The Risk Is in the Supply Chain

Most quality failures in finished dietary supplements and cosmetics originate upstream — in raw material sourcing, not in manufacturing. A finished product can be manufactured flawlessly and still fail because the incoming ingredient was misidentified, adulterated, or contaminated. Under 21 CFR Part 111 (dietary supplements) and ISO 22716 (cosmetics GMP), manufacturers bear responsibility for the quality of every ingredient they use, regardless of what their supplier’s CoA says.

Supplier qualification is the process by which you establish that a supplier is capable of consistently providing materials that meet your specifications. It is not a one-time event. It is an ongoing program with defined entry criteria, periodic re-evaluation, and clear escalation procedures when performance deteriorates.

This post outlines a practical three-phase framework that quality and procurement teams can adapt to their organization’s size and risk profile.

Phase 1: Initial Qualification

Step 1: Supplier Questionnaire

Before requesting samples or placing a trial order, send a structured supplier questionnaire. The questionnaire should cover:

Regulatory status: Is the facility registered with FDA (if applicable)? Do they hold relevant certifications (ISO 9001, ISO 22716, NSF, cGMP)?
Quality system: Do they have a documented quality management system? What is their internal testing program?
Testing capabilities: Do they perform testing in-house or outsource to a contract laboratory? If outsourced, which lab, and is it ISO 17025 accredited?
Traceability: Can they trace each lot back to the original source material, including country of origin and harvest/production date?
Change notification: Do they have a formal change control process? Will they notify you of changes to manufacturing site, process, or specification?
Regulatory history: Have they received any FDA warning letters, import alerts, or equivalent regulatory actions in the past three years?

Responses to the questionnaire are not self-certifying. They establish a baseline for further evaluation and create a documented record of the supplier’s representations.

Step 2: Documentation Review

Request and review the following documents before proceeding to sample testing:

Current specification sheet for the material
Representative CoA from a recent lot (with full method references — see our CoA review guide)
Third-party test reports from an ISO 17025 accredited laboratory (not just the supplier’s in-house results)
Safety data sheet (SDS)
Allergen and GMO declaration
Country of origin documentation
For botanical ingredients: botanical voucher specimen or authenticated reference documentation
For controlled or restricted substances: relevant import/export permits or compliance declarations

Step 3: Sample Testing

Obtain a representative sample and test it against your full incoming specification. Do not rely solely on the supplier’s CoA results. At minimum, test:

Identity (appropriate to the material — HPTLC, DNA barcoding, FTIR, etc.)
Assay/potency (if applicable)
Heavy metals per USP <232>/<233> or equivalent
Microbial limits per USP <61>/<62> or equivalent
Any material-specific parameters (e.g., pesticide residues for botanical ingredients, peroxide value for lipid-based materials)

Document the sample testing results and compare them against both your specification and the supplier’s CoA. Discrepancies between your results and the supplier’s CoA should be investigated before qualification proceeds.

Phase 2: Audit

For suppliers of high-risk or high-volume materials, a facility audit is a critical component of qualification. “High-risk” includes botanicals with known adulteration history, materials with complex supply chains, and ingredients used in products with vulnerable populations (children’s supplements, prenatal formulas).

Audit scope should cover:

Facility and equipment: Are manufacturing and storage areas appropriate for the material? Is temperature and humidity control documented?
Incoming material controls: How does the supplier qualify their own raw material sources?
Manufacturing process: Is the process documented and consistently followed? Are critical process parameters monitored and recorded?
Testing program: What tests are performed on each lot? Are test methods validated? Is the laboratory calibrated and maintained?
Change control: Is there a formal process for managing changes to materials, processes, or specifications?
Complaint and deviation handling: How are quality issues identified, documented, and resolved?
Document control: Are specifications, procedures, and records version-controlled and retained per applicable requirements?

For suppliers where an on-site audit is not feasible (e.g., overseas suppliers with limited access), a remote audit using video conferencing and document review is an acceptable alternative, with the understanding that it provides less assurance than an in-person visit. Document the rationale for the remote audit approach in your supplier file.

Phase 3: Ongoing Monitoring

Qualification is not permanent. Supplier performance must be monitored continuously, and qualification status must be re-evaluated when performance changes.

Ongoing monitoring activities:

Lot-by-lot CoA review: Review every CoA against your specification. Track results over time to identify trends — a supplier whose assay results are consistently near the lower specification limit may be at risk of future failures.

Periodic re-testing: Even for established suppliers, perform independent testing on a defined frequency (e.g., every 6 months, or every 10 lots, whichever comes first). The frequency should be risk-based and documented in your supplier qualification procedure.

Supplier change notifications: Require suppliers to notify you in advance of any changes to manufacturing site, process, specification, or testing program. Treat unannounced changes as a qualification event.

Periodic re-audit: Re-audit high-risk suppliers on a defined cycle (typically every 1–3 years, depending on risk classification). Re-audit immediately following any significant quality event.

Approved Supplier List (ASL) maintenance: Maintain a current ASL with qualification status, last audit date, and risk classification for each supplier. Review and update the ASL at least annually.

Escalation Criteria

Define in advance the conditions that will trigger escalation from monitoring to re-qualification or disqualification:

Two or more lot failures within a 12-month period
Failure of an identity test (zero tolerance in most quality programs)
Discovery of undisclosed change to manufacturing site or process
Receipt of FDA warning letter or equivalent regulatory action
CoA discrepancy investigation that cannot be resolved satisfactorily

Practical Checklist: Supplier Qualification

A well-structured supplier qualification program is one of the highest-leverage investments a quality team can make. The cost of qualifying a supplier properly is a fraction of the cost of managing a supply chain failure after it reaches your production floor.

How to Qualify a Raw Material Supplier — A Practical Framework