21 CFR Part 111 Requirements: The Complete Guide for Supplement Manufacturers

If you manufacture, package, label, or hold dietary supplements for sale in the United States, 21 CFR Part 111 is the regulation that governs how you have to run your operation. It is FDA's Current Good Manufacturing Practice (CGMP) rule for dietary supplements, and it is the single most-cited regulation in FDA inspections of supplement facilities. This guide walks through what Part 111 actually requires, subpart by subpart, with a focus on the records provisions that trip up the most manufacturers.

What Part 111 Is, and Who It Applies To

Part 111 was finalized in 2007 and is codified at 21 CFR Part 111, "Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements." It applies to every domestic and foreign company that manufactures, packages, labels, or holds a dietary supplement sold in the U.S. market, regardless of company size (small businesses received a phased-in compliance timeline, but the substantive requirements are the same).

A common misconception is that Part 111 applies only to the party whose brand appears on the label. It does not. FDA has been explicit, including in the Part 111 preamble, that both the contract manufacturer physically producing the product and the brand owner (own-label distributor) share CGMP responsibility. A brand owner who never touches a physical batch is still expected to have a quality agreement with its contract manufacturer, to review batch production records, and to verify that specifications are being met. "We just design the label, the co-packer handles compliance" is a position FDA has rejected in enforcement actions and Warning Letters. If your name is on the bottle, you are expected to be able to demonstrate that the product was made in accordance with Part 111, even if someone else's equipment made it.

Part 111 vs. Part 211: Why Supplement Manufacturers Are Not Held to Pharma GMPs

One of the most persistent points of confusion, even among consultants and software vendors, is conflating Part 111 with 21 CFR Part 211, the CGMP regulation for finished pharmaceuticals. They are not the same regulation, and they are not interchangeable.

Part 211 was written for drug manufacturing, where the margin for error is measured in clinical risk and where FDA's authority to inspect, approve, and require pre-market clearance is far more extensive. Part 111 was written specifically for dietary supplements, which are regulated as a category of food under the Federal Food, Drug, and Cosmetic Act, not as drugs. Part 111 does borrow structural concepts from Part 211 (a quality unit, batch production records, specifications, complaint handling), but the standards, the enforcement posture, and the pre-market expectations are different. Dietary supplements do not require FDA approval before going to market; supplement manufacturers do not need a New Drug Application; and the identity, purity, strength, and composition standards in Part 111 are keyed to your own product specifications, not to a pharmacopeial monograph FDA has pre-approved.

Where this confusion causes real problems: marketing copy or internal documentation that describes a facility as "pharma-grade" or claims Part 211 compliance can create a regulatory exposure for a supplement company, because it invites comparison to a standard the company was never designed or audited against, and it can be read by FDA or a plaintiff's attorney as an implied claim the company cannot support. If you make supplements, your governing CGMP citation is Part 111. Say so accurately.

Subpart-by-Subpart Walkthrough

Part 111 is organized into subparts. Below is a records-weighted walkthrough of the subparts that generate the most inspection activity.

Personnel (Subpart C)

Every person who manufactures, packages, labels, or holds a dietary supplement, and every person who supervises those activities, must have the education, training, or experience to perform their assigned duties. You need to document this: job qualifications, training records, and hygiene practices are all subject to review. FDA inspectors routinely pull training files during inspections and cross-reference them against the batch production record for a specific lot to confirm the personnel listed as performing a step were actually trained on it.

Physical Plant and Grounds (Subpart D) and Equipment and Utensils (Subpart E)

Your facility must be designed and constructed to prevent contamination, and your equipment must be suitable for its intended use, cleanable, and maintained. Cleaning and maintenance records for production equipment are GMP records under Part 111 and are reviewable during an inspection just like your batch records.

Production and Process Control System (Subpart E, continued, and Subpart F)

This is the operational core of Part 111. You must establish and follow written procedures for the production and process control system, including specifications at every stage: component specifications, in-process specifications, and specifications for the finished product. Every specification you set must have a documented basis, and every batch must be verified against it before it can be released.

Quality Control (Subpart F)

Part 111 requires a "quality control unit" (sometimes shortened to QC unit or quality unit) that is responsible for approving or rejecting components, packaging, labels, and finished products, and for reviewing production and control records to determine whether specifications were met. The quality unit's approval or rejection decision is itself a GMP record. A production process without a documented, empowered quality function separate from production is one of the most common findings in Warning Letters.

Master Manufacturing Records (§111.205–111.210)

The Master Manufacturing Record (MMR) is the master recipe: it must include the product name and description, a list of components used, specifications, a statement of theoretical yield, a description of the equipment, and step-by-step manufacturing instructions with any relevant sampling, testing, and process control steps. Every batch you produce should be traceable to an approved MMR, and any deviation from the MMR needs to be documented and evaluated. §111.210 also requires that the MMR be reviewed and approved by the quality unit before use.

Batch Production Records (§111.255–111.260)

The Batch Production Record (BPR), sometimes called the batch record, documents what actually happened for a specific production run: the identity and quantity of each component used, the batch and lot numbers, actual yield, dates of manufacture, equipment used, in-process and finished product test results, and the identity of every person who performed and reviewed each significant step. §111.260 lists the specific information a batch record must contain, including any deviation from the MMR and how that deviation was investigated.

The distinction between the MMR and the BPR trips up a lot of new manufacturers: the MMR is the plan, written once and used for every batch of that product; the BPR is the execution record, created fresh every single time you run a batch. FDA inspectors look for consistency between the two and for evidence that any gap between them (a deviation) was caught, documented, and evaluated by the quality unit, not just quietly worked around.

Laboratory Operations (Subpart F, continued)

If you conduct your own testing, your laboratory must have adequate, appropriately calibrated equipment and qualified personnel following documented test methods. If you rely on a contract laboratory, you remain responsible for verifying the lab is qualified and for reviewing the Certificate of Analysis (COA) against your own specifications, not just filing it.

Handling Consumer Complaints and Product Returns (Subpart O and Subpart N)

Every product complaint related to a possible failure of a dietary supplement to meet Part 111 requirements must be documented, investigated, and reviewed by the quality unit to determine whether it indicates a broader manufacturing or process problem. Returned product must be identified, held, and evaluated before it can be reprocessed or destroyed, and the disposition must be documented.

Holding and Distributing (Subpart K)

Storage and distribution conditions have to protect the identity, purity, strength, and composition of the product, and a system for material review and disposition before release for distribution is required.

100% Identity Testing of Dietary Ingredients (§111.75)

§111.75(a)(1) is the single most-cited Part 111 provision in FDA enforcement, and it is the one most frequently misunderstood. It requires that you confirm the identity of every dietary ingredient before it is used in a finished product, through appropriate testing or examination. Critically, this identity testing obligation exists regardless of whether your supplier provides a Certificate of Analysis. A COA from a supplier attesting to identity is not, by itself, sufficient to satisfy §111.75, unless you have qualified that supplier and can document the basis for relying on their COA in place of your own testing.

The common misunderstanding is around the exemption for component testing more broadly. §111.75(a)(2) does allow you to rely on a supplier's Certificate of Analysis for certain other component attributes (not identity) if you have established the reliability of the supplier's COA through appropriate qualification, including confirming, at appropriate intervals, that the supplier's test results are consistent with your own periodic verification testing. But this exemption pathway is narrower than many manufacturers assume, applies to a subset of testing obligations, and does not extend to a blanket exemption from 100% identity testing on incoming dietary ingredients. FDA Warning Letters routinely cite manufacturers who treated a supplier COA as sufficient for identity confirmation without having gone through, and documented, the supplier qualification process the regulation actually requires.

Records Requirements and Retention (§111.605) — Where Part 11 Intersects

§111.605 sets out the general recordkeeping requirements for Part 111: records must be kept for one year past the shelf life date, or two years beyond the date of distribution of the last batch if no shelf life date is used, and they must be readily available for authorized FDA inspection and copying.

Part 111 itself is largely silent on the format those records need to take, paper or electronic, but the moment you keep any Part 111 record electronically, 21 CFR Part 11 becomes the controlling regulation for how that electronic record must be created, secured, and signed. This is a distinct regulation from Part 111, and it layers additional requirements on top: audit trails, access controls, and electronic signature validity. A batch record kept in a spreadsheet with no audit trail may satisfy Part 111's retention duration but fail Part 11's integrity requirements the moment an inspector asks who changed a value and when. Our companion guide on Part 11 requirements covers this in depth, including the specific controls (§11.10(e) audit trails, §11.50 signature manifestations) that apply once your Part 111 records go digital.

What FDA Inspectors Actually Cite

FDA's own inspection data, and its published Warning Letters, show a consistent pattern of Part 111 findings concentrated in a small number of areas: failure to conduct identity testing of dietary ingredients, failure to establish or follow a written master manufacturing record, failure of the quality control unit to review and approve batch production records before release, and failure to investigate and document deviations. Our Warning Letter Roundup series tracks these patterns as they happen. Issue 1 covered two manufacturers cited for the same combination of failures, incoming component testing and inadequate quality unit review, on the same day. Issue 2 covered a contract manufacturer's attempt to treat its brand-owner client's specifications as someone else's problem, which FDA rejected outright.

If your facility receives a Form FDA 483 listing observations under Part 111, the clock on your response starts immediately, and the quality of your written response, backed by documentary evidence rather than promises to "retrain staff," materially affects whether the matter escalates to a Warning Letter. Our guide on surviving an FDA Warning Letter walks through what happens after that escalation and how documentation determines the outcome.

Certain categories of supplements draw disproportionate current enforcement attention specifically around Part 111 documentation: GLP-1 and berberine-adjacent products scaling faster than their batch documentation, hemp-derived products and the delta-8/delta-9 category operating in front of a regulatory framework FDA has not finished writing, and peptide supplements facing scrutiny over ingredient sourcing and identity claims. Manufacturers in these categories should assume Part 111 records will be the first thing an inspector asks to see.

Common Deviation Scenarios and How They Should Be Documented

A deviation is anything that happens during production that does not match the approved Master Manufacturing Record, and Part 111 does not treat deviations as automatically disqualifying. What it requires is that every deviation be documented, investigated, and evaluated by the quality unit before the batch is released, with a documented conclusion about whether the deviation affects the product's identity, purity, strength, or composition. A few recurring scenarios illustrate what good documentation looks like versus what draws FDA scrutiny:

• Component substitution mid-run. If an operator substitutes a different lot, or worse, a different supplier's material, than what the MMR specifies, because the specified component ran out, this needs to be captured as a deviation with a documented quality unit evaluation of whether the substitute component meets the same specification, not just a note in a comment field that gets buried once the batch ships.
• Weight or yield variance outside the theoretical range. The MMR requires a statement of theoretical yield. When actual yield falls meaningfully outside that range, high or low, the deviation record should capture the magnitude of the variance and the quality unit's investigation into the cause, whether that is a measurement error, an equipment issue, or a genuine process problem.
• Missed or out-of-sequence process step. If a step is completed out of order, or a required in-process check is skipped and performed later, the record needs to show when the actual step occurred relative to when the MMR specifies it should have occurred, and whether that timing gap had any bearing on product quality.
• In-process or finished-product test result outside specification. An out-of-specification (OOS) result triggers its own investigation obligation, distinct from but related to general deviation handling, and the batch cannot be released until the quality unit has evaluated the OOS finding and reached a documented disposition.

The common thread across all four scenarios is that FDA does not expect zero deviations from a real manufacturing operation. FDA expects a documented, quality-unit-reviewed trail showing that when something went off-plan, someone with the authority to stop the batch actually looked at it and made a defensible call, rather than a batch record that reads as though everything went perfectly on every run of every product, which readers with manufacturing experience know is not realistic and treat as a credibility problem, not a compliance strength.

International and Contract Manufacturing Considerations

Part 111 applies to any facility that manufactures, packages, labels, or holds a dietary supplement for the U.S. market, including foreign facilities. A foreign contract manufacturer producing a supplement destined for U.S. distribution is subject to the same CGMP requirements as a domestic one, and FDA does conduct foreign facility inspections. A U.S. brand owner working with an overseas contract manufacturer should expect to see the same MMR, BPR, identity-testing, and quality-unit-review documentation from that manufacturer that it would demand domestically, and should build supplier qualification and periodic auditing into its own quality system rather than assuming distance from the U.S. market reduces the documentation bar.

BatchBuddy structures the MMR/BPR relationship the way Part 111 describes it: every formulation acts as the master manufacturing record, version-controlled and requiring quality-unit sign-off through a two-person change order approval before a revision can be used in production; every production run generates its own batch production record automatically, pulling the approved formulation's specifications, logging the actual ingredient lots consumed through FIFO allocation, and capturing every operator and reviewer signature with a timestamp. Deviations from the MMR are captured structurally rather than left to a comment field. §111.75 identity-testing status and supplier COA data are tracked at the ingredient-lot level so the quality unit has the underlying documentation, not just a checkbox, at the point of batch release. Because every one of these records is created and signed electronically, the same platform also has to meet 21 CFR Part 11 controls for audit trails and electronic signatures, and it does, as covered in that companion guide. BatchBuddy's Part 11 posture is self-declared, and third-party validation (IQ/OQ/PQ) is in progress, not yet complete; we describe our own controls honestly rather than asserting a certification we do not hold.

Frequently Asked Questions

(See the FAQ section below the article for answers to common Part 111 questions.)

Frequently Asked Questions

What is the difference between 21 CFR Part 111 and Part 211?

Part 111 is FDA's CGMP regulation for dietary supplements, regulated as a category of food. Part 211 is FDA's CGMP regulation for finished pharmaceuticals. They share some structural concepts, but they are legally distinct, and a supplement manufacturer should never describe its operation as Part 211 compliant unless it is actually manufacturing a drug product.

Does a brand owner have Part 111 responsibility if a contract manufacturer makes the product?

Yes. FDA holds both the contract manufacturer and the brand owner (own-label distributor) responsible for CGMP compliance. The brand owner is expected to have a quality agreement with its manufacturer and to verify specifications are met, not simply rely on the manufacturer without oversight.

Can I rely on a supplier's Certificate of Analysis instead of testing dietary ingredients myself?

Not for identity testing. §111.75(a)(1) requires you to confirm the identity of every dietary ingredient through your own appropriate testing or examination. A supplier COA can support other component specifications under §111.75(a)(2), but only after you have qualified that supplier's COA reliability through documented verification, and that exemption pathway does not cover identity confirmation.

What is the difference between a Master Manufacturing Record and a Batch Production Record?

The Master Manufacturing Record (MMR) is the approved master recipe for a product, written once and used for every batch. The Batch Production Record (BPR) documents what actually happened for one specific production run, including any deviation from the MMR. Every batch should trace back to an approved MMR version.

How long do I need to keep Part 111 records?

Under §111.605, records must be kept for one year past the product's shelf life date, or two years beyond the date of distribution of the last batch if no shelf life date is assigned, and must be readily available for FDA inspection and copying during that period.

Does Part 111 require electronic batch records?

No. Part 111 does not require any particular record format. Once you keep a Part 111 record electronically, however, 21 CFR Part 11 governs how that electronic record and any electronic signature on it must be created and secured.