How to Get GMP Certified for Dietary Supplements

A gap audit compares what you have against the standard you intend to certify to. For supplements, that is usually NSF/ANSI 455-2, SGS or an equivalent GMP scheme recognised by the US, EU or Middle East. Auditors look at six areas: facility design and airflow, equipment calibration, raw material quarantine, batch record completeness, personnel training logs and finished-product testing. A plant running at 2,000 bottles per shift needs the same documentation discipline as one running 20,000.

The output of this audit is a corrective action list, not a score. Expect 40–120 findings on a first pass. Prioritise anything touching product safety: pest control, water quality, allergen cross-contact, cleaning validation. If you are working with a contract manufacturer, ask for their last audit report and the closure evidence for each finding. A facility that cannot produce closure evidence within 30 days is not ready for a certification body.

Budget 4–8 weeks for the audit itself and another 8–16 weeks for remediation. This is the longest phase and the one most brands underestimate.

Certification bodies spend most of their time in documents, not on the floor. You need a master batch record for every SKU, a specification sheet for every raw material, and a certificate of analysis for every incoming lot. For a capsule product, that means gelatine or HPMC, the active blend, magnesium stearate, silicon dioxide and the capsule shell itself. Each needs an approved supplier, a COA on file and a retest date. Missing retest dates are the single most common documentation failure.

Stability data matters too. A 24-month shelf-life claim needs accelerated and real-time data at 25°C/60% RH and 40°C/75% RH. If you are launching a probiotic or a softgel with fish oil, you need assay and microbial testing at 0, 3, 6, 12 and 24 months. Auditors will ask for the protocol before they ask for the results. Write the protocol first, then run the study.

Keep records for at least one year past shelf-life. Electronic batch records are accepted, but only with audit trails and access controls in place.

Before the certification body visits, run at least three consecutive pilot batches at commercial scale. Each batch must be fully documented, tested and released. This proves the process is reproducible. A 500-unit pilot run is enough to generate data; a 1,000-unit run is enough to prove your bottling line holds fill weight within ±2% across the run. Inspectors look for consistency, not perfection.

The inspection itself is usually one to three days on site. The auditor will follow a batch from raw material receipt to finished goods release. They will interview operators, check calibration stickers on scales and verify that the person who signed the batch record was trained to sign it. Common failures: uncalibrated pH meters, missing cleaning logs, and training records dated after the batch was made.

After the inspection, you receive findings. Respond with root cause analysis and evidence of correction within the timeframe given, usually 14–30 days. The certificate is issued once findings are closed. Maintaining it requires an annual surveillance audit and recertification every two to three years.

A GMP certificate is only as strong as the batch records behind it. Before certification, your contract manufacturer should test every finished batch for identity, potency, microbials, heavy metals and disintegration. Identity testing confirms the raw material is what the label claims, typically by HPLC or FTIR. Potency assays verify the active marker compound is within 90–110% of label claim. Microbial testing covers total aerobic count, yeast and mould, E. coli and Salmonella. Heavy metals include lead, arsenic, cadmium and mercury, usually by ICP-MS. Disintegration applies to tablets and capsules, with a typical specification of under 30 minutes in purified water at 37°C.

Testing happens at three points: incoming raw materials, in-process stages such as blending and compression, and finished product before release. Each test generates a certificate of analysis (COA) that should list the product name, lot number, manufacture and expiry dates, test parameters, specifications, results, test methods and the analyst and QA sign-off. A COA without method references or signatures is not a release document. For GMP certification, inspectors will ask to see how out-of-specification results were investigated and closed out, not just the passing batches.

Retention samples are kept for every lot, typically one full commercial pack or a minimum of 100 g, stored under label conditions for at least one year past expiry. Stability protocols follow ICH Q1A guidelines: 25°C/60% RH for long-term and 40°C/75% RH for accelerated testing, with time points at 0, 3, 6, 9, 12, 18 and 24 months. Accelerated data supports a two-year shelf life claim while long-term data confirms it. Without a written stability protocol tied to each formula, GMP certification is difficult to defend during an audit.

Document control is the part most facilities underestimate. Every SOP, batch record and specification needs a version number, effective date and approval signature. Changes must be traceable through a change-control log. During a GMP inspection, auditors commonly sample three to five batch records and trace them from raw material receipt through to distribution. If a lot number on a COA cannot be matched to a weighing record, a blending log and a packaging record, the certification scope is at risk. Build the traceability chain before the audit, not during it.

Packaging format affects both GMP documentation and retail compliance. Common options include HDPE bottles with induction seals, blister packs, stick packs and single-serve sachets. Bottles suit capsules and tablets at volumes from 1,000 units per SKU. Blisters and stick packs carry higher tooling costs but support pharmacy and travel-retail channels. Each format requires its own line-clearance record, seal-integrity check and packaging specification. Under GMP, the packaging line must be cleared of previous components before a new lot starts, and the clearance must be signed and dated.

For the US market, the FDA dietary-supplement label requires a statement of identity, net quantity of contents, a supplement facts panel with serving size and percent daily value, a list of ingredients, and the name and place of business of the manufacturer or distributor. Allergen declarations follow FALCPA. For the EU, Regulation 1169/2011 governs nutrition labelling and allergen emphasis. Lot coding and expiry coding must be legible and durable, typically inkjet or laser on the bottle base and repeated on the carton. GMP inspectors check that the code on the primary pack matches the batch record and the carton.

Carton and pallet specifications should be agreed before the first production run. Standard export cartons hold 12, 24 or 48 units, with a maximum gross weight of 15–20 kg for manual handling. Pallet footprints are usually 1200 x 1000 mm or 1200 x 800 mm, stretch-wrapped and labelled with lot, quantity and destination. For Amazon FBA, each unit needs an FNSKU label over the original barcode, and cartons need FBA box labels with quantity and expiry in the required format. Retail chains often require a GS1 barcode and may audit the label artwork against the COA before listing.

Label artwork approval is a controlled document under GMP. The brand owner signs off a proof, the printer returns a signed sample, and the production line uses only the approved version. Any change to the supplement facts panel, allergen statement or lot-coding position triggers a new approval cycle. Facilities that treat artwork as a marketing file rather than a GMP record tend to fail label reconciliation during inspection. Keep the approved artwork, printer proof and line-clearance record together for each lot.

Sample lead time is typically 7–10 working days from approved formula and packaging. Pilot runs start at 500–1,000 units per SKU, which allows stability testing and retail samples before committing to mass production. Mass production runs 20–35 working days after sample approval, depending on packaging complexity and whether components are in stock. Retail bottling MOQ is usually 1,000 units per SKU. These figures assume a GMP-certified facility with existing tooling; new blister tooling or custom bottle moulds add 15–25 working days.

Shipping method depends on volume and urgency. Air freight suits pilot and launch quantities, typically 5–14 days door to door, at a higher cost per kilogram. Sea freight suits retail replenishment, typically 25–40 days port to port plus customs clearance. Incoterms should be agreed in writing: EXW leaves all export and import responsibility with the buyer; FOB places export clearance and loading on the manufacturer; DDP places delivery and import duty on the manufacturer. Most brand owners new to importing choose FOB for control, or DDP for simplicity.

Each shipment should include a COA per lot, a material safety data sheet (MSDS) where the product contains concentrated actives, a free-sale certificate for markets that require it, and a phytosanitary certificate for botanical ingredients where the destination country demands it. Certificates of origin may be needed for tariff purposes. The commercial invoice, packing list and bill of lading must match the lot numbers on the COAs. A mismatch between shipping documents and batch records is a common cause of customs delays and, in some markets, a trigger for a GMP compliance query.

Delivery planning should account for the GMP release step. A batch is not available to ship until quality assurance has reviewed the batch record and signed the COA. Build 3–5 working days into the schedule for QA release after production ends. For repeat orders, confirm that raw material lots are still within their retest date and that packaging components have not changed. Brand owners who treat lead times as fixed often discover that the QA release, not the production line, is the real constraint.