cGMP-certified supplement manufacturer checklist
cGMP stands for Current Good Manufacturing Practice. For dietary supplements, 21 CFR Part 111 is the FDA's regulatory floor. Third-party certification goes above that floor and is increasingly a retail requirement. Here is what to verify before you engage a supplement manufacturer.
21 CFR Part 111 compliance. Every facility producing dietary supplements for US sale must comply with FDA's cGMP regulation under 21 CFR Part 111. Compliance covers identity testing of incoming raw materials, in-process testing, finished-product testing, batch records, and employee training records. FDA compliance is the minimum floor — it is not a differentiator.
Third-party cGMP certification bodies to recognize. NSF International (NSF/ANSI 455-2), Natural Products Association (NPA), UL Solutions, and Eurofins are the most widely recognized certifying bodies for US supplement manufacturers. Ask for the specific certificate, the issuing body, the certificate number, and the expiration date. Then verify with the certifying body — all four publish searchable online directories. A facility that claims NSF certification but doesn't appear in the NSF directory is not NSF certified.
NSF Certified for Sport. Required by professional sports organizations and increasingly demanded by DTC fitness brands. It requires testing for over 270 substances banned by major sports organizations. If your brand targets athletes, this is not optional — it's a positioning pillar and a liability-reduction tool.
Organic certification. USDA National Organic Program (NOP) certification is required for "certified organic" claims. Not all cGMP facilities are USDA NOP certified. If organic is a product pillar, confirm certification status before scoping the formula.
Vegan / vegetarian verification. Capsule shells are the most common sourcing point for vegan failures. Vegetarian cellulose (HPMC) capsules must be specified and confirmed in the manufacturing agreement. Ask whether the facility runs gelatin and vegetarian lines on the same equipment and what the cross-contact protocol is.
// How to evaluate a supplement manufacturer
- 1. Verify third-party cGMP certification — confirm with NSF, NPA, UL, or Eurofins directly. Self-issued documents are not certifications.
- 2. Pull FDA inspection history — the FDA Warning Letters database is public. Search by facility name. Recent 483 observations or warning letters on identity testing or batch records are immediate red flags.
- 3. Confirm in-house QC lab — active-ingredient potency, microbial, and heavy metals testing should be in-house or at a contracted ISO 17025-accredited lab. Get the lab name.
- 4. Ask for a reference COA — batch Certificate of Analysis from a prior run in your format. Refusal means the COAs either don't exist or don't pass scrutiny.
- 5. Confirm batch record availability — you should be able to request batch records for your production run. If the facility hedges on this, regulatory traceability is compromised.
Format cost comparison: capsule, tablet, gummy, powder
Format choice is a cost-of-goods decision. Here are the relative ranges across common supplement formats. All figures are typical industry ranges — actual quotes depend on active concentration, encapsulation speed, and volume.
Vegetarian capsules (HPMC). Lowest cost format per unit among common options. A simple 2-cap serving at 1,000-unit MOQ typically runs $0.15–0.35/unit in bulk (before packaging). Capsules are fast to fill, run on standard encapsulation equipment, and require no binders or compression aids. The main cost variable is the active — high-concentration actives like CoQ10, vitamin K2-MK7, or lion's mane full-spectrum extract push cost up significantly.
Tablets. Slightly higher than capsules due to compression tooling, binder ingredients, and coating costs if coated. Typical range: $0.18–0.45/unit in bulk before packaging at comparable MOQs. Tablets require more formulation work to get binding and disintegration right. A facility that does tablets well is not the same facility that does everything.
Gummies. Highest per-unit cost among the common formats. Typical range: $0.35–0.80/unit in bulk depending on sugar profile (sugar vs. sugar-free), active concentration, and pectin vs. gelatin base. Gummy equipment is specialized. Facilities that do gummies well tend to have dedicated gummy lines with separate HVAC and humidity control. Active stability in a gummy matrix is more challenging than in a capsule — not every active is gummy-compatible.
Powder (bulk or stick-pack). Cost varies enormously by active. A basic unflavored greens powder at 30 servings/pouch might run $3.50–7.00/unit retail cost-of-goods. A premium nootropic stack with multiple branded actives could run $8–15/unit. Stick-packs add packaging cost but increase retail price points. Flavor development for powders adds $500–2,000 in development fees.
Liquids (tinctures, shots). Cost comparable to capsules for simple formulas but rises quickly with active load or extraction complexity. Glass bottles add cost. Child-resistant caps add cost. Shelf-life stability for liquid supplements is shorter than capsules and requires real-time stability data before retail claims.
The cost that founders systematically underestimate: packaging. Bottles, labels, induction seals, caps, boxes, inserts — packaging routinely adds $0.40–1.20/unit on top of the bulk fill cost. Run the landed-cost model with packaging included before you negotiate per-unit bulk pricing.
DSHEA compliance basics
DSHEA — the Dietary Supplement Health and Education Act of 1994 — is the legislative framework for dietary supplements in the United States. Here is what it means for private label operators.
No pre-market approval. Unlike drugs, dietary supplements do not require FDA approval before going on sale. The burden of proof for safety is on the manufacturer and brand owner, not the FDA. This is a double-edged sword: faster to market, but full regulatory liability sits with you.
New Dietary Ingredients (NDIs). If your formula includes an ingredient that was not marketed as a dietary supplement in the US before October 15, 1994, it may be a New Dietary Ingredient. NDIs require a pre-market notification to FDA at least 75 days before going on sale. Your manufacturer should flag NDIs during formula review — if they don't, that's a compliance gap on their end that becomes your liability.
Brand owner responsibility. The brand on the label is the responsible party for FDA enforcement purposes. If the product is adulterated, misbranded, or contains an NDI without notification, the brand owner faces the action — not the contract manufacturer, unless specific indemnification is in the manufacturing agreement. Get a manufacturing agreement that specifies indemnification clearly.
Adverse event reporting. Under DSHEA as amended, manufacturers and distributors must report serious adverse events to FDA within 15 business days. This is not optional. Your manufacturing agreement should specify who handles adverse event reporting and how you'll be notified of events reported to the manufacturer.
21 CFR Part 111 and DSHEA together. DSHEA sets what can be sold; 21 CFR Part 111 sets how it must be made. Both apply. A product can be DSHEA-compliant (valid dietary supplement category, substantiated claims) but Part 111-noncompliant (poor manufacturing documentation). The FDA enforces both independently.
See also: supplements industry overview and contract manufacturing services.
Supplement label claims: dos and don'ts
Supplement label claims fall into three categories under DSHEA and FDA regulation. Knowing which is which prevents enforcement action, FTC complaints, and retailer delistings.
Structure-function claims: allowed, with conditions. A structure-function claim describes the role of an ingredient in supporting normal body structure or function. Examples: "calcium supports bone health," "vitamin C supports immune function," "magnesium supports muscle relaxation." These are allowed if: (1) you have substantiation (scientific evidence, not just opinion); (2) the claim is truthful and not misleading; (3) the required DSHEA disclaimer appears prominently on the label: "This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease." You must notify FDA within 30 days of first marketing a product with a structure-function claim.
Health claims: allowed, only with FDA authorization. A health claim describes a relationship between a food/supplement and a disease. Example: "adequate calcium may reduce the risk of osteoporosis." These require FDA pre-authorization via a formal petition or a qualified health claim proceeding. Private label supplement brands almost never have authorized health claims because the authorization process is expensive and slow. Do not put health claims on a label without confirming FDA authorization status.
Disease claims: prohibited. A disease claim says or implies that a product diagnoses, treats, mitigates, cures, or prevents a disease. "Supports healthy blood sugar" is borderline — FDA has challenged it. "Treats diabetes" is a prohibited drug claim and turns your supplement into an unapproved new drug. The line between structure-function and disease claims is enforced by FDA and FTC both. Your manufacturer will not flag this for you. Get independent regulatory review of every label before launch.
FTC enforcement of advertising claims. The Federal Trade Commission regulates advertising, not labels. FTC enforcement of supplement advertising is active — the standard is "competent and reliable scientific evidence" to substantiate any claim made in ads, social posts, influencer content, or your website. The FTC's Dietary Supplements Advertising Guide for Industry is the primary reference.
Testing requirements for private label supplements
21 CFR Part 111 mandates testing. Here is what that means operationally, and what third-party testing expectations look like for retail buyers.
Identity testing of raw materials. Every incoming ingredient must be tested to confirm it is the ingredient the label says. Identity failures — wrong ingredient, substituted ingredient, adulterated ingredient — are the most common cGMP violation cited in FDA 483 observations. A cGMP facility runs identity testing on receipt, before the ingredient enters production. Ask which testing methodology is used: HPLC, NIR, wet chemistry. The method should match the ingredient.
Heavy metals testing. The four metals of regulatory concern are lead, arsenic, cadmium, and mercury. The California Safe Drinking Water and Toxic Enforcement Act (Prop 65) sets specific limits that are lower than federal limits in many cases — if you sell to California (you do, on Amazon), Prop 65 compliance matters. Testing at an ISO 17025-accredited lab using ICP-MS is the standard. Results should be per batch, not per formula.
Microbial testing. Total Aerobic Count, Total Yeast and Mold, E. coli, Salmonella, and Staphylococcus aureus at minimum. USP <673> establishes the microbial limits for non-sterile dietary supplements. Gummies are especially microbial-sensitive — high water activity and sugar content create a hospitable environment. Ask for microbial specs for your format specifically.
Potency / active-ingredient testing. The label says 500mg of ashwagandha root extract — the COA should confirm that concentration is present in the finished product, not just in the raw ingredient. Potency testing on finished goods is not universally required by Part 111 in all cases, but it is expected by NSF, NPA, and most major retailers. Ask which finished-goods testing your manufacturer runs by default.
Third-party lab standard: ISO 17025. Testing results used for regulatory compliance and retailer qualification should come from an ISO 17025-accredited laboratory. Ask your manufacturer which labs they use and confirm accreditation. Eurofins, Covance (Labcorp), ChromaDex, and NSF are commonly used third-party labs in the supplement industry.
White label vs. private label vs. custom formulation: tradeoffs
The three sourcing modes sit on a spectrum from speed to defensibility. Here is how they compare across the dimensions that matter for supplement brands.
White label. You take an existing finished product off the facility's shelf — a stock magnesium glycinate, a stock collagen powder, a stock sleep gummy — and put your label on it. Formula is not exclusive. The identical product is likely available to other buyers. Speed: 3–6 weeks. MOQ: 500–1,000 units. Per-unit cost: lowest. Margin protection: minimal — competitors can source the same fill. Best for: proof-of-concept launches, category fill-out SKUs, timeline-constrained launch windows.
Private label (stock base with modification). The facility takes a stock formula and makes a defined change — different dose, added ingredient, flavor modification, altered capsule size. The modification may or may not create exclusivity depending on the agreement. Speed: 6–10 weeks. MOQ: 1,000–3,000 units. Per-unit cost: 10–30 percent above white label. Margin protection: moderate if exclusivity is secured in writing. Best for: second SKU on a proven category, differentiation without full development cost.
Custom formulation. You commission a new formula from scratch — your ingredient deck, your dosage matrix, your testing specifications. The formula is yours. The facility manufactures to your spec. Speed: 14–24 weeks. MOQ: 2,500–10,000 units. Per-unit cost: 20–50 percent above stock private label at comparable volume, lower at high volume due to COGS optimization. Best for: hero SKU that the brand is built around, NSF Certified for Sport requirement, unique clinical dose that creates defensibility.
The hybrid path we see most often: launch on white label, validate the market in 90 days, commission a custom formulation for v2 once you know which SKU is working. The white-label revenue funds the custom formulation. The custom formulation creates the moat. See also: private label vs white label — the full breakdown and formula development services.
Sample request checklist for supplements
// Sample Request Checklist
- 01 — Certificate of Analysis (COA) for the sample batch — confirm active potency, heavy metals panel, microbial results, and identity confirmation for key ingredients.
- 02 — Third-party testing lab name — confirm ISO 17025 accreditation. Request the accreditation certificate if needed.
- 03 — Full formula ingredient disclosure — all actives, excipients, capsule material, flow agents, and any allergens present.
- 04 — NDI status confirmation — written confirmation that no ingredient in the formula requires a New Dietary Ingredient notification, or identification of which ingredients do and their NDI status.
- 05 — cGMP certification document — current third-party certificate with expiration date.
- 06 — Suggested label claims — request the facility's list of substantiated structure-function claims for the formula's key actives. Do not accept unsupported claim suggestions.
- 07 — Stability data — accelerated stability results for the formula and format. Relevant for gummies and liquids especially.
- 08 — Allergen declaration — Big 9 allergens (peanuts, tree nuts, milk, eggs, wheat, soy, fish, shellfish, sesame) and cross-contact protocol.
- 09 — Production MOQ and lead time in writing — confirm at sample stage so you're not re-negotiating post-approval.
- 10 — Prop 65 compliance status — particularly for lead and cadmium. Confirm the facility has run Prop 65 analysis on the formula.