FDA inspects dietary supplement manufacturing facilities under 21 CFR Part 111 — the Current Good Manufacturing Practice (cGMP) regulation for dietary supplements. Unlike food manufacturers inspected under Part 117 or drug manufacturers under Part 211, dietary supplement facilities face a regulation that is detailed, prescriptive, and frequently misunderstood. The result: a sector with some of the highest FDA warning letter rates in regulated manufacturing.
This compliance checklist covers all major areas of Part 111 and is designed to help your quality team assess your current state, close gaps, and stay inspection-ready year-round — not just in the weeks before an FDA investigator walks through your door.
What 21 CFR Part 111 Requires: The Structure
Part 111 is organized into Subparts A through P. Each subpart addresses a specific area of your manufacturing operation. The regulation applies to dietary supplement manufacturers, packagers, labelers, and holders — including contract manufacturers and private-label brands that own the finished product. If you manufacture, package, label, or hold a dietary supplement for sale in the United States, Part 111 applies to you.
The regulation is performance-based in some areas and prescriptive in others. Subpart E (Requirement to Establish a Production and Process Control System) and Subpart F (Production and Process Control System Requirements) are highly prescriptive. Subpart O (Records and Recordkeeping) specifies retention periods and accessibility requirements that many smaller manufacturers underestimate.
The 21 CFR Part 111 Compliance Checklist
Written job descriptions for all personnel whose duties may affect the quality of a dietary supplement, including responsibilities, qualifications, and authority
Training program with documented training records for each employee — covering hygiene, GMP, job-specific functions, and awareness of their role in quality
Qualification documentation for all supervisory personnel, particularly the quality control (QC) function and anyone approving batch records or test results
Illness and injury policy — documented procedures for preventing persons with illness or open wounds from working in conditions where contamination of a dietary supplement is likely
Cleaning procedures — written sanitation procedures for all product-contact surfaces, equipment, and facility areas, with documented cleaning logs and frequencies
Pest control program — contracted or internal program with documented monitoring records, treatment logs, and trending
Environmental monitoring — procedures for maintaining conditions that prevent contamination, including temperature, humidity, and water quality records where applicable
Plumbing, ventilation, and lighting — documented as adequate; no evidence of condensate drip over product or equipment
Equipment qualification records — installation and operational qualification (IQ/OQ) documentation for all equipment used in manufacturing, packaging, and testing
Cleaning validation / verification records — documented evidence that cleaning procedures remove residues to acceptable levels; particularly critical for shared-equipment contract manufacturers
Maintenance logs — records of all scheduled and corrective maintenance, including date, nature of maintenance, and personnel who performed it
Calibration records — current calibration for all instruments used in quality control testing, with traceable standards and calibration certificates on file
Master manufacturing records (MMRs) — a written MMR for each unique formulation, documenting the complete formula, manufacturing steps, in-process controls, and yield expectations
Batch production records (BPRs) — a completed BPR for every batch manufactured, signed by the operator and reviewed by QC, with all in-process checkpoints documented
In-process specifications — documented limits for in-process parameters (blend uniformity, fill weight, tablet hardness, moisture content) with data recorded in the BPR
Batch release process — documented QC review and authorization to release (or reject) each batch before distribution, with records retained
Reference standards — primary and working standards with certificates of authenticity, storage requirements met, and expiration dates tracked
Method validation or verification records — documented evidence that analytical methods used for identity, purity, strength, and composition testing are appropriate for their intended purpose
Stability testing program — stability data supporting product shelf life claims, with ongoing stability protocol for marketed products
Out-of-specification (OOS) investigation procedure — documented process for investigating, documenting, and dispositioning OOS results before batch release decisions
Component identity testing — each incoming ingredient must be tested to confirm identity before use in manufacturing. This is the single most commonly cited Part 111 violation. A supplier's COA alone does not satisfy identity testing for 100% of incoming lots.
Certificate of Analysis (COA) review — documented review of supplier COAs against your incoming specifications, with records of the review and disposition decision
Label review and issuance records — documented QC review of labels before issuance to production, with label reconciliation records in the BPR
Component lot tracking — each component lot used in each batch must be traceable through the BPR for forward and backward traceability
Storage condition monitoring — temperature and humidity records for all storage areas; quarantine areas for components and finished product pending QC release
Distribution records — records sufficient to permit a recall of any distributed product, including lot number, quantity, and distribution destination
Returned product handling — written procedures for handling returned products, including evaluation, disposition, and documentation
Complaint log — a written record of every consumer or trade complaint received, with date, product, lot number, nature of complaint, and disposition
Complaint investigation process — documented procedure for reviewing all complaints for potential quality and safety signals; serious adverse event (SAE) review process
Serious adverse event reporting — documented awareness of mandatory SAE reporting requirements under DSHEA and the AER system; designated responsible person identified
Retention policy — records must be retained for one year past the expiration date or two years past the date of manufacture if no expiration date is used, whichever is longer
Accessibility — records must be made available to an FDA investigator immediately upon request. Records that cannot be produced during an inspection create the presumption they do not exist.
Electronic records compliance — if records are maintained electronically, the system must have audit trail capability, access controls, and backup procedures
Most Common 21 CFR Part 111 Violations FDA Cites
Based on FDA warning letters and Form 483 inspection observations, these are the violations cited most frequently:
Failure to establish identity testing of incoming components. Part 111.75(a)(1) requires that you test 100% of incoming ingredient lots to verify identity before use. A supplier COA does not satisfy this requirement alone. FDA considers this a critical violation because using misidentified or adulterated ingredients is a fundamental safety risk.
Incomplete or missing batch production records. BPRs missing required entries — unsigned steps, blank in-process checkpoints, missing lot numbers — are consistently cited. The BPR must be complete, contemporaneous, and signed.
Inadequate CAPA for quality defects. When CAPAs are opened but never closed, or when root cause analysis is superficial ("retraining" as the corrective action for every finding), FDA investigators cite these as systemic quality system failures.
No written specifications for finished products. Part 111.70(e) requires written product specifications. Many small manufacturers have specifications for ingredients but never formally establish and document finished product specifications including identity, purity, strength, and composition.
Inspection readiness tip: FDA investigators can arrive unannounced. Your records must be retrievable — on paper or electronically — within minutes, not hours. If a batch record from 18 months ago takes your quality team 45 minutes to find, that is itself evidence of an inadequate records system.
Preparing for an FDA Inspection: Action Plan
Conduct a full internal audit against the Part 111 checklist above at least quarterly. Document all findings and open CAPAs for every gap identified.
Verify that identity testing records exist for 100% of incoming ingredient lots for the past two years. This is the first thing an FDA investigator will request.
Train your front-line personnel on what to do when an FDA investigator arrives — who to notify, what access to provide, what not to say. Designate a primary contact for FDA interactions.
Review all open CAPAs and close or escalate anything that has been open more than 90 days. Demonstrating active CAPA management is evidence of a functioning quality system.
Conduct a mock recall exercise annually and document it. Demonstrate you can trace any product from distribution back to components and forward to customers within 24 hours.
Affinity QMS Is Built for 21 CFR Part 111 Compliance
Affinity QMS is built for 21 CFR Part 111 compliance from day one. Our document control, supplier management, and CAPA modules map directly to the Part 111 checklist above. Batch records, training records, complaint logs, and incoming material records are all in one controlled, audit-ready platform. Book a demo to see how we keep supplement manufacturers inspection-ready year-round.
Book a Demo