All articles
9 min read

21 CFR Part 111: What a Supplier's COA Can and Can't Prove

21 CFR Part 111 is the U.S. Food and Drug Administration's (FDA) supplement manufacturing rule. The manufacturer must identity-test each dietary ingredient lot, and a supplier's certificate cannot replace that test.

By Sunil Kumar, Managing Director - Sales · Updated 14 Oct 2026

A laboratory technician holds up a vial of white powder for inspection beside a sealed ingredient drum and a paper certificate.

Key takeaways

  • Under 21 CFR Part 111, the firm that uses a dietary ingredient must run its own identity test on each lot before use. A supplier's COA can support other component specifications, but only after the supplier has been qualified.
  • Outsourcing production does not transfer responsibility. The firm that releases the product and the firm that controls it remain accountable for Part 111 compliance.
  • In the six FDA warning letters we reviewed, five cited a missing finished-product specification, five cited missing master manufacturing records and five cited missing batch production records.
  • Ask every ingredient supplier for a lot-specific COA with named methods, a written specification, an evaluation sample and written change notification before the first order.
In this article
  1. 1What is 21 CFR Part 111, and which GMP rule applies to your product?
  2. 2Does hiring a contract manufacturer make Part 111 someone else's problem?
  3. 3Can a supplier's certificate of analysis replace the identity test in Part 111?
  4. 4What must you hold for each lot, and what can a supplier give you?
  5. 5What did six recent FDA warning letters cite under Part 111?
  6. 6What should you ask an ingredient supplier before the first order?
  7. 7What do we send a supplement buyer who runs its own identity testing?
  8. 8Frequently asked questions

Part 111 of the Code of Federal Regulations (CFR) builds good manufacturing practice (GMP) for dietary supplements on three kinds of paperwork: written specifications, a master manufacturing record for each formulation, and a batch record for each batch made.

Five of the six U.S. Food and Drug Administration (FDA) warning letters to dietary supplement firms that we reviewed, dated November 2024 to May 2026, cite a missing finished-product specification, as the May 15, 2026 letter to Meta Labs does.

Buyers who receive ingredients feel those requirements first, because every specification has to be checked against something. Each lot arrives with a certificate of analysis (COA) from the supplier, and what that document can satisfy decides how much testing the buyer owes.

This page separates the checks that belong to the buyer from the evidence a supplier can provide, tallies what six recent FDA warning letters cited, and gives the eight-point list to ask any ingredient supplier for before a first order.

What is 21 CFR Part 111, and which GMP rule applies to your product?

21 CFR Part 111 is the part of Title 21 of the CFR that sets GMP for anyone who manufactures, packages, labels or holds a dietary supplement. That includes foreign firms whose products are imported into the United States. Conventional food falls under Part 117 and finished drugs under Part 211, so a supplement follows Part 111.

The rule has 16 subparts, A to P. Four matter most at receiving:

  • Subpart E sets production and process controls, including the specification rules in §111.70 to §111.75.
  • Subpart H covers the master manufacturing record (MMR), the written recipe and controls for each formulation and batch size.
  • Subpart I covers the batch production record (BPR), the record of what happened each time a batch was made.
  • Subpart P covers recordkeeping.

The rule has applied to firms of every size since June 25, 2010.

Does hiring a contract manufacturer make Part 111 someone else's problem?

No. FDA's guidance for small businesses states that the original manufacturer remains responsible for ensuring the packaged product meets specifications and for approving its release, even when contractors perform operations. A distributor that controls the product is responsible for its compliance as well.

A firm that only packages or labels a product it receives is still covered. Section 111.70(f) requires specifications that give sufficient assurance the received product is adequately identified and consistent with the purchase order, and FDA cited that clause in an April 7, 2026 letter to Nature's Elements.

Our recommendation is to settle four points in a written quality agreement before the first batch:

  • You write the specifications.
  • The agreement names who runs the identity test on each lot.
  • It names who holds the MMR and BPR.
  • It states how you receive copies for each lot you release.
Two people review a stainless-steel blending vessel through a window in a manufacturing hall corridor.
The brand owner stays accountable for the product even when a contractor runs the equipment.

Can a supplier's certificate of analysis replace the identity test in Part 111?

No. Section 111.75(a)(1)(i) requires the manufacturer to conduct "at least one appropriate test or examination to verify the identity of any component that is a dietary ingredient." A dietary ingredient is the vitamin, mineral, amino acid, herb or similar substance that gives the supplement its purpose. A component is any substance used in making the supplement.

The only way around the test is a petition to FDA under §111.75(a)(1)(ii), and the petition must be granted before you rely on it. FDA restates both points in its May 2026 letter to Meta Labs.

The rule requires the determination before each component is used, so testing a supplier once at approval does not satisfy it. In practice that means every lot received.

A COA still has a job. For other component specifications, §111.75(a)(2)(ii) lets you rely on a supplier's certificate only when all five conditions hold:

  1. You first qualified the supplier by confirming its results with your own tests.
  2. The COA describes the test methods and the actual results.
  3. You keep documentation of how you qualified the supplier.
  4. You re-confirm the certificate's reliability periodically.
  5. Quality control personnel review and approve the basis for qualification.

The Meta Labs letter describes the certificate route as available for "components other than dietary ingredients." Where a dietary ingredient's purity or strength is critical, our recommendation is to test it yourself on every lot and treat the supplier's certificate as supporting evidence.

A GMP certificate on the supplier's site does not change this. A WHO GMP certificate proves a facility's quality system, not that the lot in your warehouse is the right material.

Gloved hands weigh a sample of white powder on a laboratory balance next to an unused paper certificate.
The manufacturer runs its own identity test on the lot, and the supplier's paper stays a reference.

What must you hold for each lot, and what can a supplier give you?

For each lot, a supplier can give you documents and a sample, and you must hold your own test results and records. The table below sets out each Part 111 requirement, whether supplier paperwork alone can satisfy it, and what the file should contain. Rules are as of October 2026.

RequirementSectionCan supplier paperwork alone satisfy it?What your file holds (pass test)
Identity of a dietary ingredientNoYour own test result for the lot, matched to a written identity specification. Fail: a COA or supplier statement only.
Other component specifications (purity, strength, composition, contamination limits)Only after supplier qualificationQualification file meeting the five conditions above, plus the lot's COA with methods and actual results.
Received product for packaging or labelingNoA specification confirming identity and consistency with the purchase order, checked on receipt.
Finished batch: identity, purity, strength, compositionNoYour written finished-product specification, your sampling plan, and results against the specification for each batch you test. §111.75(c) requires testing a subset of batches chosen by a sound statistical sampling plan, or every batch.
Master manufacturing record and batch production recordNot applicable: these are your own recordsOne MMR per formulation and batch size; one BPR per batch manufactured.
Record retentionNot applicable: these are your own recordsRecords kept "1 year past the shelf life date, if shelf life dating is used, or 2 years beyond the date of distribution of the last batch."

A finished-product specification that is never tested against, for the batches your sampling plan covers, counts as a gap.

What did six recent FDA warning letters cite under Part 111?

Five of the six letters cited a missing finished-product specification, five cited missing master manufacturing records and five cited missing batch production records. Component specifications appeared in three letters, and the clause requiring firms to determine whether specifications are met appeared in four.

The six letters are those returned by our October 2026 searches of FDA's warning-letter pages for Part 111 citations, dated November 2024 to May 2026. We did not tally every dietary supplement GMP letter FDA issued in that period, so the counts describe these six only. Each letter was read for the Part 111 sections it cites.

Letter (date)Finished spec §111.70(e)Component spec §111.70(b)Spec met? §111.73/.75MMR §111.205BPR §111.255
YesYesYesYesYes
YesNoYesYesYes
YesNoYesYesYes
YesYesYesYesYes
YesNoNoNoNo
NoYesNoYesYes

Letters citing the section

5 of 6

3 of 6

4 of 6

5 of 6

5 of 6

Section 111.70 appears in all six letters, in its finished-product, component or received-product form. Other sections each appeared in at most two letters:

  • Quality control procedures, §111.103 (Time Challenger, Western Innovations).
  • Returned-product procedures, Subpart N (Nupack, Western Innovations).
  • Documentation of material review and disposition, §111.140 (Eniva).
  • Laboratory reference-material criteria, §111.315(d) (Meta Labs).
  • Received-product specifications, §111.70(f) and §111.75(e) (Nature's Elements).

What should you ask an ingredient supplier before the first order?

Ask any ingredient supplier for eight things, each of which you can pass or fail. Our guide to qualifying a nutraceutical raw material supplier covers the wider vendor review. This list covers the Part 111 evidence.

  1. Lot-specific COA with named methods. Pass: every test lists the method, the limit and the actual result. Fail: "complies" with no numbers.
  2. A written specification that names an identity test. Pass: the identity method is stated. Fail: appearance only.
  3. An evaluation sample. Pass: you run your identity test on the sample and the result matches your specification before you place a commercial order. Fail: any unexplained mismatch.
  4. Qualification data you confirm yourself. Pass: your own results on the lots you define in your procedure fall within the limits on the supplier's COA. Fail: a COA relied on without your own confirmation.
  5. Re-confirmation schedule. Pass: a written interval exists, with a named person who reviews it.
  6. Named manufacturing site and origin. Pass: the site on the COA, the quotation and the purchase order match.
  7. Change notification in writing. Pass: the supplier agrees to notify you of process, site or source changes before shipping.
  8. Lot traceability. Pass: the lot number on the container, the COA and your receiving record are identical.

What do we send a supplement buyer who runs its own identity testing?

We send the documents you need to build the file and the sample you need to test. We are an India-based supplier of pharmaceutical APIs and raw materials, including nutraceutical and supplement raw materials, and we support documentation and supply for US importers. Part 111 places the identity test with the manufacturer that uses the ingredient, so you run it on the sample.

Our buying route runs from inquiry to feasibility review, commercial quotation, production and quality control, packaging and dispatch. For supplement buyers the working steps are:

  • We support sample and evaluation quantities for qualified business buyers, subject to the specific material and availability. Run your identity test on the sample against your written specification (item 3 on the list above).
  • The documents we supply are the COA, specifications and SDS/MSDS (safety data sheet) where applicable, which map to items 1 and 2. Ask for the rest of the list in your inquiry and we will confirm what we can provide for the specific material.
  • MOQ (minimum order quantity) and lead time are confirmed material by material at quotation, after we check stock, schedule, quality release and documentation. Standard payment for international commercial orders is generally 100% advance by bank transfer unless alternative terms are agreed in writing.
  • Pricing depends on the material and current market conditions, so we quote per request. There is no single price range.

A request moves fastest with the material name and its CAS number (the Chemical Abstracts Service registry number), quantity, destination, grade or purity, the documents you need, payment terms and Incoterms (the standard terms that set who handles shipping and risk). For a wider comparison of sourcing routes, see our guide to nutraceutical ingredient suppliers.

Talk to our team

Leave your details and we'll get back to you.

Frequently asked questions

Yes. Section 111.75(a)(1)(i) requires at least one appropriate identity test on each dietary ingredient lot before use, unless FDA has granted a petition.
No, not by itself. The rule asks for an "appropriate" test, and appearance or pH alone usually cannot separate a correct material from a look-alike. In our view, use a method that distinguishes the ingredient, such as an infrared spectrum compared with a reference, and write it into the specification.
Not if its only customers are other manufacturers who further process the ingredient into a dietary supplement, according to FDA's small-entity guide. A firm that packages or labels a product as a dietary supplement is covered. Either way, the supplement manufacturer's own identity test remains required.
Your result decides whether the lot can be used, because the rule requires specifications to be met before a component is used. Our recommendation is to hold the lot, retest, and review the method. Document the review and disposition, since FDA cited a missing record of this under §111.140(b)(3). Re-confirm the supplier's COA before relying on it again.
Yes, under §111.75(a)(1)(ii), which uses the petition procedure in 21 CFR 10.30. FDA must grant the petition before you rely on it, and FDA's letters show it will cite firms that skip the test without a grant.

Sources

  1. 1.21 CFR Part 111, structure and subparts (Cornell Legal Information Institute)
  2. 2.21 CFR 111.70, specifications (Cornell LII)
  3. 3.21 CFR 111.73, determining whether specifications are met (Cornell LII)
  4. 4.21 CFR 111.75, component and finished-batch verification (Cornell LII)
  5. 5.21 CFR 111.205, master manufacturing record (Cornell LII)
  6. 6.21 CFR 111.210, master manufacturing record contents (Cornell LII)
  7. 7.21 CFR 111.255, batch production record (Cornell LII)
  8. 8.21 CFR 111.260, batch production record contents (Cornell LII)
  9. 9.21 CFR 111.605, record retention (Cornell LII)
  10. 10.FDA Small Entity Compliance Guide on dietary supplement CGMP
  11. 11.Federal Register, December 16, 2010: compliance dates
  12. 12.FDA warning letter, Meta Labs Pharmaceuticals, May 15, 2026
  13. 13.FDA warning letter, Nature's Elements, April 7, 2026
  14. 14.FDA warning letter, Nupack, March 20, 2026
  15. 15.FDA warning letter, Time Challenger Labs International, September 18, 2025
  16. 16.FDA warning letter, Eniva USA, September 10, 2025
  17. 17.FDA warning letter, Western Innovations, November 13, 2024

Keep reading

Aarise Pharma.

© 2026 Aarise Pharma

Powered by PageLens.ai

Get in touch — we'd love to help.

Contact us