If Your Manufacturer Fails: Formula Escrow, Second-Sourcing, and Supply Continuity
If your supplement manufacturer fails, one shop shouldn’t take your brand with it. How formula escrow, second-sourcing, and buffer stock keep you supplied.
A supplement brand can be selling well, reordering on schedule, and one phone call away from a supply crisis it never saw coming. The call is the one where your manufacturer tells you they’ve been shut down, sold, or forced into a recall. And your product, the one your whole business runs on, is made nowhere else.
Single-source manufacturing is the default for most growing brands, and for good reason: one shop that knows your product is simpler than two that half-know it. But default is not the same as safe. When the one shop that makes your product stops, everything downstream stops with it, unless you built the continuity in ahead of time.
You can. It comes down to a few decisions made before you need them: owning what you paid for, holding the documentation, keeping a backup qualified, and carrying enough buffer to switch without going dark. This is an educational overview, not legal advice, but it should tell you exactly what to put in front of your counsel.
Educational overview: not legal, regulatory, or medical advice. Requirements change and vary by jurisdiction and sales channel. Last reviewed July 2026.
Short answer. If your manufacturer fails, your exposure is bigger than a paused production run. Your components, work-in-process, and tooling can be trapped in the failed shop, and, as an 850-brand recall showed, a manufacturer’s compliance failure can pull your product off the market even when your own lots were fine. Continuity is engineered on your side, not granted by a certificate: own your formula, hold the manufacturing record, keep a qualified second source and a benchmark sample ready, and carry enough buffer inventory to switch. Formula escrow can backstop the documentation gap, but it only works if the deposit is complete and your rights to use it are clear.
Best for: Existing brands and Amazon sellers de-risking a single-source supply chain.
Key decision: Whether to rely on one manufacturer with no fallback, or invest ahead of time in ownership, documentation, a second source, and buffer stock.
Apollo path: Apollo runs transfers from a benchmark sample and a spec review, hands over the documentation to reproduce your product, and can serve as a primary or a qualified second source. Your counsel sets the escrow and contract terms; Apollo executes the manufacturing.
The single-source risk is bigger than “they might close”
When people picture a manufacturer failing, they picture the doors closing. That’s one way it happens, and not the most common. A shop can become unusable to you without going bankrupt at all: it gets acquired and the new owner drops small accounts, it loses a key certification or a landlord or a line, it gets hit with an FDA action, or it simply goes quiet and stops delivering. From your side of the loading dock, all of these look the same. The product isn’t getting made.
Start by being honest about everything that’s actually exposed when one shop is your whole supply chain. It’s more than the next run.
Scroll the table sideways →
| What’s exposed | Why it hurts when the shop fails | What reduces the exposure |
|---|---|---|
| The next production run | No product to sell; stockouts cascade to your listings and accounts | Buffer inventory + a pre-qualified second source |
| Work-in-process and finished goods on site | Your paid-for inventory can be tied up as the failed business is wound down | Take delivery on a sensible cadence; don’t let large balances sit |
| Custom components (bottles, closures, labels) | Custom materials you paid for can be stranded in the facility | Buyer-owned materials, disclosed and documented up front |
| Tooling and molds | Custom tooling can be an asset of the failed business, not clearly yours | Written ownership of tooling; know where it physically sits |
| The manufacturing record | Without the build, another shop can’t reproduce your product | Hold a portable copy yourself; don’t rely on the failed shop to hand it over |
| Regulatory standing | A manufacturer’s compliance failure can reach your product | Own-brand quality oversight; a backup that can prove its own compliance |
The last two rows are the ones brands underestimate, so they’re worth their own sections. Start with the regulatory one, because it’s the surprise that turns a supplier problem into a brand problem.
The recall that took down 850 brands that did nothing wrong
In 2020, the FDA announced what several industry observers called an unprecedented recall. Three related companies (ABH Nature’s Products, ABH Pharma, and StockNutra.com, of Edgewood, New York) recalled, under a consent decree entered in federal court, all lots of every dietary supplement product they had manufactured and sold between January 2013 and November 2019. According to the FDA’s recall notice, the action followed an inspection that “found significant violations of current good manufacturing practice regulations,” and the concern was that “manufacturing practices that were not in adequate control represented the possibility of risk being introduced into the manufacturing process resulting in finished supplement products with decreased identity, purity, strength and composition.”
Read that reason again, because it’s the whole lesson. The products weren’t recalled because they were tested and found dangerous; the FDA’s notice stated there had been no reported illnesses or injuries. They were recalled because the conditions they were made under couldn’t assure they were what the label said. And the recall didn’t reach one brand. The recall notice named roughly 850 companies (859 entities, by trade-press counts), none of them ABH’s own label. They were the brands that had hired ABH to make their products.
Sit with what that meant for those brands. A company could have a clean formula, honest marketing, a product customers liked, and no complaint on file, and still watch every lot it had ever sold get pulled, because the contract manufacturer it trusted couldn’t stand up to an inspection. Its supply didn’t just pause. Its shelved inventory became unsellable, and its supplier was in no position to make more.
That is the single-source risk in its sharpest form. It isn’t only “what if they can’t make my next batch.” It’s “what if their problem becomes my product’s problem.” One manufacturer, no backup, and no independent record of how your product is made, is a bet that your supplier never has a bad year.
A certificate is a snapshot, not a guarantee
Here’s the part that unsettles people who lean on third-party marks for comfort: the manufacturer at the center of that recall had held industry cGMP credentials. As trade outlet SupplySide SJ reported, two well-known programs had certified or registered the facility at various points: a certification issued in 2017 (later withdrawn for cause) and a registration held for a stretch before that. The facility carried the paperwork and still failed the inspection.
The people quoted in that coverage said the quiet part plainly. A certification-body representative noted that “GMP audits are a snapshot of a moment in time.” A former senior FDA official put the frustration more bluntly: the agency “found something that the certifiers didn’t, and that kind of defeats the point of certification, right?”
The takeaway is not that certifications are worthless; a credible quality program is a real signal, and a facility that maintains cGMP-compliant operations is telling you something true about how it runs. The takeaway is narrower and more useful: an external mark describes a moment, and continuity is something you engineer on your own side of the relationship. No badge on your manufacturer’s wall carries your buffer inventory, holds your manufacturing record, or qualifies your backup. Those are your decisions, and they’re the subject of the rest of this piece.
Formula escrow: what it is, what it holds, and what actually releases it
Formula escrow borrows a mechanism software has used for decades: a vendor deposits its source code with a neutral third party so the customer can keep the product alive if the vendor disappears. Translated to manufacturing, the idea is the same: your full manufacturing package sits with a neutral escrow agent, under a three-party agreement, and releases to you if defined things happen to your manufacturer.
The critical word is full. Escrowing a one-line “formula sheet” is theater. For an escrow deposit to actually let another qualified manufacturer pick up your product, it has to contain the build, not just the recipe: the same distinction between the “what” and the “how” that decides whether you can move a formula at all (covered in Who Owns Your Supplement Formula?). A deposit worth making holds:
- The complete ingredient list with exact amounts or percentages, not a proprietary-blend summary.
- The master-manufacturing-record-level build: order of addition, mixing and processing parameters, any intentional overage, the flavor-masking and preservation systems.
- The finished-product specification: what the product must test to for identity, potency, and contaminant limits.
- Raw-material specifications and, where relevant, qualified supplier information.
- Recent Certificates of Analysis, so a new partner can see the product’s real history.
Escrow agreements turn on release conditions: the specific, written events that entitle you to the deposit. Borrowing the well-worn categories from software escrow and adapting them to a physical supply chain, the common triggers look like this:
Scroll the table sideways →
| Release trigger | What it’s meant to catch | The practical catch to watch |
|---|---|---|
| Insolvency or bankruptcy of the manufacturer | The shop failing financially | May not self-execute once a bankruptcy case is filed (see the next section) |
| Failure or refusal to supply | The shop that’s still open but has stopped delivering | Define “failure” precisely (missed orders over a set period), or it’s arguable |
| Material breach of the agreement | Broken quality, confidentiality, or service terms | Usually paired with a cure period before release |
| Discontinuation of your product or line | The shop dropping your account or format | Easy to overlook; name it explicitly |
| Acquisition by, or transfer to, a party you can’t work with | New ownership that ends support | Tie it to a defined effect, not just the fact of a sale |
Two disciplines separate an escrow that works from one that’s decorative. First, verify the deposit: periodically confirm that what’s in escrow is current and complete, because a formula and process drift over time and a two-year-old deposit may not make today’s product. Second, build in the release mechanics (who declares the trigger, what proof is required, whether there’s a cure period, and how fast the agent releases) so that on the worst day the path to your own documents is a form, not a lawsuit.
Escrow is a genuinely useful backstop. But it has a specific weakness that most brand owners never hear about until it matters, and it lives in bankruptcy law.
The bankruptcy-law catch every escrow plan has to survive
This is the part to read slowly, and then take to your counsel. The intuition behind escrow is that “if my manufacturer goes bankrupt, the agreement says my documents release to me.” Federal bankruptcy law complicates that intuition in two ways that are worth understanding before you rely on the clause.
First, a release triggered “solely because” of bankruptcy may not fire the way you expect. The U.S. Bankruptcy Code contains what lawyers call the “ipso facto” rule. As of mid-2026, 11 U.S.C. § 365(e)(1) provides that an executory contract “may not be terminated or modified, and any right or obligation under such contract… may not be terminated or modified, at any time after the commencement of the case solely because of a provision in such contract… that is conditioned on” the debtor’s insolvency or financial condition, the commencement of a bankruptcy case, or the appointment of a trustee. In plain terms: a clause that snaps into effect just because your manufacturer filed for bankruptcy is, as a general matter, unenforceable against the bankruptcy estate. There are exceptions and a great deal of nuance, which is exactly why this is drafted with counsel, but the naive “auto-releases on bankruptcy” clause is not the ironclad switch it sounds like.
Second, there’s a statutory backstop, but it’s for licensees, and it doesn’t create documents you never had. The same code section, 11 U.S.C. § 365(n) (as of mid-2026), addresses the situation where the bankrupt party is “a licensor of a right to intellectual property” and the trustee rejects the contract. The licensee may then elect to “retain its rights… under such contract… to such intellectual property… for the duration of such contract” and any period the licensee can extend it, while continuing to make the royalty payments the contract requires. That’s a real protection, and it matters in one specific case: when your product runs on a formula the manufacturer owns and licenses to you (a stock or private-label base), § 365(n) can let you keep using that license even after the manufacturer’s bankruptcy.
Two boundaries on that protection are worth knowing. It defines “intellectual property” through 11 U.S.C. § 101(35A), which (as of mid-2026) lists a trade secret, patents and certain patent applications, plant varieties, works of authorship, and mask works. A supplement formula held as a trade secret fits. A trademark does not appear on that list, so a bare brand-name license is treated differently, and how trademark licenses fare in bankruptcy is its own tangled question for a lawyer. And § 365(n) lets you retain rights you already had; it doesn’t compel a failed shop to hand over a manufacturing record you were never given in the first place.
Put the two together and the design lesson falls out on its own: the strongest continuity position is the one that never has to invoke any of this. If you own your formula outright and already hold a portable manufacturing record, your manufacturer’s bankruptcy is a problem of logistics, not of rights; the manufacturing agreement is just a contract a trustee can reject, and your property leaves with you. Escrow and § 365(n) are backstops for the weaker positions: the licensee, the private-label brand, the brand that never secured the documents. Useful backstops, but backstops. Ownership beats them both, which is why the continuity conversation and the ownership conversation are really the same conversation, and why your counsel, not your manufacturer, draws the line.
Second-sourcing: the continuity plan that doesn’t depend on the failed shop
Escrow gets you the documents. It doesn’t get you a running line. The most reliable continuity plan is the one you control entirely, because it never asks the failed manufacturer to cooperate on its worst day: a second source, qualified before you need it.
Second-sourcing means having a backup manufacturer that could produce your product to spec: either already running some of your volume, or qualified and held in reserve. The value isn’t only insurance against total failure. A pre-qualified second source also cushions the ordinary disruptions: a capacity crunch at your primary, a quality hold, a lead-time blowout, a renegotiation that isn’t going your way. It quietly ends the leverage a sole manufacturer holds over a brand that has nowhere else to go.
The difference a second source makes is the difference between a transfer and a standing start. If you’ve kept the right materials current, moving production is the orderly process laid out in the Manufacturer Transfer Playbook: a benchmark sample, a spec review, a pilot, a cutover. If you haven’t, you’re re-developing your own product under stockout pressure, which is the worst possible time to do careful work. What keeps you in the first category is a small, deliberately maintained kit:
- A current benchmark sample: a retained unit of the real product a new manufacturer can measure against and match. It’s the fastest way to communicate “make it come out like this.”
- The current finished-product specification: the identity, potency, and contaminant targets any qualified shop has to hit.
- A portable manufacturing record: the build, at the level of detail another manufacturer can actually run from.
- Recent Certificates of Analysis: the product’s real test history, from qualified third-party labs.
- Your component and artwork files: print-ready label artwork, dielines, bottle and closure specs, so packaging isn’t a fresh project at the new shop.
- Clear ownership of tooling and custom components: in writing, so your molds and materials are yours to move.
Notice that this kit is the same documentation that makes a formula portable in the first place, and largely the same package worth escrowing. That’s the efficiency of continuity planning: the work you do to own and document your product is the same work that lets you switch, backstop, or reorder without drama. One effort, several protections.
You don’t have to run split volume across two shops from day one; for many brands that’s more coordination than a young product needs. But knowing who your second source would be, and keeping the kit current, is continuity you can afford long before you’re big enough to dual-source everything.
Buffer inventory and reorder discipline: time is the asset you’re actually buying
Every continuity plan above needs one thing to work: time. Escrow releases, transfers, and re-qualification all take a while, and the only thing that buys you that while without lost sales is inventory on hand when the disruption hits.
This is where continuity meets ordinary reorder planning. A sensible safety-stock buffer (finished goods beyond your immediate sell-through) is what converts a supply shock from an emergency into an inconvenience. The right size isn’t a universal number; it’s a judgment call that weighs your realistic switch window, your sales velocity, your product’s shelf life, and the cash and storage a buffer ties up. A shelf-stable product with a long dating window can hold a deeper buffer than a short-dated liquid. Timing the reorder so a normal lead time never catches you empty is ordinary reorder discipline; the point here is that the buffer is doing double duty: it smooths ordinary reorders and it’s your bridge across a supplier failure.
Components deserve the same thought, and they’re often the cheaper place to build resilience. Banked labels and packaging (the overage that rides along with a custom print run’s minimum) are pre-positioned continuity stock, not sunk cost. If your label printer’s minimum leaves you holding several runs’ worth, that inventory is exactly what lets a second manufacturer start filling without waiting on a fresh print job. The mechanics of that banking, and why component minimums and finished runs are two different numbers, are worked through in Component Minimums vs. Finished Runs and Why Reorders Are Faster and Simpler Than Your First Run.
None of this means over-buying. Inventory that expires is its own loss, and cash tied up in stock is cash not working elsewhere. The discipline is to hold enough (matched to how fast you could realistically switch) rather than as much as possible. That’s a planning decision, made deliberately, not a reflex.
A continuity plan you can build before you need it
Put the pieces together and continuity stops being a vague worry and becomes a short list of decisions, each closing a specific gap. None requires you to be a large brand. All of them are cheaper to make now than to improvise during a crisis.
Scroll the table sideways →
| The move | The risk it closes | Where it’s covered |
|---|---|---|
| Own your formula outright (assignment, in writing) | The manufacturer controlling whether you can make your product elsewhere | Who Owns Your Supplement Formula? |
| Hold a portable manufacturing record yourself | Having the rights but not the build; relying on a failed shop to hand over documents | This piece + ownership piece |
| Keep tooling and custom components clearly buyer-owned | Molds and materials stranded as assets of the failed business | Component Minimums vs. Finished Runs |
| Qualify a second source, or at least name one | A single point of failure with no fallback line | Manufacturer Transfer Playbook |
| Maintain a current benchmark sample + spec + CoAs | A switch that starts from re-development instead of a known target | This piece |
| Carry a sensible safety-stock and component buffer | Going dark during the switch window | Why Reorders Are Faster and Simpler Than Your First Run |
| Escrow the documentation gap, drafted by counsel | The record existing but not reaching you when the shop fails | This piece |
| Watch for the early-warning signs | Being surprised instead of activating a plan in time | Signs Your Supplement Manufacturer Is Failing |
The sequence matters less than the coverage. A brand that owns its formula, holds the records, has a named backup, and carries a buffer has closed the failure modes that turn a supplier problem into a business-ending one. And it did the work on a calm afternoon, not during a recall.
The earliest of these moves is simply paying attention. A manufacturer rarely fails without tells: slipping quality, missed dates, thinning communication, staff turnover, invoices that suddenly change. Those are the cues to activate a plan while you still have options (the subject of Signs Your Supplement Manufacturer Is Failing). Continuity planning and early warning are the same instinct pointed at two moments: before the relationship starts, and while it’s quietly ending.
Apollo’s position: second-sourcing and transfer-readiness as continuity insurance
Apollo Future Labs treats this the way it treats materials and formula ownership, as something to be transparent about up front, because transparency is the differentiator in this industry. A manufacturer that makes it hard to leave is managing your loyalty through lock-in. A manufacturer worth staying with earns it by keeping up.
In practice that means a few concrete things. Apollo runs transfers as a defined process (a benchmark sample, a spec review, a pilot, a cutover) so a brand moving off a shop that’s slowing down, or that has failed, starts from a known point rather than a blank page. It can serve as a qualified second source for a brand that wants a backup line without moving all its volume. It hands over the documentation to reproduce a custom formula you developed and paid for, rather than holding the record as leverage. And it applies the same buyer-owned-materials rule to custom components and tooling that runs through the rest of its floor: what’s yours is yours, in writing, disclosed before you commit rather than discovered when you try to leave.
The boundary is just as clear. Whether to put your manufacturing package in escrow, how a release is triggered, what your supply agreement says about insolvency and IP, and how bankruptcy law applies to your specific arrangement are decisions for your counsel, not your manufacturer. Apollo executes the manufacturing and the documentation from its FDA-registered, cGMP-compliant facility in Livermore, California, and can be the primary line or the backup one. Your attorney sets the continuity and contract strategy. Apollo supports the execution; your counsel decides the strategy.
Questions that reveal a continuity gap
You can’t tell how exposed you are from a good relationship on a good day. These questions surface it. Ask them of your current manufacturer, of any you’re evaluating, and (the ones marked for counsel) of your attorney.
- If you closed or were shut down tomorrow, what of mine is trapped in the building? Finished goods, work-in-process, custom components, tooling. And who owns each on paper.
- Do I hold a manufacturing record complete enough for another qualified shop to run from? Not a one-line formula sheet: the build.
- Do I own my formula, or license it, and what happens to that if the shop fails? (Counsel.) Ownership is the strongest position; a license leans on bankruptcy-law protections that are narrower than they sound.
- Who would my second source be, and how long would qualifying them actually take? A named backup and a current kit turn months into weeks.
- Is my benchmark sample, spec, and CoA package current enough to hand over today? Continuity documents go stale as the product evolves.
- How much buffer inventory and banked component stock do I carry against a switch window? Enough to bridge a realistic disruption, not so much it expires.
- If we set up formula escrow, what exactly is deposited, who verifies it stays current, and what releases it? (Counsel.) An incomplete or unverified deposit is false comfort.
Answered plainly, these tell you whether you have a continuity plan or just a good supplier. If the answers are vague, that vagueness is the gap.
About this information
This article is an educational overview for brand owners and operators. It is not legal, regulatory, or medical advice, and it does not create any attorney-client or advisory relationship. Bankruptcy, contract, intellectual-property, and dietary-supplement rules change frequently and vary by jurisdiction and by where and how a product is sold. The federal statutes referenced here, including 11 U.S.C. § 365 and 11 U.S.C. § 101(35A), are cited as of the review date and may be amended or interpreted differently by the courts, and their application to any specific escrow, license, or supply agreement is fact-dependent. The FDA recall described is summarized from FDA’s public recall notice and contemporaneous trade reporting for illustration; details should be confirmed against the primary record. Verify current requirements, and any continuity or escrow strategy, with qualified counsel before acting on anything here. Information is current as of the date last reviewed. Apollo Future Labs supports manufacturing execution and documentation; your counsel decides your continuity, contract, and compliance strategy.
Start a Transfer Review
If you’re carrying a single-source risk you’d rather not (a product made in one place, with no backup and no clear exit), tell us what you’re making and where you’d want a second line to sit. A transfer review from the team that runs the lines at our Livermore, California facility looks at your benchmark sample, your specification, and the documentation you hold, so you can see what a backup or a switch would actually take before you commit to anything. A review is a review, not an obligation.
Start a Transfer ReviewWhat happens if my supplement manufacturer goes out of business?
Production stops, and your components, work-in-process, and tooling can be tied up in the failed shop. Worse, a manufacturer’s compliance failure can force a recall of your product even if your lots were fine. Continuity depends on owning your formula, holding the records, and having a qualified backup.
What is formula escrow and does it protect my brand?
Formula escrow is a three-party agreement where your full manufacturing package is deposited with a neutral agent and released to you on defined triggers, like the manufacturer failing to supply. It helps, but it only protects you if the deposit is complete and your rights to use it are clear. It is not a substitute for owning your formula.
Can bankruptcy law let a manufacturer keep my formula?
If you own the formula outright and hold the records, it is your property to take elsewhere. If you only license a manufacturer-owned formula, federal bankruptcy law gives an intellectual-property licensee certain rights to keep using it, but the details are technical and jurisdiction-specific. This is a question for your counsel.
What is second-sourcing and how do I set it up?
Second-sourcing means qualifying a backup manufacturer before you need one. You keep a benchmark sample, current specification, manufacturing record, and recent CoAs ready, so a switch is a transfer from a known starting point rather than a standing start. It is the continuity plan that does not depend on the failed shop cooperating.
How much backup inventory should I keep?
Enough to cover a realistic disruption and switch window for your product and channel, without tying up cash in stock that may expire. Banked components and a sensible safety-stock buffer turn a supply shock into a manageable gap. The right amount is a planning decision, not a fixed number.