Facility Audit for GMP Compliant Supplement Certification

Regulatory agencies have increased scrutiny of dietary supplement manufacturing. FDA observations under 21 CFR Part 111 increased by 46% since 2023. Major retailers, including Amazon, require documented third-party GMP audit for manufacturing facilities before listing products. Pursuing GMP compliant supplement certification now reflects operational discipline and documented evidence that manufacturing processes meet established standards. Certification positions facilities to meet both regulatory and commercial requirements. The main compliance frameworks are 21 CFR Part 111 and ANSI 455-2.

What Is GMP-Compliant Supplement Certification?

GMP-compliant supplement certification is formal, documented recognition that a dietary supplement manufacturing, packaging, or holding facility adheres to Good Manufacturing Practice standards, as verified through onsite independent third-party audits. Certification confirms that systematic controls exist across the entire production process, beginning with raw material procurement and continuing through finished product release. Facilities must demonstrate that these controls are consistently implemented and recorded.

Finished product testing is vital as it is the only thing that can verify the outcome of good manufacturing practices. An onsite audit is the foundation that confirms the integrity of the manufacturing process. GMP certification addresses the procedural elements that testing doesn't evaluate; it validates the systems, procedures, and personnel practices essential for consistent specification compliance. Certification documentation provides evidence of regulatory compliance to customers, retailers, and regulatory authorities.

Essential GMP Frameworks: 21 CFR 111 and ANSI 455-2

United States dietary supplement manufacturers are legally required to comply with 21 CFR Part 111, the FDA's Current Good Manufacturing Practice regulation for dietary supplements. This regulation, promulgated in 2007, applies to all domestic and foreign entities that manufacture, package, label, or hold dietary supplements for U.S. distribution. Regulatory requirements span 16 subparts, including standards for personnel qualifications, facility and equipment, raw material identity testing, batch production records, laboratory operations, and complaint handling.

ANSI 455-2, developed by ANSI in collaboration with industry and public health groups, is a voluntary consensus standard. It incorporates 21 CFR Part 111 requirements and adds requirements such as metal detection or x-ray screening, documented HACCP or Preventive Controls safety plans, complete inventory traceability, internal audits, and formal corrective and preventive action (CAPA) programs. ANSI 455-2's structure aligns with a quality systems approach found in ISO 9001. Retailers and supply chain partners widely recognize this standard, and ANSI 455-2 certification can reduce the total number of audits required by a facility as it has been adopted by the Global Retailer and Manufacturing Alliance (GRMA).

21 CFR Part 111 sets the mandatory minimum requirements under federal law. ANSI 455-2 supplements these requirements with additional quality system elements that align with commercial and retailer-specific expectations. The two frameworks do not compete; rather, they are complementary.

Mapping the Path to GMP-Compliant Supplement Certification

Facilities pursue GMP-compliant supplement certification through a structured approach. Each process step forms a foundation for subsequent audit readiness, and deficiencies at any stage become evident during formal audits.

The process generally begins with a gap assessment against either 21 CFR Part 111 or ANSI 455-2, depending on the desired certification. Facilities identify variations between current practices and required standards. Frequent gaps include insufficient documentation, absent raw material identity testing, incomplete training records, and lack of defined complaint handling or recall procedures.

Facilities then develop or refine documentation, including Master Manufacturing Records (MMR), Batch Production Records (BPR), Standard Operating Procedures (SOPs), product specifications, and laboratory testing protocols. Each quality-impacting process must have a written procedure and a verification mechanism to ensure consistent implementation.

Following documentation, facilities must validate manufacturing processes to confirm consistent production of products that meet preset specifications. Facilities must document and maintain current personnel training, covering GMP roles, hygiene practices, and procedure-specific duties. Internal audits and mock inspections should be conducted before the external third-party audit to identify and address deficiencies.

The BSCG Certified GMP program follows this structure, conducting onsite audits every two years and reviewing corrective actions before certificate issuance. BSCG also offers the Certified GMP program to supplement brands in order to address brand and product level details that may not be covered by facility audits.

Preparing for the On-Site GMP Audit

An onsite GMP audit for a single facility usually takes two to three days, depending on the operational scope and complexity. Auditors systematically review documentation, observe manufacturing activities, and interview personnel. The methodology closely follows that of FDA inspections.

Documentation readiness is critical for audit preparation. Auditors typically review SOPs first. All documents must be current and controlled copies. Auditors require access to batch records, training logs, equipment calibration and cleaning records, supplier qualification files, certificates of analysis, complaint records, and CAPA documentation. Regulatory requirements specify that batch records be retained for at least one year beyond a product's shelf life or two years from last distribution if shelf life is not established.

Facilities must meet required hygiene standards and maintain equipment calibration records. Cleaning validation records must show that cleaning procedures are both effective and consistently applied.

Personnel must be prepared to articulate their GMP responsibilities and describe the procedures they implement. Training records must match current roles and demonstrate recent instruction. Certified GMP audits are structured to assess compliance with individual subparts of 21 CFR Part 111, as the FDA would during inspection. Facilities that maintain readiness for regulatory review are generally prepared for third-party certification audits.

Addressing Common Compliance Pitfalls

The FDA most frequently observes failure to establish product specifications for the identity, purity, strength, and composition of finished batches under 21 CFR Part 111. The second most common observation cites missing identity testing for raw materials. These deficiencies reflect failures in documentation and process control rather than shortcomings in equipment or facility conditions. These individual brand and product level details may be missed by facility audits that typically scrutinize procedures not results. This is one reason BSCG provides brand level GMP compliant supplement certification in addition to facility audits.

Other common issues include incomplete batch production records, outdated or missing SOPs, insufficient employee training documentation, and missing or unverified equipment cleaning or calibration records. Inadequate sanitation practices, such as sharing tools between allergen and non-allergen areas or not cleaning between production runs, also result in compliance observations.

To correct these issues, facilities generally update SOPs, strengthen or implement a Quality Management System (QMS), expand documentation of employee training, and formalize supplier verification procedures. All corrective actions must be documented, and facilities must retain proof that remedial steps were both implemented and verified. A CAPA system is required to demonstrate that findings are tracked and closed; regulators and auditors rely on this documentation to assess the effectiveness of the facility’s quality systems.

Partnering With a Credible Third-Party Certification Organization

Third-party GMP certification offers objective verification of compliance beyond internal self-assessment. Certification substantiates regulatory alignment for customers, retailers, and oversight authorities, providing assurance that meets recognized standards.

Several organizations provide GMP certification for dietary supplement facilities, including NSF International, USP, Eurofins Assurance, and BSCG. Facilities should select a certification body based on the scope of required audits, applicable frameworks, and recognition of the certification by relevant commercial partners.

For brands and own-label products, the BSCG Certified GMP for supplement brands program addresses compliance at the brand and product levels. Brand level GMP compliance review includes a core requirement for the manufacturer to be third-party certified for 21 CFR 111.

Certification documents confirm process compliance and do not serve as endorsements of products manufactured at certified facilities. Product efficacy and safety claims are outside the scope of certification.

Elevating Standards for Ongoing Compliance

GMP certification requires ongoing compliance. Most programs mandate periodic re-audits, typically every one or two years, and internal monitoring with continuous improvement. Internal audits conducted annually and external third-party audits on a set cycle provide a framework for identifying issues before regulatory findings result.

The "c" in cGMP signifies "current," and facilities must ensure compliance with up-to-date regulatory requirements. Systems that complied in past decades may not meet current standards. Facilities need to monitor changes in FDA guidance, retailer requirements, and industry standards, and update their quality systems accordingly.

When new product lines are introduced, GMP obligations require new Master Manufacturing Records, updated specifications, testing protocols for new ingredients, and process validation before production. Certification bodies should be informed of changes to the scope of operations, as the scope of audit may require revision.

Sustained GMP-compliant supplement certification is the result of operational rigor, consistent documentation, and methodical workforce training. Facilities that maintain compliance histories and robust quality systems reduce regulatory risk and support stable manufacturing outcomes.

Frequently Asked Questions

What is the difference between 21 CFR Part 111 and ANSI 455-2?

21 CFR Part 111 is the required FDA regulation for all dietary supplement manufacturers in the United States. ANSI 455-2 is a voluntary standard that incorporates 21 CFR Part 111 and adds further quality system requirements such as HACCP planning, internal auditing, and inventory traceability. ANSI 455-2 is recognized in commercial retail channels like Amazon, and by GRMA.

How long does a GMP audit take, and how often is it required?

On-site GMP audits for a single facility generally take two to three days. Most third-party programs require audits every one to two years, and effective facilities conduct annual internal audits between those cycles.

How does third-party GMP certification support broader compliance recognition?

Third-party certification provides documented, objective verification of compliance that supports regulatory inspection processes, retailer qualification, and supply chain standards. These onsite audits verify appropriate processes are in place but may not address the results of those processes ANSI 455-2-audited programs are recognized by major retailers and can reduce the need for multiple audits.

What records are considered essential during a GMP audit?

Essential records include SOPs, Master Manufacturing Records, Batch Production Records, raw material test results and certificates of analysis, equipment calibration and cleaning records, training documentation, supplier qualification records, and CAPA reports. All documentation must be current and controlled.

What should facilities consider when introducing new product lines?

Facilities must develop new Master Manufacturing Records, update product specifications, conduct identity testing for new raw materials, and validate manufacturing processes before new product introduction. The certification body must be notified if operations expand, as audit scope and certification coverage may require revision.