FREE COMPLIANCE GENERATOR

Approved Supplier List (ASL) Format & Template

Standardized format aligned with SQF Code Edition 9 (2.3.4) and BRCGS Issue 9 (3.5.1). Edit directly in your browser and export as CSV.

Supplier Register Grid (3 records)

Supplier Legal Name	Site / Facility	Material / Risk Scope	Approval Status	Next Expiry / Review	Action

Need to automate reminders for these expiry dates?

Evidlane imports this exact CSV format and automatically dispatches single-use upload links to your suppliers 30, 14, and 7 days prior to document expiration.

Explore Evidlane Auto-Reminders →

ASL DATA ARCHITECTURE

The 12 Mandatory Fields of a GFSI-Compliant Approved Supplier Register

Third-party auditors scrutinize supplier registers for completeness. Omitting critical facility or risk metadata triggers non-conformances. Here are the 12 non-negotiable fields:

Field Name	Auditor Technical Requirement & Data Format	Regulatory Clause Reference
1. Supplier Legal Entity	Full legal commercial corporate entity name as registered on contracts and commercial invoices.	SQF 2.3.4.1 / BRCGS 3.5.1.1
2. Physical Facility Location	Exact manufacturing plant address and FDA Food Facility Registration Number (FFRN/FEI).	FDA 21 CFR § 117.410 / FSVP
3. Material / SKU Scope	Specific ingredient name, brand name, and internal inventory item SKU number covered by approval.	SQF 2.3.4.1
4. Assigned Hazard Risk Tier	Classification: Tier 1 (High biological/chemical hazard), Tier 2 (Medium), or Tier 3 (Low/Packaging).	BRCGS 3.5.1.2 Risk Assessment
5. Audit Standard & Scope	Certification scheme: SQF Edition 9, BRCGS Issue 9, FSSC 22000, IFS, or second-party audit.	GFSI Benchmark Standards
6. Audit Certificate Expiration	Precise calendar expiration date of the supplier's current third-party food safety certificate.	SQF 2.3.4.2
7. Audit Score & Grade	Documented percentage score (e.g. SQF 94% Excellent) or grade (e.g. BRCGS Grade AA) with CAPA closure.	BRCGS 3.5.1.1
8. Allergen Disclosure Status	Verified allergen matrix indicating presence of top 9 major allergens and cross-contact potential.	FDA 21 CFR § 117.135(c)(2)
9. Letter of Guarantee Date	Date of signed continuing letter of guarantee confirming materials are not adulterated under FD&C Act.	Section 303(c)(2) FD&C Act
10. PCQI Approval Signature	Qualified Individual (PCQI) name, electronic timestamp, and formal review disposition.	FDA 21 CFR § 117.475(c)
11. Current Approval Status	Operational status: APPROVED, CONDITIONAL, PENDING, or BLOCKED/SUSPENDED.	SQF 2.3.4.1 / BRCGS 3.5.1.3
12. Annual Review Milestone	Next mandatory annual evaluation date (maximum 365 days from prior qualification sign-off).	SQF 2.3.4.2 / BRCGS 3.5.1.2

STANDARDS ALIGNMENT

Regulatory ASL Mandates: SQF, BRCGS & FDA FSMA

How global food safety standards define mandatory approved supplier register management:

Standard	Specific Clause	Approved Supplier List Requirement	Review Cadence
SQF Edition 9	Clause 2.3.4.1 & 2.3.4.2	Register of approved suppliers must be maintained; emergency purchases must follow documented exception procedures.	At least annually (365 days)
BRCGS Issue 9	Section 3.5.1.1 – 3.5.1.4	Documented procedure for ongoing supplier approval, risk assessment, monitoring, and temporary emergency exceptions.	At least annually or on changes
FDA FSMA 21 CFR 117	Subpart G (§ 117.410)	Receiving facility must approve suppliers before receiving raw materials; written list and verification records required.	Periodic annual audits
FSSC 22000	ISO 22000 Clause 7.1.6	Retain documented information of supplier evaluation, continuous monitoring, and annual re-evaluation.	Documented re-evaluation

APPROVAL WORKFLOW SOP

5-Phase Standard Operating Procedure: Adding Suppliers to the ASL

Follow this standard operating procedure to safely approve and maintain ingredient vendors on your active register:

Procurement Request & Risk Scope

Procurement initiates vendor request. QA assigns risk tier (Tier 1 High Biological/Chemical, Tier 2 Medium, Tier 3 Low) and identifies mandatory documents required.

Document Packet Collection

Supplier receives intake portal link. Vendor uploads GFSI certificate, third-party audit report, allergen disclosure, continuing guarantee, and 24/7 crisis contact details.

Technical QA & PCQI Review

Qualified individual checks audit scope against actual plant products, verifies certificate validity, reviews CAPA closures, and validates allergen cross-contact risks.

Electronic ASL Publishing

PCQI signs off electronically. Vendor is marked "APPROVED" on the active ASL. Receiving docks are notified, and purchasing is authorized to place commercial POs.

Continuous Annual Re-Evaluation

Automated countdown monitors 365-day review milestone. 60, 30, and 15 days prior to expiration, vendors are alerted to submit renewed certificates, preventing ASL lapses.

AUDIT NON-CONFORMANCES

8 ASL Mistakes That Cause Major GFSI Audit Findings

During SQF and BRCGS desk reviews, auditors specifically look for these 8 recurrent supplier list deficiencies:

Audit Trap / Deficiency	Typical Auditor Finding Citation	Evidlane Built-In Prevention
1. Expired Supplier Certificates	Auditor cross-references 10 vendors on ASL; finds 2 operating on GFSI certificates that expired 3 months ago.	Multi-tiered automated alerts at 60, 30, and 15 days; status auto-downgrades to Conditional if expired.
2. Missing Annual Reviews	Active vendor has supplied ingredients for 3 years without documented annual performance review (SQF 2.3.4.2).	Hard 365-day annual countdown tracker with QA dashboard alerts before the review anniversary passes.
3. Broker vs Plant Confusion	ASL lists commercial distributor office; audit certificate on file does not cover the physical manufacturing site.	Dual-entity modeling enforces separate capture of Broker entity and Physical Processing Plant location.
4. Uncontrolled Excel Copies	Purchasing and QA are using different desktop Excel versions of the ASL with conflicting approval statuses.	Single source of truth cloud register with role-based permissions and SHA-256 revision history.
5. Blanket Vendor Approvals	Supplier was qualified for packaging corrugated boxes; plant purchased primary plastic films without re-evaluation.	Approvals are scoped to specific material SKUs and risk categories, preventing cross-category creep.
6. Undocumented Emergency Buys	Plant ran out of citric acid; emergency shipment unloaded from unapproved broker with zero QA deviation memo.	Emergency Deviation module captures risk justification, sampling rationale, and single-batch release logs.
7. Missing PCQI Approval Sign-Off	ASL status reads "Approved", but no documented signature or date from a Qualified Individual exists.	Enforces electronic signature capture with PCQI credentials and immutable cryptographic event logs.
8. Unsynchronized Receiving Docks	Dock workers unload a shipment from a suspended vendor because they were never notified of the ASL status change.	Real-time ASL lookups and dock hold notifications alert warehouse staff before truck unloading begins.

GOVERNANCE & LIFECYCLE

Supplier Re-evaluation, Suspension & Delisting Protocols

An Approved Supplier List is a living regulatory instrument. SQF 2.4.4.2 and BRCGS 3.5.1.3 require documented procedures specifying exactly when vendor status must be downgraded, suspended, or permanently delisted.

1. Annual Re-evaluation Triggers

High-risk ingredient suppliers (pathogen control, undeclared allergen risks) must be formally re-evaluated every 12 months. Low-risk packaging suppliers may follow a 24-to-36-month frequency provided no non-conformances occurred.

Review incoming COA analytical variance and out-of-spec incidents
Verify renewed GFSI audit report, unannounced audit status, and corrective actions
Audit FDA Import Alerts, Warning Letters, and FSMA recall databases

2. Immediate Suspension Criteria

A supplier’s ASL status must immediately flip to "SUSPENDED" or "ON HOLD" upon detecting any critical failure that compromises food safety:

GFSI certification revocation or suspension by their certification body
FDA Class I or Class II recall involving materials supplied to your facility
3 consecutive non-conformances in receiving verification (e.g. repeated COA OOS or pest contamination)

3. Delisting & Re-Qualification Rules

Delisted suppliers cannot be reinstated without passing a full re-qualification audit protocol matching or exceeding initial onboarding rigors:

Formal Root Cause Analysis (5-Why or Fishbone) submitted and verified
On-site or accredited 3rd-party audit verifying CAPA implementation
Formal QA Director written approval with documentation archived for 3 years

ASL MANAGEMENT FAQ

Frequently Asked Questions About Approved Supplier Lists

What is an Approved Supplier List (ASL) in food manufacturing?

An Approved Supplier List (ASL) is a formally controlled register of qualified raw material, ingredient, packaging, and co-manufacturing vendors that have satisfied mandatory food safety, regulatory, and quality requirements. It prevents unverified suppliers from delivering ingredients into processing facilities.

What mandatory fields are required on a GFSI-compliant ASL?

Under SQF Edition 9 (2.3.4) and BRCGS Issue 9 (3.5.1), an ASL must include: Supplier Legal Entity, Physical Manufacturing Site Address, Material/SKU Scope, Assigned Risk Tier, Audit Standard (e.g. SQF/BRCGS), Certificate Expiration Date, Verification Method, PCQI Approval Sign-off Date, and Documented Annual Re-evaluation Milestone.

How often must an Approved Supplier List be formally reviewed?

Both SQF Clause 2.3.4.2 and BRCGS Clause 3.5.1.2 require that approved suppliers be reviewed at least annually (every 12 months) based on performance history, complaint tracking, audit renewal, and Certificate of Analysis conformance.

What is the difference between an ASL managed in Excel versus Evidlane software?

Excel spreadsheets lack version lock, audit logging, and automated expiry alerts, leaving plants vulnerable to accidental data deletion and out-of-date certificates during audits. Evidlane automates the ASL with continuous background verification, 30/14/7-day renewal alerts, and SHA-256 tamper-evident logs.

How does an ASL handle temporary emergency supplier approvals?

When emergency purchases occur due to supply disruption, standards permit emergency supplier approval (BRCGS 3.5.1.3). The ASL must reflect "Conditional" status, accompanied by a documented hazard evaluation, batch-specific CoA review, and managerial sign-off before raw material release.

Can we distinguish between a commercial broker and the physical processing facility on the ASL?

Yes. Auditors require that the physical processing facility address and FDA Food Facility Registration Number (FFRN/FEI) be documented, preventing commercial distributors from masking uncertified third-party origins.

What status codes should be used on an Approved Supplier Register?

Standard status codes include: APPROVED (fully qualified, active), CONDITIONAL (temporary release pending documentation or emergency purchase), PENDING (in onboarding review), and BLOCKED / SUSPENDED (failed audit, unrenewed certificates, or active recall hold).

Does FDA FSMA 21 CFR 117.410 require a written Approved Supplier List?

Yes. 21 CFR § 117.410(a)(1) mandates that receiving facilities approve suppliers before receiving raw materials and maintain written documentation of approved suppliers and verification activities.

How can our receiving warehouse dock access the live Approved Supplier List?

Plants should either synchronize the live ASL directly into their ERP/WMS receiving system or provide dock technicians with a read-only digital dashboard to check vendor approval status before unloading freight trucks.

Can this free ASL template be exported into Microsoft Excel or CSV?

Yes. The interactive generator above allows you to add rows, edit records directly in your browser, and export a clean, standardized CSV file compatible with Excel, Google Sheets, or Evidlane software.

Stop Chasing Expiring Supplier Certificates in Spreadsheets

Import this exact ASL template into Evidlane to automate vendor renewal reminders, 1-click sealed audit packets, and SHA-256 tamper-evident logs.

View Transparent Pricing Download 12-Point Audit Checklist