How much notice does FDA give before an FSVP inspection?

None. FDA FSVP inspections are unannounced. An investigator will arrive at your place of business and request access to your FSVP records. You are expected to be able to produce all relevant documentation within 24 hours. Companies that store records offsite or in disorganized systems frequently receive citations for failure to make records available.

What is the most common reason importers fail FSVP inspections?

The most common finding is having no FSVP program at all. Many importers are unaware of the requirement, assume their broker handles it, or believe their product is exempt. The second most common failure is an incomplete hazard analysis — either missing products, missing hazard categories, or a generic template that was not tailored to the specific food and supplier.

Can I use this checklist to prepare for my first FSVP inspection?

Yes. This checklist covers the 11 areas FDA investigators typically review during an FSVP inspection. If you can produce complete, organized documentation for each item on this list, you are substantially prepared. However, the checklist is not a substitute for a complete FSVP program — it is a readiness verification tool to identify gaps before FDA finds them.

How often should I review my FSVP for audit readiness?

Review your FSVP at least annually and whenever a material change occurs — new supplier, new product, change in supplier's food safety status, new hazard information, or a food safety incident. Companies that treat FSVP as a living program rather than a one-time filing are significantly less likely to receive inspection citations.

FSVP Audit-Readiness Checklist for Food Importers

Nearly 64% of FDA FSVP inspections result in compliance failures. The most common reason is not that importers are doing something wrong — it is that they cannot demonstrate they are doing anything at all. FDA does not accept verbal assurances. If you cannot produce organized, complete documentation during an unannounced inspection, you will receive a citation.

This checklist is not a guide to building your FSVP program from scratch — our step-by-step FSVP compliance guide covers that. This is a readiness verification tool. If you already have an FSVP in place, use this list to confirm that every element is current, complete, and retrievable before FDA arrives.

The 11-Point FSVP Audit-Readiness Checklist

Complete product-supplier matrix. You need a master list of every food product you import, paired with every foreign supplier for that product. Each product-supplier combination requires its own FSVP. If you import 20 products from 5 suppliers, you may need up to 100 individual programs. FDA will ask for this list first to understand the scope of your import operations. If any product-supplier combination is missing from your matrix, the inspector will cite it as a failure to have an FSVP for that combination.
Product-specific hazard analysis for each food-supplier combination. Each hazard analysis must be specific to the product and the supplier. It must identify known or reasonably foreseeable biological, chemical, physical, and radiological hazards. A generic template that lists the same hazards for every product will not survive scrutiny. Your hazard analysis for fresh produce from Thailand should look materially different from your hazard analysis for shelf-stable olive oil from Italy. FDA wants to see that you evaluated the actual risk profile of each product, considering the supplier's processes, the country of origin, and the specific hazards associated with the food type.
Foreign supplier evaluation records. For each supplier, you need documentation showing that you evaluated their food safety performance. This includes reviewing their food safety plans, HACCP plans, or preventive controls documentation. It includes checking FDA inspection history, third-party audit results, and any regulatory actions taken against the supplier. You should have records of what you reviewed, when you reviewed it, and what conclusions you drew. An evaluation that says "supplier is approved" without supporting evidence is not sufficient.
Supplier approval and verification activity decisions. Based on your hazard analysis and supplier evaluation, you must document which verification activities you chose for each food-supplier combination and why. FDA provides several options: onsite audits, sampling and testing, review of supplier food safety records, and other activities. Your documentation must show the rationale for the activities selected. If you chose records review instead of an onsite audit for a high-risk product, you need to explain why that level of verification is adequate. Document the frequency of each activity and the basis for that frequency.
Verification activity results. You need the actual results of every verification activity you conducted. If you required an onsite audit, you need the audit report. If you conducted product testing, you need the lab results. If you reviewed supplier records, you need documentation of what records you reviewed and what you found. Results must be organized by supplier and product, dated, and cross-referenced to the hazard analysis that drove the activity. FDA will trace from hazard to activity to result. If any link in that chain is missing, you have a gap.
Corrective action records. If any verification activity revealed a problem — an audit deficiency, a contamination finding in testing, a food safety incident — you must have documentation of the corrective action taken. This includes the issue identified, the immediate response (hold, increased testing, import suspension), the root cause analysis, the corrective action implemented, and verification that the corrective action was effective. If you have never had a corrective action, document that your verification activities have not identified any issues requiring corrective action. Having no corrective actions is acceptable; having no process for taking corrective actions is not.
FSVP importer identification. You must be able to clearly identify yourself as the FSVP importer for each product you bring into the country. This means documentation showing that you are the U.S. owner or consignee of the food at the time of entry. If you use a third-party importer of record, you need to demonstrate that the FSVP obligation rests with you, not the IOR. FDA will verify that the entity they are inspecting is actually the FSVP importer for the products in question.
Qualified individual documentation. FSVP activities must be performed by a "qualified individual" as defined by the regulation. This is someone who has the education, training, or experience necessary to perform the activity. You need documentation of the qualifications of every person who performed FSVP activities — hazard analysis, supplier evaluation, verification activity decisions, and corrective actions. This can include resumes, training certificates, or records of relevant experience. If you used a third-party consultant, document their qualifications as well.
Reassessment records. FSVP is not a one-time exercise. You must reassess your FSVP when you become aware of new information that could affect your hazard analysis or supplier evaluation. You must also reassess within three years of the last assessment, or whenever a material change occurs. FDA will check whether you have reassessed your program and whether the reassessment was triggered by appropriate events. Document every reassessment, including the trigger, the findings, and any changes made to the program.
Record organization and retrieval system. All FSVP records must be retrievable within 24 hours of an FDA request. This is not a suggestion — it is a regulatory requirement. If your records are in a filing cabinet at a different office, in a shared drive with no folder structure, or scattered across email attachments, you will fail this requirement. Establish a clear filing system — whether electronic or physical — organized by supplier, product, and activity type. Test your retrieval process before FDA tests it for you. Pull a random supplier's complete FSVP file and see how long it takes. If it takes more than an hour, your system needs work.
FDA response protocol. This is not a regulatory requirement, but it is a practical necessity. When an FDA investigator arrives at your office, who responds? Who has access to the records? Who is authorized to speak on behalf of the company? Having a documented response protocol — including a designated FSVP coordinator, backup contacts, and a records access procedure — ensures that the inspection starts smoothly rather than with confusion and delay. Companies that handle the first 30 minutes of an inspection well set a positive tone for the entire review.

What FDA Investigators Actually Do During an FSVP Inspection

Understanding the inspection process helps you prepare for it. FDA FSVP inspections typically follow a consistent pattern.

Arrival and credentials. An FDA investigator will arrive at your place of business without advance notice. They will present their credentials and a Notice of Inspection (FDA Form 482). You have the right to verify their credentials. You do not have the right to refuse the inspection if it is within normal business hours.

Scope definition. The investigator will explain the scope of the inspection — typically a review of your FSVP records for specific products and suppliers. They may focus on a subset of your imports rather than your entire portfolio. However, you should be prepared to produce records for any product-supplier combination.

Document request. The investigator will request your FSVP records. This is where your organization and retrieval system is tested. They will typically start with your product-supplier matrix and then drill into specific combinations. They will review hazard analyses, supplier evaluations, verification activities, and corrective actions.

Analysis and findings. The investigator will review your records for completeness and adequacy. They are looking for gaps — missing hazard categories, supplier evaluations without supporting evidence, verification activities that do not match the identified hazards, and records that are outdated or incomplete.

Close-out. At the end of the inspection, the investigator will discuss their findings. If violations are found, they will issue a Form 483 listing the observations. Serious or repeated violations may result in a warning letter, import alert listing, or further enforcement action.

How to Use This Checklist

Run through this checklist quarterly. For each item, verify that the documentation exists, is current, is complete, and is retrievable. If any item has a gap, prioritize closing it. The items most likely to generate citations are items 1 through 5 — the core FSVP documentation. Items 6 through 11 are supporting elements that demonstrate the maturity and defensibility of your program.

If you are preparing for your first inspection, or if you have received a Form 483 and need to demonstrate corrective action, work through this list with your customs broker or FSVP consultant. An experienced broker can identify documentation gaps that are not obvious from internal review and help you organize your records in a format that FDA investigators expect to see.

For a complete guide to building your FSVP program from the ground up, see our FSVP compliance guide. For questions about FDA import compliance beyond FSVP, contact our team.

FSVP Audit-Readiness Checklist: 11 Things FDA Will Expect You to Have