Test, review, investigate
- Labels, samples and recall
Plus Evidence map and four worksheets.
Get the supplement guideWe ask for your name and email so we can handle this request. The full guide then opens on this site, ready to translate, print or save. Privacy policy. Practical orientation, not legal advice; your quality unit decides which rules apply.
UltimateFree guide
The Dietary Supplement Operations Guide
What the label says. What the batch proves.
Many supplement brands use contract manufacturers. Under 21 CFR Part 111, a firm that contracts out manufacturing remains responsible for ensuring the product it markets is made under CGMP, and FDA has issued warning letters to brand owners as well as manufacturers. A pre-contract audit is how a brand checks a manufacturer before relying on it. This checklist covers documents to request first, a subpart-by-subpart review of Part 111, the plant walk, voluntary certifications, red flags and the quality agreement.
Documents to request before the visit
Organisation chart and quality unit responsibilities. List of written procedures required by Part 111.
More on documents to request before the visit
A master manufacturing record and a completed batch production record for a similar product. Component specifications and how identity is confirmed for dietary ingredients. Supplier qualification records. Recent out-of-specification results and how they were handled. Complaint and returned-product logs. Calibration and cleaning records for key equipment. Most recent FDA inspection outcome and any Form 483 responses. Certificates for any voluntary programmes they hold. A sample product certificate of analysis.
Subpart-by-subpart review of 21 CFR 111
Personnel and training (Subpart B). Physical plant and grounds (C).
21 CFR Part 111 at a glance
Subparts most often reviewed in a pre-contract audit.
| Subpart | Topic | Ask to see |
|---|---|---|
| B | Personnel | Training records for people on your product |
| D | Equipment | Calibration (111.27) and cleaning records |
| E | Specifications | Component and finished-product specifications |
| G | Components | Identity testing of dietary ingredients (111.75(a)(1)) |
| H / I | Master and batch records | One MMR and a completed batch record |
| O | Complaints | Complaint log and reviews |
- B
- Topic
- Personnel
- Ask to see
- Training records for people on your product
- D
- Topic
- Equipment
- Ask to see
- Calibration (111.27) and cleaning records
- E
- Topic
- Specifications
- Ask to see
- Component and finished-product specifications
- G
- Topic
- Components
- Ask to see
- Identity testing of dietary ingredients (111.75(a)(1))
- H / I
- Topic
- Master and batch records
- Ask to see
- One MMR and a completed batch record
- O
- Topic
- Complaints
- Ask to see
- Complaint log and reviews
More on subpart-by-subpart review of 21 CFR 111
Equipment and utensils, including calibration in 111.27 (D). Production and process control system and specifications (E). Quality control responsibilities (F). Components, packaging and labels received, including identity testing of dietary ingredients under 111.75(a)(1) (G). Master manufacturing record (H). Batch production record (I). Laboratory operations (J). Manufacturing operations (K). Packaging and labelling (L). Holding and distributing (M). Returned products (N). Product complaints (O). Records and recordkeeping (P).
Voluntary Certifications
NSF/ANSI 455-2 is a GMP audit standard for supplements; NSF/ANSI 173 and USP's Dietary Supplement Verified Program cover product testing and verification. These are voluntary programmes, often required by retailers, not legal requirements.
More on voluntary Certifications
Ask for the current certificate, its scope and the latest audit findings rather than relying on a logo.
The Plant Walk
Follow the material: receiving and quarantine, sampling, warehouse status, weighing and dispensing, blending and encapsulation or tableting, packaging and labelling, finished-goods holding and shipping. At each point check status labels, line clearance, cleaning records, calibrated scales and how records are filled in.
More on the Plant Walk
Ask an operator to show you the current instruction they work from.
Red Flags
Identity testing of dietary ingredients replaced by supplier certificates alone. No written specifications for components or finished product.
Red Flags
More on red Flags
Batch records completed after the fact or with gaps. Out-of-specification results averaged away or retested until they pass without investigation. Quality unit that reports to production with no authority to reject. Complaints not reviewed. Label claims not reconciled with the formula. Reluctance to share inspection history or let you see the floor.
The Quality Agreement
Write down who does what: specifications, identity and finished-product testing, release of finished product, deviations and notification times, change control, complaints and adverse-event information, recalls, records access, audit rights and subcontracting. Both parties' quality units approve it.
More on the Quality Agreement
Review it when products, sites or processes change.
Questions
Is NSF 173 or USP verification legally required?
No. They are voluntary programmes, though many retailers require one.
How often should we re-audit a contract manufacturer?
Set the frequency by risk and performance in your supplier procedure; many brands audit annually or every two years, with more frequent reviews after problems.
What is a common FDA finding in supplement plants?
Inadequate specifications and identity testing of components under 21 CFR 111.70 and 111.75 are among the most frequently cited areas in FDA warning letters.
How long does an on-site audit take?
It depends on the size of the site and scope; plan at least a full day for a single-product-line facility, and longer for complex sites.
Practical orientation, not legal advice. Rules differ by jurisdiction; your quality and compliance team decides what applies.
Keep reading
Gummy Supplement Contract Manufacturer Selection Guide
Softgel Supplement Contract Manufacturer Selection Guide
21 CFR 111 Readiness: Identity, Master and Batch Records
Africa Supplement Regulation: SAHPRA, NAFDAC & Kenya PPB
Supplement Allergen Control: Validated Cleaning and Labelling
ASEAN Supplement Rules: BPOM, Thai FDA, Vietnam and PH FDA