Your contract manufacturer makes the product, but the law and Amazon treat your brand as the one responsible for it. This is the checklist for checking a manufacturer yourself, using the federal rules and documents that actually matter.
Short answer
To vet a supplement manufacturer, confirm it follows FDA's dietary supplement cGMP rule (21 CFR Part 111), holds a current FDA food facility registration, and has a recent accredited third-party GMP audit. Then review its identity testing, sample certificates of analysis, batch records, complaint handling and FDA inspection history, sign a written quality agreement, and test the first production batch at an independent lab.
1 test
Minimum identity test required on every dietary ingredient before it is used
21 CFR 111.75(a)
2x
Reserve samples must hold at least twice the amount needed for all required tests
21 CFR 111.83
1 yr
Records kept at least one year past the shelf-life date when shelf-life dating is used
21 CFR 111.605
Part 111
The federal manufacturing rule (cGMP) every supplement maker must follow
21 CFR Part 111, eCFR
Many first-time supplement founders assume the manufacturer carries the compliance load. FDA does not see it that way. Under the Dietary Supplement Health and Education Act, FDA says manufacturers and distributors are responsible for evaluating the safety and labeling of their products before marketing (FDA: Dietary Supplements). FDA does not approve a supplement before it goes on sale, so nobody official checks your manufacturer for you before launch.
The cGMP rule (current Good Manufacturing Practice, the federal standard for how supplements are made, tested, packaged, labeled and held) lives at 21 CFR Part 111. It applies to anyone who manufactures, packages, labels or holds a dietary supplement. In a 2017 warning letter to a brand that sold contract-made products under its own label, FDA said the brand had "overarching and ultimate responsibility" for cGMP compliance and had to know how its contract manufacturer made the product well enough to approve it for release (FDA warning letter, Ultra Perform, 2017).
FDA's own small entity compliance guide says a firm that has a product made under its label has an obligation to know what manufacturing activities are performed and how (FDA Small Entity Compliance Guide). Vetting is how you meet that obligation, and how you avoid a batch that fails Amazon's third-party verification after you have paid for it.
For the short list of questions to read on a call, use the companion page, 24 questions to ask a supplement manufacturer. To see where vetting fits in the whole sequence, read the guide to launching a supplement brand on Amazon.
These are pass or fail. A manufacturer that cannot show all five in writing is not ready for your formula.
Part 111 requires written specifications for components, in-process material, labels and finished product (21 CFR 111.70), a master manufacturing record for each formula and batch size (111.205), a batch production record for every batch (111.255), and quality control staff whose QC duties are kept separate from their other jobs (111.12). Ask to see a redacted master manufacturing record and batch record. A real cGMP shop can show you the format in minutes.
Supplements count as food for registration purposes; the definition of food in 21 CFR 1.227 lists dietary supplements and dietary ingredients. Registrations must be renewed from October 1 to December 31 of each even-numbered year (21 CFR 1.230), so the current renewal window closes December 31, 2026. FDA does not publish the registration list (21 CFR 1.243), so ask for written proof of the current registration. Registration is not approval: under 21 CFR 1.242 a registration number does not convey FDA approval or endorsement of the facility or its products. Treat any "FDA approved facility" claim as a warning sign.
A third-party GMP audit means an outside auditing body visited the plant, reviewed documents, watched processes and interviewed staff. NSF's GMP certification under NSF/ANSI 455-2, for example, involves an on-site audit plus ongoing surveillance audits (NSF). NSF, USP and UL are examples of the types of organizations that run these programs, not recommendations. For Amazon, this matters directly: attorneys at Epstein Becker Green reported in January 2026 that Amazon accepts accredited third-party cGMP audits through approved TIC providers, and does not accept private, first-party or consulting audits, or FDA inspections, as proof (Epstein Becker Green). Check the certificate's scope (which site, which dosage forms) and its expiration date.
When FDA investigators find objectionable conditions, they hand management a Form 483. FDA says a 483 is not a final agency determination and encourages the company to respond in writing with a corrective action plan (FDA Form 483 FAQ). Ask for the last inspection date, any 483 and the response, and search FDA's warning letters by company name.
ISO/IEC 17025 is the international standard for testing lab competence and impartiality. Ask whether the manufacturer's lab, and any outside lab it uses, is accredited to it for the methods your formula needs. Accreditation is method-specific.
A COA (certificate of analysis) is the lab report that says what was tested in a batch, by what method, against what limit, and what the actual result was. Most of the real quality signal in a manufacturer lives in how it tests incoming ingredients and finished batches, and in how honest its COAs are. Part 111 sets the floor. Your job is to see whether the manufacturer actually works at or above it.
Why push this hard on identity testing? Because FDA cites it in warning letters. A January 2026 warning letter to one supplement firm cited failure to run at least one identity test on dietary ingredients before use, missing finished product specifications, and no written master manufacturing record (FDA warning letter, January 2026). Those three items are on your checklist above for a reason.
Then test your first production run yourself. Amazon routes supplement verification through approved testing, inspection and certification organizations (TIC providers), and some categories carry extra product testing standards. See Amazon supplement testing requirements. A manufacturer that resists independent testing of its own batch is telling you something.
A quality agreement is a written contract, separate from the price quote, that spells out who does which cGMP task. FDA uses the term in its guidance for contract drug manufacturing, where it describes the agreement as the tool that defines each party's manufacturing activities (FDA quality agreements guidance). Supplement brands use the same idea. Because Part 111 still makes you responsible for releasing product under your label, the agreement is where you make sure you will actually receive what you need to make that call.
Who releases the batch, which records you receive with every lot (COA, batch record summary, deviations), and how fast you get them.
The manufacturer must tell you, in writing and before production, about any change in ingredient supplier, formula, process, facility or subcontractor.
What happens when a batch fails a spec: notice timeline, investigation, who pays for rework or replacement, and whether you can reject the lot.
The brand named on the label is the responsible person for serious adverse event reports. Those reports go to FDA within 15 business days, and the records are kept for six years (21 U.S.C. 379aa-1). The agreement should say how fast the manufacturer forwards any complaint it receives.
Your right, or your auditor's right, to visit the plant and review records with reasonable notice.
Whether you own the formula, the label artwork and the Supplement Facts panel, and whether you can take them to another manufacturer. A regulatory or business attorney should review this part.
Commercial terms belong on the same checklist. Get the minimum order quantity (MOQ, the smallest run the plant will make) in writing for each SKU, with per-unit pricing at MOQ and two larger tiers, lead time from deposit to finished goods, and payment terms. MOQs vary too much by format and formula for any public range to mean much, so collect quotes from three manufacturers using the same spec, then check the math against our cost to launch a supplement brand budgets and the landed cost guide.
List every ingredient, the form, the amount per serving, the dosage form (capsule, powder, gummy), the target count, packaging and any claims you plan to make, such as vegan or non-GMO. Send the same spec to every manufacturer so the quotes compare.
A gummy plant and a capsule plant are different businesses. Ask each for its current FDA registration proof, its third-party GMP certificate with scope and expiration, and whether it already makes your format at your volume.
Use the question list and scorecard. Anyone who will not answer in writing, or who cannot name their QC lead, is out.
Request redacted COAs, a sample batch record, the identity testing SOP (standard operating procedure), the complaint SOP, and the last FDA inspection outcome with any 483 response. Compare COA methods and limits against your spec.
Walk the floor in person if you can, or hire an independent auditor. Look at ingredient quarantine areas, labeled status tags, line clearance between products, and whether the QC lab is staffed and in use.
Lock release records, change control, deviation handling, complaint forwarding, audit rights, MOQ, lead time and formula ownership in writing before you pay a deposit.
Send retained units from the first batch to an ISO/IEC 17025 accredited lab for identity, potency and contaminants. Match the results against the manufacturer's COA and your label.
Ask for the renewed GMP certificate when it expires, confirm the FDA registration renewal each even-numbered year, and test a retained sample from a new batch at least once a year or whenever a supplier changes.
FDA registration does not convey approval or endorsement (21 CFR 1.242). A manufacturer that misstates this basic rule will misstate others.
Part 111 COA reliance requires methods, limits and actual results. A summary page with checkmarks is not a COA.
Relying only on the supplier's COA for dietary ingredients does not meet 21 CFR 111.75(a), and FDA cites it in warning letters, including one from January 2026.
The certificate covers a different site, a different dosage form, or lapsed last year. For Amazon, the certificate needs to be current.
A quote and a handshake leave you with the legal responsibility and none of the records.
Good manufacturers expect brand audits and independent tests. Resistance usually means the paperwork will not match the product.
A manufacturer that offers to print cure, treat or prevent language is not protecting you. See our guide to structure/function claims.
Most founders can run this process themselves. You need a written spec, a free afternoon for each screening call, a careful read of the documents and the budget for one independent lab test. If you have a simple formula with common ingredients, one dosage form and a manufacturer that hands over clean paperwork without being chased, do it yourself and save the fee.
Get outside help in three cases. Hire a regulatory attorney when the formula includes a novel ingredient, anything drug-adjacent, or international sales. Hire an independent GMP auditor when you cannot visit the plant, especially an overseas one. And get a brand manager when the product is fine but you do not have the hours to run the Amazon side: documentation, listing, images, launch and ads.
That last part is where Evolve comes in. We do not choose your manufacturer, broker a deal or do lab testing. Inside Amazon brand management, we track the documents Amazon asks for, build your listing to match the label exactly, write claim-checked copy and creative, and run the launch. Plans are paid upfront monthly: Brand Support at $750 for 5 hours, Brand Manager at $1,250 for 10 hours, Brand Manager Plus at $2,000 for 20 hours, and Full Brand Management at $3,600 for 40 hours. Hours do not roll over and plans run month to month. Label and packaging design is quoted per project or done inside brand management hours, and the Launch Roadmap is $995 on the pricing page.
If you want a second set of eyes before you sign with a manufacturer, email Ian at [email protected], call or text 719-257-3557, or book a free 30-minute call. We will tell you which documents are missing and whether the product is ready for Amazon. You can also see how we work with supplement companies on our supplement brand marketing page, or read our supplements brand playbook.
eCFR: 21 CFR Part 111, Current Good Manufacturing Practice for Dietary Supplements
ecfr.gov · Open source →
eCFR: 21 CFR Part 111 Subpart P, Records and Recordkeeping
ecfr.gov · Open source →
eCFR: 21 CFR Part 1 Subpart H, Registration of Food Facilities
ecfr.gov · Open source →
FDA: Small Entity Compliance Guide, CGMP for Dietary Supplements
fda.gov · Open source →
FDA: Dietary Supplements
fda.gov · Open source →
FDA: Warning letter on contract-manufactured products (2017)
fda.gov · Open source →
FDA: Warning letter to a supplement firm (January 2026)
fda.gov · Open source →
FDA: Form 483 Frequently Asked Questions
fda.gov · Open source →
FDA Data Dashboard: Inspections
datadashboard.fda.gov · Open source →
FDA: Contract Manufacturing Arrangements for Drugs, Quality Agreements
fda.gov · Open source →
Cornell LII: 21 U.S.C. 379aa-1, Serious adverse event reporting for dietary supplements
law.cornell.edu · Open source →
NSF: NSF/ANSI 455-2 Dietary Supplement GMP Certification
nsf.org · Open source →
ISO: ISO/IEC 17025:2017
iso.org · Open source →
Epstein Becker Green: Amazon's Third-Party Supplement Testing Mandate Explained (Jan 2026)
ebglaw.com · Open source →
NutraIngredients: Amazon expands TIC cGMP requirement to all supplement products (Dec 2025)
nutraingredients.com · Open source →
Amazon Seller Central: Dietary supplements policy
sellercentral.amazon.com · Open source →


Founder, Evolve Media Agency
Ian has run Evolve Media Agency since 2017 and has sold on Amazon since 2015. He and Megan run brand management, launches, PPC and in-house photo and video for Amazon, Shopify and TikTok Shop brands, including supplement brands, from Colorado. Questions about this page go straight to him at [email protected].
Checklist
The call script, what good and weak answers sound like, red flags and a 30-point scorecard.
Guide
What Amazon's third-party verification checks, who does the testing and what fails.
Service
Monthly brand manager plans from $750 that run the Amazon side of your supplement brand.
Free · 30 minutes · No pitch deck
You vet the manufacturer; we make sure the listing, label images and launch hold up to Amazon's supplement rules. Book a free 30-minute call and bring your manufacturer's documents.
Rather email? Write Ian at [email protected]. Call or text 719-257-3557. Watch our YouTube channel, grab the free Ecom Profit Box guides, or join the newsletter.
Tell us what you sell and where you are stuck. Ian replies within one business day, and you get an email right away with a link to book a free 30-minute call.
Rather talk now? Call or text 719-257-3557 or pick a time on Calendly.