Supplier documentation for food manufacturers: the complete checklist

This checklist covers the complete set by category, which documents apply to which ingredient types, how often each one renews, and how to manage collection as the supplier list grows.

Why supplier documentation matters

Supplier documentation is evidence. It proves the supplier remains approved, that the material meets its specification, and that the claims on your label are supported.

The requirement comes from both regulation and certification. FSMA's preventive controls rule (21 CFR 117, subpart G) requires a supply-chain program with documented supplier approval and verification.

SQF Edition 10, element 2.4.4, requires an approved supplier program covering raw materials, ingredients, packaging, and outsourced services, and the program must be risk-based, with verification frequency tied to the risk of the supplier and the material (SQF Institute, SQF Food Safety Code).

BRCGS and FSSC 22000 carry equivalent requirements. In every case, the audit samples the documents themselves.

The complete supplier documentation checklist

Identity and composition documents

• Technical spec sheet (sometimes called a technical data sheet). The supplier's definition of the ingredient: physical, chemical, and sensory parameters, storage conditions, and shelf life.
• Ingredient composition statement. What the ingredient contains, including sub-ingredients of compound materials. Your ingredient statement is built from this.
• 100-gram unrounded nutritionals. The nutrient data used to calculate your label. Unrounded matters, because rounding happens once, at the panel.
• Country of origin statement. Required for labeling claims and import documentation.

Food safety documents

• Certificate of analysis (COA). Lot-specific test results against the specification. Collected per lot, at receiving.
• Allergen statement. Which major allergens the ingredient contains or may contain through cross-contact. Allergen control programs depend on this being current.
• Microbiological specifications. Limits and testing methods for pathogens and indicator organisms.
• Heavy metals statement. Levels of lead, arsenic, cadmium, and mercury, with the testing basis.
• Pesticide and residual solvents statements. Standard for botanical and extracted ingredients, and for supplements.
• Regulatory status statement. GRAS status or the applicable food additive regulation for the intended use.
• Letter of guarantee. The supplier's written guarantee that shipments comply with the Food, Drug, and Cosmetic Act. Usually issued as a continuing guarantee, renewed annually.

Certifications and claim support

• GFSI audit certificate. The supplier's SQF, BRCGS, or FSSC 22000 certificate, renewed annually after their audit.
• Third-party audit report. The full report behind the certificate. Check the audit scope covers the materials they supply you, the expiration date, and any open non-conformances.
• Claim certifications. Organic, non-GMO, kosher, halal, and gluten-free certificates, matching every claim your finished product makes.
• Supplement-specific documents. NSF certification, banned substances testing for sport-certified products, and potency data where the label declares actives.

Facility and legal documents

• FDA facility registration. Confirmation the supplier's facility is registered under the Bioterrorism Act.
• Certificate of insurance. Product liability coverage, naming your company where required.
• Supplier questionnaire. The completed onboarding questionnaire capturing food safety practices, recall procedures, and emergency contacts.
• FSVP records. For imported ingredients, the foreign supplier verification records FSMA requires of the importer.

Which documents apply to which ingredients

A risk-based program does not request the same list from every supplier. A dry powder, a liquid flavor, a botanical extract, and a food-contact packaging component each need a different set.

• Botanical and extracted ingredients add pesticide, residual solvent, and heavy metals data.
• Animal-derived ingredients may require BSE/TSE statements and species verification.
• Packaging materials require food-contact compliance declarations and migration testing rather than nutritionals.
• Outsourced processing and services fall under supplier approval too, which is a point SQF audits check and many programs miss.

Building a document checklist per ingredient type keeps requests relevant, and suppliers respond faster to a request matching what they actually supply. Generic checklists that ask every supplier for every document slow the whole program down and train suppliers to deprioritize your requests.

Supplier document renewal cadence

• Per lot: certificate of analysis.
• Annually: GFSI audit certificate, letter of guarantee, certificate of insurance, most claim certifications.
• Every one to three years, or on change: technical spec sheet, allergen statement, nutritionals, composition statement. Any reformulation on the supplier's side triggers an immediate update.

Expiration is where supplier approval programs fail quietly. A lapsed organic certificate surfaces during audit prep, months after it expired, and the products made in that window carried a claim without current support.

Tracking the expiration date on every document, with renewal requests sent ahead of the lapse, is the core discipline of the program.

What auditors check in a supplier approval program

An SQF, BRCGS, or FSSC 22000 auditor works through a predictable sequence:

1. The approved supplier list. Current, complete, and covering services as well as materials.
2. Documented approval criteria. What qualifies a supplier, written down and applied consistently.
3. Evidence of re-evaluation. Proof that approved suppliers are reassessed on schedule.
4. The documents themselves. Sampled against the list, checked for currency and scope.

Common findings: expired certifications still on file, audit scopes that do not cover the materials supplied, open critical non-conformances in a supplier's audit report, and no record of re-evaluation.

Managing supplier document collection

The workflow is the same at any scale: request the documents on the checklist, verify what arrives against it, file each document on the ingredient record, and track expirations.

The scale is what changes. A portfolio of 200 raw materials with five documents each is a thousand documents, most carrying their own renewal date, and the load compounds with every new SKU.

Two practices reduce it. First, collection over email gets faster supplier responses than portal-based collection, because the supplier replies from their own inbox instead of maintaining an account in someone else's system.

Second, automation handles the repetitive parts: categorizing what arrives, matching it to the checklist, and requesting renewals on schedule.

SKUsafe runs supplier document collection this way. Requests go out as email from your own domain, drafted by AI. The supplier replies with attachments, the system categorizes each file and checks it against the ingredient's checklist, and expiration rules request renewals before documents lapse.

Every document files onto the ingredient record, next to the specification it supports and the formulas that use it, so a where-used lookup answers which finished products an allergen change affects.

Customers report 85% less supplier follow-up after moving collection onto the platform.

FAQ

What documents should a food manufacturer request from an ingredient supplier?

At minimum: technical spec sheet, 100-gram nutritionals, allergen statement, COA per lot, GFSI audit certificate, letter of guarantee, certificate of insurance, and the certifications behind any claim the finished product makes. Botanical and supplement ingredients add pesticide, solvent, and heavy metals statements.

What is a supplier approval program?

The documented process for evaluating and approving suppliers before their materials are used. FSMA requires it as part of the supply-chain program (21 CFR 117, subpart G), and SQF element 2.4.4 requires it to be risk-based. Document collection is its core activity, alongside risk assessment and ongoing re-evaluation.

What is a letter of continuing guarantee?

A supplier's standing written guarantee that everything shipped complies with the Food, Drug, and Cosmetic Act, replacing lot-by-lot guarantees. Most companies renew it annually.

How often should supplier documents be updated?

COAs arrive with every lot. Audit certificates, guarantees, and insurance renew annually. Specs and allergen statements are reviewed every one to three years, and immediately when the supplier changes anything.

Do packaging suppliers need the same documentation?

No, the set differs. Packaging suppliers provide food-contact compliance declarations, migration testing, and specifications rather than nutritionals and allergen statements. BRCGS treats packaging under the same supplier approval requirement as ingredients.

What is the difference between a COA and a specification?

A specification defines what the ingredient must be. A COA reports what a specific lot actually tested at. The spec is the standard; the COA is the evidence that a shipment met it.

Where to start

Run this checklist against your top 20 ingredients by volume and count what is current, what is expired, and what was never collected. That number sets the program's starting point. SKUsafe demos run on your own supplier packets, so you see the collection workflow on your actual documents.