Your Supplier's Documents Expired. Did Anyone Notice?

The shipment is scheduled.

The purchase order is approved.

The supplier says everything is fine.

The importer opens the supplier file and sees a familiar certification sitting right where it has always been.

For a moment, everything looks normal.

Then someone checks the date.

Expired.

Not yesterday.

Not last week.

Maybe months ago.

The importer suddenly has a different question:

“Did anyone notice?”

That question is more important than it sounds.

Because an expired supplier document does not automatically mean the supplier is unsafe or that the importer must immediately stop using the supplier.

But it does mean the importer needs to determine what the document was being used for, whether current evidence is available, and whether the expiration affects the applicable FSVP evaluation or verification activities.

And that is exactly why document maintenance matters.

---

The document was there. That was the problem.

This is one of the most deceptive situations in supplier compliance.

If the document were completely missing, someone might notice.

But an expired document is different.

It is still there.

It has the supplier's name.

It has a professional logo.

It may have a certification number.

It may look exactly like the document the importer expects.

So the file feels complete.

Until someone checks the date.

---

“We have the certificate” isn't enough

This is one of the most common assumptions in supplier management.

Someone asks:

“Do we have the supplier's certification?”

The answer is:

“Yes.”

But a better set of questions is:

Is it current?

Does it apply to the supplier and facility we're using?

Does it cover the relevant product or activity?

Is the scope appropriate?

Was it reviewed?

Is the current version in the compliance file?

The difference between those questions is the difference between document possession and document verification.

---

Expiration dates are easy to overlook

Businesses collect hundreds or thousands of documents.

Certificates.

Audits.

Specifications.

Declarations.

Testing records.

Insurance documents.

Supplier questionnaires.

Regulatory records.

It is unrealistic to expect employees to remember every expiration date manually.

That's why supplier compliance needs a system.

---

The importer who thought someone else was tracking it

Maybe purchasing thought quality was tracking certificates.

Quality thought regulatory was tracking them.

Regulatory thought the supplier was responsible.

The supplier assumed the importer would request the renewal when needed.

Everyone assumed someone else was watching.

Nobody was.

That is how a document expires without anyone noticing.

---

The supplier may have already renewed it

This is important.

An expired document does not automatically mean the supplier's underlying certification or status has expired.

The supplier may have renewed it weeks earlier.

The importer simply hasn't obtained the current document.

So the first response shouldn't necessarily be panic.

It should be:

Find out what the current status actually is.

---

Start with the supplier

A simple request may resolve the issue:

“Our records show that the certification on file expired on [date]. Please provide the current certification or confirm the current certification status and applicable scope.”

Now the importer has started an evidence-based process.

Maybe the supplier sends the updated certificate immediately.

Problem solved.

Maybe the supplier says renewal is pending.

Now there is something to evaluate.

Maybe the supplier says certification is no longer maintained.

Now the importer has a more significant issue to address.

---

The expiration date creates a question—not necessarily a conclusion

This distinction is essential.

An expired document means:

The document is no longer current.

It does not automatically mean:

The supplier is unacceptable.

The importer needs to determine what the document represents and what the expiration means for the FSVP decision or verification activity.

That is why professional assessment matters.

---

What if the document was only supporting information?

Not every supplier document carries the same significance.

Suppose an expired document is simply an administrative record that doesn't serve as the basis for a required verification activity.

The response may be straightforward:

Obtain the current document and update the file.

But suppose the importer has been relying on that certification or audit as part of its supplier verification.

Now the situation deserves closer attention.

The importer needs to determine whether the current FSVP remains adequately supported.

---

The hidden problem is sometimes the review process

The expired certificate is visible.

But the deeper problem may be:

Nobody had responsibility for monitoring supplier documentation.

If that isn't fixed, replacing the certificate only solves today's problem.

Next year:

Another certificate expires.

Then:

Another audit becomes outdated.

Then:

A product specification changes.

Then:

A supplier contact leaves.

The business keeps reacting.

---

Reactive supplier management is exhausting

Imagine receiving this email:

“We need your updated certificate today because the current one expired.”

Then:

“Can you send the audit report too?”

Then:

“We also need the updated specification.”

Then:

“Can you confirm the facility address?”

Suddenly one expired document has turned into a supplier compliance cleanup project.

A better process identifies these needs before they become urgent.

---

The ideal scenario is boring

Imagine the certificate expires December 31.

The importer receives a reminder in October.

The supplier is contacted.

The renewal is requested.

The new document arrives in November.

The reviewer checks it.

The current document replaces the old version.

The record is updated.

Done.

No emergency.

No shipment panic.

No last-minute supplier chase.

That's what good compliance management looks like.

---

Document expiration should be visible

A supplier compliance system should make it possible to answer:

Which documents expire in the next 30, 60, or 90 days?

Without opening every supplier file.

That is where centralized supplier compliance management becomes valuable.

For each relevant document, the importer may track:

• Supplier
• Facility
• Document type
• Issue date
• Expiration date
• Status
• Reviewer
• Follow-up date
• Current version
• Action required

The exact fields depend on the organization's process.

---

Don't delete the old document without thinking

Another common mistake is simply replacing the old certificate.

The current version should be clearly identified as current.

But historical records may also have value.

The importer should maintain records in a way that preserves appropriate traceability and satisfies applicable FSVP recordkeeping requirements. FDA's FSVP rules include specific recordkeeping requirements for FSVP activities and determinations.

The goal is not to create a confusing archive.

It's to preserve an understandable compliance history.

---

Version control matters

Imagine the supplier folder contains:

Certificate.pdf

Certificate-New\.pdf

Certificate-Final.pdf

Certificate-Final-2.pdf

Updated Certificate.pdf

Which one is current?

That is not document control.

A better system clearly identifies:

Current certification — effective date — expiration date

and keeps historical versions appropriately controlled.

---

The expiration date can expose another problem

Sometimes an expired document leads to an even more important discovery.

The importer realizes:

“We don't actually know what verification activity this document supported.”

That's a bigger issue.

The question becomes:

“Why did we collect this document in the first place?”

If the answer isn't clear, the importer may need to review the FSVP and determine whether the verification approach remains appropriate.

---

Certification isn't the only document that expires

This issue applies broadly.

Consider:

Certifications

Expiration dates are obvious.

Audit reports

They may not technically “expire” in the same way, but their age can affect whether they remain appropriate evidence.

Product specifications

A specification can become obsolete when the formulation or process changes.

Supplier questionnaires

Information can become outdated as supplier operations change.

Testing information

The relevance depends on the product, hazard, and verification purpose.

Facility information

The information may become inaccurate when production moves.

So document maintenance is broader than tracking certificate expiration dates.

---

The importer who only checked certifications

Some businesses create a process:

“Check certification expiration dates annually.”

That's useful.

But supplier compliance is bigger than certification.

A supplier could have a current certificate and still have:

• A new facility
• A new product
• A changed formulation
• A significant food safety event
• A new audit finding
• A new regulatory issue

That's why annual supplier assessment should look at the relationship as a whole.

---

A current certificate doesn't automatically equal a current FSVP

This distinction is critical.

An FSVP isn't simply:

Supplier certification = compliance

The importer may need to consider the food, hazards, supplier evaluation, verification activities, records, and other applicable requirements.

A certificate can support a decision.

It doesn't replace the decision.

---

The supplier's renewal may reveal a change

Suppose the importer requests the updated certification.

The supplier sends it.

Everything looks good.

Then the reviewer notices:

Different facility address.

Now the annual review has uncovered something important.

The supplier didn't simply renew.

Something about the certification scope or facility changed.

That may require additional evaluation.

This is why reviewing the new document matters.

Don't just replace the old file.

Read the new one.

---

“Renewed” doesn't mean “identical”

A renewal may contain:

• New scope
• New facility information
• New product categories
• New certification body
• New audit dates
• New findings
• Modified activities

The importer should determine whether those changes affect the FSVP.

---

What if the supplier says certification is no longer available?

Now the importer has a decision to make.

Don't immediately assume:

“We have to drop the supplier.”

First determine:

What role did the certification play?

What verification activity was it supporting?

What alternative evidence is available?

Does the current FSVP still meet the applicable requirements?

Is additional verification necessary?

Depending on the situation, the importer may need to modify the verification approach or reevaluate the supplier.

---

This is where technical judgment matters

Supplier documentation doesn't always come with a simple answer.

For example:

“Our certification expired, but we passed a recent customer audit.”

Does that solve the issue?

It depends.

What audit?

Who conducted it?

What was the scope?

What was evaluated?

Is it appropriate for the food and supplier?

What role was the original certification playing?

These questions require more than simply checking a box.

---

Don't let the supplier's renewal become your compliance emergency

A good supplier management process starts early.

If a certification expires in December:

October: Request renewal.

November: Follow up.

December: Review current status.

Before expiration: Determine whether any action is needed.

That gives everyone time.

---

Build expiration monitoring into the workflow

For example:

90 days before expiration

Identify upcoming renewal.

60 days before

Request current documentation.

30 days before

Follow up if necessary.

At expiration

Confirm status and determine whether additional action is needed.

After renewal

Review, approve, and update records.

The exact timing can be customized.

The principle is:

Don't discover expiration after it happens.

---

What if there are dozens of suppliers?

This is where manual tracking becomes difficult.

Imagine:

40 suppliers

Each with:

2–5 relevant documents

That's potentially hundreds of dates.

Now add:

Multiple facilities

Multiple products

Multiple certifications

Annual reviews

Audit dates

The spreadsheet can become a full-time job.

---

Supplier compliance management is an ongoing function

At a certain scale, the question isn't:

“How do we get this year's certificate?”

It's:

“How do we continuously maintain supplier compliance information?”

That's a systems question.

---

The importer may need a supplier compliance dashboard

A useful dashboard might show:

Now management can see the situation quickly.

---

The purpose isn't to create more bureaucracy

It is to reduce surprises.

A good system should make compliance easier.

Not harder.

If tracking expiration dates creates more work than the problem it solves, the process needs improvement.

---

The emotional side of an expired document

The importer often goes through a familiar sequence.

First:

“Oh, that's expired.”

Then:

“When did it expire?”

Then:

“Why didn't anyone tell us?”

Then:

“Did we use this document for our supplier verification?”

Then:

“Do we need to do anything about past shipments?”

Finally:

“Okay. Let's figure out the current status.”

A strong compliance process tries to move that conversation from panic to procedure.

---

The right first question

When a document is discovered to be expired, don't start with:

“Are we in trouble?”

Start with:

“What did this document represent, and what is the supplier's current status?”

Then determine the appropriate next step.

That approach is much more productive.

---

What the importer should review

When a supplier document has expired, consider:

1. What document expired?

Certification?

Audit?

Specification?

Other supplier evidence?

2. What was it used for?

Was it part of supplier evaluation?

Verification?

General supplier management?

3. When did it expire?

Establish the timeline.

4. What is the current status?

Has it been renewed?

Replaced?

Discontinued?

5. Did anything else change?

Facility?

Product?

Process?

Scope?

6. Does the expiration affect the FSVP?

Evaluate the applicable requirements.

7. Is additional verification needed?

Determine based on the circumstances.

8. Should the FSVP be reevaluated?

If new information or a significant change affects the FSVP, reevaluation may be required.

9. Are records current?

Update the supplier file appropriately.

---

What not to do

Don't simply:

Delete the expired document.

Don't simply:

Upload the new certificate without reviewing it.

Don't simply:

Assume the supplier is no longer compliant.

Don't simply:

Ignore the expiration because the supplier is trusted.

And don't simply:

Wait until the next shipment.

Instead, understand what the document means and determine the appropriate response.

---

The supplier may appreciate the reminder

Sometimes the importer discovers an expiration before the supplier does.

A professional request can actually help both sides.

“Our records indicate that the certification currently on file expired on [date]. Please send the current certification or provide an update on renewal status.”

Simple.

Professional.

No accusation.

---

Document maintenance protects the supplier relationship too

Imagine discovering an expired certificate during a shipment emergency.

Now the supplier is under pressure.

The importer is under pressure.

The broker is waiting.

The customer may be waiting.

A scheduled review avoids putting the supplier relationship under unnecessary stress.

---

A supplier doesn't need to be perfect

This is another important principle.

The objective isn't to find a supplier who never has:

• An expired document
• A corrective action
• A minor finding
• A document update

Real businesses change.

The objective is to have a process that:

Identifies

Evaluates

Responds

Documents

Maintains

That's much more realistic.

---

The real problem is when nobody noticed

An expired document by itself is a fact.

The bigger concern is the process failure behind it:

Nobody noticed.

That can indicate:

• No expiration tracking
• No assigned responsibility
• No supplier review schedule
• Poor document control
• No follow-up process
• Overreliance on supplier communication

Those are process problems worth fixing.

---

One expired document can reveal a bigger system problem

Suppose you discover one expired certification.

Then you check another supplier.

Expired.

Another.

Outdated.

Another.

No review date.

Suddenly, you realize:

This isn't one expired document. It's a supplier compliance management problem.

That discovery is uncomfortable.

But it can be valuable.

Now you know what needs to change.

---

The annual review can catch these issues

This is exactly why annual supplier compliance assessment matters.

The review creates a defined moment to check:

• Current documentation
• Expiration dates
• Supplier changes
• Facility changes
• Product changes
• Verification records
• Supplier performance
• FSVP status

Instead of waiting for a document to become an emergency.

---

What if you have already missed an expiration?

Don't ignore it.

Find out:

When did it expire?

What is the current status?

Was it renewed?

What role did it play in the FSVP?

Were any significant changes identified?

Does the FSVP need reevaluation?

Then document the resolution.

The exact response depends on the circumstances.

---

The goal is current compliance, not perfect history

Importers sometimes become overwhelmed when they discover old documentation problems.

They think:

“We have to fix everything from the past.”

Not necessarily.

Start by establishing the current state.

Then determine what historical records need attention based on the applicable requirements and circumstances.

The goal is to get the compliance system under control.

---

A current file creates confidence

Imagine opening the supplier file and immediately seeing:

Current certification

Current facility

Current products

Current audit information

Last supplier review

Next review date

Open actions

That's a very different experience from:

“I think the current certificate is somewhere in email.”

---

The difference is process

The supplier didn't necessarily change.

The product didn't necessarily change.

The business didn't necessarily change.

But the compliance process can change.

From:

“Someone should check this.”

To:

“The system tells us when this needs attention.”

That is a major improvement.

---