Home/Supplement Brand Marketing/How to Vet a Manufacturer
[01] Supplement Brand Guide

How to Vet a Supplement Manufacturer Before You Sign the PO

Your contract manufacturer makes the product, but the law and Amazon treat your brand as the one responsible for it. This is the checklist for checking a manufacturer yourself, using the federal rules and documents that actually matter.

Last reviewed October 27, 2026Sources checked October 2026By Ian Smith

Short answer

To vet a supplement manufacturer, confirm it follows FDA's dietary supplement cGMP rule (21 CFR Part 111), holds a current FDA food facility registration, and has a recent accredited third-party GMP audit. Then review its identity testing, sample certificates of analysis, batch records, complaint handling and FDA inspection history, sign a written quality agreement, and test the first production batch at an independent lab.

1 test

Minimum identity test required on every dietary ingredient before it is used

21 CFR 111.75(a)

2x

Reserve samples must hold at least twice the amount needed for all required tests

21 CFR 111.83

1 yr

Records kept at least one year past the shelf-life date when shelf-life dating is used

21 CFR 111.605

Part 111

The federal manufacturing rule (cGMP) every supplement maker must follow

21 CFR Part 111, eCFR

[02] Start here

Your Name Is on the Label, So the Responsibility Is Yours

Disclosure: Disclosure: Evolve Media Agency sells brand management, listing, creative and launch services to supplement brands. We do not find, recommend or broker manufacturers, and nothing on this page is legal or regulatory advice. For a specific formula or ingredient question, talk to a regulatory attorney.

Many first-time supplement founders assume the manufacturer carries the compliance load. FDA does not see it that way. Under the Dietary Supplement Health and Education Act, FDA says manufacturers and distributors are responsible for evaluating the safety and labeling of their products before marketing (FDA: Dietary Supplements). FDA does not approve a supplement before it goes on sale, so nobody official checks your manufacturer for you before launch.

The cGMP rule (current Good Manufacturing Practice, the federal standard for how supplements are made, tested, packaged, labeled and held) lives at 21 CFR Part 111. It applies to anyone who manufactures, packages, labels or holds a dietary supplement. In a 2017 warning letter to a brand that sold contract-made products under its own label, FDA said the brand had "overarching and ultimate responsibility" for cGMP compliance and had to know how its contract manufacturer made the product well enough to approve it for release (FDA warning letter, Ultra Perform, 2017).

FDA's own small entity compliance guide says a firm that has a product made under its label has an obligation to know what manufacturing activities are performed and how (FDA Small Entity Compliance Guide). Vetting is how you meet that obligation, and how you avoid a batch that fails Amazon's third-party verification after you have paid for it.

For the short list of questions to read on a call, use the companion page, 24 questions to ask a supplement manufacturer. To see where vetting fits in the whole sequence, read the guide to launching a supplement brand on Amazon.

[03] The baseline

Five Credentials to Confirm Before Anything Else

These are pass or fail. A manufacturer that cannot show all five in writing is not ready for your formula.

1. A working cGMP system under 21 CFR Part 111

Part 111 requires written specifications for components, in-process material, labels and finished product (21 CFR 111.70), a master manufacturing record for each formula and batch size (111.205), a batch production record for every batch (111.255), and quality control staff whose QC duties are kept separate from their other jobs (111.12). Ask to see a redacted master manufacturing record and batch record. A real cGMP shop can show you the format in minutes.

2. A current FDA food facility registration

Supplements count as food for registration purposes; the definition of food in 21 CFR 1.227 lists dietary supplements and dietary ingredients. Registrations must be renewed from October 1 to December 31 of each even-numbered year (21 CFR 1.230), so the current renewal window closes December 31, 2026. FDA does not publish the registration list (21 CFR 1.243), so ask for written proof of the current registration. Registration is not approval: under 21 CFR 1.242 a registration number does not convey FDA approval or endorsement of the facility or its products. Treat any "FDA approved facility" claim as a warning sign.

3. A recent accredited third-party GMP audit

A third-party GMP audit means an outside auditing body visited the plant, reviewed documents, watched processes and interviewed staff. NSF's GMP certification under NSF/ANSI 455-2, for example, involves an on-site audit plus ongoing surveillance audits (NSF). NSF, USP and UL are examples of the types of organizations that run these programs, not recommendations. For Amazon, this matters directly: attorneys at Epstein Becker Green reported in January 2026 that Amazon accepts accredited third-party cGMP audits through approved TIC providers, and does not accept private, first-party or consulting audits, or FDA inspections, as proof (Epstein Becker Green). Check the certificate's scope (which site, which dosage forms) and its expiration date.

4. A clean, explainable FDA inspection history

When FDA investigators find objectionable conditions, they hand management a Form 483. FDA says a 483 is not a final agency determination and encourages the company to respond in writing with a corrective action plan (FDA Form 483 FAQ). Ask for the last inspection date, any 483 and the response, and search FDA's warning letters by company name.

5. Access to an accredited lab

ISO/IEC 17025 is the international standard for testing lab competence and impartiality. Ask whether the manufacturer's lab, and any outside lab it uses, is accredited to it for the methods your formula needs. Accreditation is method-specific.

Amazon's supplement rules change often. As of October 2026, trade press reports that Amazon's third-party cGMP verification requirement now covers all dietary supplements. NutraIngredients reported in December 2025 that sellers get 90 days to open a documentation request with a TIC provider after Amazon contacts them, while an Amazon recap in Seller Forums mentioned about 30 days of notice, so go by the date in your Account Health notice. Confirm the current version on the Seller Central dietary supplements policy page and read our breakdown of the Amazon dietary supplement policy.
[04] Where batches fail

Testing, COAs and Records: What to Ask to See

A COA (certificate of analysis) is the lab report that says what was tested in a batch, by what method, against what limit, and what the actual result was. Most of the real quality signal in a manufacturer lives in how it tests incoming ingredients and finished batches, and in how honest its COAs are. Part 111 sets the floor. Your job is to see whether the manufacturer actually works at or above it.

What to requestWhat a good one shows
Identity testing procedure for dietary ingredientsAt least one appropriate identity test or exam on every dietary ingredient before use, as 21 CFR 111.75(a) requires, not just reliance on the supplier's paperwork
Supplier qualification fileProof the manufacturer confirmed a supplier's COA results before relying on them for other components, with methods, limits and actual results listed, re-checked periodically and approved by QC (111.75(a)(2))
Two or three redacted finished-product COAsNamed methods, numeric limits and actual results for each dietary ingredient, plus contaminants such as heavy metals and microbials; not just the word Pass
Finished batch testing planEither every batch tested or a statistically sound sampling plan, with QC-approved documentation for the basis (111.75(c))
Reserve sample policySamples of each distributed lot, in the same container-closure system, at least twice the amount needed for all tests, kept one year past shelf life or two years from distribution (111.83)
Stability data behind the expiration dateFDA does not require an expiration date, but its compliance guide says you should have data to support any date you print
Complaint and return proceduresWritten procedures, a qualified person reviewing every complaint, and QC approval of investigations (111.560) and returned-product decisions (111.510 to 111.530)
Record retention policyRecords kept one year past shelf life, or two years past distribution of the last batch, and available to FDA on request (111.605 and 111.610)

Why push this hard on identity testing? Because FDA cites it in warning letters. A January 2026 warning letter to one supplement firm cited failure to run at least one identity test on dietary ingredients before use, missing finished product specifications, and no written master manufacturing record (FDA warning letter, January 2026). Those three items are on your checklist above for a reason.

Then test your first production run yourself. Amazon routes supplement verification through approved testing, inspection and certification organizations (TIC providers), and some categories carry extra product testing standards. See Amazon supplement testing requirements. A manufacturer that resists independent testing of its own batch is telling you something.

Want a second set of eyes on this? Book a free 30-minute call, email Ian at [email protected], or call or text 719-257-3557. Bring your label, formula sheet or ASIN and we will look at it together.
[05] Put it in writing

The Quality Agreement, MOQs and the Terms That Protect You

A quality agreement is a written contract, separate from the price quote, that spells out who does which cGMP task. FDA uses the term in its guidance for contract drug manufacturing, where it describes the agreement as the tool that defines each party's manufacturing activities (FDA quality agreements guidance). Supplement brands use the same idea. Because Part 111 still makes you responsible for releasing product under your label, the agreement is where you make sure you will actually receive what you need to make that call.

Release and records

Who releases the batch, which records you receive with every lot (COA, batch record summary, deviations), and how fast you get them.

Change control

The manufacturer must tell you, in writing and before production, about any change in ingredient supplier, formula, process, facility or subcontractor.

Deviations and failures

What happens when a batch fails a spec: notice timeline, investigation, who pays for rework or replacement, and whether you can reject the lot.

Complaints and adverse events

The brand named on the label is the responsible person for serious adverse event reports. Those reports go to FDA within 15 business days, and the records are kept for six years (21 U.S.C. 379aa-1). The agreement should say how fast the manufacturer forwards any complaint it receives.

Audit rights

Your right, or your auditor's right, to visit the plant and review records with reasonable notice.

Formula and label ownership

Whether you own the formula, the label artwork and the Supplement Facts panel, and whether you can take them to another manufacturer. A regulatory or business attorney should review this part.

Commercial terms belong on the same checklist. Get the minimum order quantity (MOQ, the smallest run the plant will make) in writing for each SKU, with per-unit pricing at MOQ and two larger tiers, lead time from deposit to finished goods, and payment terms. MOQs vary too much by format and formula for any public range to mean much, so collect quotes from three manufacturers using the same spec, then check the math against our cost to launch a supplement brand budgets and the landed cost guide.

[06] The process

How to Vet a Supplement Manufacturer in Eight Steps

1

Write your product spec first

List every ingredient, the form, the amount per serving, the dosage form (capsule, powder, gummy), the target count, packaging and any claims you plan to make, such as vegan or non-GMO. Send the same spec to every manufacturer so the quotes compare.

2

Shortlist three to five manufacturers that make your dosage form

A gummy plant and a capsule plant are different businesses. Ask each for its current FDA registration proof, its third-party GMP certificate with scope and expiration, and whether it already makes your format at your volume.

3

Run the screening call

Use the question list and scorecard. Anyone who will not answer in writing, or who cannot name their QC lead, is out.

4

Review the documents

Request redacted COAs, a sample batch record, the identity testing SOP (standard operating procedure), the complaint SOP, and the last FDA inspection outcome with any 483 response. Compare COA methods and limits against your spec.

5

Visit or audit the plant

Walk the floor in person if you can, or hire an independent auditor. Look at ingredient quarantine areas, labeled status tags, line clearance between products, and whether the QC lab is staffed and in use.

6

Negotiate the quality agreement and supply terms

Lock release records, change control, deviation handling, complaint forwarding, audit rights, MOQ, lead time and formula ownership in writing before you pay a deposit.

7

Order a pilot run and test it independently

Send retained units from the first batch to an ISO/IEC 17025 accredited lab for identity, potency and contaminants. Match the results against the manufacturer's COA and your label.

8

Re-check on a schedule

Ask for the renewed GMP certificate when it expires, confirm the FDA registration renewal each even-numbered year, and test a retained sample from a new batch at least once a year or whenever a supplier changes.

[07] Walk away

Red Flags That Should End the Conversation

"Our facility is FDA approved"

FDA registration does not convey approval or endorsement (21 CFR 1.242). A manufacturer that misstates this basic rule will misstate others.

COAs that only say Pass

Part 111 COA reliance requires methods, limits and actual results. A summary page with checkmarks is not a COA.

No identity testing on incoming dietary ingredients

Relying only on the supplier's COA for dietary ingredients does not meet 21 CFR 111.75(a), and FDA cites it in warning letters, including one from January 2026.

An expired or out-of-scope GMP certificate

The certificate covers a different site, a different dosage form, or lapsed last year. For Amazon, the certificate needs to be current.

No written quality agreement

A quote and a handshake leave you with the legal responsibility and none of the records.

Refusal to let you test or audit

Good manufacturers expect brand audits and independent tests. Resistance usually means the paperwork will not match the product.

Happy to write disease claims on your label

A manufacturer that offers to print cure, treat or prevent language is not protecting you. See our guide to structure/function claims.

One red flag is enough. A low price does not offset any item on this list, because the costs of a failed batch, a suppressed ASIN or a recall land on your brand, not the plant.
[08] Be honest about it

When to Get Help and When to Do It Yourself

Most founders can run this process themselves. You need a written spec, a free afternoon for each screening call, a careful read of the documents and the budget for one independent lab test. If you have a simple formula with common ingredients, one dosage form and a manufacturer that hands over clean paperwork without being chased, do it yourself and save the fee.

Get outside help in three cases. Hire a regulatory attorney when the formula includes a novel ingredient, anything drug-adjacent, or international sales. Hire an independent GMP auditor when you cannot visit the plant, especially an overseas one. And get a brand manager when the product is fine but you do not have the hours to run the Amazon side: documentation, listing, images, launch and ads.

That last part is where Evolve comes in. We do not choose your manufacturer, broker a deal or do lab testing. Inside Amazon brand management, we track the documents Amazon asks for, build your listing to match the label exactly, write claim-checked copy and creative, and run the launch. Plans are paid upfront monthly: Brand Support at $750 for 5 hours, Brand Manager at $1,250 for 10 hours, Brand Manager Plus at $2,000 for 20 hours, and Full Brand Management at $3,600 for 40 hours. Hours do not roll over and plans run month to month. Label and packaging design is quoted per project or done inside brand management hours, and the Launch Roadmap is $995 on the pricing page.

If you want a second set of eyes before you sign with a manufacturer, email Ian at [email protected], call or text 719-257-3557, or book a free 30-minute call. We will tell you which documents are missing and whether the product is ready for Amazon. You can also see how we work with supplement companies on our supplement brand marketing page, or read our supplements brand playbook.

[09] Sources

Where These Facts Come From

Rules change. Everything on this page was checked against the sources above in October 2026. Confirm current Amazon requirements in Seller Central before you list, and talk to a regulatory attorney for legal advice on your formula or label.
[10] Who Wrote This

About the Author

Ian Smith, founder of Evolve Media Agency

Ian Smith

Founder, Evolve Media Agency

Ian has run Evolve Media Agency since 2017 and has sold on Amazon since 2015. He and Megan run brand management, launches, PPC and in-house photo and video for Amazon, Shopify and TikTok Shop brands, including supplement brands, from Colorado. Questions about this page go straight to him at [email protected].

  Watch on YouTube →

[11] FAQ

Common Questions

How do I know if a supplement manufacturer is cGMP compliant?
Ask for a current third-party GMP certificate from an accredited auditor, check its scope and expiration date, and review redacted batch records and COAs. Confirm the plant runs identity tests on every dietary ingredient, as 21 CFR 111.75 requires. Then check its FDA inspection history and any Form 483 response. A plant that is truly compliant can produce all of this quickly and in writing.
Is an FDA registered facility the same as FDA approved?
No. Supplement facilities register with FDA as food facilities and renew every even-numbered year, but under 21 CFR 1.242 a registration number does not convey FDA approval or endorsement of the facility or its products. FDA also does not approve dietary supplements before they go on sale. Treat any manufacturer advertising an FDA approved facility as a warning sign.
Am I responsible if my contract manufacturer makes a mistake?
Largely, yes. FDA has told brands that sell contract-made supplements under their own label that they carry ultimate responsibility for cGMP compliance and must know how the product is made well enough to approve its release. Your brand is also the responsible person for serious adverse event reports. A quality agreement helps assign tasks, but it does not move the legal responsibility off your label.
What should a supplement certificate of analysis include?
A useful COA names the product and lot number, each test performed, the test method, the specification limit and the actual numeric result, plus the lab and date. It should cover each dietary ingredient's identity and amount and contaminants such as heavy metals and microbes. A page that only says pass, with no methods or results, is not enough to rely on.
Do I need my own lab testing if the manufacturer gives me a COA?
Plan on it, at least for the first batch and periodically after. Independent testing at an ISO/IEC 17025 accredited lab confirms the manufacturer's COA and your label. For Amazon, supplement verification runs through approved TIC providers, so you want to know a batch passes before inventory ships. Re-test whenever an ingredient supplier or formula changes.
What is a quality agreement with a supplement manufacturer?
It is a written contract, separate from pricing, that spells out who does which quality task: batch release records, change notifications, deviation handling, complaint forwarding and audit rights. FDA describes the concept in its guidance for contract drug manufacturing, and supplement brands use the same structure. Have an attorney review the ownership and liability terms before you sign.
Can Evolve Media Agency recommend a supplement manufacturer?
No. Evolve does not find, recommend or broker manufacturers, and we do not do lab testing or give legal advice. We teach brands how to vet their own, and through brand management we handle the Amazon side: documentation tracking, listings that match the label, compliant creative, launch and PPC. Book a free 30-minute call or email Ian at [email protected].

Free · 30 minutes · No pitch deck

Pick the Plant. We Will Handle Amazon.

You vet the manufacturer; we make sure the listing, label images and launch hold up to Amazon's supplement rules. Book a free 30-minute call and bring your manufacturer's documents.

Rather email? Write Ian at [email protected]. Call or text 719-257-3557. Watch our YouTube channel, grab the free Ecom Profit Box guides, or join the newsletter.

Free 30-minute call

Want Ian to Look at Your Brand?

Tell us what you sell and where you are stuck. Ian replies within one business day, and you get an email right away with a link to book a free 30-minute call.

  • Brand management, PPC, listings, launches and content
  • Amazon, Shopify and TikTok Shop brands
  • A real reply from Ian, not a sales bot

Rather talk now? Call or text 719-257-3557 or pick a time on Calendly.

Your information stays with us. We never share it.