21 C.F.R. § 1.511
(2) Use of approved foreign suppliers.
(ii) Appropriate verification activities. The following are appropriate supplier verification activities:
(5) Performance of foreign supplier verification activities.
(i) Except as provided in paragraph (c)(5)(ii) of this section, for each dietary supplement you import under paragraph (c) of this section, you must conduct (and document) or obtain documentation of one or more of the verification activities listed in paragraphs (c)(5)(i)(A) through (D) of this section before importing the dietary supplement and periodically thereafter.
(A) Onsite auditing. You conduct (and document) or obtain documentation of a periodic onsite audit of your foreign supplier.
(1) An onsite audit of a foreign supplier must be performed by a qualified auditor.
(2) The onsite audit must consider the applicable requirements of part 111 of this chapter and include a review of the foreign supplier's written food safety plan, if any, and its implementation (or, when applicable, an onsite audit may consider relevant laws and regulations of a country whose food safety system FDA has officially recognized as comparable or determined to be equivalent to that of the United States).
(3) If the onsite audit is conducted solely to meet the requirements of paragraph (c)(5) of this section by an audit agent of a certification body that is accredited in accordance with subpart M of this part, the audit is not subject to the requirements in that subpart.
(4) You must retain documentation of each onsite audit, including the audit procedures, the dates the audit was conducted, the conclusions of the audit, any corrective actions taken in response to significant deficiencies identified during the audit, and documentation that the audit was conducted by a qualified auditor.
(5) The following inspection results may be substituted for an onsite audit, provided that the inspection was conducted within 1 year of the date by which the onsite audit would have been required to be conducted:
(i) The written results of appropriate inspection of the foreign supplier for compliance with the applicable requirements in part 111 of this chapter conducted by FDA, representatives of other Federal Agencies (such as the USDA), or representatives of State, local, tribal, or territorial agencies; or
(ii) The written results of an inspection by the food safety authority of a country whose food safety system FDA has officially recognized as comparable or determined to be equivalent to that of the United States, provided that the food that is the subject of the onsite audit is within the scope of the official recognition or equivalence determination, and the foreign supplier is in, and under the regulatory oversight of, such country.
(D) Other appropriate activity. (1) You may conduct (and document) or obtain documentation of other supplier verification activities that are appropriate based on foreign supplier performance and the risk associated with the food.
(2) You must retain documentation of each activity conducted in accordance with paragraph (c)(5)(i)(D)(1) of this section, including a description of the activity, the date on which it was conducted, the findings or results of the activity, any corrective actions taken in response to significant deficiencies identified, and documentation that the activity was conducted by a qualified individual.
(ii) Reliance upon performance of activities by other entities.
[80 FR 74340, Nov. 27, 2015, as amended at 81 FR 25327, Apr. 28, 2016]