Quick Answer
Current Good Manufacturing Practice (cGMP) regulations for dietary supplements are codified in 21 CFR Part 111. They require manufacturers to establish and follow quality control procedures ensuring supplements are manufactured consistently and meet quality standards. Key requirements include: 100% identity testing of incoming dietary ingredients, written specifications for components and products, batch production records, laboratory testing, proper personnel qualifications, equipment and facility requirements, and complaint handling procedures.
Regulatory Authority: 21 CFR Part 111 — Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements
What Is 21 CFR Part 111?
Foreign Facility
Raw Data InputTranslation Layer
Validation ActiveFDA FURLS
Live SyncCompliance Vault
Immutable21 CFR Part 111 establishes the current Good Manufacturing Practice (cGMP) regulations for dietary supplements in the United States. Published by the FDA as a final rule on June 25, 2007, these regulations set minimum quality standards that must be met during the manufacturing, packaging, labeling, and holding of dietary supplements to ensure product identity, purity, strength, and composition. For the official FDA rule, see the 21 CFR Part 111 on eCFR.
The regulation was phased in over three years to give companies time to come into compliance. Large companies (500 or more employees) were required to comply by June 2008, smaller companies by June 2009, and very small companies (fewer than 20 employees) by June 2010. As of today, all dietary supplement manufacturers, regardless of size, must fully comply with 21 CFR Part 111.
The authority for Part 111 derives from the Dietary Supplement Health and Education Act of 1994 (DSHEA), which amended the Federal Food, Drug, and Cosmetic Act to require FDA to establish cGMP regulations specifically for dietary supplements. Unlike the general food GMP regulations in 21 CFR Part 110/117, Part 111 contains more prescriptive requirements tailored to the unique risks of supplement manufacturing — including mandatory identity testing and written specifications.
Part 111 Subpart Structure
Quality Control
Subpart B & E — Personnel qualifications, quality control procedures, and quality control personnel responsibilities
Production & Process Controls
Subparts D, F, G — Equipment, facility, manufacturing operations, and production controls
Laboratory Operations
Subpart J — Testing methods, reserve samples, and laboratory controls for components and finished products
Records & Complaints
Subparts K, O, P — Master manufacturing records, batch records, complaint handling, and product returns
Who Must Comply
Foreign Supplier
HACCP Plan Required
Assurentry FSVP Engine
FDA Systems
Audit Ready Records
21 CFR Part 111 applies to every person who manufactures, packages, labels, or holds a dietary supplement, including any dietary ingredient used in manufacturing. This scope is deliberately broad and covers:
- Manufacturers: Any entity that prepares, combines, or processes dietary supplements, including mixing, blending, encapsulating, tableting, and extracting
- Packers: Entities that place dietary supplements into containers for distribution
- Labelers: Entities that create or affix labels to dietary supplement containers
- Holders: Entities that warehouse or store dietary supplements, including distribution centers and third-party logistics providers
Contract Manufacturers
Contract manufacturers (also called co-manufacturers or co-packers) bear full cGMP responsibility for the operations they perform. If you hire a contract manufacturer to produce your dietary supplement, that contract manufacturer must comply with all applicable provisions of Part 111 for the manufacturing operations they conduct. However, this does not relieve the brand owner of their obligations — the person whose name appears on the product label retains responsibility for ensuring the product is manufactured in compliance with cGMP.
Foreign Facilities
Foreign manufacturers, packers, labelers, and holders that produce dietary supplements for the US market must comply with 21 CFR Part 111 to the same extent as domestic facilities. FDA has authority to inspect foreign facilities, and non-compliance can result in import alerts, warning letters, or refusal of entry at the US border. Foreign facilities must also maintain FDA facility registration and designate a US Agent.
No Size Exemption
Unlike some FDA regulations, 21 CFR Part 111 has no exemption based on business size. Whether you are a one-person operation or a multinational corporation, if you manufacture, package, label, or hold dietary supplements, you must comply. The phased implementation schedule (2008–2010) provided extra time for smaller firms, but all firms are now fully subject to the regulation.
Identity Testing Requirements
One of the most distinctive and frequently cited requirements of 21 CFR Part 111 is the 100% identity testing rule. Under 21 CFR 111.75(a)(1), you must conduct at least one appropriate test or examination to verify the identity of every incoming lot of every component that is a dietary ingredient. There is no skip-lot testing, no reduced sampling plan, and no exception.
What 100% Identity Testing Means
- Every lot, every time: Each incoming shipment (lot) of a dietary ingredient must be independently tested for identity before it can be used in manufacturing
- Cannot rely on COAs alone: You cannot accept a supplier's Certificate of Analysis (COA) as the sole basis for identity verification. You must perform your own test or examination, or have a qualified laboratory perform it on your behalf
- Scientifically valid methods: The test method used must be scientifically valid for the specific ingredient being tested
Accepted Identity Testing Methods
Chromatographic Methods
- •HPLC (High-Performance Liquid Chromatography)
- •HPTLC (High-Performance Thin Layer Chromatography)
- •GC (Gas Chromatography)
Spectroscopic Methods
- •FTIR (Fourier Transform Infrared Spectroscopy)
- •NIR (Near-Infrared Spectroscopy)
- •UV-Vis Spectrophotometry
Molecular Methods
- •DNA barcoding
- •PCR-based methods
- •Next-generation sequencing
Physical/Organoleptic Methods
- •Macroscopic identification (whole botanicals)
- •Microscopic examination
- •Organoleptic evaluation (color, taste, odor)
Common Pitfall: Relying on Supplier COAs
One of the most common 483 observations is failure to conduct identity testing because the manufacturer relied exclusively on a supplier's Certificate of Analysis. While COAs can supplement your testing program and provide useful information, they cannot replace the required in-house or contract laboratory identity test under 21 CFR 111.75(a)(1).
Specifications and Controls
FDA Observation
"Procedures for verifying supplier controls were not adequately established."
CAPA Deployed
Assurentry auto-generates a 15-day response plan with acceptable corrective actions.
21 CFR Part 111 requires you to establish written specifications for every component, in-process material, finished dietary supplement batch, packaging, and label used in your operations. Specifications are the backbone of a cGMP-compliant quality system — they define what "acceptable" means for every material and product.
Component Specifications
Under 21 CFR 111.70, you must establish component specifications that include:
- Identity: What the component is — species for botanicals, chemical name for vitamins/minerals, CAS number where applicable
- Purity: Limits for contaminants such as heavy metals (lead, arsenic, cadmium, mercury), pesticide residues, solvent residues, and microbial contaminants
- Strength: Potency or assay value — the amount of active constituent(s) per unit weight
- Composition: What the component consists of, including any carriers, excipients, or other substances present
Master Manufacturing Records vs. Batch Production Records
Part 111 distinguishes between two critical types of manufacturing documentation:
Master Manufacturing Record (MMR)
The "recipe" — a written document that defines the complete manufacturing process for a specific product. The MMR includes the product name, quantity to be produced, a complete list of components with quantities, a description of each manufacturing step, in-process controls and specifications, packaging and labeling instructions, and any special storage or handling requirements. Under 21 CFR 111.205, the MMR must be prepared, dated, and signed by quality control personnel.
Batch Production Record (BPR)
The "execution log" — a record created for each specific batch that documents how that batch was actually manufactured. The BPR is derived from the MMR and captures the actual quantities used, actual processing times and temperatures, lot numbers of all components, in-process test results, yield calculations, deviations from the MMR, and the identity of personnel who performed each step. Under 21 CFR 111.255, the BPR must include the complete information required by the regulation.
Finished Product Specifications
Before releasing any batch for distribution, you must verify that the finished product meets its written specifications. Under 21 CFR 111.75(c), finished product specifications must address:
- Identity of the dietary supplement
- Purity, strength, and composition — confirming that the product contains what the label declares and does not contain unsafe levels of contaminants
- Limits on contamination that may adulterate or lead to adulteration
Personnel and Training
Automated Extraction
Our systems parse complex FDA documents into actionable data instantly.
21 CFR Part 111, Subpart B, establishes requirements for personnel qualifications, training, and oversight. People are the most critical element of any quality system — improperly trained personnel are a root cause of many cGMP failures.
Qualified Persons
Part 111 requires that certain functions be performed or overseen by "qualified persons." A qualified person is defined as someone who has the education, training, or experience to perform their assigned functions. Key qualified person roles include:
- Quality control personnel: Must have the education, training, or experience to perform quality control operations, including approving or rejecting components, in-process materials, packaging, labels, and finished products (21 CFR 111.12–111.14)
- Manufacturing supervisors: Must have the qualifications to oversee manufacturing operations and ensure compliance with master manufacturing records
- Laboratory personnel: Must be qualified to perform the specific tests assigned, including proper training on analytical methods and instrumentation
Training Requirements
Under 21 CFR 111.13, you must establish requirements for training, including:
- Training each person engaged in manufacturing, packaging, labeling, or holding on their specific duties and the cGMP requirements applicable to those duties
- Training on hygienic practices, including proper handwashing, protective clothing, and illness reporting
- Documenting all training — who was trained, what they were trained on, when training occurred, and by whom
- Periodic refresher training and training when procedures change
Training Documentation Tip
FDA inspectors frequently request training records. Maintain a training matrix that lists each employee, their role, the training topics completed, training dates, and trainer identification. Include both initial training and annual refresher training. Electronic training management systems can automate tracking and ensure no employee falls behind on required training.
Equipment and Facility
Subparts D and F of 21 CFR Part 111 address equipment and physical facility requirements. Your manufacturing environment must be designed, maintained, and operated to prevent contamination and ensure product quality.
Equipment Requirements (Subpart D)
- Design and construction: Equipment must be of appropriate design, construction, and workmanship to enable it to be suitable for its intended use and to be adequately cleaned and maintained (21 CFR 111.27)
- Calibration: Automatic, mechanical, and electronic equipment (including scales, meters, and monitoring devices) must be calibrated, inspected, and checked according to a written schedule (21 CFR 111.30)
- Maintenance logs: Written records of equipment calibration, inspection, and maintenance must be maintained
- Cleaning: Equipment surfaces that contact components, in-process materials, or dietary supplements must be cleaned and sanitized as necessary to protect against contamination
Facility Requirements (Subpart F)
- Facility design: The physical plant must be designed to facilitate cleaning and maintenance and to minimize the potential for contamination — including appropriate separation of operations and adequate ventilation
- Sanitation: Written sanitation procedures must be established and followed for buildings, equipment, and utensils (21 CFR 111.15(b))
- Pest control: Adequate measures to protect against pest infestation, including routine pest monitoring and treatment by qualified pest management professionals
- Water supply: An adequate supply of water that is safe and sanitary at suitable temperatures for manufacturing operations and cleaning
- Waste handling: Proper disposal of waste to prevent contamination and attraction of pests
Calibration
Written calibration schedule, traceable to NIST standards where applicable, with documented out-of-calibration procedures
Facility Controls
Temperature/humidity monitoring, air handling systems, dedicated areas for quarantine, production, and finished goods
Contamination Prevention
Allergen controls, cleaning validation, changeover procedures, and dedicated equipment for high-risk ingredients
Laboratory Operations
Subpart J of 21 CFR Part 111 establishes requirements for laboratory operations. Whether you operate an in-house laboratory or contract testing to an outside lab, you must ensure that all testing meets the requirements of the regulation.
In-House vs. Contract Laboratory
You may perform testing in-house or contract it to a qualified outside laboratory. If you use a contract lab, you are responsible for ensuring the lab uses appropriate, scientifically valid methods and has adequate quality systems. You should:
- Qualify the contract lab before use — verify their accreditations (ISO 17025), methods, and quality systems
- Maintain a written agreement specifying test methods, specifications, turnaround times, and reporting requirements
- Periodically audit the contract lab to ensure ongoing compliance
- Retain copies of all test results, including raw data where appropriate
Method Validation
Any laboratory test method used to determine compliance with specifications must be appropriate for its intended use. This means the method must be scientifically valid — meaning it is accurate, precise, specific, and sensitive enough to reliably detect the analyte of interest. If you use compendial methods (USP, AOAC), they are generally considered validated. If you use non-compendial methods, you must validate them according to applicable scientific standards.
Reserve Samples
Under 21 CFR 111.83, you must collect and hold reserve samples of each lot of packaged and labeled dietary supplement. Reserve samples must be:
- Held for one year past the shelf life date, or for two years from the date of distribution if no shelf life date
- Stored under conditions consistent with product labeling (or under ordinary storage conditions if no specific conditions are stated)
- Sufficient in quantity to permit duplicate laboratory analyses
Stability Testing
While 21 CFR Part 111 does not explicitly mandate a formal stability testing program, it requires that your product meet its specifications throughout its labeled shelf life. As a practical matter, you need stability data — either from formal stability studies or literature-supported shelf life determinations — to establish expiration dates and ensure your product remains compliant throughout its distribution life. FDA has increasingly scrutinized shelf life claims that are not supported by adequate stability data.
CAPA and Complaint Handling
A robust Corrective and Preventive Action (CAPA) system and complaint handling procedure are essential components of your cGMP quality system. 21 CFR Part 111 addresses these requirements in Subparts K and O.
Written CAPA Procedures
You must have written procedures for identifying, investigating, and correcting problems in your manufacturing operations. A well-designed CAPA system includes:
- Problem identification: Out-of-specification results, deviations from master manufacturing records, customer complaints, audit findings, and adverse event reports
- Root cause investigation: Systematic investigation to determine why the problem occurred — not just what happened, but the underlying cause
- Corrective action: Actions taken to fix the immediate problem and any affected product (e.g., rejecting a batch, reprocessing if permitted, recalling product if distributed)
- Preventive action: Changes to procedures, training, equipment, or processes to prevent recurrence
- Effectiveness verification: Follow-up to confirm the corrective/preventive actions actually resolved the problem
Complaint Files
Under 21 CFR 111.553–111.570, you must have written procedures for handling product complaints. A qualified person must review and investigate every complaint to determine whether it involves a possible failure to meet any specification or other cGMP requirement. The complaint file must include:
- The name and description of the dietary supplement
- The batch, lot, or control number
- The date the complaint was received and the name of the complainant (if available)
- The nature of the complaint
- The findings of the investigation and any follow-up actions taken
Adverse Event Reporting
When a complaint involves a serious adverse event, you have additional reporting obligations under the Dietary Supplement and Nonprescription Drug Consumer Protection Act. Serious adverse events associated with dietary supplements must be reported to FDA within 15 business days of receipt. You must also maintain records of all adverse event reports — serious and non-serious — for 6 years.
Returned Product Procedures
21 CFR 111.503–111.535 require written procedures for handling returned dietary supplements. You must determine whether returned products can be reprocessed, must be destroyed, or can be returned to distribution. A qualified person must make this determination based on the reason for the return and the condition of the product.
Record Keeping
Comprehensive record keeping is a cornerstone of 21 CFR Part 111 compliance. Records demonstrate that you have established and followed your cGMP procedures, and they are the first thing FDA inspectors will request during an inspection.
Retention Requirements
Under 21 CFR 111.605, records must be retained for:
- 1 year past the shelf life date of the batch, or
- 2 years from the date of distribution if no shelf life date is assigned
- Whichever period is longer applies
Types of Required Records
Master Manufacturing Records
Written procedures for each unique formulation, including complete component lists with quantities, manufacturing steps, in-process specifications, and packaging/labeling instructions
Batch Production Records
Documentation of the actual production of each batch — actual weights, lot numbers of components used, in-process test results, yield calculations, deviations, and operator identification
Laboratory Records
All testing records including identity tests, finished product tests, stability data, reserve sample logs, method validation records, and out-of-specification investigation records
Component Records
Receiving records, identity test results, supplier COAs, component disposition (approved/rejected), and component lot traceability
Equipment and Facility Records
Calibration records, maintenance logs, cleaning and sanitation records, pest control logs, and environmental monitoring data
Training Records
Documentation of initial and ongoing training for all personnel, including training content, dates, trainer identification, and competency assessments
Complaint and CAPA Records
Complaint files, investigation reports, CAPA documentation, adverse event reports, and product return records
Electronic Records
Electronic records are acceptable under 21 CFR Part 111, but you should be aware of 21 CFR Part 11 considerations. Part 11 establishes criteria for the FDA to accept electronic records and electronic signatures as equivalent to paper records. While FDA has exercised enforcement discretion on Part 11 for many years, a well-designed electronic quality management system should include:
- Audit trails that capture who made changes, what was changed, and when
- Access controls limiting who can view, create, and modify records
- Backup and recovery procedures to prevent data loss
- Validation of computerized systems used in manufacturing and quality control
FDA Access Requirement
Under 21 CFR 111.610, all records required by Part 111 must be made available to FDA within 24 hours of a request during an inspection. This applies to both paper and electronic records. Ensure your record retrieval system — whether physical filing or electronic — allows you to locate and produce any record promptly.
FDA Inspection Readiness
FDA inspects dietary supplement facilities to verify compliance with 21 CFR Part 111. Inspections may be routine, for-cause (triggered by a complaint, adverse event, or recall), or pre-approval. Being inspection-ready at all times is not just good practice — it is a practical necessity because FDA does not provide advance notice for domestic facility inspections.
What Inspectors Look For
FDA investigators conducting a dietary supplement cGMP inspection typically examine:
- Written procedures (SOPs) for all cGMP-required activities
- Master manufacturing records and batch production records for recent batches
- Identity testing records for incoming dietary ingredients
- Component and finished product specifications and test results
- Personnel qualification and training documentation
- Equipment calibration and maintenance records
- Cleaning and sanitation records
- Complaint files and CAPA documentation
- Label review and approval records
- Facility walkthrough — observing manufacturing operations, storage conditions, and sanitation practices in real time
Most Common 483 Observations
FDA Form 483 documents observations of conditions that may constitute violations. The most frequently cited 483 observations in dietary supplement facilities include:
Failure to Establish Product Specifications
Very CommonWritten specifications for identity, purity, strength, and composition of finished products and/or components are missing or incomplete
Prevention: Develop comprehensive written specifications for all components and finished products before manufacturing begins
Failure to Conduct Identity Testing
Very CommonNot testing 100% of incoming dietary ingredient lots for identity, or relying solely on supplier COAs
Prevention: Implement identity testing for every incoming lot; document test method, results, and disposition for each lot
Failure to Prepare/Follow Master Manufacturing Records
CommonMaster manufacturing records are missing, incomplete, or not being followed during production
Prevention: Create detailed MMRs for every product and train operators to follow them precisely, documenting any deviations
Inadequate Batch Production Records
CommonBatch records are incomplete — missing component lot numbers, actual weights, in-process test results, or operator identification
Prevention: Use structured batch record templates derived from MMRs; review and approve completed BPRs before product release
Failure to Establish Written Quality Control Procedures
CommonNo written procedures for quality control operations including component review, in-process checks, and finished product release
Prevention: Document all quality control SOPs and ensure quality personnel are trained and following them
Inadequate CAPA Program
CommonNo written procedures for corrective and preventive actions, or failure to investigate out-of-specification results and complaints
Prevention: Establish a formal CAPA system with root cause analysis, corrective action tracking, and effectiveness verification
How to Prepare
Inspection Readiness Checklist
For related regulatory requirements, see our guides on dietary supplement industry compliance and our requirement checker tool to assess your current compliance status.
Frequently Asked Questions
Do cGMP requirements under 21 CFR Part 111 apply to small businesses?
How often must identity testing be performed on dietary ingredients?
What are the obligations for foreign facilities supplying supplements to the US?
What are the most common FDA 483 findings in supplement facilities?
How much does cGMP compliance typically cost?
What is the difference between GMP and HACCP for dietary supplements?
What are a contract manufacturer's responsibilities under Part 111?
How can Assurentry help with dietary supplement compliance?
Stop reading. Start executing.
Assurentry acts as a technical translation layer. You provide basic business info, and we automatically generate and file the exact electronic submissions required by the FDA.
Automate compliance100% FDA Acceptance Guaranteed