FDA warning letters to dietary supplement manufacturers are public documents. They’re published on FDA’s website, searchable by company name and date, and they contain a level of operational detail that makes them genuinely useful for any quality professional who takes the time to read them. Not as cautionary tales, but as a map of where quality systems break down under regulatory scrutiny.
The themes that appear in warning letters aren’t random. They cluster around a small number of recurring failure modes — the same gaps that FDA investigators find, year after year, across companies of different sizes and product categories. Understanding those patterns is the most practical preparation a supplement manufacturer can do before an FDA inspection.
The single most common theme in FDA warning letters to supplement manufacturers under 21 CFR Part 111 is inadequate identity testing for components. The regulation at 21 CFR Part 111.75(a)(1) requires manufacturers to conduct at least one appropriate test or examination to verify the identity of each component used in manufacturing. The word “appropriate” is doing significant work in that sentence.
FDA investigators frequently find that manufacturers are relying on supplier Certificates of Analysis as their identity verification — without conducting any independent testing. A COA from a supplier is documentation of the supplier’s testing, not the manufacturer’s. Unless the manufacturer has established a qualified supplier program under 21 CFR Part 111.75(a)(2) — with documented evidence of the supplier’s testing reliability — relying solely on a COA doesn’t satisfy the identity testing requirement.
For botanical ingredients, the challenge is compounded by the complexity of identity testing. Macroscopic and microscopic examination, HPTLC, DNA barcoding, and near-infrared spectroscopy are all used for botanical identity testing, and the appropriate method depends on the ingredient and its form. FDA doesn’t mandate a specific method, but it expects the method to be capable of distinguishing the ingredient from adulterants and substitutes. A visual inspection of a powdered botanical extract, for example, is unlikely to satisfy this requirement.
The fix is straightforward in principle: establish identity testing procedures for each component, using methods appropriate for the ingredient and its form, and document the results in batch production records. The complexity is in the implementation — selecting appropriate methods, qualifying the laboratory, and building the documentation infrastructure.
The second recurring theme is finished product specifications that are either absent or so vague that they can’t be used to make a meaningful release decision. Under 21 CFR Part 111.70, manufacturers must establish specifications for finished dietary supplements that cover identity, purity, strength, and composition.
FDA investigators find specifications that say things like “meets label claim” without defining what that means in testable terms, or specifications that list only a subset of the required attributes. A specification that covers potency but not microbial limits, or that covers identity but not heavy metals, is incomplete under the regulation.
The underlying problem is often that specifications were written to describe what the product is expected to be, rather than what it needs to be to be safe and compliant. A specification should be a testable standard — every element should have an acceptance criterion that can be verified by a test method. If you can’t write a test method for a specification element, the specification element isn’t specific enough.
Batch production records (BPRs) are the documentary backbone of GMP compliance. Under 21 CFR Part 111.255 and 111.260, BPRs must document the complete manufacturing history of each batch — every step, every measurement, every deviation, every test result. FDA investigators frequently find BPRs that are missing required elements: laboratory test results not attached, deviations not documented, review signatures missing.
The most common BPR gap is the disconnect between laboratory results and batch records. A manufacturer may have testing performed by a contract laboratory, receive the COA, and file it separately from the batch record — or not file it at all. Under 21 CFR Part 111, laboratory results for each batch must be part of the batch record. The COA needs to be attached to the BPR, and the batch record needs to document that the results were reviewed and the batch was approved for release based on those results.
Building a BPR template that includes a checklist of required attachments — including laboratory COAs — and a formal review and release step is a practical way to close this gap. The template should be specific enough that a reviewer can confirm all required elements are present before signing off.
FDA investigators also frequently cite issues with laboratory operations under Subpart I of 21 CFR Part 111. The most common issues are test methods that haven’t been validated or verified for the specific matrix, and laboratory personnel who lack documented qualifications for the tests they’re performing.
Method validation isn’t required for every test — published methods from USP, AOAC, and other recognized standards organizations can be used with verification rather than full validation. But verification still requires documented evidence that the method performs correctly in the specific matrix being tested. A lab that runs a USP method without verifying its performance in the manufacturer’s specific product formulation hasn’t met the verification requirement.
Personnel qualification records are another common gap. Under 21 CFR Part 111.12, personnel must have the education, training, or experience to perform their assigned functions. For laboratory personnel, this means documented evidence of training on specific test methods, not just general laboratory training. A training record that says “completed laboratory orientation” doesn’t establish competence for a specific HPLC potency method.
The manufacturers who consistently avoid FDA enforcement actions share a few operational characteristics. Their quality systems are designed around the regulation, not around convenience. Their documentation is complete and current. Their testing programs are designed to verify what the regulation requires them to verify, not just what’s easy to test.
None of this requires a large quality team or expensive technology. It requires a clear understanding of what 21 CFR Part 111 actually requires, a quality system designed to meet those requirements, and consistent execution. The warning letters that FDA issues are almost never about novel or obscure regulatory requirements — they’re about basic GMP obligations that weren’t implemented or weren’t maintained.
At Aurora TIC, we help supplement manufacturers build quality systems that address the specific gaps FDA investigators look for. The starting point is always a gap assessment against 21 CFR Part 111 — understanding where the current system falls short before designing the corrective actions. That assessment, done honestly and thoroughly, is the most valuable thing a manufacturer can do before an FDA inspection.
Requirements vary by product category and regulatory context. Consult a qualified regulatory expert for guidance specific to your operation.