Industry
Dietary Supplement Manufacturer Compliance
Part 111 is built on written specifications and a quality unit with real authority. Most findings trace to a specification that was never established or data that never reached the batch record.
- Risks mapped
- 5 primary risks
- Regulatory references
- 5 cited
- Structure
- Risk → Regulation → Solution
Context
Where dietary supplement manufacturers get caught out
Dietary supplement cGMP looks familiar to anyone from pharmaceutical manufacturing and unfamiliar to anyone from food. It is specification-driven rather than hazard-driven: you establish specifications, you test or examine against them, and a quality control unit with defined authority reviews and dispositions.
That structure means the most consequential gaps are documentary. A batch record signed without the identity test result attached, a component specification with no test method named, or a quality unit that has never actually rejected anything are the patterns that turn into observations.
01 — Risk
What actually goes wrong.
Ranked by consequence rather than by how visible or convenient the fix is. Relative exposure levels below are SURU's professional assessment of typical operations in this segment — not a regulatory classification, and not a rating of your specific business.
Missing or incomplete specifications
Critical exposurePart 111 requires specifications at multiple stages. Where a specification does not exist, no amount of testing satisfies the requirement, and this is among the most commonly cited areas.
Component identity testing not performed
Critical exposureAt least one appropriate test or examination to verify the identity of a dietary ingredient is required, and a supplier certificate alone does not satisfy that particular obligation.
Quality unit without genuine authority
High exposureA quality control unit that reports to production, or that has no documented authority to reject, cannot perform the function the rule assumes it performs.
Adulteration and undeclared ingredient exposure
Critical exposureIngredients sourced through long or opaque supply chains carry documented risk of undeclared pharmaceutical analogues and substitution, with serious consequences for consumers and for the brand.
Claims outstripping substantiation
High exposureStructure/function claims and disease claims sit at the boundary of regulatory and legal risk. This area frequently requires both regulatory review and qualified counsel.
02 — Regulation
What the rules typically require.
These are the frameworks that most often apply to this kind of operation. Exemptions, modified requirements and jurisdictional differences are common, so applicability has to be confirmed against your specific products and operations.
Educational summaries only. Not legal advice, and not a substitute for the regulation text, your regulatory authority's guidance, or qualified counsel.
- 21 CFR Part 111
- cGMP for manufacturing, packaging, labeling or holding operations for dietary supplements, including the quality control unit, master manufacturing records, batch production records, component testing and returned product provisions.
- 21 CFR Part 117 modified requirements
- Facilities in compliance with Part 111 are generally subject to modified Part 117 requirements rather than the preventive controls subparts. Applicability should be confirmed for your specific operation.
- 21 CFR Part 101 Subpart F and related
- Supplement Facts panel format, ingredient declaration, allergen labeling and claim requirements. Distinct from cGMP compliance and audited separately.
- New Dietary Ingredient notification (21 U.S.C. 350b)
- Ingredients not marketed in the U.S. before October 15, 1994 may require a premarket notification. This determination often needs both regulatory and legal input.
- Serious adverse event reporting
- Responsible parties have reporting and recordkeeping obligations for serious adverse events associated with their products, requiring a written procedure and an accountable owner.
03 — SURU solution
What we do about it.
Scoped to your operation, sequenced so each step earns the next, and delivered with the documentation you will need when someone asks you to prove it.
Specification system design
Component, in-process, packaging, label and finished-batch specifications, each with a named method and acceptance criterion, mapped so a reviewer can trace one to the other.
Identity testing and supplier qualification
Identity verification methods appropriate to your ingredient base, documented supplier qualification, and — where you rely on a certificate of analysis for non-identity specifications — the written justification and periodic confirmation that reliance requires.
Master and batch record rebuild
Master manufacturing records that actually control the process and batch records that capture what happened, including deviations, yield reconciliation and quality unit review with supporting data attached.
Quality unit charter and training
Written responsibilities and authority, review workflows, and disposition decision-making — so the quality function can hold a batch without an argument about reporting lines.
Inspection and customer audit preparation
We trace a sample of executed batches backwards the way an investigator or a brand auditor would, and close what cannot be reconstructed before the audit happens.
We do not promise inspection outcomes, audit scores, certification results or regulatory findings. Those decisions rest with regulators, certification bodies and auditors.
04 — Services
The practice areas this draws on.
- Service
Dietary Supplements
Part 111 is a specification-driven rule. Most observations we see trace back to a specification that was never established, an identity test that was never performed, or a batch record that a quality unit signed without the supporting data attached.
View service area - Service
Manufacturing
Preventive controls only work when the programs beneath them do. We build and audit the prerequisite layer — sanitation, environmental monitoring, allergen segregation, food defense, supplier approval — and the CAPA discipline that keeps findings from repeating.
View service area - Service
GFSI & Certification
Retail customers increasingly require a GFSI-benchmarked certification, and the first audit is where unprepared systems get expensive. We run readiness assessments, build the documentation, train internal auditors and conduct pre-assessment audits against the exact issue of the standard you will be audited to.
View service area
Also serving
Other industries
05 — Dietary Supplement Manufacturers
Talk to us about your dietary supplement manufacturers operation.
Tell us what you run, where you run it, and what is coming — a re-inspection, a customer audit, a first import, a certification deadline. We will tell you what applies and what it takes to be ready.
Direct contact
- info@surucompliance.com
- 651-329-4787
- Serving food businesses nationwide, onsite and remotely.
SURU Compliance is a regulatory consulting practice. We are not a government agency, a certification body, or a law firm, and we do not provide legal advice or guarantee regulatory outcomes.