FSVP Compliance Guide: Step-by-Step for U.S. Food Importers

FSVP compliance is not optional. Under 21 CFR Part 1, Subpart L, every person who imports food into the United States must have an FSVP for each food and each foreign supplier. This is not a guideline or a best practice — it is a federal regulation enforced through inspections, warning letters, import alerts, and in severe cases, criminal prosecution.

This guide is a practical, step-by-step compliance checklist. If you are looking for a broader overview of what FSVP is and why it matters, see our FSVP overview for food importers. This guide assumes you already know you need to comply and need to know exactly how.

Who Must Comply with FSVP

The first question is whether you are an "importer" under FSVP. This definition is specific and may not match your understanding of the term.

Under FSVP, the "importer" is the U.S. owner or consignee of a food at the time of entry into the United States. This is the entity listed in the ACE entry as the importer of record or the consignee, unless there is a separate U.S. owner at the time of entry. If there is a U.S. owner, that entity is the FSVP importer regardless of who is listed as the importer of record on the customs entry.

This distinction matters. Your customs broker files entries as the importer of record for customs purposes, but FSVP obligations fall on whoever owns the food when it enters the country. If you are a U.S. distributor who purchases food from a foreign supplier before it arrives in the United States, you are the FSVP importer — even if a trading company is listed as the importer of record on the entry.

Exemptions from FSVP

Certain products and importers are exempt from FSVP requirements:

• Juice and seafood HACCP products. Foods subject to 21 CFR Part 120 (juice HACCP) or Part 123 (seafood HACCP) are exempt from FSVP because these products are already covered by their own supplier verification requirements.
• Very small importers. If your annual sales plus the market value of food you hold without sale average less than $1 million over the last three years (adjusted for inflation), you qualify for modified FSVP requirements — but you are not fully exempt. You still need to verify that your suppliers are producing food in compliance with applicable FDA requirements.
• Research and personal use. Food imported for research or personal consumption is exempt.
• Alcoholic beverages. Certain alcoholic beverages regulated by TTB rather than FDA are exempt from FSVP.
• Food for animals other than pets. Certain animal feed categories may have modified requirements depending on the supplier's compliance status.

If none of these exemptions apply to you, proceed to Step 1.

Step 1 — Identify Your FSVP Obligations

Before you can build your FSVP program, you need a complete inventory of what you are importing and from whom.

List every food product you import. This means every distinct product — not just every category. If you import three varieties of olive oil from the same supplier, you need to evaluate each one. Different products carry different hazards even from the same supplier.

Identify the foreign supplier for each product. Under FSVP, a "foreign supplier" is the establishment that manufactures, processes, packs, or holds the food before it is imported. This may be different from the entity you purchase from. If you buy from a trading company in Country A that sources from a manufacturer in Country B, the manufacturer in Country B is your foreign supplier for FSVP purposes.

Determine if any exemptions apply to specific products. Some products in your portfolio may be exempt while others are not. You need to document the exemption basis for each exempt product.

Understand the scale. A company importing 50 SKUs from 8 suppliers could need up to 400 individual FSVPs — one for each product-supplier combination. If you are importing from multiple countries with multiple suppliers, the documentation burden scales rapidly.

Step 2 — Conduct a Hazard Analysis

For each food you import, you must identify known or reasonably foreseeable hazards. This is not a formality — it is the foundation of your entire FSVP and the most common point of failure in FDA inspections.

Biological hazards. Pathogens such as Salmonella, Listeria monocytogenes, E. coli O157:H7, and other organisms that can contaminate food during growing, harvesting, processing, or transportation. Consider the specific risk profile of each food — fresh produce carries different biological risks than shelf-stable canned goods.

Chemical hazards. Pesticide residues, heavy metals (lead, cadmium, arsenic, mercury), food allergens, unapproved additives, drug residues in animal-derived products, and environmental contaminants. Consider the sourcing country's regulatory environment and enforcement history.

Physical hazards. Foreign materials such as glass, metal fragments, stones, bones, plastic, or wood that could cause injury. Consider the processing methods and equipment used by the supplier.

Radiological hazards. Radionuclide contamination, relevant for certain products from certain regions. Less common but must be evaluated.

For each identified hazard, evaluate whether the hazard requires a preventive control. Consider the severity of illness or injury, the probability of occurrence, and whether the supplier has controls in place to address it. Your hazard analysis must be specific to each food-supplier combination — a generic analysis that applies the same template to every product will not survive FDA scrutiny.

Step 3 — Evaluate Your Foreign Suppliers

Once you have identified the hazards, you must evaluate whether each foreign supplier is producing food that meets U.S. safety standards. This evaluation must consider several factors.

Supplier food safety records. Request and review your supplier's food safety plans, HACCP plans, or preventive controls plans. If the supplier is subject to FDA's Preventive Controls rule (21 CFR Part 117), they should have documentation of their food safety system.

Compliance with applicable FDA regulations. Determine which FDA regulations apply to the food and assess whether the supplier is complying with them. This includes current Good Manufacturing Practices (cGMPs), preventive controls, and any commodity-specific regulations.

Inspection results. Review any FDA inspection reports, third-party audit results, or regulatory inspection results from the supplier's home country. If the supplier has been inspected by FDA and received a Form 483 (list of observations), review the findings and the supplier's corrective actions.

Certifications. Consider whether the supplier holds relevant food safety certifications such as GFSI-benchmarked schemes (SQF, BRC, FSSC 22000, IFS). While certifications alone do not satisfy FSVP requirements, they provide evidence of the supplier's commitment to food safety.

Testing results. Review product testing data including microbiological testing, pesticide residue analysis, heavy metals testing, and allergen verification.

Document everything. Every piece of information you receive, review, and consider must be documented. Your evaluation is only as strong as your documentation. When FDA inspects, they will ask to see your supplier evaluation records — not your conclusions, but the actual records you reviewed.

Step 4 — Determine Verification Activities

Based on your hazard analysis and supplier evaluation, you must determine what verification activities are appropriate for each food-supplier combination. FDA provides several options.

Onsite audits. A qualified auditor visits the supplier's facility and assesses their food safety practices against applicable standards. Onsite audits are the most comprehensive verification activity and are required for certain high-risk situations — for example, when the hazard analysis identifies a hazard requiring a supply-chain-applied control and the supplier is controlling that hazard.

Sampling and testing. Collecting product samples and testing them for specific hazards identified in your hazard analysis. Testing can verify that the supplier's controls are effective, but it is typically used in combination with other verification activities rather than as a standalone measure.

Review of supplier food safety records. Reviewing the supplier's food safety plans, monitoring records, corrective action records, and verification records. This can be an appropriate verification activity for lower-risk foods where the supplier has a demonstrated track record.

Frequency. The frequency of verification activities depends on risk. High-risk foods require more frequent verification — potentially annual audits combined with periodic testing. Lower-risk foods with reliable suppliers may require less frequent activities, but you must document your rationale for the chosen frequency.

Step 5 — Conduct Corrective Actions When Needed

Your FSVP must include procedures for taking corrective actions when you determine that a supplier is not meeting your requirements or when a food safety issue is identified.

Temporary measures. When verification reveals problems — audit deficiencies, contamination in testing, or food safety incidents — consider suspending imports from the supplier, increasing testing frequency, or holding affected product for additional analysis.

Long-term fixes. Work with the supplier to address the root cause. Require specific corrective actions, verify those actions through follow-up audits or testing, and update your supplier evaluation accordingly.

Supplier replacement. If a supplier cannot or will not address food safety issues, you need an alternative. Your corrective action procedures should include criteria for when supplier replacement is warranted.

Document corrective actions. Every corrective action must be documented — the issue identified, the action taken, the timeline, and verification that the fix was effective.

Step 6 — Maintain Records

FSVP record-keeping requirements are specific and non-negotiable.

Retention period. All FSVP records must be retained for at least 2 years after they were created or obtained. Records relating to your processes and procedures must be retained for at least 2 years after their use is discontinued.

Availability. Records must be made available to FDA within 24 hours of a request during an inspection. If your records are stored offsite or electronically, you must be able to retrieve and present them within this timeframe. FDA will not wait for you to locate files.

Format. Records can be electronic or paper. FDA does not mandate a specific format, but records must be organized, legible, and retrievable. A disorganized system that cannot produce documents when requested will be cited as a violation.

What to keep on file. Your FSVP records should include your hazard analyses, supplier evaluations, verification activity results (audit reports, test results, records reviewed), corrective action documentation, and your overall FSVP procedures. You also need to document your rationale for the verification activities and frequencies you chose.

Common FSVP Inspection Failures

FDA has published inspection data that reveals clear patterns in FSVP non-compliance. Understanding the most common failures helps you avoid them.

No FSVP at all. The most common finding is the most basic — the importer has no FSVP in place. Many importers are unaware of the requirement, assume their customs broker handles it, or believe it does not apply to them. If you are importing food, it almost certainly does.

Inadequate hazard analysis. The importer has some documentation but the hazard analysis is generic, incomplete, or copied from a template without product-specific evaluation. FDA expects a hazard analysis that is specific to each food and informed by actual knowledge of the product, the supplier, and the hazards associated with both.

No supplier evaluation. The importer identified hazards but never evaluated whether the supplier is controlling them. This is the step where many companies fail — they do not request or review supplier food safety records, audit reports, or testing data.

Missing verification activities. The importer evaluated the supplier initially but has not conducted ongoing verification. FSVP is not a one-time exercise. You must verify supplier performance on an ongoing basis at a frequency appropriate to the risk.

Poor record keeping. The importer may have conducted the required activities but cannot produce documentation to prove it. If you cannot show it to FDA, you did not do it. Records must be organized, complete, and retrievable within 24 hours.

How Greenwich Mercantile Helps with FSVP Compliance

As a customs broker specializing in food and beverage imports, Greenwich Mercantile works with importers to build and maintain compliant FSVP programs.

Obligation identification. We review your product portfolio and supplier relationships to identify exactly which FSVP obligations apply to you. We determine which products are exempt, which require full FSVPs, and which fall under modified requirements.

Program structure. We help you structure your FSVP program so that it is comprehensive, defensible, and manageable. For companies importing dozens of SKUs from multiple countries, this means creating a system that scales without becoming unmanageable.

Supplier verification support. We advise on appropriate verification activities for each food-supplier combination based on your hazard analysis. We help you determine the right mix of audits, testing, and records review based on actual risk rather than generic templates.

Inspection preparation. We prepare you for FDA inspection by reviewing your FSVP documentation for completeness, identifying gaps before FDA finds them, and ensuring your records are organized and retrievable. Companies we work with enter FDA inspections prepared rather than surprised.

Your FSVP is your responsibility as the U.S. importer. But you do not have to build it alone. Evaluate whether your current broker can support your FSVP obligations, or learn how multi-country importers manage compliance at scale.