How to Verify a Supplement Manufacturer Before You Commit

Verifying a supplement manufacturer means checking the quality system, not counting the badges. Most buyers do the opposite: they collect a row of marks (FDA-registered, GMP, NSF), assume the marks mean the same kind of thing, and commit. They don’t. Registration is a filing a facility does itself. Compliance is how it runs. Certification is a paid, audited program. Only one of the three is checked by an outsider, and none is the FDA approving your product, because the FDA doesn’t approve supplements at all.

So the real work is reading past the words: what each claim actually asserts, what documents the facility can produce on request, and which certification matters for where you sell. Below is that check, end to end: the same one you’re welcome to run on us.

Educational overview: not legal, regulatory, or medical advice. Requirements change and vary by jurisdiction and sales channel. Last reviewed July 2026.

Short answer. Verify the system, not the badges. “FDA-registered” is a self-filing, not approval; “cGMP-compliant” is the legal baseline, not a certificate; certifications like NSF, USP, and SQF are audited programs that matter differently by channel. A real manufacturer proves itself with documents it already holds (lot CoAs, batch records, supplier qualification, third-party testing), produced on request, not invented after you ask.

Best for: Brand owners and operators comparing manufacturers, trying to tell a real quality system from a marketing page.

Key decision: Which manufacturer to trust with a run, on verifiable documentation and the right certification for your channel, not badge count.

Apollo path: Apollo’s quality, testing, and compliance section lays out the claims and documents; a manufacturing quote puts them against your product.

What “FDA-registered” actually means, and what it doesn’t

Most of the confusion in this category starts here. A US facility that makes, packs, or holds dietary supplements is required to register with the FDA under the food-facility registration rules (21 CFR Part 1, Subpart H, carried in from the Bioterrorism Act and reinforced by FSMA). Registration is real and mandatory. But three things about it get lost:

• It’s self-submitted. A facility registers itself through the FDA’s system. No inspection, review, or approval happens as a condition of registering. You file; you’re registered.
• It’s not approval or endorsement. The FDA is explicit that registration does not mean the agency has approved the facility, its processes, or its products, and warns against using registration to imply otherwise.
• You can’t simply look it up. The FDA does not offer a public, consumer-searchable lookup of food-facility registrations the way it does for some other records. A manufacturer can tell you it’s registered; you generally can’t pull the record and confirm the number.

So “FDA-registered facility” is table stakes, not proof: true, expected, and on its own almost silent about the quality system. It turns into a red flag only when it’s inflated: quietly upgraded to “FDA-approved,” “FDA-certified,” or “FDA-endorsed.” None of those exist for supplements, which raises the biggest point in the category.

The FDA does not approve dietary supplements. Under the Dietary Supplement Health and Education Act of 1994 (DSHEA), supplements aren’t approved before sale. The manufacturer and the brand carry responsibility for safety, manufacturing quality, and truthful labeling. The FDA regulates, inspects, and enforces after the fact; it does not hand out pre-market approvals. Any manufacturer that tells you your product will be “FDA-approved” is either confused about the law or counting on you to be: your first verification result.

What you actually can check. Registration isn’t public, but two FDA records are: the agency publishes warning letters, searchable by company name, and posts inspection classifications in a public dashboard. An FDA inspection ends in one of three outcomes: NAI (No Action Indicated), VAI (Voluntary Action Indicated), or OAI (Official Action Indicated). You usually can’t pull a facility’s history yourself, so ask directly: when were you last FDA-inspected, and what was the outcome? A clean warning-letter search isn’t proof of quality, but an open one is proof of a problem.

cGMP: compliant vs. certified, and why the wording matters

“cGMP” (current Good Manufacturing Practice) is the second badge that hides a distinction. For dietary supplements it’s a specific federal rule: 21 CFR Part 111, governing how a facility sets specifications, tests incoming ingredients, controls the process, keeps records, and handles what comes off the line. Operating to it is the legal baseline for making supplements in the US: not optional, not a differentiator. It’s the floor.

Here’s the wording trap. “cGMP-compliant” means a facility runs to that rule. “cGMP-certified” implies an independent body audited the facility against a named GMP standard and issued a certificate. Those are different claims:

• Compliant is, in the first instance, self-declared. A facility states that it operates to 21 CFR Part 111 (entirely true when it does, and what the law requires), but the assertion comes from the facility itself.
• Certified means someone outside the building checked: a third-party auditor (NSF, NPA, or a GFSI-recognized scheme, for example) inspected against a defined standard and issued a certificate with a scope and expiry date.

Neither is automatically “better” (a compliant facility with a serious quality system can outrun a thinly certified one), but they are not interchangeable, and a manufacturer that blurs them is telling you something. Careful shops say “cGMP-compliant operations” and stop there unless they hold an actual certificate. Apollo does exactly that, never “cGMP-certified,” because the words have to survive the question show me the certificate. If a manufacturer claims “cGMP-certified,” the check is simple: ask which body issued it, to which standard, and for the certificate itself, with its scope and date.

The documents a real manufacturer will show you

Badges are claims. Documents are evidence. The surest way to tell a quality system from a quality-themed website is to ask for the paperwork a compliant facility generates as a matter of course, and watch how the request is handled. The tell isn’t only what’s in the documents; it’s where they come from. A real system produces them from existing records, promptly, because they already exist; a weak one assembles something after you ask. Pulled from the system versus built on demand is most of what you’re testing.

Two of those deserve a note, because they’re where 21 CFR Part 111 has real teeth:

Identity testing. Part 111 requires a facility to verify the identity of each incoming dietary ingredient: a test on the material coming in the door, every lot, not a trust exercise resting on the supplier’s word. Ask how incoming ingredients are identity-tested; a shop with a real system answers immediately.

Specifications. The same rule requires written specifications for identity, purity, strength, and composition, and that finished batches be shown to meet them. “We make a high-quality product” is not a specification; a number with a method behind it is. In the FDA’s own inspection findings, gaps in specifications and the testing behind them are recurring observations, which is why asking to see them separates the systems from the slogans.

One more thing: how the documents reach you. Sensitive files should move through a secure portal under an NDA, not loose email attachments; a shop that emails you another client’s un-redacted batch record has shown you how it’ll handle yours. Apollo’s quality, testing, and compliance section lays out which documents accompany a run; ask any manufacturer for the same.

Which certification actually matters for your channel

Past registration and compliance, you reach the certifications a manufacturer either holds or doesn’t: NSF, USP, SQF, and the “third-party tested” shorthand. The mistake is treating them as a prestige ladder where more is better. They answer different questions, and which one you need is set by where you sell, not by which logo looks most reassuring.

What they actually cover, per the standard-holders:

• NSF certifies facilities (to GMP) and specific products (NSF/ANSI 173), and runs NSF Certified for Sport for banned-substance assurance; check which one a claim refers to.
• USP issues the USP Verified Mark: product-level verification against USP standards for identity, potency, purity, and dissolution.
• SQF (Safe Quality Food) is a GFSI-recognized food-safety certification of the facility, the scheme large retailers ask for.
• “Third-party tested” isn’t a certification; it’s sending product to an independent lab for a CoA. Useful, but a testing arrangement, not an audited program; ask for the CoA and the lab.

The part few pages lay out plainly: which your channel actually asks for.

The matrix is subtractive as much as additive: a certification your channel doesn’t ask for is cost and time you may not need, and a shop pushing every badge at once may just be selling them. Amazon in particular keeps shifting its requirements; what Amazon’s rules require from your manufacturer is its own subject, worth reading before you list. Match the mark to the shelf.

The walk-through and the questions that separate a quality system from a badge wall

Documents and certificates tell you a lot from your desk. A walk-through (in person or by video) and a short list of questions tell you the rest. You’re not auditing to FDA standard; you’re checking whether the answers come ready, specific, and consistent with the paperwork.

Questions that expose the system (ask any manufacturer, Apollo included):

• Are your supplements “FDA-approved” or “FDA-certified”? The only correct answer is no: the FDA doesn’t approve supplements. A yes, or a dodge, ends the evaluation.
• Is your quality claim “cGMP-compliant” or “cGMP-certified”? If certified: who issued it, to what standard, and can I see the certificate with its scope and date?
• How do you identity-test incoming dietary ingredients? You want a real process, per lot, not “our suppliers are reputable.”
• Can you show a redacted batch record and a lot CoA for a product like mine? Watch whether these come from a system or get built after the call.
• Who does your testing? “Vetted independent third-party labs” is the answer you want; in-house-only testing grades its own homework.
• What certification does my channel actually need, and which do you hold or support? A manufacturer that asks where you sell before naming a badge is thinking about your product, not its trophy case.
• Where do my formula and paperwork live? NDA first, files through a secure portal, not an email thread.

On a walk-through, what you’re watching for:

• Segregation and flow: quarantined materials kept apart from released ones; a logical path from receiving to finished goods.
• Cleaning and changeover: how cross-contact is prevented on shared equipment.
• Records at the line: batch records, logs, and in-process checks in use, not filed away for show.
• Who answers: a quality person who speaks in specifications and procedures, not just sales.

For a pre-quote version to bring to every shop you’re comparing, how to prepare for a manufacturing quote carries the readiness checklist.

Reference-checking that actually works. Ask a manufacturer for references and you get its three happiest clients. Better moves:

• Ask for a reference in your format and channel: a liquid brand if you’re making a liquid, a retail brand if you’re headed to retail. Fit-specific references are harder to cherry-pick.
• Ask operational questions, not “are they nice”: Did CoAs arrive with every lot? Did a batch ever miss spec, and how was it handled? Were component minimums and overages disclosed before you committed, or discovered on an invoice?
• Cross-check what you were shown against what the reference describes. Consistency is the signal; a story that doesn’t match the documents is the tell.
• If you’re moving an existing product, treat the switch as its own project; the manufacturer transfer playbook covers the benchmark-sample and pilot steps that let you verify a shop on a small run before committing a whole line.

Red flags in a manufacturer’s verification claims

Some answers should stop the evaluation on their own. None of these is subtle once you know to look:

• “FDA-approved” or “FDA-certified” supplements. The category doesn’t exist. This is the single clearest disqualifier.
• “cGMP-certified” with no certificate. If they can’t name the issuing body and standard and produce the document, treat it as “compliant” at best, and ask why the stronger word was used.
• Badges as images, not certificates. A logo on a homepage isn’t a certification; the certificate (with scope, standard, and expiry) is. A mark that can’t be substantiated, or that appears on a product it doesn’t cover, is worse than no badge.
• Documents that appear only after you ask, slowly. A CoA or batch record that takes weeks and arrives looking freshly made suggests the system produced it for you, not from itself.
• Testing kept in-house with no independent lab. A shop that won’t use or name a third-party lab is grading its own work.
• No specifications, just adjectives. “Premium,” “high-quality,” or “pharmaceutical-grade” (a term with no legal definition for supplements) standing in for written specs on identity, purity, strength, and composition.
• Every badge, for every channel, unprompted. Certification pushed regardless of where you sell is a sales posture, not a quality one.

If you’re already living with several of these on a current manufacturer, the question shifts from “how do I verify” to “is this fixable or terminal.” The signs a manufacturer is already failing is the diagnostic for that call.

What verifiable looks like: our own claims as the worked example

The honest way to end is to run the checklist on ourselves.

Apollo Future Labs operates an FDA-registered facility in Livermore, California: cGMP-compliant operations.

Now read that sentence the way you’d read any manufacturer’s. Notice what it does not say: not “FDA-approved,” not “cGMP-certified,” not “certified” to any scheme at all. Registration is a filing; compliance is how the operation runs; certification is an audited program. And where we’re mid-programme, we say “in progress,” not “certified.” The precision isn’t lawyering; it’s the point. A claim you can hold us to is worth more than a badge you can’t check.

The words are only the opening. Here’s the test we invite you to run:

• Ask for a CoA on a comparable lot: typically a redacted example under NDA, and the testing behind it comes from vetted independent third-party labs, fees and turnaround quoted before work starts.
• Ask for a redacted batch record. You’ll typically see a real one as a redacted example under NDA, because protecting another brand’s data is how we’ll protect yours.
• Ask how incoming dietary ingredients are identity-tested and how specifications are set for identity, purity, strength, and composition.
• Ask which certification your channel actually needs. If your shelf doesn’t require a mark, we’ll say so rather than sell you one.

On the compliance-adjacent questions (label and claims review, testing plans, documentation), the boundary is clean: we support, your counsel decides. Apollo provides operational compliance support, not legal or regulatory advice.

That’s what verifiable looks like from the inside: not a wall of logos, but claims precise enough to check and documents that already exist to back them. Run the same test on every manufacturer on your list; the one whose answers match its paperwork is the one to trust with a run.

About this information

This article is an educational overview for supplement brands and operators. It is not legal, regulatory, or medical advice. Laws, regulations, and marketplace policies change frequently and vary by jurisdiction and by where and how a product is sold. Before acting on anything here, verify the requirements that currently apply to your product and your sales channels with qualified counsel or a regulatory professional. The information is current only as of the review date shown at the top of this article. Apollo Future Labs supports manufacturing execution (production, testing, and documentation) while your own counsel decides your compliance strategy.