When “We've Always Used This Supplier” Isn't a Compliance Strategy

There is a sentence that sounds reassuring in an importing business:

“We've always used this supplier.”

It usually means the relationship has history.

The supplier has delivered.

The products have sold.

There haven't been major problems.

The importer knows the supplier's people.

The supplier knows the importer.

Orders are routine.

So when someone asks whether the supplier should be reassessed, the response can be almost automatic:

“Why? We've been using them for years.”

That's where familiarity can become a compliance blind spot.

Because a long-term supplier relationship is valuable—but it is not, by itself, evidence of continued compliance.

---

A good supplier can still require verification

This isn't about distrusting a supplier.

In fact, the opposite may be true.

A supplier that has performed well for years may be exactly the supplier you want to keep.

But FSVP isn't designed around the question:

“Do we like this supplier?”

It is concerned with whether the importer has appropriately evaluated and verified the foreign supplier and the food being imported under the applicable requirements.

FDA's FSVP framework requires importers to perform specified evaluation, verification, and recordkeeping activities, with reevaluation when applicable new information or changes could affect the adequacy of the FSVP.

The relationship can be excellent.

The compliance process still needs to exist.

---

“We've always used them” tells you about history

That statement tells you something useful.

It tells you the supplier has a track record.

But history isn't the same as current verification.

Compare:

“We've used them for ten years.”

with:

“We've used them for ten years, and our current supplier evaluation and verification records support continued use.”

The second statement is much stronger.

It combines experience with evidence.

---

The importer who stopped asking questions

Imagine a food importer that has worked with the same manufacturer since 2018.

The importer knows the supplier well.

The supplier has never caused a major issue.

The relationship is comfortable.

Every year, the importer orders the same products.

Eventually, supplier compliance becomes background noise.

Nobody asks:

“Is the certification current?”

Nobody asks:

“Did anything change?”

Nobody asks:

“Is this still the same facility?”

Nobody asks:

“When was the supplier last reassessed?”

Not because anyone intentionally ignored compliance.

The relationship simply became familiar.

---

Familiarity creates assumptions

This is where things can become risky.

The importer starts thinking:

“They would tell us if something changed.”

“Their certification has always been current.”

“The product hasn't changed.”

“Their food safety program is good.”

“We've never had a problem.”

Those statements might all be true.

But the importer may not have current evidence supporting them.

---

The supplier may have changed without realizing it mattered

Suppose the supplier says:

“Nothing significant changed.”

Then you discover:

The supplier added a new production line.

Was that significant?

Maybe.

The supplier changed an ingredient.

Potentially significant.

The supplier moved some production to another facility.

Potentially significant.

The supplier changed its certification scope.

Potentially significant.

The supplier had a food safety incident.

Potentially significant.

The supplier may not know which changes matter to your FSVP.

That's one reason importers need their own review process.

---

The importer owns the compliance responsibility

This is a critical concept.

The foreign supplier is responsible for producing food under its own food safety system.

But the importer has its own FSVP responsibilities.

A supplier saying:

“We're compliant.”

does not automatically eliminate the importer's responsibility to evaluate and verify the supplier as required.

The importer needs a reasonable basis for its decisions.

---

Trust is not verification

This distinction is worth making very clearly.

Trust

“We've worked together for years.”

Verification

“We reviewed the relevant information and determined that the supplier remains appropriately verified.”

You can have both.

You should not confuse one for the other.

---

The supplier's track record is valuable evidence—but not necessarily enough by itself

A strong performance history matters.

For example:

• Consistent product quality
• Few complaints
• Good communication
• Reliable documentation
• No significant known food safety issues

Those factors can contribute to an informed supplier assessment.

But they don't necessarily replace the other applicable elements of an FSVP.

The point is not to ignore supplier history.

The point is to put history in its proper place.

---

What happens when the supplier has been around longer than the employee?

This happens in established companies.

An employee joins the company in 2026.

The supplier has been used since 2017.

The employee asks:

“Why was this supplier approved?”

The answer:

“They've always been our supplier.”

Now imagine an FDA inspection or internal audit asks the same question.

Institutional memory isn't a substitute for records.

The compliance file should tell the story.

---

The file should survive employee turnover

People leave.

New employees arrive.

Consultants change.

Responsibilities move between departments.

A supplier relationship can outlast several employees.

That means the compliance system should preserve:

Who was evaluated

What was evaluated

When it was evaluated

What evidence was considered

What verification occurred

What conclusion was reached

That's what makes a compliance program sustainable.

---

“We've always used them” doesn't explain why you still use them

A reviewer could ask:

“Why is this supplier still approved?”

“Because we've always used them” explains history.

It doesn't explain the current decision.

A stronger answer is:

“The supplier was originally evaluated, has been periodically reviewed, current information was considered, and the available evidence continues to support the supplier's approval.”

That's a compliance decision.

---

Long-term relationships can actually increase complacency

This seems counterintuitive.

You might think a supplier with ten years of history requires less attention.

Operationally, perhaps.

But psychologically, familiarity can reduce scrutiny.

The importer stops noticing changes because the relationship feels stable.

The more familiar the supplier becomes, the easier it is to stop asking basic questions.

---

The supplier's certification may have changed

Imagine a supplier that has always been certified.

The importer stores the certificate.

Then years pass.

The certification body changes.

The scope changes.

The certification expires and is renewed.

The facility is added or removed from the scope.

The importer may not notice.

The supplier is still “certified.”

But the evidence supporting the importer’s evaluation needs to remain current and relevant.

---

The supplier's audit history may have changed

A supplier can have:

Excellent audit → Minor findings → Major finding → Corrective action → Improved audit

If the importer only remembers:

“They've always had good audits,”

the current situation may be missed.

That's why supplier performance should be periodically reviewed rather than remembered generally.

---

The product may have evolved

A supplier relationship can remain unchanged while the food changes.

Perhaps the importer originally purchased:

Product A

Then added:

Product B

Then:

Product C

Now the importer has three products from the same supplier.

It may be tempting to treat the supplier as one compliance unit.

But the imported foods and applicable hazards still matter.

The FSVP needs to reflect the actual foods being imported.

---

One supplier doesn't mean one risk profile

A manufacturer might produce:

• Shelf-stable foods
• Refrigerated foods
• Frozen foods
• Acidified foods
• Ready-to-eat products
• Different formulations

The fact that they're all made by the same company doesn't automatically make their compliance considerations identical.

Supplier identity is one part of the evaluation.

The food matters too.

---

The supplier's facility may have changed

This is especially important for larger manufacturers.

A supplier can have:

Facility A

Facility B

Contract manufacturer C

The commercial relationship may still be with the same supplier.

But the actual production source can change.

A current review helps confirm:

Where is the food actually being manufactured?

---

The importer may have changed too

Sometimes the supplier is exactly the same.

The importer isn't.

Maybe the company:

• Added new products
• Changed ownership
• Expanded into new markets
• Started selling on Amazon
• Increased import volume
• Added new customers
• Began importing more frequently

The FSVP program may need to evolve with the business.

---

Growth can expose old assumptions

When an importer was small, one supplier may have been manageable.

Then the company grows.

Suddenly there are:

15 suppliers

40 products

Multiple countries

Multiple facilities

Hundreds of shipments

The old approach:

“I know our suppliers.”

doesn't scale.

The importer needs a system.

---

The supplier relationship is not the compliance system

This is perhaps the central lesson.

A relationship is:

People

Trust

History

Communication

Commercial performance

A compliance system is:

Evaluation

Verification

Documentation

Monitoring

Reevaluation

Records

You need both.

---

The danger of “we've never had a problem”

This is one of the strongest psychological traps.

An importer says:

“We've imported from them for eight years and never had a problem.”

That's good.

But ask:

“How do you know the absence of a known problem means the current verification process remains appropriate?”

The supplier may genuinely be excellent.

But lack of an observed problem doesn't eliminate the need for appropriate oversight.

---

No complaints doesn't equal no change

A food safety change doesn't necessarily produce an immediate complaint.

A certification change may never affect product quality.

A new facility may produce perfectly good food.

A new ingredient may be safe.

The point isn't that change is necessarily bad.

The point is that the importer should know what changed and evaluate what matters.

---

A supplier review can confirm the relationship

The best outcome of reassessment may simply be:

“Yes, this is still a good supplier.”

That's valuable.

You can document:

• Supplier remains approved
• Facility confirmed
• Product confirmed
• Current certification reviewed
• Relevant information reviewed
• No significant changes identified
• Verification remains appropriate

Now the long-term relationship is supported by current evidence.

---

The review doesn't have to be adversarial

Some importers worry that reassessment will offend suppliers.

It doesn't have to.

A simple message can explain:

“As part of our ongoing supplier compliance process, we're reviewing our supplier records and confirming that the information supporting our approval remains current.”

That's reasonable.

It's professional.

And good suppliers should understand the need for periodic review.

---

What if the supplier says, “We've already given you everything”?

The answer can be:

“We appreciate that. We're not asking you to start over. We're updating our records and confirming that the information we have remains current.”

This distinction can make supplier communication much easier.

You're not questioning the entire relationship.

You're maintaining it.

---

The annual assessment isn't a vote of no confidence

This is an important message for suppliers.

Annual reassessment means:

“We take the relationship seriously enough to maintain it properly.”

It doesn't mean:

“We think you're unsafe.”

Good supplier management should feel like routine business administration—not an accusation.

---

What should the importer review?

A practical supplier reassessment can consider:

Supplier identity

Is the legal entity and facility information current?

Food

Are the imported products still the same?

Hazards

Does the existing evaluation remain appropriate?

Certification

Is current certification available and applicable?

Audit information

Is the available audit evidence still appropriate?

Supplier performance

Has anything significant changed?

Food safety history

Are there relevant recalls, complaints, or incidents?

Regulatory information

Is there relevant new information?

Verification

Are current verification activities appropriate?

Records

Does the FSVP documentation accurately reflect the relationship?

The exact review should be tailored to the applicable FSVP requirements.

---

What if everything really is the same?

Then that's excellent.

Document it.

The conclusion can be straightforward:

“No significant changes were identified. Current supplier information and applicable verification records were reviewed, and continued supplier approval remains appropriate.”

The review has accomplished exactly what it was supposed to accomplish.

---

What if something changed?

Then the importer has options.

Depending on the issue, the response may involve:

• Requesting additional information
• Updating records
• Reviewing the FSVP
• Conducting additional verification
• Requesting corrective action
• Reevaluating the supplier
• Modifying the verification approach

The appropriate response depends on the nature and significance of the finding.

---

The cost of relying only on history

The phrase:

“We've always used this supplier.”

can save five minutes today.

But if it causes the importer to overlook a meaningful change, the eventual cost can be much higher.

Potential consequences can include:

Emergency document collection

Supplier disputes

Additional verification

Internal cleanup

Shipment uncertainty

Regulatory questions

Management time

The exact consequences depend on the circumstances.

But the principle is simple:

History is useful. Current information is necessary.

---

Don't throw away supplier history

This doesn't mean history doesn't matter.

Quite the opposite.

A long supplier history can provide valuable information about:

• Performance
• Reliability
• Quality
• Responsiveness
• Corrective action
• Complaint history
• Consistency

The goal is to combine that history with current verification.

Think:

Past performance + current evidence = stronger supplier oversight.

---

The mature importer asks a different question

Instead of:

“Can we keep using this supplier?”

the mature importer asks:

“What does our current evidence tell us about continuing to use this supplier?”

That's a much better question.

It is objective.

It can be documented.

And it doesn't require assuming that the answer will be either positive or negative.

---

What happens when the supplier becomes part of the company's identity?

Some suppliers become deeply embedded in a business.

The importer may have:

• Built products around them
• Created marketing around them
• Negotiated long-term pricing
• Developed customer relationships
• Invested in packaging
• Built forecasts around their capacity

At that point, replacing the supplier becomes difficult.

That makes proper supplier oversight even more important.

---

The longer the relationship, the more important institutional memory becomes

If the supplier has been used for ten years, you should be able to answer:

“Why did we choose them?”

and:

“Why do we continue to use them?”

Those answers should not depend entirely on one employee's memory.

Your records should preserve the reasoning.

---

A supplier relationship can be strong and still require structure

That's the ideal outcome.

The importer doesn't need to become suspicious.

The supplier doesn't need to become defensive.

The compliance process simply operates in the background.

Review.

Verify.

Document.

Maintain.

Continue.

That's what sustainable supplier management looks like.

---

The question isn't whether you've used the supplier before

Of course you have.

That's why they're still your supplier.

The better question is:

“Would we approve this supplier today based on the information we have today?”

If the answer is yes, excellent.

Document why.

If the answer is no, investigate.

If the answer is:

“I'm not sure,”

that's where the assessment begins.

---