Dietary supplement cGMP is the set of current good manufacturing practice requirements FDA enforces under 21 CFR Part 111. It governs everyone who manufactures, packages, labels, or holds a dietary supplement, and its job is to guarantee that the finished product has the identity, purity, strength, and composition the label claims, and that it is not contaminated or mislabeled. It is a distinct rule from the general food GMPs, and it is deliberately stricter.
This post walks through what makes Part 111 different: the requirement to identity-test every dietary-ingredient component, the web of written specifications, the master manufacturing record and batch record system, and the quality unit that has to sign off before anything moves. It closes on how Part 111 compares to the 21 CFR Part 117 food GMPs most food plants know.
What is dietary supplement cGMP under 21 CFR Part 111?
21 CFR Part 111 is the cGMP rule specific to dietary supplements. Where food GMPs focus on keeping food safe, Part 111 adds a second demand: proving the product is what it claims to be. A supplement is defined by its label, a claimed amount of a claimed ingredient, so the rule is built around establishing specifications and then verifying, with testing and records, that each batch meets them. FDA published Part 111 to close the gap that a supplement can be perfectly “safe” in the food sense and still be economically adulterated, under-dosed, or made from the wrong botanical.
The core structure of Part 111 is: set specifications, test against them, control production with master and batch records, and give a quality unit the authority to approve or reject. Everything else, personnel, facilities, equipment, sanitation, supports those four pillars.
Why does Part 111 require identity testing of every component?
Because the fastest way to make a wrong supplement is to start with the wrong ingredient. Part 111 requires that, before use, you conduct at least one appropriate test or examination to verify the identity of every incoming component that is a dietary ingredient unless you petition FDA for and receive an exemption. A supplier's certificate of analysis alone does not satisfy the identity requirement; you have to establish identity yourself with a scientifically valid method. This is the single most cited Part 111 problem in FDA inspections, and it is the one that separates a real supplement operation from a blender.
Identity testing matters most for botanicals, where the wrong species, a substituted look-alike, or an adulterated extract can pass a paper check but fail the plant. You also set specifications for other components and for the finished batch, purity, strength, composition, and limits on contaminants like heavy metals, microbes, and pesticide residues, and you verify them by testing or by a scientifically justified alternative.
The rule draws a careful line here. For a component's identity Part 111 does not let you substitute a supplier's paperwork for your own test, you have to establish identity in your own facility, unless FDA has granted you an exemption for that component. For the other specifications, you may rely on a certificate of analysis if you first qualify the supplier and confirm the reliability of its analyses, and you periodically verify by testing. That distinction, identity always yours, other specs verifiable through a qualified supplier, is one of the most misunderstood parts of the rule, and getting it wrong is a fast route to a 483 observation.
What are master manufacturing records and batch records?
Part 111 splits production control into two documents, and the distinction is central. The master manufacturing record (MMR) is the approved master recipe and procedure for a product at a specified batch size: the ingredients and amounts, the specifications, the equipment, the step-by-step process, the in-process checks, and the required sign-offs. You write and approve one MMR per product and batch size, and it is the controlled template.
The batch production record (BPR) is the executed record of one actual batch, created by following the MMR. It captures what really happened: the specific component lots used, actual weights, who did each step, the in-process results, deviations, and the quality unit's disposition. Every batch gets its own BPR. The MMR says what should happen; the BPR proves what did. Missing or deficient MMRs and BPRs are, alongside identity testing, the most common Part 111 findings FDA writes.
| Master Manufacturing Record (MMR) | Batch Production Record (BPR) | |
|---|---|---|
| What it is | Approved master recipe + procedure | Executed record of one specific batch |
| How many | One per product per batch size | One per batch produced |
| Answers | What should happen | What did happen |
| Contains | Ingredients, specs, steps, controls, sign-off points | Actual lots, weights, operators, in-process results, deviations, disposition |
| Signed by | Quality unit approves the master | Quality unit reviews and releases the batch |
What is the quality unit and why does it sign off?
Part 111 requires a quality control function the quality unit, with the authority and independence to review records and make disposition decisions. Quality-control personnel must conduct all required material reviews and make all required disposition decisions: approving or rejecting each component, in-process material, and finished batch, and deciding on any reprocessing or deviation. The point is separation of duties. The people running production cannot be the only ones deciding whether production passed. The quality unit is the gate, and its signature on the batch record is what converts “we made it” into “it is released.”
How is Part 111 different from Part 117?
Both are FDA cGMP rules, but they answer different questions. 21 CFR Part 117 the general human-food rule, is built around hazard analysis and risk-based preventive controls: keep the food safe. Part 111 keeps the supplement safe too, but it goes further and demands proof of identity and quality: the right ingredient, at the claimed strength, made to a written spec, documented batch by batch, and released by a quality unit. Part 117 does not require you to identity-test every incoming ingredient or to run a formal MMR/BPR system; Part 111 does.
The practical implication: a food plant that also makes supplements cannot just extend its Part 117 program over the supplement line. The supplement line needs the Part 111 additions, component identity testing, specifications at every stage, master and batch records, and quality-unit disposition. Much of the supporting infrastructure (sanitation, SSOPs training, maintenance, supplier controls) carries over, but the quality architecture is stricter.
How do you build a Part 111 program?
- Write specifications first. Establish identity, purity, strength, and composition specs for every component, plus in-process and finished-product specs and contaminant limits. Specs are the foundation everything else verifies against.
- Set up component identity testing. Choose scientifically valid identity methods for each dietary ingredient, and either run them or hold a granted exemption. Do not rely on the certificate of analysis alone.
- Author master manufacturing records. Create an approved MMR per product and batch size, with steps, controls, and sign-off points.
- Execute batch production records. Produce each batch against the MMR and capture the real lots, weights, results, and deviations in a BPR.
- Stand up the quality unit. Give quality-control personnel independent authority to review records and approve or reject every disposition, and document who holds it.
- Test the finished product against specification (or a justified alternative), and only release on quality-unit sign-off.
- Handle complaints, returns, and records. Keep the required records, investigate product complaints, and retain documentation so FDA can follow any batch end to end.
By the numbers
The pillars of Part 111, from primary sources:
- 21 CFR Part 111 requires manufacturers to establish specifications and verify the identity of each incoming dietary-ingredient component before use, unless FDA grants an exemption (eCFR, 21 CFR Part 111).
- The rule requires a master manufacturing record and a batch production record for every batch, and a quality control unit that makes all material-review and disposition decisions (FDA Small Entity Compliance Guide, Part 111).
- FDA maintains Part 111 as a distinct cGMP for dietary supplements, separate from the general food and preventive-controls requirements (FDA, CGMPs for Food and Dietary Supplements).
Part 111 is a records rule as much as a manufacturing rule: identity results, specifications, master records, batch records, and quality-unit signatures are the evidence FDA follows, and any of them can be captured electronically under 21 CFR Part 11 if you meet its controls. When those records live in disconnected binders and spreadsheets, a single missing identity test or unsigned batch record can hold up release or draw a 483. Capturing specs, batch execution, and quality sign-off in one connected system, the kind of workflow Harmony runs on the plant floor keeps the chain intact and the batch releasable. Whichever way you build it, keep the master records under real document control because in a Part 111 audit the version that was in effect is the whole question.