What Dietary Supplement Manufacturers Owe You on Ingredient Identity Testing

Two receiving files land on the same desk in the same week. One holds a lot released only after the plant ran its own identity examination on the material and signed off on the result. A second holds a supplier certificate of analysis, a clean-looking sheet and nothing else. Both look like proof of identity at a glance. Only one shows that the plant checked the material itself before it went into production.

What differs is who verified what, and when. A supplier certificate documents what the supplier says left its dock. A manufacturer's identity record documents what the plant examined after the material arrived. For a brand owner signing a manufacturing agreement, that second document is the one you are paying for, and it is the one most buyers never ask to see.

Two Receiving Lots, Two Different Records

Consider two receiving files for the same botanical ingredient in the same hypothetical warehouse. File A holds the purchase order naming the ingredient, a receiving entry with lot number and quantity, a quarantine tag, a sampling note, an identity examination result written against that ingredient, a reviewer's signature with a date, and a release decision. File B holds the purchase order, the receiving entry, and a supplier certificate of analysis carrying a specification range and a signature from the supplier's quality unit.

Read them for identity and they answer different questions. File A answers whether the plant verified that this material is the ingredient it ordered. File B answers whether the supplier stated that the material met the supplier's own specification. That second answer is worth having. It just is not the manufacturer's verification.

So when an inspector or a customer asks who confirmed the identity of this lot, File B has no name to offer and File A does. Which of the two you can produce is settled at contracting, long before anyone asks.

What Ingredient Identity Testing Actually Means

Identity testing is the check a manufacturer runs to confirm that an incoming component really is the dietary ingredient it is supposed to be. Under 21 CFR Part 111, as captured in the eCFR snapshot of 2026-10-19, the rule is short on method and specific on duty: conduct at least one appropriate test or examination to verify the identity of any component that is a dietary ingredient, unless the manufacturer petitions the agency under §111.75(a)(1)(ii) and the agency exempts it from that testing.

Two phrases carry the weight. At least one appropriate test or examination means the regulation does not dictate a single mandated method; the manufacturer picks an examination and owns that choice. Any component that is a dietary ingredient means the duty attaches to each such component, not to the finished batch and not to a spot check somewhere downstream.

What the text leaves out matters just as much. It does not require a certificate from the supplier, does not name an instrument, and does not define a pass. A written procedure fills those gaps. That is why the record, not the reassurance, is the thing you review.

How Identity Testing Differs From Specs and Purity Limits

Three separate obligations sit close together in Part 111, and buyers blur them constantly. Identity verification is the one above. Separately, the manufacturer must establish a specification for any point, step, or stage in the manufacturing process where control is necessary to ensure the quality of the dietary supplement and that it is packaged and labeled as specified in the master manufacturing record. Separately again, it must establish limits on those types of contamination that may adulterate or may lead to adulteration of the finished batch.

A passed identity check tells you the material is the right substance. It tells you nothing about potency, and nothing about whether a contaminant such as a heavy metal or a microbe sits inside the limits the plant set. A specification sheet is a decision tool listing what a control point must meet. It is not an identity result and cannot be filed as one.

This distinction catches people in supplier conversations. Ask for the spec and you get a document with ranges on it, which feels like progress. Ask whether the ingredient was examined on receipt and by what means, and the room gets quieter.

Three Supplier Files I Read Differently

I read a lot of these files, and three shapes come up often enough that I check for them by name.

The first shape is a certificate built around a single marker compound. Picture one that names a marker, gives a range for it, and stops there. I check for what should come next, a sentence saying the material is the named botanical and a sentence describing the examination, and find neither. It is a potency-style document doing duty as an identity document.

The second shape states that identity was confirmed but names neither the ingredient nor the examination. I look at the header and the footer for a reference, and typically what turns up is a generic sentence that would read the same on any lot of anything. Nothing there lets a reviewer match the confirmation to a specific drum.

The third shape is a botanical where identity turns on which characteristic was examined. Suppose a powdered root can be identified by macroscopic appearance, by a microscopic tissue feature, or by a chromatographic pattern. A record saying only that identity was confirmed leaves the reviewer unable to judge whether the examination fit that material at all.

None of the three is automatically wrong. Each is incomplete for the question I am asking, which is what was verified, by whom, against which ingredient.

How Identity Testing Fits the Receiving Workflow

Here is the receiving-to-release path as it usually runs. It starts with a purchase order that names the ingredient and the specification the material must meet. Material arrives, gets counted and tagged, and moves to a segregated area. Quarantine comes first. The receiving entry takes the lot number, the quantity, the supplier and the date, and that entry is what ties every later record, from sample to result to review to release, back to one physical lot so a reviewer can walk the chain without guessing which drum the paperwork describes.

Sampling follows the manufacturer's written procedure, and the sample is logged against the same lot. Then the examination. What comes out is a result written against the ingredient named on the order, with the examination used described alongside it, and it is the reviewer who compares that result with the specification whose signature carries the lot into release.

Process specifications sit alongside this path rather than on top of it. The identity check at receiving is one control point among the specifications the manufacturer is required to establish for the steps where control is necessary, and each of those points leaves its own record.

Where the Petition Exemption Stops Helping You

In practice, the exemption route is narrower than it sounds in conversation. It exists only where the manufacturer petitions the agency under §111.75(a)(1)(ii) and the agency grants the exemption. A supplier saying the certificate covers identity is not an exemption. A manufacturer saying it has been handled, without pointing to a petition and an agency decision, is describing a preference, not a status.

Even a granted exemption would not erase the contamination-limit duty. Identity verification and contamination limits answer different failure modes, and nothing in the identity provision rewrites the contamination provision. If a plant holds an exemption on identity for a component, the reasonable next question is what remains in place for adulteration risk on the finished batch.

When the Manufacturer Says Identity Testing Is Covered

"Identity testing is already covered" is the sentence I hear most often, and it should open a short conversation rather than close one. What I would want before signing is the identity record tied to the ingredient named on your purchase order, the examination used, who signed the review, and where that record lives and for how long. Ask for one example with the lot details redacted. A plant that runs the test produces one in minutes; a plant that leans on supplier certificates hands you the certificate again.

Two limits sit on everything above. These are regulatory texts as captured in the eCFR snapshot of 2026-10-19, describing what Part 111 requires of operations, and they are not an audit or a certification of any manufacturer. They establish nothing about a specific supplier's compliance record, pricing, lead time, production capacity or finished-product clinical performance. Treat a certificate with no identity record behind it as an open question, not a closed one, and settle it before the first purchase order rather than after the first complaint.