FDA 483 Citations for Relying on Supplier Certificates of Analysis Under 21 CFR 111.75(a)(2)

23 hours ago

4 min read

Dietary supplement firms often rely on supplier certificates of analysis (COAs) to show that components meet specifications. Part 111 allows that, but only after the supplier has been qualified. In fiscal year 2025, FDA investigators recorded:

"You did not qualify a supplier of a component by establishing the reliability of the supplier's certificate of analysis through confirmation of the results of their tests or examinations," 111.75(a)(2)(ii)(A), 45 times
"You did not conduct appropriate tests or examinations or rely on a certificate of analysis to determine whether components met established specifications," 111.75(a)(2), 21 times

A COA is only as good as the laboratory behind it. FDA expects firms to prove, with their own data, that a supplier's results can be trusted before skipping their own tests.

What the citations mean

Examples written after "Specifically" usually describe:

COAs accepted from suppliers with no confirmatory testing ever performed
Qualification based on one test, years ago, never repeated
COAs that state "conforms" without the method, limits or actual results
COAs from brokers or distributors that do not identify the original manufacturer or laboratory
No quality control review and approval of the qualification
Components released with neither testing nor a COA for some specifications
Confirmatory test results that disagreed with the COA, with no investigation

What Part 111 requires

Options for meeting component specifications (111.75(a)(2)). For components other than the identity of dietary ingredients, you must confirm the identity of the component and determine whether other applicable component specifications are met. You do this either by conducting appropriate tests or examinations, or by relying on a certificate of analysis from the supplier.

Conditions for relying on a COA (111.75(a)(2)(ii)). You may rely on a COA only if:

You first qualify the supplier by establishing the reliability of the supplier's certificate of analysis through confirmation of the results of the supplier's tests or examinations
The certificate of analysis includes a description of the test or examination method used, limits of the tests or examinations, and actual results of the tests or examinations
You maintain documentation of how you qualified the supplier
You periodically re-confirm the supplier's certificate of analysis
Your quality control personnel review and approve the documentation setting forth the basis for qualification and requalification of any supplier

The identity of every dietary ingredient must still be verified by your own test or examination under 111.75(a)(1).

How to respond to the 483

Part 111 does not set a deadline for responding, but most firms respond in writing within 15 business days of the close of the inspection, so FDA has the response before it decides on further action.

Test components released on unqualified COAs

Test lots in inventory for the specifications that were covered only by the COA. Assess finished batches made with earlier lots, using reserve samples where possible.

Qualify each supplier you want to rely on

Define a qualification protocol, for example independent testing of a set number of lots against the COA results, with acceptance criteria for agreement. Document the result and have quality control approve it.

Requalify periodically

Set a frequency and trigger for re-confirmation, such as a set number of lots or once a year, plus events like a change of manufacturing site, a failed confirmation test or a quality problem.

Require complete COAs

Reject COAs that lack methods, limits or actual results. Require brokers to provide the original manufacturer's COA.

Investigate disagreements

When your result disagrees with the COA, investigate, decide on the lot and reassess the supplier's qualification.

What a compliant supplier COA qualification procedure contains

When COAs may be used and when testing is required
Supplier qualification protocol and acceptance criteria
Required COA content
Requalification frequency and triggers
Handling of discrepancies
Quality control review and approval
Records for each supplier and component

Common mistakes in COA qualification responses

Qualifying a supplier on one lot and never re-confirming
Accepting COAs that say only "pass"
Treating a broker's COA as the manufacturer's data
Using COAs to cover dietary ingredient identity
Testing confirmatory lots but never comparing results to the COA

Example: how one response section might read

This illustrates structure only; your response must describe your own products and facts.

Observation 4: You did not qualify a supplier of a component by establishing the reliability of the supplier's certificate of analysis. Specifically, vitamin D3 lots were released on COAs with no confirmatory testing.

Response:

Correction: The four lots in inventory were tested for potency, and results agreed with the COAs within the defined limits.
Qualification: A supplier qualification protocol requiring independent testing of three consecutive lots was issued. The vitamin D3 supplier was qualified on a stated date, with quality control approval.
Requalification: One lot per supplier per year, or any lot after a site change or discrepancy, will be independently tested.
Extended review: The 21 suppliers whose COAs are used will be qualified by a stated date. Until then, lots from those suppliers are tested in full.

Frequently asked questions

Can a COA be used for dietary ingredient identity?

No. Section 111.75(a)(1) requires your own test or examination for the identity of each dietary ingredient, unless FDA grants an exemption petition.

How many lots should we test to qualify a supplier?

Part 111 does not set a number. Many firms test three lots for initial qualification, then re-confirm periodically. Document the basis.

What must a COA include?

A description of the test or examination method, the limits and the actual results.

How A.P. Lyon documents help

A.P. Lyon's Dietary Supplement cGMP Quality System (21 CFR 111) includes supplier qualification and COA confirmation procedures and forms. The Supplement Brand Owner Compliance Pack helps brand owners oversee how contract manufacturers qualify their suppliers.

Documents are editable Word and Excel files and must be adapted to your suppliers and operations. Testing must be performed by qualified laboratories.

Next steps

Test components released on unqualified COAs
Qualify and requalify each supplier with documented data
Require complete COAs and investigate disagreements
Respond in writing within 15 business days with dates for each action

To compare the complete system with the brand owner pack, see all dietary supplement documents.

Not sure where your quality system stands? Take the free QMS gap check: about 20 questions, an instant report of your gaps by clause, and the procedures that close each one.