HACCP News
The Foreign Supplier Verification Program rule, part of FSMA and codified at 21 CFR Part 1, Subpart L, puts the compliance burden on the importer, not the foreign supplier. An importer bringing food into the United States has to verify that the supplier is producing it with safety controls that provide the same level of public health protection FDA expects of a domestic facility under the preventive controls or produce safety rules. An importer who cannot produce that verification is exposed on that basis alone, independent of whether anything was ever actually wrong with the food.
This site’s HACCP or Preventive Controls post covered which domestic rule applies to food manufactured here. FSVP is the regulation on the other side of that question – aimed at whoever is bringing the food across the border, not whoever made it.
Who FSVP Covers
The rule defines the importer as the U.S. owner or consignee of the food at the time it enters the country. If there is no U.S. owner or consignee, the foreign owner or consignee has to designate a U.S. agent or representative to take on that role – FSVP does not go unassigned just because ownership sits overseas.
Certain foods and situations carry modified or reduced requirements – food from a country whose food safety system FDA has formally recognized as comparable, for example, or food already covered under certain other FDA programs. Whether one of those applies to a specific product and supplier is a determination to make against the regulation itself, not an assumption to make from a general description of it.
What Verification Actually Requires
FSVP is not a single document; it is a chain of required steps. The importer has to run a hazard analysis for the specific food being imported, evaluate the risk posed by that food and by the performance of the particular supplier providing it, and use that evaluation to decide what verification activity is appropriate and how often it has to happen. Depending on the risk, that activity might be an onsite audit of the supplier’s facility, sampling and testing of the food, a review of the supplier’s relevant food safety records, or another activity the rule allows – the choice has to trace back to the hazard analysis, not be picked by default.
When a verification activity turns something up, the importer has to act on it, which can mean withholding further shipments until the supplier resolves it. The whole file – hazard analysis, supplier approval, verification activity and its results, and any corrective action – gets reassessed periodically and whenever something changes: a new hazard, a different process, a different supplier.
Where FSVP Files Fall Down
- The FSVP was built once, at onboarding, and never touched again even though the supplier, the process, or the product changed.
- The verification activity on file doesn’t match what the hazard analysis actually calls for – a document review stands in for the onsite audit or testing the risk picture called for.
- The importer is relying on a supplier’s own certificate or scheme audit without confirming it actually covers the specific hazard the importer identified.
- A verification activity flagged a problem, and there is no record of what the importer did about it afterward.
FSVP Is Not the Same Thing as Ordinary Supplier Approval
Most food businesses already run some version of supplier approval – vetting a new vendor before buying from them, keeping specs and letters of guarantee on file, re-qualifying suppliers on a schedule. That is good practice on its own, and it is often something a retail buyer or a GFSI-recognized scheme expects as a baseline. FSVP borrows some of the same instincts but is a separate, FDA-mandated program with its own hazard analysis, verification activity, and recordkeeping tied specifically to imported food. A strong supplier approval program is a head start, not a substitute – the FSVP file still has to exist on its own terms and answer to what the regulation specifically requires. See how retail buyers evaluate the broader supplier review on the Retail Supplier Qualification page.
What an Investigator Looks For
FDA wants to see an FSVP tied to a specific foreign supplier and a specific food, not a generic binder that could belong to any importer. That means the hazard analysis behind it, a documented basis for the verification activity chosen, evidence that activity actually happened rather than just being scheduled, and a record of what followed when it found something. An FSVP with no name attached to who built and maintains it draws the same kind of attention as a domestic food safety plan with no PCQI named against it.
How HACCP Builder Helps
HACCP Builder doesn’t decide whether FSVP applies to your business or run your hazard analysis for you – that is your importer’s own qualified individual’s call. What it does do is keep the supplier-facing documentation your verification activity depends on from going stale: a letter of guarantee or other vendor document lives on that vendor’s own record with its expiration date attached, and a reminder fires before it lapses rather than after an auditor notices. See how that works on the Letters of Guarantee page.
Whatever records your verification activity produces – a document review, an audit summary, a corrective action – get the same automatic edit history as the rest of your program: who changed what, and when, with the prior version always on file. See the full breakdown on the Document Control & Audit Trail page.
An Honest Note on Scope
Scope note: whether FSVP applies to your business, which exemptions might reduce what it requires, and what verification activity and frequency your specific suppliers and products call for are determinations for your importer’s qualified individual or FDA guidance to make – not a general blog post. This is general information, not a compliance opinion for your facility.
Contact HACCP Builder to see how this applies to your own facility.
We can be reached at (866) 577-4030 ext. 800 or via email at [email protected]. Leave us a message or book a free demo today!
