The Difference Between Knowing Your Supplier and Verifying Your Supplier

You know your supplier.

You know their name.

You know the sales representative.

You know how long you've worked together.

You know how often they ship.

You know which products they manufacture.

You know who to call when something goes wrong.

Maybe you've even visited the facility.

So when someone asks:

“Have you verified your supplier?”

the natural reaction might be:

“Of course. We know them very well.”

But there is an important distinction between knowing a supplier and verifying a supplier.

One is built through a relationship.

The other is built through evidence.

And for an importer managing an FSVP, that distinction matters.

---

Knowing your supplier feels like confidence

Long-term business relationships create familiarity.

You may have worked with the same manufacturer for years.

You know:

• Their production schedule
• Their product quality
• Their communication style
• Their pricing
• Their shipping patterns
• Their employees
• Their strengths
• Their weaknesses

You might even be able to predict how they will respond to a problem.

That's valuable.

A strong supplier relationship can be one of the greatest assets an importer has.

But familiarity answers a different question:

“Do we know and trust this company?”

FSVP asks you to go further.

---

Verification asks for evidence

Verification changes the question.

Instead of:

“Do we know this supplier?”

you ask:

“What evidence supports our conclusion about this supplier and the food we're importing?”

That evidence may involve applicable supplier evaluation and verification activities, records, and other information required under the FSVP framework.

FDA's FSVP requirements establish responsibilities for importers to evaluate foreign suppliers and verify that suppliers are producing food in accordance with applicable U.S. food safety requirements, as required by the rule.

That's different from simply having a good relationship.

---

The importer who knew the supplier for ten years

Consider an importer that has purchased from the same foreign manufacturer for ten years.

There have been no major complaints.

The products have consistently met expectations.

The supplier responds quickly.

Everyone trusts them.

The importer says:

“We've never had a problem.”

Then someone asks:

“When was the last formal supplier evaluation?”

Nobody knows.

“What current evidence supports the supplier's approval?”

Someone points to an old certification.

“Is it still current?”

Silence.

The importer suddenly realizes something:

They knew the supplier. But they hadn't necessarily been verifying the supplier on an ongoing basis.

---

Trust is valuable. It just isn't the same thing.

Think about it this way.

Knowing your supplier

Comes from:

Experience

Communication

History

Relationships

Performance

Verifying your supplier

Comes from:

Evidence

Evaluation

Verification activities

Documentation

Review

Follow-up

A mature importer uses both.

---

“We've never had a problem” is not a verification record

This phrase comes up frequently.

“We've imported from them for years and never had an issue.”

That's useful information.

But what does it actually tell you?

It tells you that the importer hasn't identified a significant problem during that period.

It doesn't necessarily establish:

• What hazards were considered
• How the supplier was evaluated
• What verification activities were performed
• When they were performed
• What evidence supported the decision
• Whether anything has changed

History is part of the picture.

It isn't necessarily the entire picture.

---

The supplier can be trustworthy and still need verification

This is an important point for supplier relationships.

Verification shouldn't be interpreted as:

“We don't trust you.”

It should mean:

“We have a responsibility to maintain an evidence-based supplier compliance process.”

A good supplier should not need to be treated like an adversary.

The process can remain professional and collaborative.

---

The supplier doesn't necessarily know what you need

A foreign manufacturer may say:

“We already gave you our HACCP plan.”

Or:

“We sent our certification.”

Or:

“We've been selling to the United States for 20 years.”

All of those statements may be true.

But the importer still needs to determine what information is relevant to its own FSVP.

The supplier doesn't necessarily know:

Why you need the document.

How you're using it.

What your FSVP requires.

What your records need to demonstrate.

That's the importer's responsibility to manage.

---

A certificate can show one thing

Suppose a supplier sends a certification.

The importer says:

“Great. Supplier verified.”

Not so fast.

The reviewer should ask:

What certification?

What scope?

Which facility?

Which products?

What dates?

What standard?

What does the certification actually establish?

The certificate may be excellent evidence.

But the importer needs to understand what it actually demonstrates.

---

An audit report can also be useful—but it isn't magic

The same applies to audits.

An audit report may provide valuable information about:

• Food safety controls
• Sanitation
• Processing
• Preventive controls
• Corrective actions
• Facility conditions
• Quality systems

But the importer still needs to consider:

Who conducted the audit?

What was the scope?

When was it conducted?

What facility was evaluated?

What products or processes were covered?

Were findings identified?

Were corrective actions completed?

Verification is about evaluating evidence—not simply collecting it.

---

The difference becomes obvious when something changes

Imagine a supplier has been excellent for five years.

Then the supplier moves production to a new facility.

The importer says:

“It's the same supplier.”

That's true.

But something significant may have changed.

The importer now needs to know:

Does the existing evaluation and verification still apply?

This is where the difference between knowing and verifying becomes very clear.

---

Another example: the formulation changes

The supplier keeps the same name.

The facility is the same.

The sales representative is the same.

But the formulation changes.

An ingredient is replaced.

The importer may still say:

“Same supplier.”

Again, true.

But the food has changed.

The importer needs to consider whether the existing FSVP remains appropriate for the current food.

---

Another example: the supplier receives a significant finding

The supplier's relationship with the importer hasn't changed.

But a new audit identifies a significant food safety issue.

Knowing the supplier might lead someone to say:

“They'll take care of it.”

Verification asks:

“What happened, what corrective action was taken, and does this new information affect our supplier evaluation or verification approach?”

That is a much more disciplined question.

---

Verification is about decisions

This is one of the most important concepts.

Verification isn't simply about collecting documents.

It's about using information to support a decision.

For example:

Information

Supplier audit identifies a finding.

↓

Evaluation

Importer assesses the finding and corrective action.

↓

Decision

Importer determines whether additional verification or other action is appropriate.

↓

Record

The decision and supporting activity are documented.

That's a compliance process.

---

Knowing is often informal

You may know that:

“The supplier has a great quality manager.”

That's useful.

But where is that information recorded?

You may know:

“They have never had a recall.”

Where did that conclusion come from?

You may know:

“They have excellent sanitation.”

What evidence supports it?

Informal knowledge can be helpful.

But compliance decisions need appropriate documentation.

---

Verification makes the invisible visible

Imagine two supplier files.

Supplier A

The importer says:

“They're excellent.”

The file contains an old certificate.

Supplier B

The importer says:

“They're excellent.”

The file contains current evidence, documented evaluation, verification records, and a clear conclusion.

Which supplier is easier to defend?

Supplier B.

Not necessarily because Supplier B is safer.

But because the importer can demonstrate how it reached its conclusion.

---

A strong supplier relationship can make verification easier

This is the positive side.

If you have a good relationship, the supplier may respond quickly.

They may provide:

• Current certificates
• Audit reports
• Specifications
• Corrective actions
• Facility information
• Product information

They may proactively communicate changes.

That makes verification much easier.

So:

Trust and verification don't compete.

A good relationship can support a strong verification process.

---

But don't outsource your judgment to the supplier

The supplier can provide evidence.

The importer evaluates it.

This distinction matters.

If the supplier says:

“Everything is compliant.”

the importer shouldn't simply copy that statement into the FSVP.

Instead:

What evidence supports that statement?

And:

Does that evidence address the applicable requirements and the specific food being imported?

---

The supplier may not know about the importer's FSVP

This is particularly common with international supply chains.

The supplier may sell to:

• U.S. importers
• European customers
• Asian customers
• Domestic customers
• Distributors
• Retailers

Each customer may have different requirements.

The supplier can't be expected to manage the importer's FSVP for them.

The importer needs its own process.

---

Verification is not necessarily about inspecting the supplier yourself

Another common misconception is:

“If we haven't physically visited the facility, we haven't verified them.”

That's too simplistic.

The appropriate verification activities depend on the food, supplier, hazards, and applicable circumstances.

Verification can involve different forms of evidence and activities permitted under the applicable FSVP framework.

The important question is:

What verification activity is appropriate for this supplier and food?

Not:

“Did we personally visit the factory?”

---

More verification isn't automatically better verification

This is also important.

An importer shouldn't simply collect every possible document.

More paperwork doesn't automatically mean better compliance.

The objective is to have appropriate evidence.

For example:

Relevant

Current

Reliable

Applicable

Documented

The quality of the evidence matters more than the thickness of the file.

---

The annual review is where knowing becomes verifying

A supplier may have been evaluated years ago.

The annual assessment creates an opportunity to ask:

“Does our current information still support our supplier decision?”

Review:

Supplier information

Facility information

Product information

Current documentation

Verification records

Supplier performance

Changes

Relevant food safety information

Then document the conclusion.

---

What if nothing changed?

Excellent.

That can be documented.

The conclusion may be:

“Current information was reviewed and no significant changes were identified that require modification of the existing supplier evaluation or verification approach.”

Now the importer has more than a feeling.

There is a documented assessment.

---

What if something did change?

Then the importer knows.

Maybe:

New facility

New formulation

New certification

New audit finding

New regulatory information

New supplier ownership

New process

The importer can then determine what response is appropriate.

The value of verification is often not preventing change.

It is detecting and evaluating change.

---

Verification protects against “relationship blindness”

Relationship blindness happens when familiarity reduces scrutiny.

You start thinking:

“That's just how they do things.”

You stop asking:

“Is that still how they do things?”

That small difference can matter.

---

The supplier you know best may be the supplier you need to review most carefully

Not because they're bad.

Because you may have the most assumptions about them.

The more familiar the supplier becomes, the easier it is to stop documenting what you already “know.”

A periodic assessment breaks that cycle.

---

Ask yourself these questions

If you manage imported food, ask:

Do we know our supplier?

Probably.

Do we know what they manufacture?

Probably.

Do we know where they manufacture it?

Hopefully.

Do we know whether anything has changed?

That requires current information.

Do we have current evidence?

That requires review.

Do we know what verification activities support our FSVP?

That requires documentation.

Can someone else understand our supplier decision from our records?

That's the real test.

---

The five-question supplier test

Here's a simple way to distinguish familiarity from verification.

1. Who is the supplier?

Can you confirm the current legal and facility information?

2. What are you importing?

Can you confirm the current foods and products?

3. What evidence have you reviewed?

Can you identify the current supporting records?

4. What changed?

Can you demonstrate that relevant changes were considered?

5. Why are you still comfortable using the supplier?

Can you explain the decision using current evidence?

If you can answer all five, you're moving beyond simply knowing the supplier.

---

What happens when you can't answer?

Don't panic.

That's the point of an assessment.

Start gathering the information.

Review the supplier.

Update the records.

Determine what needs verification.

Document the conclusion.

The objective isn't to prove that your previous process was perfect.

It's to make the current process stronger.

---

The human side of supplier verification

There is a reason importers resist this work.

It can feel like questioning someone you trust.

You don't want to annoy the supplier.

You don't want to create unnecessary paperwork.

You don't want to slow down orders.

You don't want to suggest that you don't trust them.

But verification doesn't have to feel like confrontation.

It can simply be:

“We're maintaining our supplier compliance records and need to confirm that our information is current.”

That's normal business.

---

The supplier may actually appreciate it

A good supplier often wants to know:

What does the importer need?

Which documents are important?

When are updates required?

What changes should be communicated?

Clear expectations can improve the relationship.

Verification can create better communication rather than worse communication.

---

Don't make the supplier prove everything every month

Good supplier management also means being reasonable.

If a document is current, don't request it repeatedly.

If the supplier already provided something, don't ask for it again because the system can't find it.

If no change has occurred, don't create unnecessary work.

The goal is controlled verification, not endless paperwork.

---

A better supplier relationship

The strongest relationships often look like this:

Supplier communicates changes.

Importer evaluates changes.

Supplier provides evidence.

Importer documents the decision.

Both sides understand expectations.

That's much stronger than:

“We've worked together forever.”

---

The difference in one sentence

If you remember only one thing from this article, make it this:

Knowing your supplier tells you who they are. Verifying your supplier helps demonstrate why you can continue relying on them.

Both are important.

But they are not interchangeable.

---

Why annual supplier assessment matters

An annual review gives the importer a structured opportunity to move from:

“We know them.”

to:

“We reviewed them.”

and ultimately:

“We have current evidence supporting our decision.”

That's a much stronger position.

---

The real value isn't paperwork

At the end of the process, the importer wants confidence.

Not:

“I think we're okay.”

But:

“We reviewed the supplier, evaluated the available information, completed the applicable verification activities, documented the outcome, and know what needs to happen next.”

That is operational confidence.

---

When verification becomes a system

One supplier may be manageable manually.

Five suppliers may still be manageable with discipline.

Twenty suppliers can become difficult.

Fifty suppliers can become a serious operational function.

At that point, importers often need:

• Supplier records
• Product mapping
• Document control
• Expiration monitoring
• Review schedules
• Verification tracking
• Corrective-action tracking
• Supplier communication records

This is where FSVPQI implementation and ongoing supplier compliance management can become valuable.

---

You don't have to distrust your supplier to verify them

This is perhaps the most important message for long-term importers.

Verification isn't saying:

“We don't believe you.”

It is saying:

“We have a responsibility to make and document our own compliance decisions.”

You can trust your supplier.

You can value the relationship.

You can continue buying from them.

And you can still verify them.

---