FSVP compliance · Small importer guide

When Your Business Is Small but Your Compliance Responsibilities Aren't

Small businesses may have fewer resources, suppliers, and products, but they still need a practical process to manage the FSVP responsibilities that apply to their importing activities.

In this article

Your business may be small.

Maybe you have only a few employees.

Maybe you work with one foreign supplier and import only a handful of food products each year.

Perhaps the owner handles purchasing, shipping, sales, supplier communication, inventory, and compliance.

For a while, everything feels manageable.

Then someone asks:

“Who is handling your FSVP?”

Suddenly, the business that seemed simple has another responsibility to manage.

The natural reaction is:

“We're a small business. Why does this feel so complicated?”

That's a question many small importers eventually ask.

The answer isn't that a small importer needs the same compliance infrastructure as a multinational food company.

It is that small businesses still need to understand and manage the requirements that apply to their particular importing activities.

The challenge is finding a process that provides control without creating unnecessary complexity.

---

Small Does Not Automatically Mean Exempt

One of the first misconceptions small importers encounter is the assumption that being small automatically eliminates FSVP responsibilities.

It doesn't.

The FSVP regulations include modified requirements for certain qualifying very small importers and very small foreign suppliers under 21 CFR §1.512. However, eligibility depends on the applicable criteria and circumstances.

That means the right starting point isn't:

“We're small, so we don't have to worry about FSVP.”

It is:

“What requirements apply to our specific operation?”

That distinction matters.

A small importer may have fewer suppliers and fewer products than a large importer, but that doesn't mean the business should simply assume that FSVP responsibilities do not apply.

The better approach is to determine what the regulations require, whether any modified requirements apply, and what the importer needs to maintain as part of its process.

In other words:

Being small may affect how your FSVP is managed. It does not automatically answer whether FSVP applies.

---

The Small Business Owner Who Handles Everything

Consider a small food business owner who imports products from overseas.

The owner personally:

• Finds and communicates with suppliers
• Negotiates pricing
• Places purchase orders
• Coordinates shipments
• Manages inventory
• Handles customers
• Reviews supplier documents
• Follows up on missing information

There is no regulatory department.

There may not even be a quality manager.

When the supplier sends a certificate, the owner saves it.

When the supplier answers a question, the owner remembers the conversation.

When a new shipment is scheduled, the owner checks the paperwork.

It works.

Until the business gets busy.

Then one question can expose the weakness:

“Can you show me how you evaluated this supplier and determined the appropriate verification activities?”

The owner may know the supplier extremely well.

They may have been working together for years.

The owner may know exactly who to call when there is a problem.

But knowing the supplier and having an organized compliance process are not always the same thing.

A relationship can exist in someone's memory.

An FSVP needs to be supported by appropriate records and a process that can be understood and maintained.

---

The Real Problem Is Often Capacity

Small businesses usually don't struggle because they don't care about compliance.

They struggle because the same person is responsible for everything.

FSVP becomes another item on a long list.

The owner intends to:

“Review the supplier file next week.”

Then a customer needs something.

A shipment changes.

A supplier sends a new document.

An invoice needs attention.

Another order comes in.

Suddenly, several weeks have passed.

This is how compliance can become reactive.

Nothing was deliberately ignored.

It simply wasn't built into the company's normal workflow.

And when there is no defined workflow, FSVP activities can become dependent on whoever happens to remember what needs to be done.

That may work when the business has one supplier and a small number of shipments.

It becomes much harder as the business grows.

The solution is not necessarily to add layers of bureaucracy.

The solution is to create a manageable process that fits the way the business actually operates.

---

One Supplier Still Matters

A small importer may think:

“We only have one supplier. How complicated can this be?”

Compared with managing fifty suppliers, one supplier is certainly easier.

But the importer still needs to understand the applicable FSVP requirements for the food and supplier.

Depending on the circumstances, the importer may need to consider information such as:

• The identity of the foreign supplier
• The food being imported
• Applicable hazards
• Supplier evaluation
• Verification activities
• Supporting documentation
• Supplier food safety information
• Changes that could affect the FSVP
• Records supporting the applicable activities

The advantage of having one supplier is that the process can remain focused.

You don't need to create a system designed for hundreds of suppliers.

You need a system that works reliably for the supplier you actually have.

That can make compliance considerably more manageable for a small importer.

The important point is not to confuse simple with unnecessary.

One supplier may mean less work.

It does not mean there is no work.

---

The Difference Between Documents and a Compliance Process

This is where many small importers become confused.

They have documents.

A supplier certificate.

An audit report.

A product specification.

Testing information.

Perhaps a supplier questionnaire.

Everything is stored somewhere.

So they think:

“We have an FSVP because we have all the documents.”

But documents are only part of the picture.

A functioning FSVP process should allow the importer to understand:

Why was this supplier evaluated?

What information was considered?

What verification was performed?

Which records are current?

What conclusions were reached?

What happens if something changes?

The objective isn't to accumulate paperwork.

It is to maintain a structured process that supports the importer's applicable compliance responsibilities.

A folder containing documents can be useful.

A folder containing documents without a clear connection to the FSVP process can be much less useful.

The difference is whether the records tell a coherent story about how the importer evaluated the food and supplier and addressed the applicable requirements.

---

Don't Let the FSVP Live Only in Your Memory

Small businesses often rely heavily on the owner.

That's understandable.

The owner knows the supplier.

The owner remembers the conversations.

The owner knows why a decision was made.

The owner may even know exactly where every document is located.

But ask:

“What happens if the person managing FSVP is unavailable?”

Can another employee locate the supplier information?

Can they identify the current records?

Can they understand what verification was performed?

Can they determine what needs attention?

Can they tell which documents are current?

If not, the business may have an opportunity to strengthen its documentation.

Good recordkeeping isn't just about an inspection.

It also protects the business from becoming dependent on one person's memory.

This becomes increasingly important as the business grows.

What worked when the owner personally handled every shipment may not work when there are multiple employees, additional suppliers, more products, or more frequent imports.

A good compliance process should be understandable beyond the person who originally created it.

---

Your Supplier Can Change Without Changing Its Name

Imagine you've used the same supplier for years.

Then the supplier tells you:

“We're moving production to another facility.”

The supplier is still called the same thing.

The product may even have the same name.

But something important has changed.

That is why supplier compliance cannot be based entirely on familiarity.

When significant new information or changes could affect the adequacy of the FSVP, the importer may need to reevaluate the program as applicable.

The same principle can apply when there are changes involving:

• Manufacturing locations
• Food safety processes
• Product formulation
• Suppliers of ingredients
• Certifications or other supporting information
• Regulatory status
• Food safety performance
• Other information relevant to the supplier or food

The lesson is simple:

A supplier you know well still needs ongoing attention.

The fact that nothing went wrong last year does not automatically mean that nothing needs to be reviewed this year.

---

Trust Is Important. Verification Is Different.

Small importers often have excellent relationships with their suppliers.

They may communicate directly with the owner or quality manager.

They may have visited the facility.

They may have been purchasing from the supplier for many years.

That relationship is valuable.

It can make obtaining records and resolving questions much easier.

But:

“We've worked with them for years.”

is not itself a substitute for the applicable evaluation and verification process.

Trust helps create a strong supplier relationship.

Verification helps support the importer's compliance responsibilities.

Both can exist together.

In fact, a strong supplier relationship can make the compliance process easier because the supplier may be more willing to provide documentation, answer questions, support verification activities, and communicate changes.

The objective is not to distrust a good supplier.

It is to make sure that supplier confidence is supported by an appropriate process.

---

Don't Wait Until the Shipment Is Moving

One of the most stressful moments for a small importer is discovering an FSVP issue after the shipment is already on its way.

The business owner may suddenly need to:

Contact the supplier

Find missing records

Review requirements

Coordinate with the broker

Determine who is responsible

Figure out what needs to happen next

All while the shipment is moving.

That is why FSVP is easier to manage when it becomes part of the importing process before the shipment is scheduled.

A simple workflow can help:

Supplier selected → Compliance review → Records organized → Verification addressed → Shipment prepared

Instead of:

Shipment moving → Someone asks about FSVP → Panic

The earlier the responsibilities are understood, the easier it is to identify missing information.

The importer can ask the supplier for documents as part of normal onboarding rather than as an emergency request.

The business can determine who is responsible for the FSVP before the shipment reaches the United States.

And the next shipment can follow the same process.

That is the real value of planning.

---

Small Businesses Don't Need Large-Company Systems

A small importer doesn't necessarily need:

• A large regulatory department
• Dozens of employees
• Complicated software
• Hundreds of forms
• A massive supplier-management infrastructure

The business may simply need:

Clear ownership

Organized records

Appropriate supplier evaluation

Applicable verification

A process for reviewing changes

A way to maintain the required records

That's enough structure to create control without creating unnecessary bureaucracy.

The goal is not to make a five-person company operate like a five-thousand-person company.

The goal is to make sure that the business has a reliable way to manage the responsibilities that actually apply to it.

Right-sized compliance is often much more sustainable than either extreme.

---

When a Toolkit May Be the Right Answer

Some small importers want to manage their own FSVP.

They may have the time and ability to take responsibility internally.

In that situation, an FSVP Toolkit can provide a structured starting point.

The importer can maintain control while using organized templates and a defined framework instead of creating everything from scratch.

This can be particularly useful for businesses with a limited supplier and product base.

A toolkit can help provide structure around the information that needs to be gathered, the activities that need to be considered, and the records that need to be maintained.

But the toolkit is not the FSVP by itself.

The importer still needs to understand the applicable requirements and use the tools appropriately for its specific food, supplier, and circumstances.

The objective is to make internal management more practical—not simply to add another collection of templates to a folder.

---

When Professional Support Makes More Sense

Other businesses reach a different conclusion.

They may say:

“I understand that we need an FSVP, but I don't know how to build it.”

Or:

“I don't have time to keep chasing supplier documents.”

Or:

“We already have an FSVP, but I'm not confident that it is complete.”

In those situations, professional support can help.

Depending on the circumstances, a small importer may benefit from:

• FSVP implementation support
• FSVP readiness or gap assessment
• FSVP Agent representation
• Ongoing verification maintenance
• Regulatory technical advisory
• FSVPQI implementation support

The purpose isn't to make the business dependent on a consultant.

It is to provide the level of assistance the business actually needs.

Sometimes the importer needs someone to build the initial program.

Sometimes the importer already has a program and needs an independent review.

Sometimes the business needs ongoing support because there is no internal employee available to maintain the records and monitor changes.

And sometimes the importer needs help with one specific regulatory question.

The right level of support depends on the business.

---

Consider the Cost of Internal Time

Small businesses often compare the cost of professional assistance with the idea of doing everything internally.

But internal work isn't free.

Consider the time spent:

• Requesting supplier records
• Following up on missing information
• Reviewing documents
• Tracking changes
• Organizing files
• Researching regulatory questions
• Updating the FSVP
• Determining what needs to happen next

For an owner, those hours come directly out of time that could be spent growing the business.

The right question isn't simply:

“Can we do this ourselves?”

It is:

“Is doing all of this ourselves the best use of our resources?”

For some businesses, the answer will be yes.

They may have someone internally who can take ownership and maintain the program.

For others, professional support may be the more efficient choice.

The important thing is to make that decision deliberately rather than waiting until compliance becomes an emergency.

---

Build for the Business You Have

A small importer shouldn't build a system designed for a company with 500 suppliers.

But it should build something better than a collection of emails and memory.

Start with the basics.

Know your suppliers

Know who is supplying and manufacturing the food.

Maintain the information needed to identify the foreign supplier and support the applicable evaluation and verification process.

Know your products

Keep the imported foods clearly identified.

Know which products are covered by the applicable FSVP activities and keep the relevant product information organized.

Know your responsibilities

Determine which FSVP requirements apply to your business.

If modified requirements or other provisions may apply, determine whether the business actually meets the applicable criteria rather than assuming it does.

Know your records

Make important information easy to locate.

A compliance record should not depend on someone remembering which email thread contains the document.

Know your changes

Have a process for recognizing significant supplier, product, or other changes that could affect the FSVP.

That foundation can grow as the business grows.

The system does not need to be complicated.

It needs to be dependable.

---

A Simple Small-Importer Check

Ask yourself:

1. Can we identify every foreign supplier we currently use?
2. Can we identify the foods we currently import?
3. Can we quickly locate our FSVP records?
4. Can we explain how our supplier was evaluated?
5. Can we identify the applicable verification activities?
6. Are important supplier records current?
7. Do we know who is responsible for FSVP?
8. Could another employee understand the program if necessary?

If several answers are:

“I'm not sure.”

That doesn't necessarily mean your business has a major problem.

It means you have identified where additional clarity may be useful.

And that's a good place to start.

A compliance gap is easier to address when you know it exists.

The bigger risk is assuming everything is fine simply because the business has been importing without an obvious problem.

---

Small Today Doesn't Mean Small Forever

Many businesses start with one supplier.

Then they add another.

Then another product.

Then more shipments.

The process that worked when the business was tiny may eventually become difficult to maintain.

That's why a practical system is valuable even when the company is small.

You don't need to build everything at once.

You need a process that can grow with the business rather than become a limitation.

For example, the process you establish for one supplier can later be used for a second supplier.

The same document structure can support additional products.

The same review process can be applied when suppliers change.

The same responsibility assignment can remain in place as additional employees join the company.

That is how a small compliance process becomes a scalable one.

---

The Right Question Isn't “Are We Too Small?”

The better question is:

“What is the simplest reliable way for us to manage the responsibilities that apply to our business?”

That approach avoids two extremes.

Too little: assuming compliance doesn't matter because the business is small.

Too much: building a complicated system that the business doesn't have the resources to maintain.

The goal is right-sized compliance.

Not more compliance for the sake of compliance.

Not less because the company is small.

The right amount of structure for the business you actually operate.

That may mean a simple internal process.

It may mean a toolkit.

It may mean professional implementation.

It may mean periodic review.

It may mean ongoing support.

The important thing is that the approach should match the actual risks, products, suppliers, responsibilities, and resources of the business.

---

Small Business Doesn't Mean You Have to Figure It Out Alone

Being a small importer can actually be an advantage in some ways.

You may have a direct relationship with your supplier.

You may have fewer products to manage.

You may have fewer records to maintain.

You may be able to make decisions quickly.

You don't need to lose those advantages by creating unnecessary bureaucracy.

Instead, use them to create a focused compliance process.

The best compliance solution for a small importer isn't necessarily the biggest one.

It is the one that fits the business.

Maybe that's a toolkit.

Maybe it's implementation support.

Maybe it's a gap assessment.

Maybe it's ongoing FSVPQI support.

Maybe you simply need technical guidance on a difficult question.

The important thing is to make the decision based on your actual needs rather than assuming that being small means you don't need help—or assuming that compliance has to become complicated.

---