The Foreign Supplier Verification Program rule makes the U.S. importer responsible for verifying that foreign suppliers produce food consistent with U.S. requirements. It is an unusual obligation: you answer for hazards created in facilities you do not operate, often in another language, on the strength of documentation you have to obtain and evaluate yourself.
FDA conducts FSVP inspections at the importer's place of business, and they consist largely of document review. Importers who struggle are rarely those with unsafe suppliers. They are those whose verification evidence lives in email threads and broker files, and who cannot assemble the file when asked.
What the rule requires of the importer
21 CFR Part 1 Subpart L sets out a chain of obligations that has to be documented at each link. The unit of analysis is the food from the supplier — not the supplier, and not the product category.
- Determining who the FSVP importer is: the U.S. owner or consignee at time of entry, or where there is none, a U.S. agent or representative who has agreed in writing to act as importer
- Written FSVP procedures, and use of a qualified individual to perform the activities
- A hazard analysis for each food from each foreign supplier, identifying known or reasonably foreseeable hazards and whether each requires a control
- Evaluation of the foreign supplier's food safety performance and compliance history, and of the risk posed by the food
- Verification activities appropriate to the hazard — including an annual onsite audit where a hazard with serious adverse health consequences is controlled by the supplier, unless an adequate written determination supports alternatives
- Corrective actions where a supplier's performance or compliance status changes
- Records maintained in English, or with English translation, and available promptly on request
The three failure patterns we see most
First, a single generic hazard analysis covering an entire product line rather than each food from each supplier. This is the most common structural defect and the hardest to remediate quickly.
Second, verification activity that is not proportionate to hazard severity — most often a certificate of analysis substituted for an onsite audit without the written determination the rule contemplates.
Third, an entity mismatch at entry. A customs broker filing your entry is generally not your FSVP importer, and an incorrect importer identification or DUNS number transmitted at entry creates problems entirely separate from the quality of your program.
Confirm exemptions before you build
Subpart L contains exemptions and modified requirements worth confirming first. Seafood subject to 21 CFR Part 123 and juice subject to Part 120 are generally exempt from FSVP for hazards controlled under those rules, because separate importer verification obligations apply instead. Certain research or evaluation quantities, certain food contact substances, and food from suppliers in countries whose food safety systems FDA has officially recognised or determined to be equivalent are treated differently.
This is not about avoiding obligations. It is about not constructing an FSVP for a product that will actually be inspected against a different verification framework.
SURU Compliance is an independent regulatory consulting practice. We are not the FDA or any other government agency, not a certification body or accredited certifying entity, and not a law firm. We do not provide FDA approval, guaranteed inspection or audit outcomes, or legal advice, and we refer legal matters to qualified counsel. Regulatory applicability depends on your specific products, processes, size and jurisdiction.