FSVP Evidence Packs: What Your Foreign Supplier Verification File Should Contain Before FDA Asks

Introduction

Under the Foreign Supplier Verification Programs (FSVP) rule, 21 CFR Part 1, Subpart L, a US importer of food must develop, maintain and follow an FSVP for each food it imports. The aim is to give adequate assurance that each foreign supplier produces the food to US public health standards, and that the food is not adulterated or misbranded for allergen labelling.

Many teams miss that FDA doesn’t judge an FSVP by your intentions. It judges it by your records. If a hazard analysis, supplier approval or verification activity isn’t documented, in FDA’s eyes it didn’t happen. A July 2026 FDA warning letter, for example, cited an importer that had not developed an FSVP for any of the foods it imported.

For Technical and Quality Managers, the practical answer is an FSVP evidence pack: one structured file for each food and foreign supplier that you can open, update and hand to an investigator without a scramble.

Key Components of an FSVP Evidence Pack

Scope and the Qualified Individual

Start by showing who is responsible and what the pack covers. The rule requires a qualified individual to develop the FSVP and perform each activity. That means someone with the right education, training or experience who can read the language of the records they review.

• ✔️ The FSVP importer named for the food: the US owner or consignee at entry, or a designated US agent or representative who has signed a statement of consent
• ✔️ The food, the foreign supplier (the establishment that manufactures or processes, raises or grows it) and the supplier’s location
• ✔️ Qualified individual records: CV, training certificates and language capability
• ✔️ Any exemption or modified requirement you rely on (for example, very small importer status under § 1.512), with the supporting evidence

Written Hazard Analysis

§ 1.504 requires a written hazard analysis for each type of food, whatever the outcome. A conclusion of “no hazards requiring a control” still has to be written down and justified.

• ✔️ Biological hazards, including environmental pathogens where ready-to-eat food is exposed before packaging
• ✔️ Chemical hazards, including radiological hazards, pesticide and drug residues, natural toxins, decomposition, unapproved additives and food allergens
• ✔️ Physical hazards such as stones, glass and metal fragments
• ✔️ Hazards that occur naturally, are introduced unintentionally, or are introduced intentionally for economic gain
• ✔️ An evaluation of probability and severity, covering formulation, raw materials, transport, packaging, storage and intended use

You may rely on a hazard analysis done by another entity, including the supplier. If you do, you must document your review of it and confirm it was carried out by a qualified individual.

Supplier Evaluation and Approval

§ 1.505 requires you to evaluate each supplier’s performance and the risk the food poses, document that evaluation, and approve the supplier on the basis of it. The evidence should show you considered:

• ✔️ Who controls each hazard: the supplier, its raw material supplier, or another entity in the chain
• ✔️ The supplier’s food safety procedures, processes and practices
• ✔️ Its FDA compliance status, including any warning letters, import alerts or other compliance actions
• ✔️ Its food safety history: test results, audit results and how quickly it corrects problems
• ✔️ Other relevant factors, such as storage and transport practices

Verification Activities and Their Records

Before importing, you must decide and document which verification activities are needed and how often. The options in § 1.506 are onsite audits, sampling and testing, review of the supplier’s food safety records, and other appropriate activities. Where the supplier controls a hazard with a reasonable probability of serious adverse health consequences or death, the default is an onsite audit before first import and at least annually after that, unless you make an adequate written determination that other activities are appropriate.

• ✔️ Audit records: procedures, dates, conclusions, corrective actions, and evidence the auditor was qualified
• ✔️ Testing records: the food and lot, number of samples, tests and methods, dates, results, the laboratory, and any corrective actions
• ✔️ Record reviews: dates, the nature of the records reviewed, conclusions and corrective actions
• ✔️ Your documented review of the results, which is required even when another party did the work

One boundary matters here. You cannot rely on the supplier or its employees to carry out verification activities, except for sampling and testing.

Implementation Steps to Assemble and Maintain the Pack

An evidence pack is only useful if it stays current. Treat it as a controlled document set, not a folder you build once:

• ✔️ Build a register of every food and foreign supplier pairing, so no import falls outside an FSVP
• ✔️ Write procedures for using only approved suppliers, and record how you follow them
• ✔️ Re-evaluate promptly when new information comes in, such as a recall, import alert or failed test, and at least every three years
• ✔️ Record corrective actions under § 1.508, including suspending a supplier until the cause is fixed
• ✔️ Keep § 1.507 disclosures (“not processed to control [hazard]”) and annual customer assurances where your customer controls the hazard
• ✔️ Sign and date FSVP records when first completed and whenever they change
• ✔️ Check that your name, email and DUNS number (FDA’s recognised unique facility identifier) go with every food line entry, as § 1.509 requires

What FDA Asks For in an FSVP Inspection

Records on Request

§ 1.510 sets the ground rules. Records must be available promptly on request. Records kept offsite, including those held by other entities, must be retrievable within 24 hours. FDA can ask in writing for records to be sent electronically, which is the basis for remote FSVP inspections. You must provide English translations within a reasonable time, and keep records for at least two years (records of procedures and evaluations for two years after you stop using them).

Form FDA 483a Observations

If an investigator finds significant deficiencies, they record them on Form FDA 483a, “FSVP Observations,” at the close of the inspection. FDA highly encourages a written response within 15 business days, with the new and updated records as evidence. Unresolved violations can lead to a warning letter, refusal of admission and placement on Import Alert 99-41, which allows detention without physical examination. Importing food without a compliant FSVP is also a prohibited act.

The gaps behind these observations map directly onto the rule:

• ✔️ No FSVP developed for a food, as cited in a July 2026 FDA warning letter
• ✔️ Hazard analysis missing, or not written for each food
• ✔️ No documented supplier evaluation or approval
• ✔️ Verification activities not decided on, not done, or not reviewed
• ✔️ Relying on supplier self-assessment where the rule does not allow it

Compliance and Regulatory Support

Platforms such as 3iVerify help food businesses turn FSVP requirements into everyday workflows, so evidence builds up as work gets done rather than in the week before an inspection. The programme design comes first; software is how you keep it going:

• ✔️ Supplier approval workflows with certificate tracking, document requests and expiry alerts
• ✔️ Central storage for audits, certificates, test results and hazard analyses
• ✔️ Risk intelligence feeds (including FDA import alerts) to trigger prompt supplier re-evaluation
• ✔️ CAPA linked to supplier non-conformances and audit findings

The Impact of a Well-Kept Evidence Pack

A current evidence pack changes how an FSVP inspection feels. Instead of rebuilding history under pressure, you show a controlled, dated record of each decision. It also pays off outside FDA’s attention:

• ✔️ Faster responses to customer questionnaires and retailer audits
• ✔️ Earlier warning when a supplier’s risk profile changes
• ✔️ Clear accountability for approvals and corrective actions
• ✔️ Less time lost to chasing documents by email

Ready to strengthen your FSVP evidence? Primority can help.

Our cloud-based 3iVerify platform is designed to help food businesses manage supplier compliance and wider food safety management in one system. We provide:

• ✔️ Supplier and raw material approval tools
• ✔️ Document control with version history and review dates
• ✔️ AI-powered supply chain monitoring through AiScan
• ✔️ Expert support from food safety professionals

Why choose Primority for FSVP readiness?

• ✅ Real-world food industry expertise
• ✅ Configurable digital system matched to your processes
• ✅ Support from qualified food safety practitioners
• ✅ Integrated solutions across documentation, suppliers and CAPA
• ✅ Scalable technology that grows with your supplier base

Don’t wait for an FDA records request to find the gaps. Book a personalized demo today to see how our technology can support your FSVP and supplier compliance programme.

This article is for informational purposes only and does not constitute legal advice. Confirm your obligations against the current FSVP regulation (21 CFR Part 1, Subpart L), FDA’s FSVP guidance and inspection materials, and with your regulatory counsel. Editor sources include the eCFR text of Subpart L, FDA’s FSVP inspection fact sheet, Import Alert 99-41 and FDA warning letters.