Guide
FSVP supplier evaluation: what FDA requires
Updated 8 min read7 primary sources
Under 21 CFR 1.505, an FSVP importer must evaluate each foreign supplier and food before approving the supplier, considering the hazard analysis, who controls the hazards, and the supplier's performance, including whether it is the subject of an FDA warning letter, import alert, or other FDA compliance action related to food safety. Both the evaluation and the approval must be documented, and the evaluation must be redone promptly when new information appears and at least every 3 years.
Key facts
- Regulation
- 21 CFR 1.505 (FSVP, 21 CFR part 1 subpart L)
- Who must do it
- The FSVP importer, using a qualified individual
- FDA records to consider
- Warning letters, import alerts, other FDA food safety compliance actions
- Reevaluation
- Promptly on new information, and at least every 3 years
- Record retention
- At least 2 years after the evaluation stops being used
What does 21 CFR 1.505 require?
The Foreign Supplier Verification Programs (FSVP) regulation requires every covered importer to approve each foreign supplier on the basis of a written evaluation. Section 1.505 lists what that evaluation must consider. It applies once your hazard analysis under 1.504 has found at least one hazard requiring a control in the food.
“(a) Evaluation of a foreign supplier's performance and the risk posed by a food. (1) Except as specified in paragraphs (d) and (e) of this section, in approving your foreign suppliers and determining the appropriate supplier verification activities that must be conducted for a foreign supplier of a type of food you import, you must consider the following:”
In plain terms, the evaluation is your documented answer to two questions: should you buy this food from this supplier, and how will you verify that the hazards in it are controlled? The answer to the first is your approval under 1.505(b). The answer to the second drives the verification activities you choose under 1.506.
What must an FSVP supplier evaluation consider?
Section 1.505(a)(1) lists four groups of factors. The table maps each one to what you would record and where the information usually comes from.
| Factor | Regulation | What to record | Typical source |
|---|---|---|---|
| Hazard analysis of the food, including the nature of each hazard requiring a control | 1.505(a)(1)(i) | The hazards requiring a control and a reference to your written hazard analysis | Your hazard analysis under 1.504 |
| The entity that controls or verifies control of each hazard | 1.505(a)(1)(ii) | Whether the supplier, its raw material supplier, or another entity in the chain controls each hazard | Supplier questionnaire, process description |
| Supplier's food safety procedures, processes and practices | 1.505(a)(1)(iii)(A) | Summary of the supplier's food safety system | Food safety plan, audit reports |
| Applicable FDA regulations and the supplier's compliance with them | 1.505(a)(1)(iii)(B) | Warning letters, import alerts and other FDA food safety compliance actions, with the date you checked | FDA warning letters page, FDA import alert pages, FDA Data Dashboard |
| Supplier's food safety history | 1.505(a)(1)(iii)(C) | Test results, audit results, and how the supplier responded to past problems | Certificates of analysis, audits, your complaint and corrective action log |
| Other factors as appropriate | 1.505(a)(1)(iv) | For example storage and transportation practices | Logistics and storage information |
“(B) Applicable FDA food safety regulations and information relevant to the foreign supplier's compliance with those regulations, including whether the foreign supplier is the subject of an FDA warning letter, import alert, or other FDA compliance action related to food safety”
Which FDA records should you check for each supplier?
The regulation names warning letters, import alerts and other FDA compliance actions. FDA's January 2023 FSVP guidance (Question E.4) adds that you may use the FDA Data Dashboard to search for warning letters, import alerts, import refusals, recall notices, inspections and notices of suspension of facility registration. In practice, a complete compliance check covers five public record types:
| Record type | What it shows | Where FDA publishes it |
|---|---|---|
| Import alerts | Whether the supplier's products are on a red list (subject to detention without physical examination), green list or yellow list | Import alert pages on accessdata.fda.gov, updated in real time |
| Warning letters | Significant violations FDA has put in writing to the firm | FDA Warning Letters page (searchable, XLSX export) |
| Import refusals | Shipments FDA refused, with the product and charge codes | FDA Data Dashboard, shipments refused on or after 10/01/2016, updated weekly |
| Inspection classifications | NAI, VAI or OAI outcomes of FDA inspections | FDA Data Dashboard, updated weekly |
| Recalls | Classified recalls where the supplier is the recalling firm | FDA Enforcement Report and openFDA |
A record on this list does not decide the outcome by itself. FDA's guidance says that being subject to an FDA action such as a warning letter or an import alert should not necessarily disqualify a foreign supplier, but that you should carefully consider the actions the supplier took in response. For the mechanics of the alert search, see How to check if a supplier is on an FDA import alert.
Who can do the evaluation, and who approves the supplier?
A qualified individual must develop your FSVP and perform its activities (21 CFR 1.503(a)). That person needs the education, training or experience for the task and must be able to read the records being reviewed. The qualified individual may be, but does not have to be, your employee.
Another entity, such as a consultant, may perform the evaluation for you, as long as it is not the foreign supplier itself. You then review and assess that evaluation and document your review, including that a qualified individual did the work (21 CFR 1.505(d)). The approval stays with you: FDA's guidance (Question E.8) says only the FSVP importer may approve its foreign suppliers.
What has to be documented, and for how long?
- The evaluation itself (21 CFR 1.505(a)(2)).
- Your approval of the supplier, based on that evaluation (21 CFR 1.505(b)).
- Every reevaluation and any action you took after it (21 CFR 1.505(c)).
- A signature and date on FSVP records when first completed and whenever modified (21 CFR 1.510(a)(2)).
Records about your processes and procedures, including the results of evaluations, must be kept for at least 2 years after their use is discontinued, for example after you stop using that supplier or replace the evaluation with a reevaluation (21 CFR 1.510(c)(2)). Records must be made available promptly to FDA on request, and offsite records must be retrievable within 24 hours (21 CFR 1.510(b)).
FDA's FSVP rule page also notes that an FSVP is required for each food and each foreign supplier: one food from three suppliers means three FSVPs, and three foods from one supplier means three as well. A field-by-field layout is in our FSVP supplier evaluation template.
When do you have to redo the evaluation?
Section 1.505(c) sets two triggers. You must promptly reevaluate when you become aware of new information about the evaluation factors, and you must reevaluate at the end of any 3-year period in which you have not done so. FDA's guidance gives a supplier being placed on an import alert, or receiving a warning letter, as examples of new information. Details are in When to reevaluate a foreign supplier under FSVP.
What happens if the evaluation is missing or incomplete?
Missing evaluations appear regularly in FDA's FSVP warning letters. In a warning letter dated October 9, 2025 (CMS 711329), FDA cited an importer under 1.505(a)(1)(iii)(B) because its approval of a supplier did not consider the supplier's history under two of the three import alerts on which the supplier was listed. More examples are in FSVP warning letters: what FDA cites.
The regulation's own consequences are in 21 CFR 1.514. Food may be refused admission under section 801(a)(3) of the FD&C Act if the importer appears not to comply with the FSVP rule, and importing food without a compliant FSVP is a prohibited act under section 301(zz). FDA can also list an importer on Import Alert 99-41, which allows detention without physical examination of the named foods.
Does every importer have to do a full 1.505 evaluation?
- Juice and seafood from suppliers subject to, and in compliance with, the juice or seafood HACCP regulations (parts 120 and 123) are outside the FSVP rule (21 CFR 1.501(b)).
- Very small importers and importers of certain food from certain small foreign suppliers may follow the modified requirements in 21 CFR 1.512, which rely on written assurances instead of the full evaluation.
- Importers of certain dietary supplements and dietary supplement components follow 21 CFR 1.511.
- Food from a country whose food safety system FDA has officially recognized as comparable or equivalent may qualify for 21 CFR 1.513.
Even under 1.512(c), an importer buying from certain small foreign suppliers must still evaluate the supplier's FDA compliance history, including warning letters and import alerts, and reevaluate it on new information and every 3 years.
Frequently asked questions
- Does FSVP require checking FDA import alerts for every foreign supplier?
- Yes, for foods with a hazard requiring a control. 21 CFR 1.505(a)(1)(iii)(B) requires the importer to consider whether the foreign supplier is the subject of an FDA warning letter, import alert, or other FDA compliance action related to food safety, and to document that evaluation.
- Does an import alert listing disqualify a foreign supplier under FSVP?
- Not automatically. FDA's 2023 FSVP guidance says that being subject to a warning letter or import alert should not necessarily disqualify a supplier, but the importer should carefully consider the supplier's corrective actions and how they affect approval and verification.
- Can a consultant or customs broker do my FSVP supplier evaluation?
- Another entity other than the foreign supplier may perform the evaluation using a qualified individual, and you must review, assess and document it under 21 CFR 1.505(d). Only you, as the FSVP importer, may approve the supplier.
- How often must an FSVP supplier evaluation be updated?
- You must promptly reevaluate when you learn new information about the evaluation factors, and in any case at the end of any 3-year period without a reevaluation, under 21 CFR 1.505(c).
- How long must FSVP evaluation records be kept?
- Records of evaluations and other processes and procedures must be kept for at least 2 years after their use is discontinued, under 21 CFR 1.510(c)(2).
- Do I need a separate FSVP evaluation for each food and supplier?
- Yes. FDA's FSVP rule page states that an FSVP is required for each food and each foreign supplier, so one food from several suppliers, or several foods from one supplier, each need their own FSVP.
Sources
Every legal and FDA-process claim above is cited to a primary source. Access dates show when each page was read.
- 0121 CFR 1.505 (eCFR)eCFR · accessed
- 0221 CFR part 1 subpart L, FSVP (eCFR)eCFR · accessed
- 03FDA: FSMA Final Rule on Foreign Supplier Verification ProgramsFDA · accessed
- 04FDA Guidance for Industry: Foreign Supplier Verification Programs for Importers of Food for Humans and Animals (January 2023)FDA · accessed
- 05FDA: FSVP Regulation Records RequirementsFDA · accessed
- 06FDA Data Dashboard: Firm/Supplier Evaluation ResourcesFDA · accessed
- 07FDA warning letter, CMS 711329 (October 9, 2025)FDA · accessed
Related
Put it into practice
Check your suppliers' FDA records in one place
Paste up to five supplier names into the free bulk check to see import alerts, refusals, warning letters, inspections and recalls, each linked to the FDA record. Paid plans add a dated evaluation PDF per supplier for your FSVP file.
SupplierRadar is not affiliated with the U.S. Food and Drug Administration. Data comes from public FDA records and may contain errors. This is not legal advice; importers remain responsible for their supplier evaluations.