Supplier Quality Assurance Audit Checklist for Food Companies [2026 Template]
A ready-to-use supplier quality assurance audit checklist for food companies. Covers HACCP, allergen management, traceability, KPIs, and agreement templates for 2026.
If you manage supplier quality for a food company, you already know the stakes. A single documentation gap or a missed allergen control can cascade into a recall that costs millions and erodes years of consumer trust. The problem is that most QA teams still run audits from sprawling spreadsheets that go stale the moment they are saved.
This guide gives you a complete, field-tested supplier quality assurance audit checklist you can use for your next on-site or remote supplier audit. It also covers the KPIs worth tracking, the agreement clauses that protect you legally, and the process flow that keeps your supplier quality management program running year-round -- not just during audit season.
What Is a Supplier Quality Audit and What Does It Have to Prove?
A supplier quality audit is the periodic check that the controls a food manufacturer applies to the suppliers it buys from — rather than to its own process — still hold, and that the evidence behind each supplier approval is still current. For food entering the United States that evidence also carries a legal duty: under 21 CFR part 1 subpart L[2], the importer — the US owner or consignee at entry — must operate a Foreign Supplier Verification Program for each food and each foreign supplier, and must show the food is produced with protection comparable to US preventive controls[1]. A scheme certificate does not discharge that duty, because certification records one audit on one date while FSVP asks about comparability. The practical consequence is that an audit programme producing a hazard analysis, a supplier risk rating, verification evidence and a corrective-action trail is already generating FSVP records; one producing a folder of certificates is not.
What Is Supplier Quality Assurance in the Food Industry?
Supplier quality assurance (SQA) in the food industry is the systematic process of evaluating, approving, and continuously monitoring the suppliers that provide raw materials, ingredients, packaging, and services to your operation. It sits at the intersection of food safety, regulatory compliance, and procurement risk management.
A mature SQA program covers three layers:
- Qualification -- verifying that a supplier can meet your specifications before the first purchase order ships.
- Ongoing monitoring -- tracking performance data, incoming inspection results, and corrective action closure rates between audits.
- Periodic audit -- conducting structured assessments (announced or unannounced) against a defined checklist that maps to GFSI-benchmarked standards, customer requirements, and your own internal criteria.
The supplier quality assurance food industry landscape has shifted significantly. Retailers, foodservice distributors, and regulatory bodies now expect documented evidence that your suppliers are not just certified but actively managed. A certificate records that a supplier passed an audit against a recognised standard on a given date; it is not a continuous statement about that supplier. GFSI recognition covers whether a certification programme meets GFSI's benchmarking requirements (GFSI)[8] — it does not verify any individual supplier's performance between audits, which is what a buyer's own monitoring has to cover.
Why Do Supplier Quality Audits Matter More in 2026?
Four forces are making supplier quality audits more demanding — and more consequential — than they were two years ago: retailers now ask for the verification behind an approval rather than the certificate; the FSMA 204 recordkeeping obligation has become live; climate and geopolitical volatility move suppliers out of specification between visits; and digitally maintained audit records are becoming the expected default.
What are retailers now asking to see?
Buyers increasingly ask to see the verification behind a supplier approval, not just the certificate. The volume they are reacting to is real: iComplai recorded 21,166 authority records in 2025 — about fifty-eight a day — of which 13,575 were US import refusals and 5,328 were RASFF notifications (iComplai platform, data as at 21 August 2026)[10]. That is the signal traffic a once-a-year audit has to cover in the eleven months after the auditor leaves.
The order matters more than the totals, and the labels repay a second look. The charge written as “pathogenic micro-organisms” ranks seventh on its own; group it with the other microbiological and sanitation charges — insanitary-conditions findings, Listeria, Salmonella — and hygiene accounts for 2,622 refusals, more than any single charge except additives, labelling and inadequate controls. The practical point survives either reading: additives, labelling, inadequate controls and fraud each outrank pathogens on their own, and every one of those four is a documentation-and-specification failure that a supplier audit is well placed to catch, if it looks for them.
What regulatory changes are landing?
The FDA's Food Traceability Rule under FSMA section 204 is in force — published in November 2022, effective January 2023 — and its compliance date of 20 January 2026 has passed (FDA)[4]. FDA proposed a 30-month extension to 20 July 2028, but that proposal has never been finalised (Federal Register 2025-14967 is a proposed rule)[3]; what produces the 2028 date is Congress, which directed FDA not to enforce the rule before then (Continuing Appropriations Act of 2026, Pub. L. 119-37, section 780)[5], and FDA has said it intends to comply. The obligation is therefore live but unenforced. A supplier programme built this year is closing a gap that already exists — and one that customers and retailers can hold you to regardless of FDA's enforcement posture.
In the EU, Regulation (EU) 2017/625 on official controls governs how imported food is verified at border control posts (EUR-Lex)[9]. Companies sourcing globally must ensure every supplier in the chain can meet these supplier quality assurance requirements — or accept the liability themselves, which is why continuous regulatory monitoring belongs alongside the audit calendar rather than inside it.
How is supply-chain volatility changing audit frequency?
Volatility changes audit frequency by making the gap between audits the risky part rather than the audit itself. Climate disruption, geopolitical instability and ingredient-substitution fraud all raise the probability that a trusted supplier's process drifts out of specification between two scheduled visits, and a fixed annual cycle cannot see that drift. Leading food companies now supplement scheduled audits with continuous data monitoring and risk-triggered unannounced visits: a cluster of border rejections on a commodity, a sourcing-country disruption, or a price spike in a fraud-prone ingredient becomes the trigger for a visit instead of the calendar.
What is technology adoption doing to audit expectations?
Technology has moved the baseline for what a credible audit programme looks like. Predictive analytics, AI-driven document verification and automated risk scoring are becoming table stakes for mid-size and large food manufacturers, and regulators and certifiers are beginning to recognize digitally maintained quality records. Companies still relying on paper-based or spreadsheet-driven audit programs face both an efficiency and a credibility disadvantage — the spreadsheet is not wrong, it is simply always a few weeks behind. If you are weighing a replacement, our comparison of food safety and risk management software for 2026 is a reasonable starting point. The bottom line: a well-structured supplier quality audit checklist is no longer a nice-to-have. It is the backbone of your compliance posture and a prerequisite for doing business with demanding customers.
What Should a Supplier Quality Assurance Audit Checklist Include?
A complete supplier quality assurance audit checklist covers ten areas: documentation and certifications, facility and premises, HACCP and the food safety plan, allergen management, traceability and recall readiness, pest control, training and personal hygiene, corrective and preventive actions, food fraud prevention, and environmental monitoring. The 54 line items below are a starting template — adapt the category weights and the individual checks to your product categories, risk tiers, and applicable regulatory frameworks (FSMA, EU Regulation 2017/625, Codex Alimentarius).
1. Documentation and Certifications
Documentation checks confirm that a supplier's legal, contractual and specification paperwork exists, is current, and describes the material they actually ship you.
- Valid GFSI-benchmarked certification (BRCGS, SQF, FSSC 22000, IFS) with current audit report on file
- Business licenses, food-handling permits, and export certificates verified and not expired
- Specifications for all supplied materials (ingredient specs, packaging specs) signed and dated
- Certificates of Analysis (COAs) provided per lot or per shipment as agreed
- Allergen declarations and status for each supplied material documented
- Supplier quality assurance agreement signed and current (see section below)
- Insurance documentation (product liability, recall coverage) on file
2. Facility and Premises
Premises checks ask whether the building itself can support hygienic production: structure, separation of areas, lighting, ventilation, and the environmental controls around the line.
- Building exterior in good repair; no evidence of pest harborage points
- Production areas separated from non-production areas (storage, offices, welfare)
- Lighting adequate for inspection at every point where product is examined, with the intensity set in your own specification — 21 CFR 117.20(b)(5) requires “adequate lighting” without setting a value, and the 540 lux / 50 foot-candle figure often quoted comes from the FDA Food Code, which governs retail and food service rather than manufacturing[6]
- Floors, walls, and ceilings constructed of cleanable materials with no flaking paint or damaged surfaces
- Temperature and humidity controls functioning and monitored with calibrated instruments
- Adequate ventilation to prevent condensation and airborne contamination
3. HACCP and Food Safety Plan
This group tests whether the hazard analysis is real and maintained: validated critical limits, monitoring records that exist for the sample period, and a recall procedure that has been exercised.
- HACCP plan documented, validated, and reviewed within the last 12 months
- Hazard analysis covers biological, chemical, physical, and radiological hazards
- Critical Control Points (CCPs) identified with validated critical limits
- CCP monitoring records available and complete for the audit sample period
- Verification activities (testing, review of records) performed at defined intervals
- Recall/withdrawal procedure documented, tested within the last 12 months with mock-recall records
4. Allergen Management
Allergen controls are judged end to end — from the facility risk assessment, through scheduling and changeover cleaning, to the label the consumer finally reads.
- Allergen risk assessment completed for the facility and all product lines
- Production scheduling minimizes allergen cross-contact (allergen-free runs first)
- Dedicated or validated cleaning procedures between allergen changeovers
- Allergen labeling reviewed and accurate per destination-market regulations
- Allergen storage segregation in place (identified containers, separate racking)
- Staff trained on allergen awareness with documented training records
5. Traceability and Recall Readiness
Traceability is assessed as a timed exercise rather than a description: can the supplier link finished goods to incoming lots, in both directions, against a deadline?
- Full traceability, one step forward and one step back, demonstrated as a timed test. BRCGS Food Safety requires a traceability system and a test of it under clause 3.9 (BRCGS)[7]; the four-hour completion window widely used in practice is an industry convention rather than a figure quoted here from the standard text, which is not public
- Lot/batch coding system links finished goods back to incoming raw materials
- FSMA 204 Key Data Elements (KDEs) captured for all items on the Food Traceability List — the compliance date passed on 20 January 2026, so this is a live recordkeeping obligation even though FDA may not enforce it before 20 July 2028[4][5]
- Mass-balance exercise completed and variance within the tolerance defined in your own specification (a threshold near 2% is a common industry convention, not a figure set by any standard)
- Mock recall conducted within the last 12 months with documented results and corrective actions
6. Pest Control
Pest control is judged on system and evidence: a competent provider, a current risk assessment, mapped and numbered devices, trended activity, and a clean walkthrough on the day.
- Pest control managed by a licensed provider or qualified internal team
- Site pest risk assessment reviewed within the last 12 months
- Pest monitoring devices mapped, numbered, and checked at defined intervals
- Trend analysis of pest activity performed and documented
- No evidence of pest activity in production, storage, or dispatch areas during walkthrough
7. Training and Personnel Hygiene
This group asks whether the people on the line know the rules and are held to them, with training and policy records rather than assertions to prove it.
- All food-handling staff trained in food safety and personal hygiene at induction
- Refresher training delivered at least annually with attendance records
- Protective clothing policy defined and enforced (hairnets, gloves, footwear)
- Handwashing facilities adequate, stocked, and located at all entry points to production
- Illness-reporting policy in place and communicated to all staff
- Visitor and contractor hygiene policy documented and enforced
8. Corrective and Preventive Actions (CAPA)
CAPA checks test whether findings actually close: a root-cause method, escalation of overdue items, effectiveness verification, and complaint data trended back to the supplier that caused it.
- Defined CAPA process with root-cause analysis methodology (e.g., 5 Whys, fishbone)
- Open CAPAs from previous audits reviewed; all overdue items escalated
- Effectiveness verification completed for closed CAPAs
- Customer complaints linked to supplier-related issues tracked and trended
9. Food Fraud Prevention
Fraud controls cover vulnerability assessment, mitigation for high-risk ingredients, authenticity testing and supply-chain mapping beyond the first tier; our guide to honey adulteration detection and testing methods shows what that evidence looks like for one commodity.
- Vulnerability assessment (SSAFE or equivalent) completed and reviewed within the last 12 months
- Mitigation measures in place for high-risk ingredients (oils, spices, honey, seafood)
- Supplier authenticity testing program defined (e.g., isotope analysis, DNA testing for species)
- Supply-chain mapping extends beyond Tier 1 for fraud-vulnerable commodities
10. Environmental Monitoring
Environmental monitoring is judged on design and response: defined zones, risk-based frequency, a positive-result protocol, monthly trend review, and documented corrective actions.
- Environmental monitoring program (EMP) documented for Listeria spp. or other relevant pathogens
- Sampling zones defined (Zones 1-4) with risk-based frequency
- Positive-result response protocol defined, including intensified sampling and hold-and-release
- Trend data reviewed monthly by a qualified individual
- Corrective actions from positive findings documented with effectiveness checks
What Is an FSVP and Who Is Legally Responsible for It?
An FSVP is a Foreign Supplier Verification Program, and the duty to have one falls on the importer rather than the foreign manufacturer. Under the Foreign Supplier Verification Programs regulation, codified at 21 CFR part 1, subpart L[2], importers must develop, maintain and follow an FSVP for each food they bring into the United States and for each foreign supplier of that food (FDA)[1]. Supplier verification is therefore not only a customer expectation; for imported food it is a legal obligation with a named holder.
Who counts as the importer under FSVP?
Two details decide who carries the FSVP burden. First, the importer for FSVP purposes is the US owner or consignee of the food at the time of entry; where there is none, it is the US agent or representative of the foreign owner, named in a signed statement of consent. The obligation therefore lands on a specific US entity, not on the foreign manufacturer. Second, the standard the supplier's food must meet is that it is produced in a manner providing the same level of public health protection as the US preventive controls or produce safety regulations, and that it is not adulterated and not misbranded as to allergen labelling. That is a comparability test, not a certificate check — which is why a foreign supplier's scheme certificate does not by itself discharge an importer's FSVP duty.
What must an FSVP contain?
The FSVP regulation sets requirements in six areas, and they map closely onto the ten audit categories in this checklist: use of a qualified individual to perform FSVP activities; hazard analysis; evaluation of the food and the foreign supplier; foreign supplier verification activities; corrective actions; and recordkeeping, together with importer identification at entry (FDA, 21 CFR 1 subpart L). If your audit programme already produces a documented hazard analysis, a supplier evaluation with a risk rating, evidence of verification activity and a corrective-action trail, you are largely producing FSVP records as a by-product. If it produces a folder of certificates, you are not.
Which Supplier Quality KPIs Should You Track?
Eight metrics carry most of the load in a food supplier quality programme: supplier defect rate, COA compliance rate, corrective action closure rate, on-time delivery, audit score trend, supplier-attributable recall incidents, specification deviation rate, and a food fraud vulnerability rating. Tracked together they turn one audit's findings into ongoing performance intelligence, and they give you a defensible reason to re-tier a supplier between visits.
The table below gives the formula and a commonly used target for each of the eight.
| KPI | Formula / Method | Commonly used target |
|---|---|---|
| Supplier Defect Rate | (Defective lots received / Total lots received) x 100 | Less than 1% |
| COA Compliance Rate | (COAs received on time and complete / Total shipments) x 100 | 98% or higher |
| Corrective Action Closure Rate | (CAPAs closed on time / Total CAPAs issued) x 100 | 95% or higher |
| On-Time Delivery | (Shipments delivered within agreed window / Total shipments) x 100 | 95% or higher |
| Audit Score Trend | Average audit score over rolling 3-year period | Improving or stable above 85% |
| Recall/Withdrawal Incidents | Count of supplier-attributable recalls per 12-month period | Zero |
| Specification Deviation Rate | (Out-of-spec results / Total incoming inspections) x 100 | Less than 0.5% |
| Food Fraud Vulnerability Score | SSAFE food fraud vulnerability assessment (50 questions; answers map to low / medium / high vulnerability) | No high-vulnerability answers on fraud-prone ingredients |
The targets above are values commonly used in supplier scorecards, not published industry benchmarks — no standards body sets a defect-rate figure, and there is no published industry benchmark to cite for them. Treat them as starting points to calibrate against your own category and history.
Review these KPIs quarterly at a minimum. Suppliers scoring below target for two consecutive quarters should be flagged for an accelerated audit or moved to a higher risk tier.
A checklist proves the audit happened. It does not prove the supplier is still safe.
Between two audits a supplier can change a sub-tier source, pick up a border refusal or appear in a recall, and nothing in your file will say so. iComplai monitors your approved suppliers and their materials continuously, between audits rather than at them.
See what continuous monitoring coversHow Do You Ensure Suppliers Meet Quality and Compliance Standards Consistently?
You ensure consistency by tiering suppliers by risk, mixing announced with unannounced audits, tracking leading indicators rather than lagging ones, digitising data collection, closing the CAPA loop with effectiveness verification, and sharing scorecards with suppliers. Any supplier can pass one prepared audit; these six practices are what hold the standard in month nine of the cycle.
Consistency is the hardest part of supplier quality management because it is the part nobody watches. The question is never whether a supplier can pass an announced audit — it is whether they sustain the same standard on a Tuesday afternoon in month nine of a 12-month cycle. The six practices below are what high-performing food companies use to close that gap.
1. Tier your suppliers by risk. Not every supplier needs the same audit frequency. Classify suppliers into risk tiers based on ingredient criticality, volume, geographic risk, and historical performance. High-risk suppliers get annual on-site audits and monthly KPI reviews. Low-risk suppliers may qualify for biennial audits with quarterly self-assessment questionnaires.
2. Combine scheduled and unannounced audits. Announced audits assess capability. Unannounced audits assess culture. A mix of both gives you the most accurate picture of real-world conditions.
3. Monitor leading indicators, not just lagging ones. Defect rates and recall counts are lagging indicators -- they tell you something already went wrong. Leading indicators such as COA turnaround time, training completion rates, and environmental monitoring trends warn you before a failure occurs.
4. Digitize your data collection. Spreadsheets break down when you manage more than 20 suppliers. Cloud-based platforms that centralize audit results, document expiry tracking, and KPI dashboards reduce manual effort and make trends visible across your entire supply base.
5. Close the CAPA loop. Issuing a corrective action request is only half the job. Build a process that requires evidence of implementation, verifies effectiveness, and escalates overdue items automatically. A CAPA that sits open for six months is a CAPA that was never really issued.
6. Share performance data with suppliers. Suppliers who see their own scorecards improve faster. Quarterly business reviews that include KPI trends, benchmarking against peer suppliers (anonymized), and clear improvement targets create accountability without adversarial tension.
How Does the Supplier Quality Management Process Work?
A complete supplier quality management process flow moves through six stages. Each stage feeds data into the next, creating a continuous loop rather than a linear project.
Stage 1 -- Qualification. Before onboarding, evaluate the supplier against a defined set of criteria: certifications, financial stability, capacity, geographic risk, and a preliminary desktop audit of their food safety documentation.
Stage 2 -- Onboarding. Once approved, formalize the relationship with a supplier quality assurance agreement (see next section). Collect baseline documents: specifications, COAs, allergen declarations, insurance certificates. Enter the supplier into your monitoring system with a risk tier and audit schedule.
Stage 3 -- Ongoing Monitoring. Between audits, track incoming quality data (inspection results, COA compliance, delivery performance), document expiry dates, and any customer complaints linked to that supplier. Flag deviations in real time rather than waiting for the next scheduled review.
Stage 4 -- Audit. Conduct the audit using a standardized checklist (like the one above). Score findings by severity (critical, major, minor, observation). Issue CAPAs for all critical and major findings with defined deadlines.
Stage 5 -- Corrective Action. Track CAPA implementation against deadlines. Require photographic or documentary evidence of corrections. Verify effectiveness through follow-up inspection, re-testing, or a focused re-audit.
Stage 6 -- Re-evaluation. At least annually, review the supplier's overall performance using aggregated KPI data, audit history, and risk-tier classification. Decide whether to maintain, upgrade, downgrade, or terminate the relationship. Feed the outcome back into Stage 1 criteria for future supplier qualification decisions.
What Should a Supplier Quality Assurance Agreement Include?
A supplier quality assurance agreement template should cover the contractual quality obligations that go beyond a standard purchase order. This document protects you legally and sets clear expectations for the supplier. At a minimum, include:
- Scope and applicable standards. Define which products, sites, and regulatory frameworks the agreement covers (e.g., FSMA, EU food law, specific GFSI schemes).
- Specification compliance. The supplier agrees to manufacture and ship only to the agreed specifications and to notify you in writing before any formulation, process, or sub-supplier change.
- Audit rights. You reserve the right to conduct announced and unannounced audits of the supplier's facility, including access to production areas, records, and personnel.
- Documentation and reporting obligations. Define what the supplier must provide (COAs, allergen declarations, traceability records) and the required turnaround times.
- Change notification. Set the notification period explicitly in the agreement — the change types that must be declared (formulation, manufacturing process, site, key sub-supplier) and how many days' notice each requires. There is no statutory default, so whatever is not written down is not owed to you.
- Corrective action requirements. The supplier agrees to respond to CAPAs within a defined timeframe and to implement root-cause-based corrections.
- Recall and withdrawal cooperation. The supplier commits to participating in recall procedures, providing traceability data within a defined window (e.g., 4 hours), and sharing costs as agreed.
- Confidentiality and food fraud. The supplier agrees to maintain confidentiality of your specifications and to implement food fraud mitigation measures for vulnerable ingredients.
- Liability and indemnification. Define allocation of costs in the event of a quality failure, recall, or regulatory action attributable to the supplier.
- Term, review, and termination. Specify the agreement duration, review frequency, and conditions under which either party may terminate.
Have your legal and QA teams co-author this document. A well-written agreement is not adversarial -- it is a shared operating framework that reduces ambiguity for both parties.
How Do You Move From Manual Checklists to AI-Powered Supplier Risk Scoring?
A manual supplier quality audit checklist works well up to a point; past that the limits show. Expired documents slip through, risk scores update once a year instead of continuously, and audit data sits in spreadsheets nobody consolidates. Moving to AI-powered supplier risk scoring means the score is recalculated from live inputs — document status, audit findings, KPI trends and external authority signals — instead of being re-typed once a year.
That is exactly the problem iComplai was built to solve.
iComplai is an AI-powered compliance platform whose automated supplier verification takes on the most time-consuming parts of supplier quality risk management:
- Continuous risk scoring. Instead of static risk tiers that update annually, iComplai's continuous risk assessment calculates dynamic supplier risk scores from real-time data -- document status, audit findings, KPI trends, regulatory changes, and external risk signals.
- Automated document monitoring. The platform tracks every supplier certificate, COA, and agreement expiry date and alerts your team before anything lapses. No more monthly spreadsheet audits to check what is about to expire.
- Centralized audit management. Plan audits, assign checklists, capture findings, and track CAPAs in one system. Every data point feeds into the supplier's risk profile automatically.
- Seamless integration. iComplai integrates with your existing systems -- ERP, procurement, and document management -- so supplier quality data flows where it needs to go without manual re-entry.
If your team is still toggling between spreadsheets, shared drives, and email chains to manage supplier quality, consider what that fragmentation is costing you in audit prep time, missed deadlines, and unquantified risk.
Frequently asked questions
What is supplier quality assurance in the food industry?
Supplier quality assurance is the systematic process of qualifying, approving and continuously monitoring the suppliers that provide raw materials, ingredients, packaging and services to a food business. It works in three layers: qualification before the first order ships, ongoing performance monitoring between audits, and a periodic structured audit against a defined checklist.
How do you ensure suppliers meet quality and compliance standards consistently?
You ensure consistency by tiering suppliers by risk, mixing announced with unannounced audits, tracking leading indicators rather than lagging ones, digitising data collection, closing the CAPA loop with effectiveness verification, and sharing scorecards with suppliers. Any supplier can pass one prepared audit; these six practices are what hold the standard in month nine of the cycle.
What should a supplier quality assurance audit checklist include?
A complete supplier quality assurance audit checklist covers ten areas: documentation and certifications, facility and premises, HACCP and the food safety plan, allergen management, traceability and recall readiness, pest control, training and personal hygiene, corrective and preventive actions, food fraud prevention, and environmental monitoring. Weight each area to your own product risk.
What is an FSVP and who is legally responsible for it?
An FSVP is a Foreign Supplier Verification Program, required under 21 CFR part 1 subpart L for food imported into the United States. The legal duty sits with the importer, the US owner or consignee of the food at entry, rather than with the foreign manufacturer, and an FSVP is needed for each food and each foreign supplier.
When is the FSMA 204 traceability compliance date?
The compliance date for the FDA Food Traceability Rule was 20 January 2026 and it has passed, so the recordkeeping obligation is live. FDA proposed a 30-month extension that was never finalised, and Congress has separately directed FDA not to enforce the rule before 20 July 2028. The duty exists; only enforcement is suspended.
How often should you audit a food supplier?
Audit frequency should follow risk rather than the calendar. High-risk suppliers, judged on ingredient criticality, volume, country of origin and past performance, typically get an annual on-site audit plus monthly KPI review; lower-risk suppliers may move to a two-year cycle with quarterly self-assessment questionnaires and unannounced visits when a signal appears.
See the signals before they become findings
iComplai monitors authority notifications, recalls and adulteration signals for your own materials and suppliers, daily.
Talk to iComplaiWhere these claims come from
- U.S. FDA. FSMA Final Rule on Foreign Supplier Verification Programs (FSVP) for Importers of Food for Humans and Animals. fda.gov
- Code of Federal Regulations. 21 CFR part 1, subpart L — Foreign Supplier Verification Programs (regulation text). ecfr.gov
- Federal Register. Requirements for Additional Traceability Records for Certain Foods: Compliance Date Extension, 7 August 2025, document 2025-14967 — a proposed rule, never finalised; it did not move the compliance date. federalregister.gov
- U.S. FDA. FSMA Final Rule on Requirements for Additional Traceability Records for Certain Foods (FSMA 204); compliance date 20 January 2026. fda.gov
- U.S. Congress. Continuing Appropriations, Agriculture, Legislative Branch, Military Construction and Veterans Affairs, and Extensions Act, 2026 (Pub. L. 119-37), section 780 — no funds may be used to administer or enforce the FSMA 204 traceability rule before 20 July 2028. govinfo.gov
- Code of Federal Regulations. 21 CFR 117.20(b)(5) — the lighting requirement for food manufacturers: “adequate lighting”, with no lux value set. ecfr.gov
- BRCGS. Global Standard for Food Safety — traceability requirements, clause 3.9. brcgs.com
- Global Food Safety Initiative. Recognition of certification programmes. mygfsi.com
- EUR-Lex. Regulation (EU) 2017/625 on official controls. eur-lex.europa.eu
- iComplai. Authority record aggregates for 2025 — 21,166 records, of which 13,575 US import refusals and 5,328 RASFF notifications; refusal charge breakdown counted as distinct references. Platform data as at 21 August 2026. icomplai.com