FDA 21 CFR 1 Subpart L • Qualified Individual (QI) • DUNS UFI • SAHCODHA

FDA FSVP Food Importer Compliance Platform

Automate Foreign Supplier Verification Programs (FSVP 21 CFR 1.500) for US food importers, customs brokers, and ingredient distributors. Manage Qualified Individual (QI) sign-offs, foreign hazard analyses, annual SAHCODHA on-site audits, FDA Import Alert screening, and ACE customs entry filings.

100% Gated

DUNS / UFI Customs Match

< 24 Hours

FDA 483 Record Submission

2 Years

Mandatory Record Archive

Request FSVP Importer Demo Free FSVP Audit Checklist

QI Hazard Analysis EngineFDA Import Alert Red List SyncCBP ACE Automated Transmit

Foreign Supplier Verification Hub

FDA 21 CFR 1 Subpart L Customs Gate

Customs Cleared

Foreign Supplier: Agro-Exportadora del Sur (Chile)

FDA Reg #19284729102 • DUNS 82-491-0921

Approved

Food Hazard: Frozen Raspberries (Norovirus/Hepatitis A)

Qualified Individual (QI) Review • 21 CFR 1.504

QI Signed

PCQI Cert #49120

SAHCODHA Verification: Annual On-Site Audit

BRCGS Food Safety Issue 9 Grade AA • CAPA Closed

Audit Valid

Expires Oct 2027

FDA Import Alert Automated Screening

Import Alert 99-19 & 99-33 Red List Check

Clear

Zero Red List Entries

Automated ACE Transmission Ready100% Port Released

Statutory Food Import Directives

Global Regulatory Framework for FDA FSVP Food Importers

Under the Food Safety Modernization Act, US importers share direct legal liability for food safety, requiring formal hazard analyses, documented foreign evaluations, and digital customs reporting.

21 CFR 1.504 Hazard Analysis

Mandatory identification and evaluation of known or reasonably foreseeable biological, chemical (including allergens, mycotoxins, pesticide residues), physical, and economically motivated adulteration (EMA) hazards.

QI Signed & DatedEMA Hazard Screening

21 CFR 1.506 Verification

Execution of approved verification activities: annual on-site audits (mandatory for SAHCODHA hazards), periodic sampling and lot testing, or review of foreign food safety records. Full audit reports must be reviewed by a QI.

Annual On-Site AuditGFSI Full Report Review

21 CFR 1.509 Customs UFI

Mandates electronic declaration of the FSVP Importer name, email, and Unique Facility Identifier (UFI / DUNS number) in CBP ACE for every imported food line. Incorrect UFIs trigger immediate port entry holds.

DUNS Number MatchingACE Transmission Gated

21 CFR 1.510 Records

Importers must maintain all FSVP dossiers for at least 2 years from creation and make records available to FDA investigators within 24 hours of an official oral or written request during FDA Form 483 audits.

2-Year Cloud Archive24-Hour FDA Submission

Quantitative Risk Modeling & Border Sampling

Mathematical Engineering: Foreign Supplier Risk Index & Border Sampling Plans

FSVP compliance requires establishing an objective, algorithmic Foreign Supplier Risk Index (FSRI) to determine whether annual on-site audits are mandatory, alongside statistical sampling plans for border verification.

Composite Foreign Supplier Risk Index (FSRI): Integrates food hazard inherent risk (H_food), overseas facility cGMP maturity (P_facility), regulatory compliance history (C_regulatory), and audit validation scores.

SAHCODHA Verification Gating:If FSRI ≥ 60 or food contains an inherent SAHCODHA biological hazard, 21 CFR 1.506 mandates an annual on-site audit before customs release.

ANSI Z1.4 Lot Acceptance Probability Model: Calculates consumer risk beta and acceptance probability P_a for border lot challenge testing across foreign cargo arrivals.

FSVP RISK & VERIFICATION ALGORITHM

FDA 21 CFR 1.505 / ANSI Standard

Composite Foreign Supplier Risk Index (FSRI)

\text{FSRI} = 0.35 \cdot H_{\text{food}} + 0.25 \cdot P_{\text{facility}} + 0.25 \cdot C_{\text{reg}} + 0.15 \cdot V_{\text{audit}}

Scale [1, 100]. If FSRI ≥ 60 or SAHCODHA = True, Annual On-Site Audit is Mandatory.

ANSI/ASQ Lot Acceptance Probability Under Sampling

P_a = \sum_{k=0}^{c} \frac{e^{-n \cdot p} \cdot (n \cdot p)^k}{k!} \ge 0.95

n = sample size, c = acceptance number (typically 0 for pathogens), p = defect rate.

Re-Evaluation Cycle

Every 3 Years or Upon Performance Drift

24-Hour FDA Submission

100% Export Ready for FDA 483 Audits

Evidlane automates foreign supplier risk stratification, ensuring your Qualified Individuals maintain bulletproof verification records before customs release.

FSVP Verification Protocols by Food Hazard Classification

Acceptance criteria and mandatory verification actions under 21 CFR 1.506

FDA 21 CFR 1 Subpart L Standards

Import Category	Primary Inherent Hazard	Hazard Classification	Mandatory FSVP Activity	Evidlane Gating Action
Imported Raw Spices	Salmonella, heavy metals, filth	SAHCODHA Hazard	Annual on-site audit of irradiation/steam plant	Block ACE Entry if Expired
Soft / Raw Milk Cheeses	Listeria monocytogenes, E. coli STEC	SAHCODHA Hazard	Annual on-site audit • Lot micro test review	Audit Dossier Gated
Tree Nuts & Peanuts	Aflatoxins (B1/B2/G1/G2), Salmonella	Chemical & Biological Hazard	Annual on-site audit • HPLC Aflatoxin < 20 ppb CoA	HPLC Lab Test Gated
Canned Low-Acid Food (LACF)	Clostridium botulinum neurotoxin	21 CFR 113 Process Filing	SID/FCE filing verification • Exempt from micro audit	FCE / SID Verified
Frozen Berries & Fruit	Norovirus, Hepatitis A, pesticides	SAHCODHA Hazard	Annual on-site audit of agricultural packinghouse	Water Microbial Gate
Refined Oils & Sugars	Residual solvents, heavy metals	Low Biological Risk	Periodic lot CoA review • 3-Year supplier audit	CoA Parameter Verified
Raw Agricultural Grains	Hazards controlled downstream (Milling/Baking)	21 CFR 1.507 Customer Assurance	Annual signed customer written assurance statement	1.507 Assurance Gated
Dietary Supplements (Finished)	21 CFR 111 cGMP finished compliance	21 CFR 1.511 Modified FSVP	Verification of Part 111 finished specs • No audit req	Part 111 Cert Verified

Auditing Dark Corners & Catastrophic Failures

Top 10 FDA FSVP Audit Pitfalls & Warning Letter Triggers

FDA actively inspects US food importers, issuing Form 483 citations, Warning Letters, and Import Alert border seizures for administrative gaps. Review 10 authentic failure case studies.

Pitfall 01: Incorrect UFI / DUNS in ACE21 CFR 1.509 • Port Detention

Customs Broker Declaring Foreign Freight Forwarder DUNS Number

Failure Case: An importer had 12 ocean containers of canned artichokes detained at the Port of Long Beach when CBP rejected the entry because the customs broker transmitted the freight forwarder DUNS number rather than the actual US Importer DUNS.

Root Cause: Importer lacked an automated integration between their food safety compliance system and customs brokerage dispatch files.

Evidlane Prevention: Generates automated ACE entry declarations with authenticated, validated DUNS/UFI numbers mapped to specific foreign manufacturing facilities.

Pitfall 02: Qualified Individual (QI) Signature Absent21 CFR 1.503 • FDA Warning Letter

Using Foreign Supplier Hazard Analysis Without US QI Review & Sign-Off

Failure Case: An olive oil importer received an FDA Warning Letter because their FSVP file merely contained the Spanish producer HACCP plan, with zero evidence that a Qualified Individual reviewed, dated, and signed the assessment.

Root Cause: Importer believed foreign supplier documents were self-validating, ignoring the mandatory QI evaluation under 21 CFR 1.503.

Evidlane Prevention: Requires electronic QI signature sign-off, date stamping, and PCQI certificate linkage on every foreign hazard assessment.

Pitfall 03: Relying on Audit Certificate Alone21 CFR 1.506(e) • Form 483 Citation

Collecting BRCGS Certificate Without Reviewing Full Audit Report & CAPAs

Failure Case: An FDA investigator cited a dried mango importer on Form 483 when an inspection revealed the importer only held an unreviewed GFSI certificate; the underlying audit report had 4 Major non-conformances with unverified corrective actions.

Root Cause: Importer treated GFSI certification as a rubber stamp rather than performing substantive technical review required under 1.506(e).

Evidlane Prevention: Mandates ingestion and QI review of full audit reports, auditor qualifications, and verified closure evidence for all corrective actions.

Pitfall 04: Overlooking Economically Motivated Adulteration (EMA)21 CFR 1.504(b)(2)(iv) • Adulteration

Failure to Assess Known Economic Adulterants in Imported Paprika & Chili

Failure Case: A spice importer faced major regulatory enforcement when FDA sampling revealed carcinogenic Sudan I red dye in imported ground chili; the importer FSVP hazard analysis had completely omitted EMA hazards.

Root Cause: Generic hazard analysis templates only evaluated microbiological pathogens, ignoring statutory requirements to assess economically motivated hazards.

Evidlane Prevention: Incorporates automated commodity-specific EMA risk templates (Sudan dye, lead chromate in turmeric, beet syrup in honey, ethylene glycol in wine).

Pitfall 05: Unmonitored FDA Import Alert Red ListImport Alert 99-19 • DWPE Seizure

Shipping Cargo from a Foreign Facility Placed on Detention Without Physical Exam

Failure Case: An importer shipped $220,000 of frozen seafood from an overseas packing plant that FDA had placed on Import Alert 16-129 (Salmonella) 30 days prior, resulting in immediate border refusal and destruction orders.

Root Cause: Importer conducted annual supplier reviews only, failing to monitor continuous real-time FDA regulatory actions.

Evidlane Prevention: Continuously syncs with FDA Import Alert databases, automatically locking supplier approval if an entity is added to an active Red List.

Pitfall 06: Skipping SAHCODHA Annual On-Site Audit21 CFR 1.506(d)(1)(i) • Warning Letter

Importing Unpasteurized Cheese Relying Solely on Supplier Test Reports

Failure Case: A specialty dairy importer received an FDA Warning Letter for importing raw milk cheese (SAHCODHA risk for Listeria) using only supplier CoAs without conducting mandatory annual on-site audits.

Root Cause: Importer misread the regulation, believing lot-by-lot testing was an acceptable alternative to an on-site audit for a SAHCODHA hazard.

Evidlane Prevention: Enforces mandatory on-site audit gating for SAHCODHA foods, blocking approval unless a qualified auditor report is active.

Pitfall 07: Exceeding 3-Year Re-Evaluation Cycle21 CFR 1.505(c) • Form 483 Non-Conformance

Operating on 4-Year-Old Supplier Evaluation Dossiers Without Re-Assessment

Failure Case: During an FDA FSVP inspection, an agency investigator cited an importer for holding 20 foreign supplier files evaluated in 2020 that had never undergone mandatory 3-year re-evaluation.

Root Cause: Absence of automated expiration alerts for triennial foreign supplier performance re-evaluations.

Evidlane Prevention: Triggers automated 36-month re-evaluation workflows with 90, 60, and 30-day escalation alerts before regulatory deadlines expire.

Pitfall 08: Missing US Agent Written Consent21 CFR 1.500 • Invalid Importer Designation

Foreign Supplier Naming US Broker as FSVP Importer Without Signed Agreement

Failure Case: When FDA inspected a US customs broker listed on entry documents as the FSVP Importer, the broker revealed they had never signed a written consent agreement and held zero food safety records.

Root Cause: Foreign shipper declared the broker as the FSVP importer in ACE without formal legal designation under 21 CFR 1.500.

Evidlane Prevention: Generates and tracks legally binding US Agent Written Consent Agreements, requiring mutual digital signatures before customs entry.

Pitfall 09: Untranslated Foreign Records21 CFR 1.510(b) • English Translation Gap

Presenting Chinese and Spanish HACCP Records During FDA Inspection

Failure Case: An importer was issued a Form 483 when an FDA investigator requested sanitation and cook logs for an Asian noodle supplier, and the importer could only produce raw, untranslated Mandarin documents.

Root Cause: Importer stored foreign records without certified English translations required upon FDA request.

Evidlane Prevention: Embeds automated AI translation and QI bilingual verification workflows, storing dual-language dossiers ready for instant inspection.

Pitfall 10: Missing Customer 1.507 Assurances21 CFR 1.507 • Downstream Control Failure

Importing Raw Sesame Seeds Without Annual Customer Roasting Assurances

Failure Case: An importer brought in raw unpasteurized sesame seeds without conducting foreign hazard controls, but failed to collect annual written assurances from the commercial tahini manufacturer verifying downstream roasting.

Root Cause: Importer relied on purchase order terms rather than obtaining specific statutory 21 CFR 1.507 annual written customer assurances.

Evidlane Prevention: Enforces automated annual customer assurance renewal workflows and locks sales order fulfillment if customer assurances lapse.

Auditable Standard Operating Procedure

5-Stage SOP: End-to-End FSVP Importer Verification Workflow

Standardize how your import compliance team qualifies overseas facilities, conducts QI hazard analyses, verifies annual on-site audits, and maintains 24-hour FDA inspection readiness.

Phase 1: Foreign Supplier Profiling & DUNS/UFI Identity Verification

Supplier Setup

Collect foreign manufacturing facility legal name, physical address, FDA food facility registration number, and 9-digit Dun & Bradstreet DUNS number (UFI). If acting as an agent for a foreign entity without US ownership, execute signed US Agent Written Consent Agreements under 21 CFR 1.500. Screen entity against active FDA Import Alerts (Red Lists).

DUNS / UFI identity match FDA Import Alert Red List check US Agent written consent agreement

Phase 2: Qualified Individual (QI) Hazard Analysis & EMA Screening

Hazard Evaluation

A Qualified Individual conducts a structured food hazard analysis under 21 CFR 1.504, evaluating biological pathogens, mycotoxins, pesticide residues, undeclared allergens, and economically motivated adulteration (EMA). Determine whether the hazard presents a SAHCODHA risk requiring mandatory annual on-site audit verification.

QI electronic signature & date SAHCODHA determination logic Economic adulteration matrix

Phase 3: Foreign Supplier Verification Execution & Full Audit Review

Verification Execution

Execute the determined verification activity under 21 CFR 1.506. For SAHCODHA foods, ingest and review the complete third-party on-site audit report (GFSI BRCGS/SQF or accredited food safety audit), ensuring the QI verifies auditor competency, facility scope, FDA cGMP alignment, and closure of all non-conformances.

Full audit report QI review Corrective action verification Lot test sampling validation

Phase 4: Customs Entry Integration & Automated ACE Gate Pass

Customs Clearance

Prior to vessel arrival, Evidlane validates that all FSVP requirements for the specific foreign supplier and food SKU are 100% complete and unexpired. Transmit authorized FSVP Importer DUNS numbers directly to customs brokers for CBP ACE declaration, ensuring seamless green-lane customs clearance.

Automated ACE broker data push Pre-arrival compliance gate Demurrage risk elimination

Phase 5: 2-Year Record Archive & 24-Hour FDA Inspection Readiness

Audit Readiness

Store all FSVP dossiers in an immutable cloud repository for at least 2 years under 21 CFR 1.510. When FDA issues an inspection notice or Form 483 request, generate an authenticated, electronic PDF compliance dossier containing all QI reviews, audits, and translations in under 60 seconds.

1-Click FDA audit binder export Triennial re-evaluation tracking 2-Year immutable cloud archive

Architecture Comparison Matrix

Evidlane vs. Generic Trade Software vs. Manual Paper Folders

Generic customs software focuses purely on tariff classification and customs entry numbers, while paper binders fail during rigorous FDA FSVP audits.

FSVP Compliance Capability	Evidlane Platform	Generic Trade Software (Kewill / Descartes)	Manual Spreadsheets & PDF Folders
Qualified Individual (QI) Signature & Date Logging	Enforces digital signature & PCQI credentials on all analyses	Unsupported; no QI food safety qualification engine	Missing QI signatures; major cause of FDA 483 citations
FDA Import Alert Red List Real-Time Sync	Automated daily sync; blocks shipments if supplier on DWPE	Manual search required on FDA web pages	Unmonitored; cargo detained after arrival in US port
SAHCODHA Mandatory On-Site Audit Gating	Automates 21 CFR 1.506 audit rules & blocks expired audits	No hazard classification or audit expiration logic	Audit reports expire unnoticed; FDA Warning Letters
DUNS / UFI Customs Broker Integration	Matches UFI with ACE entries to prevent port delays	Static text box; no automated verification against dossier	Brokers guess DUNS numbers; CBP entry rejections
Triennial Foreign Supplier Re-Evaluation (1.505)	Automated 3-year performance review clock with alerts	Generic calendar alert only; no compliance linkage	Dossiers untouched for 5+ years; non-conformance citations
24-Hour FDA Form 483 Audit Binder Generation	1-Click pre-indexed PDF compliance packet export in < 60s	Scattered across ERP, shared drives, and paper files	Days of frantic search; misses mandatory 24-hour window

Quality Engineering Interactive Toolkit

Explore Free FSVP Food Importer Compliance Tools

Utilize our free engineering calculators and food safety compliance frameworks to benchmark your overseas food suppliers and import dossiers.

FSVP Importer Readiness Checklist

Evaluate your foreign supplier verification dossiers against FDA 21 CFR 1 Subpart L, covering QI credentials, hazard analyses, and audit binders.

Launch Free Audit Tool

Foreign Supplier Risk Calculator (FSRI)

Calculate composite risk priority numbers for overseas food facilities based on food category, country risk index, and FDA compliance history.

Calculate FSRI Score

FDA Inspection Readiness Quiz

Test your company's ability to produce compliant FSVP records within the statutory 24-hour window when an FDA investigator issues an inspection notice.

Start Inspection Quiz

Expert Technical Knowledge Base

Frequently Asked Questions: FDA FSVP Compliance for Importers

Detailed regulatory and technical guidance covering Qualified Individual qualifications, SAHCODHA on-site audits, DUNS number filings, and FDA Form 483 inspections.

Q1.Who is legally recognized as the "FSVP Importer" under FDA regulations?

Under 21 CFR 1.500, the FSVP Importer is defined as the US owner or consignee of the food at the time of entry into the United States (the person or entity in the US that owns the food, has purchased it, or has agreed in writing to purchase it). If there is no US owner or consignee at entry, the foreign supplier must designate a US agent or representative in a signed written consent agreement to act as the legal FSVP Importer.

Q2.What are the statutory requirements for a Qualified Individual (QI) under 21 CFR 1.503?

A Qualified Individual (QI) must have the education, training, or experience (or a combination thereof) necessary to perform their assigned verification duties (such as developing hazard analyses, evaluating foreign suppliers, or reviewing audit records) and must be able to read and understand the language of any records reviewed. Evidlane stores QI credentials, PCQI certificates, and digital signature logs required under 21 CFR 1.503.

Q3.When is an annual on-site audit mandatory under 21 CFR 1.506(d)?

Under 21 CFR 1.506(d)(1)(i), if a foreign food presents a hazard that is controlled by the foreign supplier and there is a reasonable probability that exposure will result in Serious Adverse Health Consequences or Death to Humans or Animals (SAHCODHA hazard)—such as Salmonella in raw spices, Listeria in soft cheeses, or Clostridium botulinum in low-acid foods—the default verification activity is an annual on-site audit by a qualified auditor before importing the food and at least annually thereafter.

Q4.How does Evidlane integrate Unique Facility Identifiers (UFI / DUNS) with CBP ACE customs entries?

Under 21 CFR 1.509, customs brokers must transmit the FSVP Importer name, email address, and Unique Facility Identifier (UFI, universally recognized as the 9-digit Dun & Bradstreet DUNS number) for each line of food declared in the Automated Commercial Environment (ACE). Evidlane cross-matches foreign manufacturer FDA registration numbers and DUNS codes, preventing cargo detention or customs rejection at the port of entry.

Q5.How does the platform screen for FDA Import Alerts (Red Lists / DWPE)?

The platform continuously monitors FDA Import Alert databases (such as Import Alert 99-19 for Salmonella, 99-33 for foreign food safety plans, and 45-02 for unapproved pesticides). If an overseas supplier facility or country-commodity combination is placed on Detention Without Physical Examination (DWPE), Evidlane immediately locks the supplier in the system and alerts procurement before freight booking.

Q6.Can an importer rely on an overseas supplier’s GFSI third-party audit report (BRCGS / SQF / FSSC 22000)?

Yes, but simply possessing a certificate is insufficient. Under 21 CFR 1.506(e), a Qualified Individual must review the full audit report (not just the certificate), confirm that the scope covers the specific food imported, verify that the audit evaluated FDA food safety regulations (cGMP and Preventive Controls), and confirm that all cited non-conformances have documented corrective actions.

Q7.What must be included in a compliant foreign hazard analysis under 21 CFR 1.504?

The hazard analysis must evaluate biological hazards (pathogens, parasites), chemical hazards (pesticides, mycotoxins, heavy metals, undeclared allergens, decomposition), and physical hazards (glass, metal, stones). It must also assess hazards introduced intentionally for economic gain (EMA, such as Sudan dye in spices or melamine in dairy), the foreign facility’s equipment, raw material origins, and shipping methods.

Q8.How does Evidlane handle customer disclosures under 21 CFR 1.507 when hazards are controlled downstream?

If an importer brings in raw agricultural commodities or ingredients where biological hazards will be controlled downstream by a US customer (e.g. raw cocoa beans roasted by a chocolate maker), 21 CFR 1.507 requires the importer to provide a written disclosure statement stating the food is "not processed to control hazards" and obtain an annual signed customer written assurance confirming downstream preventive controls.

Q9.What are the mandatory record retention timelines for FSVP under 21 CFR 1.510?

All FSVP records—including hazard analyses, foreign supplier performance evaluations, verification activity reports, and written agreements—must be retained for at least 2 years after the records were created or obtained. Furthermore, records must be made available to FDA investigators for inspection within 24 hours of an official oral or written request.

Q10.What are the modified FSVP requirements for very small importers (VSIs) under 21 CFR 1.512?

Importers with average annual food sales under $1,000,000 (or $2,500,000 for animal food) qualify as Very Small Importers (VSIs). Under 21 CFR 1.512, VSIs are exempt from full hazard analyses and annual audits, but must register as a VSI with FDA every 2 years, obtain written annual assurances from foreign suppliers confirming compliance with FDA standards, and maintain sales records proving VSI eligibility.

Automate FDA FSVP Compliance Today

Eliminate Customs Holds & Pass FDA FSVP Inspections with Zero Form 483s

Equip your import compliance team with Evidlane to automate Qualified Individual reviews, foreign hazard analyses, DUNS/UFI customs integration, and 24-hour inspection dossier exports.

Schedule a 20-Minute Technical Demo View Platform Pricing

No Long-Term ContractsFull FDA 21 CFR 1 Subpart L SupportSOC 2 Type II Certified Cloud