cGMP Supplement Manufacturing: What FDA Registration Really Means for Your Brand

When evaluating contract manufacturers for your supplement or ODF strip brand, you’ll see “cGMP certified” and “FDA registered” on nearly every manufacturer’s website. But what do these terms actually mean — and more importantly, what is your brand legally responsible for once your label goes on that product?

This guide breaks down the compliance standards that matter, clarifies the most common misconceptions, and gives you a framework for verifying a manufacturer’s credentials before you sign a manufacturing agreement.

GMP vs cGMP: Is There a Difference?

cGMP stands for Current Good Manufacturing Practices — the “c” means the standards are continually updated to reflect current technology and science. For dietary supplements, cGMP is defined by FDA regulation 21 CFR Part 111, which requires identity testing of all raw materials, batch production records, finished product testing, equipment sanitation, and complaint handling. All U.S. supplement manufacturers are legally required to operate under cGMP.

GMP stands for Good Manufacturing Practices — a general quality standard applied across pharmaceutical, supplement, food, and cosmetic manufacturing. cGMP stands for current Good Manufacturing Practices, where the “c” means the standard must be continuously updated to reflect evolving technologies, analytical methods, and regulatory expectations.

For dietary supplements manufactured and sold in the United States, the governing regulation is 21 CFR Part 111 — the FDA’s cGMP rule for dietary supplements. It applies to the entire manufacturing process: raw material receipt, testing, blending, filling, packaging, labeling, and distribution record-keeping.

A critical distinction for ODF strip and topical manufacturers: products making drug claims must comply with 21 CFR Part 211 (pharmaceutical GMP), which is more stringent. Products positioned as dietary supplements with structure/function claims fall under Part 111. Misclassifying a product’s regulatory status is a common and expensive mistake.

What 21 CFR Part 111 Actually Requires

cGMP for dietary supplements is not a single certification — it’s a comprehensive quality system. The core requirements brands need to understand:

Component Identity Testing

Every raw material ingredient must be independently tested and verified for identity before use. A manufacturer accepting materials solely on a supplier’s Certificate of Analysis — without independent laboratory confirmation — is out of compliance. This is one of the most commonly cited FDA observations in supplement facility inspections.

Batch Production Records

Every production run requires a master manufacturing record (MMR) and a batch production record (BPR) documenting every step, every measurement, and every deviation from standard. You should be able to request these records for any batch of your product. If a manufacturer is reluctant to share batch records, treat that as a compliance red flag.

In-Process and Finished Product Testing

Testing must verify identity, purity, strength, and composition of the finished product. Finished goods must meet release specifications before they ship. For ODF strips and suppository products, dissolution testing verifying active ingredient release profiles is an additional critical quality parameter.

Equipment Cleaning Validation

Cross-contamination between products — especially products sharing filling or blending equipment — must be controlled through validated cleaning procedures and changeover records. For allergen-containing formulas, validated cleaning verification is non-negotiable from a product liability standpoint.

Supplier Qualification

Manufacturers must qualify their raw material and component suppliers, including reviewing supplier COAs, conducting or reviewing supplier audits, and maintaining approved supplier lists. A manufacturer with no supplier qualification program cannot demonstrate control over the quality of their inputs.

Consumer Complaint Handling and Adverse Event Reporting

All consumer complaints must be documented, reviewed, and evaluated for safety signals. Serious adverse events must be reported to FDA within 15 business days under 21 CFR Part 111.

FDA-Registered vs FDA-Approved: The Most Important Distinction

This is the most common and consequential misconception in the supplement industry.

FDA registered: Under the Bioterrorism Act of 2002, all domestic food and supplement manufacturers must register their facilities with the FDA. This registration is a legal administrative requirement — not an endorsement, evaluation, or approval. Registration means FDA knows a facility exists and has the ability to inspect it. You can verify any facility’s registration at the FDA Establishment Registration database using the manufacturer’s facility address or registration number.

FDA approved: FDA approval means FDA has reviewed a specific product, evaluated its safety and efficacy evidence, and issued a formal clearance. Dietary supplements are not FDA approved. The Dietary Supplement Health and Education Act (DSHEA, 1994) does not require pre-market approval for supplement products — manufacturers are responsible for ensuring safety before going to market.

Red flag to watch for: Any manufacturer claiming their facility is “FDA approved” — rather than FDA registered — is either confused about regulatory terminology or deliberately misleading you. Every legitimate cGMP supplement manufacturer understands this distinction.

What to Look For in a cGMP Certificate

Third-party cGMP audits are conducted by recognized certifying bodies. The most widely accepted:

• NSF International — among the most rigorous and widely recognized in North America; NSF Certified for Sport is required by many athletic brands
• United States Pharmacopeia (USP) — USP Verified mark carries significant retailer and consumer credibility
• Natural Products Association (NPA) — one of the original cGMP certification bodies for dietary supplements
• Intertek — large third-party testing and certification organization with global scope

When reviewing a cGMP certificate, verify:

• The issuing body is one of the recognized organizations above, not a self-created or obscure certification
• The scope of certification explicitly covers manufacturing, packaging, labeling, and holding for your product category
• The facility address on the certificate matches the address where your product will actually be manufactured
• The expiration date — cGMP certificates require annual or biennial renewal audits; an expired certificate is not a valid credential
• Ask to see the actual certificate, not just a logo or badge on the website

Batch Documentation: What You Should Receive for Every Run

A cGMP-compliant manufacturer should provide, for every production run of your product:

• Certificate of Analysis (COA): Potency and identity results for each active ingredient, meeting your agreed product specifications
• Certificate of Conformance (COC): Manufacturer’s statement that the batch meets all specifications
• Microbial testing results: Total aerobic count, yeast, mold, E. coli, Salmonella, Staphylococcus aureus
• Heavy metals screening: Lead, arsenic, cadmium, mercury — particularly important for botanical ingredients
• Dissolution testing: For ODF strips, oral thin films, and suppositories, dissolution profiling verifies active release

If a manufacturer cannot or will not provide complete batch documentation, that is a disqualifying compliance issue — not a negotiating point.

Your Brand’s Legal Responsibility Under 21 CFR Part 111

Here is what many new supplement brands fail to understand: the label holder — your brand — is legally responsible for FDA cGMP compliance, regardless of your contract manufacturer’s certification status.

Under 21 CFR Part 111, if your contract manufacturer ships a non-compliant batch and your brand sold it to consumers, the regulatory liability follows the brand name on the label. Your manufacturer’s cGMP certificate does not transfer their liability to FDA — it only demonstrates their operational quality system.

Practical implications for your brand:

• You need a written Quality Agreement with your CMO specifying batch release requirements, deviation handling, recall procedures, and audit rights
• You should maintain your own quality records — COAs, batch records, and complaint documentation — even as a brand that doesn’t physically manufacture
• You have the right — and responsibility — to audit your contract manufacturer’s facility at least annually
• You should verify FDA establishment registration independently, not take the manufacturer’s word for it

8 Questions to Ask Every cGMP Manufacturer Before Signing

Use this checklist before committing to a manufacturing partnership:

• Can I see your current cGMP certificate, including the issuing body, scope, facility address, and expiration date?
• What is your FDA establishment registration number? (Verify it yourself at the FDA database)
• Do you conduct annual third-party cGMP audits, and can I review the most recent audit report and any open observations?
• Will I receive a complete batch production record and COA for every production run of my product?
• What is your deviation and CAPA (Corrective Action / Preventive Action) process when a batch falls out of specification?
• Have you received any FDA warning letters, Form 483 observations, or initiated any voluntary recalls in the last three years?
• What is your equipment cleaning validation process, and how do you manage allergen cross-contamination on shared lines?
• Will you sign a Quality Agreement defining batch release specifications, hold procedures, and your notification obligations if compliance issues arise?

A manufacturer with robust cGMP infrastructure will answer all of these questions with specifics and documentation. Vague answers, reluctance to share audit reports, or resistance to a written Quality Agreement are signals worth taking seriously before you commit.

For more context, see our guide on contract manufacturing products.

For more context, see our guide on contract manufacturing vs private label.

---

Atrium Scientific is an FDA-registered, cGMP-certified contract manufacturer in the USA producing ODF strips, suppositories, capsules, stick packs, and personal care products. Every batch ships with full batch production records and COAs. Contact us to discuss your compliance requirements.