Supplier Allergen Documentation: What to Verify Before Production

Missing or outdated supplier allergen documentation is one of the most common—and most preventable—root causes of undeclared allergen recalls. By the time you discover the gap, product may already be in distribution.

Why Supplier Documentation Is a Recall Risk, Not Just a Paperwork Problem

Under FSMA's Preventive Controls for Human Food rule (21 CFR Part 117), allergen controls are classified as a required preventive control when allergens are a hazard reasonably likely to occur. That means your Hazard Analysis must account for allergens introduced through ingredients—and your supplier verification activities must provide assurance that the hazard is controlled at the supplier level. "We asked for the spec sheet" is not sufficient documentation if that spec sheet is two years old or fails to disclose shared-line production.

The Food Allergen Labeling and Consumer Protection Act (FALCPA) requires that all major food allergens—milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans—be declared on the finished product label. A 2023 FDA voluntary recall report update added sesame as the ninth major allergen under the FASTER Act, effective January 1, 2023. That means any ingredient supplier who processes sesame on shared equipment or uses sesame-derived ingredients now requires updated documentation reflecting that status.

The practical risk: your label declaration is only as accurate as your supplier's disclosures. If a supplier changes their formula, shifts to a new manufacturing facility, or begins running a sesame-containing product on shared equipment—and you don't have a mechanism to capture that change—your label becomes inaccurate before you print a single unit. FDA Class I recalls for undeclared allergens carry significant financial exposure: direct costs frequently exceed $10 million when you factor in retrieval, destruction, regulatory response, and brand damage.

The Supplier Allergen Documentation Checklist

Before any ingredient enters production, verify the following documentation is on file, current, and complete for each supplier and each ingredient lot.

1. Allergen Specification Sheet

• Does the spec sheet explicitly list all nine FALCPA/FASTER Act allergens (milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, sesame)?
• Does it distinguish between "contains," "may contain," and "produced on shared equipment with"?
• Is the document dated within the last 12 months—or has the supplier confirmed no formula or facility changes since the last revision?
• Is it signed by a qualified individual at the supplier (QA manager, food safety director), not just a sales representative?
• Does it include the specific ingredient lot/batch number or cover the current product version explicitly?

2. Lot-Level Certificate of Analysis (COA)

• Does the COA reference the same lot number you're receiving?
• If allergen testing was performed, does it align with your risk-based threshold criteria?
• Does it confirm no formula changes relative to the specification on file?
• Is it issued by the manufacturer, not a third-party distributor who may not have visibility into production conditions?

3. Supplier Questionnaire (Annual Minimum)

• Does your questionnaire ask specifically about facility-level allergen handling—not just product-level formulation?
• Does it ask whether the supplier manufactures, stores, or handles any of the nine major allergens anywhere in the facility?
• Does it ask about allergen cleaning validation protocols and the frequency of shared-line sanitation verification?
• Does it capture whether the supplier uses any allergen-containing processing aids, release agents, or lubricants?
• Does it ask whether any raw material suppliers to your supplier have changed in the last 12 months?

4. Third-Party Audit or SQF/BRC Certification

• Is a current third-party audit report on file (dated within 24 months, ideally 12)?
• Does the audit scope include allergen management and cross-contact controls?
• Are any corrective actions from the most recent audit closed and documented?
• If the supplier holds SQF, BRC, or FSSC 22000 certification, is the certificate current and does it cover the specific facility producing your ingredient?

5. Change Notification Agreement

• Do you have a signed supplier agreement requiring advance notification of formula changes, facility changes, or new shared-line introductions?
• Does it define the minimum lead time for notification (30 days is a common standard)?
• Does it require re-submission of updated allergen specifications when any change occurs?
• Is the agreement reviewed and re-signed at your defined supplier qualification interval?

A Practical Verification Workflow

Documentation collection is not the same as documentation verification. Here's a workflow that separates the two.

Step 1: Establish a Supplier Documentation Matrix

Build a spreadsheet or ERP record for every active ingredient supplier that tracks: document type, document date, expiration/review date, and the person who reviewed it. If a cell is empty or expired, that ingredient is on hold until it's resolved. This matrix is also what you produce during an FDA inspection when asked to demonstrate your supplier verification program.

Step 2: Cross-Reference Against Your Formula

Pull the allergen declarations from every ingredient spec sheet in a given formula and compare them against your finished product label. This is a manual process that's easy to skip under production pressure—and that's exactly when errors occur. If an ingredient spec lists "produced in a facility that also processes tree nuts" and your label makes no advisory statement, you have a disclosure decision to make before production runs.

If you want to see how this cross-referencing process is structured in a systematic pre-launch review, the RecallGuard annotated sample report shows exactly what that comparison looks like when applied to a real SKU—including how documentation gaps and label mismatches are flagged before production.

Step 3: Flag High-Risk Suppliers for Enhanced Verification

Not all suppliers carry equal risk. Apply enhanced verification to suppliers who:

• Manufacture multiple allergen-containing products in the same facility
• Supply ingredients with a history of reformulation
• Operate without a current third-party audit
• Have not responded to your annual questionnaire within 30 days
• Supply sesame-derived ingredients (given recent FASTER Act implementation)

Enhanced verification for these suppliers should include direct phone or email confirmation of allergen status for each production lot—not just reliance on the spec sheet on file.

Step 4: Document Your Review, Not Just Your Receipt

FDA's supplier verification requirements under 21 CFR 117.410 require that you document the verification activities you perform—not just that you received a document. Your records should show who reviewed the allergen specification, when, against which formula version, and what conclusion was reached. A date-stamped email or a signed review log entry both work. An unchecked inbox folder does not.

Step 5: Requalify on Any Trigger Event

Don't wait for annual reviews if a trigger event occurs. Requalify supplier allergen documentation whenever:

• You receive a change notification from the supplier
• You observe a change in ingredient appearance, smell, or COA results
• The supplier is acquired, changes facility locations, or adds a new product line
• A new allergen regulation takes effect (as with sesame in 2023)
• Your own finished product formula changes

Common Documentation Gaps That Cause Real Problems

Based on allergen recall patterns, these are the documentation failures that appear most frequently:

• Spec sheets that predate FASTER Act sesame requirements. Any allergen specification issued before January 1, 2023 may not address sesame status. Reissue requests are warranted for any ingredient where sesame cross-contact is plausible.
• Distributor-issued specs that don't reflect the actual manufacturer's facility. If you're purchasing through a broker or distributor, ensure allergen documentation originates from or is verified by the facility of manufacture.
• "No known allergens" language without explicit allergen-by-allergen disclosure. This phrasing is ambiguous and insufficient. Require specific declarations for each of the nine allergens.
• Specs that list product allergens but omit facility and shared-equipment disclosures. A product may contain no intentional allergens but still carry cross-contact risk based on facility practices.

If you want to see how an 85-second overview of a structured pre-launch review works in practice, watch the RecallGuard walkthrough—it covers how supplier documentation gaps get flagged alongside label and formula issues in a single review.

The Pre-Production Verification Standard to Hold Yourself To

Before any new SKU goes into production, you should be able to answer yes to three questions: Is allergen documentation on file for every ingredient, dated within 12 months? Has someone cross-referenced every ingredient allergen declaration against the finished product label? Is there a signed change notification agreement with every active supplier?

If the answer to any of those is no, the SKU isn't ready for production—regardless of schedule pressure.

For manufacturers who want an independent set of eyes on a new SKU before it runs, RecallGuard's $349 Single SKU Review covers allergen declaration accuracy, label-formula alignment, supplier documentation gaps, and regulatory claim issues—structured specifically to catch what internal reviews under production pressure tend to miss.