Your Supplier Was Compliant Last Year. What About This Year?

Last year, everything looked good.

The supplier provided the requested documents.

The certification was current.

The audit report was reviewed.

The products arrived without a major issue.

The supplier was approved.

So when the calendar moved into a new year, the importer did what most busy businesses naturally do:

They kept ordering.

There was no obvious reason to stop.

No complaint.

No recall.

No warning.

No major change that anyone knew about.

But there was one question the importer hadn't asked:

“Is our supplier still compliant this year?”

That question is at the heart of annual supplier compliance assessment.

Because a supplier that was acceptable last year is not automatically acceptable forever.

---

The supplier didn't necessarily do anything wrong

This is important.

Annual supplier reassessment is not necessarily about assuming that a supplier has become unsafe or noncompliant.

It is about recognizing a basic reality of supplier relationships:

Things change.

A certification expires.

An audit gets older.

A manufacturing facility changes.

A process changes.

A product formulation changes.

A new regulatory issue appears.

A supplier has a corrective action.

A key food safety employee leaves.

A supplier adds a new production location.

Sometimes the supplier changes intentionally.

Sometimes the importer simply doesn't know that something changed.

That is why periodic verification matters.

---

The importer who said, “But we already approved them”

Consider a small importer that has worked with the same supplier for three years.

The supplier has always been reliable.

The importer has never had a serious complaint.

Every shipment has arrived normally.

The supplier's FSVP file was completed when the relationship began.

When someone suggests reviewing the supplier again, the importer asks:

“Why? We've already approved them.”

It's a fair question.

The answer is:

Because approval is not the same thing as permanent approval.

FSVP is built around ongoing responsibilities, including reevaluation when appropriate. FDA's FSVP framework requires importers to conduct reevaluations of the FSVP when applicable circumstances change and to maintain records supporting their activities.

The goal isn't to distrust a good supplier.

The goal is to make sure the compliance file still reflects reality.

---

Last year's file is a snapshot

Think about an FSVP file from December 2025.

It represents what was known and documented at that point.

Now it's August 2026.

The supplier may still be excellent.

But the file is still a snapshot of an earlier point in time.

The question is no longer:

“Was this supplier acceptable in 2025?”

It's:

“What evidence do we have that the supplier remains appropriately verified today?”

That is a much more useful question.

---

Why annual review matters even when nothing appears to have changed

The importer often assumes:

“If something changed, the supplier would tell us.”

Sometimes they do.

Sometimes they don't.

A supplier's primary relationship is with its customers and its own operations—not necessarily with your FSVP file.

The supplier may not realize that a change is significant to your U.S. regulatory responsibilities.

For example, the supplier may think:

“We renewed our certification.”

But the importer may need to know:

• Was the certification renewed?
• Is the scope still applicable?
• Is the facility still the same?
• Were there significant findings?
• Were corrective actions required?
• Did the certification body change?
• Did the certification expire before renewal?

The annual review creates an opportunity to ask.

---

The documents can change without the supplier changing

This is one of the easiest things to overlook.

Imagine the supplier remains exactly the same.

Same:

• Facility
• Product
• Ownership
• Production process
• Employees

But the supplier's certification expired.

Nothing about the physical product changed.

Yet the compliance evidence changed.

That's enough to justify attention.

---

The audit report has a shelf life

An audit report can be useful evidence.

But an audit performed several years ago doesn't necessarily tell you what the supplier looks like today.

A facility can improve.

A facility can deteriorate.

A management team can change.

A process can change.

A supplier can experience a new food safety issue.

The older the evidence becomes, the more important it is to consider whether it still provides meaningful assurance.

---

The supplier that was excellent five years ago

Imagine a supplier with a long history of strong performance.

They have:

• A good certification history
• No significant complaints
• Experienced personnel
• Reliable delivery
• Strong customer relationships

That's valuable.

But suppose the facility changes ownership.

The food safety manager leaves.

The supplier begins using a new production line.

The supplier adds another manufacturing location.

The importer continues relying on the old supplier evaluation.

Nothing necessarily looks wrong from the outside.

But the old evaluation may no longer tell the whole story.

---

Annual review is not about starting over

This is another important distinction.

An annual supplier compliance assessment doesn't necessarily mean:

“Throw away the old FSVP and rebuild everything.”

A good review can begin with the existing file.

Ask:

What do we already have?

What's still current?

What's expired?

What's missing?

What changed?

What needs follow-up?

That is much more efficient than rebuilding a supplier file from zero every year.

---

A practical annual supplier review

A supplier assessment can be organized around several questions.

Supplier identity

Is the supplier information still accurate?

Facility

Is the manufacturing facility still the same?

Products

Are the same foods being supplied?

Certification

Is the certification current and applicable?

Audit

Is current audit information available where appropriate?

Food safety performance

Have there been significant issues?

Regulatory history

Are there relevant regulatory concerns?

Verification activities

Are the existing verification activities still appropriate?

Corrective actions

Were significant issues identified that require follow-up?

FSVP records

Is the file current and complete?

The exact assessment should be based on the applicable FSVP requirements and the specific supplier and food.

---

The supplier says, “Nothing changed”

That answer can be helpful.

But it shouldn't automatically end the review.

“Nothing changed” is a statement.

A compliance file should contain evidence appropriate to the applicable requirement.

The question becomes:

“What evidence supports the conclusion that nothing significant changed?”

Sometimes the answer may be straightforward.

Sometimes additional documentation is warranted.

The point is to make the conclusion defensible.

---

The supplier's certificate says “certified”

That's useful.

But ask:

Certified to what?

And:

Is the certification relevant to the food and verification process?

And:

Is it current?

And:

Does the scope cover the applicable facility and product?

A certificate is evidence.

It is not automatically the entire supplier evaluation.

---

Supplier approval is not the finish line

Many businesses treat supplier approval as an event.

Approved.

Done.

But supplier management works better as a cycle:

Evaluate → Approve → Verify → Monitor → Reevaluate → Update

That cycle recognizes that supplier relationships are dynamic.

---

What if the supplier had a food safety incident?

This is where reassessment becomes especially important.

Suppose the supplier had a significant food safety event.

Maybe there was:

• A recall
• A regulatory action
• A serious customer complaint
• A major audit finding
• A significant corrective action
• A contamination concern

The importer shouldn't simply say:

“They were approved last year.”

The new information may require reevaluation.

FDA's FSVP requirements contemplate reevaluation when there is new information about the food or foreign supplier that could affect the FSVP, including certain significant changes and other circumstances.

---

What if there was a recall?

A recall doesn't automatically mean the supplier must be permanently rejected.

But it should trigger questions.

What happened?

What product was involved?

Was your imported food affected?

What was the root cause?

What corrective action was taken?

Has the supplier addressed the problem?

Does the event change your supplier approval or verification decision?

Those are the questions an annual assessment helps put into context.

---

What if the supplier changed the product?

This can be more significant than an importer realizes.

Suppose the supplier says:

“We improved the formulation.”

That sounds positive.

But from an FSVP perspective, the importer may need to understand:

• What changed?
• Did the ingredients change?
• Did the hazards change?
• Did the process change?
• Did the supplier's controls change?
• Does the existing verification still make sense?

A product change can become a compliance change.

---

What if the supplier moved production?

This is another common scenario.

The supplier's name remains the same.

The product name remains the same.

The commercial relationship remains the same.

But manufacturing moved to another facility.

The importer may now need to reassess whether the existing supplier evaluation and verification activities still apply.

A supplier name is not the same thing as a facility.

That distinction matters.

---

The annual review can uncover problems before an FDA review does

This is one of the strongest reasons to conduct periodic assessment.

An internal review may reveal:

“This certificate expired.”

“This audit is outdated.”

“This product isn't listed.”

“This facility address changed.”

“This supplier added a new production site.”

Those are much easier problems to address when discovered internally.

The goal isn't to wait for an outside party to identify them.

---

Compliance should not depend on memory

A common supplier management process looks like this:

“I remember reviewing that supplier.”

That's not enough.

People change jobs.

Employees leave.

Files move.

Businesses grow.

A supplier review should be documented in a way that another qualified person can understand.

FDA's recordkeeping requirements are a core part of FSVP.

---

The value of an annual supplier compliance assessment

An annual assessment gives the importer a structured checkpoint.

Instead of asking:

“Are we okay?”

the importer can ask:

“What changed since the last review?”

That question is much easier to manage.

---

The “nothing changed” review

Even when nothing significant changed, the assessment can document that conclusion.

For example:

Supplier: ABC Foods Ltd.

Previous review: August 2025

Current review: August 2026

Facility: No change identified

Products: No change identified

Certification: Current

Audit: Reviewed

Regulatory information: No relevant new concern identified

FSVP: Maintained

Conclusion: Supplier remains approved, subject to applicable ongoing requirements

The exact content will vary by supplier.

But the concept is powerful:

You don't just assume nothing changed. You check.

---

The supplier file that looked complete

One importer recently reviewed a supplier file and initially thought everything was there.

There was a certificate.

There was an audit.

There was a specification.

There was a supplier questionnaire.

It looked impressive.

But when someone reviewed the dates, they discovered:

• One certificate had expired.
• The audit was several years old.
• The product specification was for an older formulation.
• The supplier address differed between documents.

No single document looked alarming.

The problem appeared only when someone looked at the file as a system.

That's what a good assessment does.

---

The difference between document collection and assessment

This distinction is critical.

Document collection

“Send us your certificate.”

Assessment

“Let's determine whether the evidence we have supports the supplier's continued approval and verification.”

Those are not the same activity.

A supplier can provide every requested document and still require additional review.

---

What importers should ask suppliers annually

Depending on the supplier and applicable requirements, useful questions may include:

• Has your ownership changed?
• Has your manufacturing location changed?
• Have your products or formulations changed?
• Have your food safety processes changed?
• Is your certification current?
• Have there been significant audit findings?
• Have you experienced a recall?
• Have you received relevant regulatory actions?
• Have there been significant food safety complaints?
• Have there been changes affecting your verification documentation?

The exact questionnaire should be tailored to the supplier and food.

---

Don't make the supplier questionnaire unnecessarily complicated

An annual assessment should be useful.

It shouldn't become a 30-page exercise that suppliers stop responding to.

The objective is to collect meaningful information.

Ask what you actually need.

Then follow up when the answers indicate something requires further review.

---

Annual review is also a relationship check

Supplier compliance isn't only regulatory.

It's commercial.

The review can reveal:

• Communication problems
• Documentation delays
• Poor responsiveness
• Repeated corrective actions
• Quality issues
• Production changes
• Management changes

Sometimes the supplier is still acceptable.

Sometimes the assessment reveals that the business relationship itself needs attention.

---

The importer who was afraid to ask questions

Some importers hesitate to reassess a long-term supplier because they don't want to offend them.

They think:

“We've worked together for years.”

That's precisely why the conversation can be framed professionally.

You're not accusing the supplier.

You're maintaining your supplier qualification process.

A mature supplier should understand that customers periodically verify their food safety information.

---

“We've always done it this way”

This is one of the most dangerous sentences in supplier management.

A process that worked five years ago may no longer be appropriate today.

Regulations change.

Products change.

Suppliers change.

Businesses change.

Your supplier verification process should be capable of changing too.

---

Annual doesn't mean blindly once every 365 days

The word “annual” can create another misunderstanding.

A yearly review is useful as a structured checkpoint.

But important changes can require action before the annual date.

If a significant event happens in February, you don't necessarily wait until December to address it.

FSVP requires reevaluation in applicable circumstances, not simply a calendar exercise.

Think of the annual review as:

A scheduled health check—not permission to ignore changes throughout the year.

---

What happens when a supplier fails the review?

The answer isn't automatically:

“Remove supplier.”

Depending on the circumstances, the importer may need to:

1. Identify the issue.

2. Determine its significance.

3. Request additional information.

4. Evaluate corrective action.

5. Conduct additional verification where appropriate.

6. Reevaluate the supplier.

7. Decide whether continued approval is justified.

The appropriate response depends on the nature and significance of the issue.

---

Sometimes the supplier becomes stronger

An assessment doesn't only find problems.

It can confirm improvement.

Maybe the supplier:

• Upgraded its certification
• Improved its food safety system
• Closed previous audit findings
• Added stronger testing
• Improved traceability
• Strengthened preventive controls

The annual review gives the importer an opportunity to document that improvement.

---

A supplier review can create better supplier relationships

When done properly, compliance doesn't have to feel adversarial.

The importer can say:

“We're conducting our annual supplier review. Here is what we need.”

The supplier knows what is expected.

The importer knows what is needed.

Both sides have a structured process.

That's much better than sending emergency requests whenever a document expires.

---

The operational benefit

Imagine managing 20 suppliers.

Without a system:

“Which certificates expire this month?”

“Who has responded?”

“Which suppliers haven't sent their audits?”

“Did anyone review the new certificates?”

With a structured assessment process:

Supplier A — current

Supplier B — follow-up required

Supplier C — reassessment completed

Supplier D — certification pending

Now the compliance workload is visible.

---

This is where supplier compliance management becomes valuable

For a business with one supplier, an annual review may be relatively manageable.

For a business with dozens of suppliers, it becomes a recurring operational function.

That's when an importer may benefit from:

• Supplier compliance tracking
• Annual assessment coordination
• Document expiration monitoring
• Supplier follow-up
• Verification maintenance
• FSVPQI implementation
• Ongoing compliance management

The objective is to prevent supplier compliance from becoming a forgotten administrative task.

---

What would happen if you didn't review your supplier this year?

Maybe nothing.

That's entirely possible.

The supplier may remain excellent.

The documents may remain current.

The food safety system may remain strong.

But you won't know.

And that's the issue.

Compliance isn't simply about whether something is wrong.

It's about whether you have a reasonable basis for your conclusion.

---

The question worth asking today

Don't ask:

“Was our supplier compliant last year?”

You already know the answer.

Ask:

“What evidence do we have that our supplier remains appropriately verified today?”

That question moves the conversation from history to current compliance.

---

Annual supplier compliance assessment checklist

Before closing the annual review, consider whether you have addressed:

• Supplier identity
• Facility information
• Product information
• Certification status
• Audit information
• Food safety performance
• Relevant regulatory information
• Significant changes
• Verification activities
• Corrective actions
• Reevaluation
• Recordkeeping
• Approval status

The exact requirements depend on the food, supplier, importer, and applicable FSVP provisions.

---

The most valuable outcome isn't another certificate

It's confidence.

At the end of the review, the importer should be able to say:

“We reviewed our supplier, evaluated the current information, identified what changed, addressed what needed attention, and documented our conclusion.”

That's much stronger than:

“We have the supplier's certificate from last year.”

---

Your supplier may still be great

And that's perfectly fine.

The purpose of annual supplier assessment isn't to create problems where none exist.

It's to verify that the supplier you approved yesterday still deserves the same confidence today.

Sometimes the answer will be:

Yes.

Sometimes:

Yes, but we need to update a few records.

Sometimes:

We need additional verification.

And sometimes:

We need to reconsider the supplier.

The value is knowing which answer is true.

---