FSVP Testing Requirements: What Food Importers Need from a Food Safety Laboratory

Every year, the United States receives more than $200 billion worth of imported food and beverage products. For each one of those shipments, a US-based importer is legally responsible for verifying that the foreign facility met FDA’s food safety standards before the product crossed the border. That responsibility doesn’t sit with the overseas manufacturer, the customs broker, or the freight forwarder. It sits with the importer.

Since May 2017, FDA’s Foreign Supplier Verification Program — codified at 21 CFR Part 1, Subpart L — has been the regulatory mechanism for enforcing that responsibility. FSVP is a direct product of the Food Safety Modernization Act (FSMA, Public Law 111-353), and it requires considerably more than a quick review of a supplier’s audit certificate. Third-party laboratory testing is often the linchpin of a defensible FSVP program. But knowing which tests to run, how often to run them, and what your food safety laboratory must document is where most importers hit a wall.

What FSVP Actually Requires

FSVP is a risk-based program, which means the starting point isn’t a fixed menu of mandatory tests — it’s a hazard analysis. Before importing any “applicable food” (which covers virtually all human and animal food not regulated by USDA), the importer must:

1. Evaluate biological, chemical, and physical hazards reasonably likely to occur in that food
2. Assess whether the foreign supplier controls those hazards adequately
3. Determine what ongoing supplier verification activities are warranted — and at what frequency

That third step is where a food safety testing lab enters the picture. When your hazard analysis identifies a significant risk — say, Salmonella in raw botanical powder or inorganic arsenic in imported rice — FDA expects importers to conduct periodic product testing, review of supplier records, or on-site supplier audits. In many cases, all three. An audit certificate alone often won’t satisfy the requirement if a known pathogen risk isn’t being actively monitored with analytical data.

FDA investigators review FSVP records at ports of entry or at the importer’s place of business. Under 21 CFR 1.512, those records must be retained for at least 2 years and made available to FDA within 24 hours of a request. If your hazard analysis flagged a microbiological risk but you can’t produce corresponding laboratory test results that cover recent shipments, that’s a gap an investigator will document — and it typically leads to follow-up.

The Testing Your Food Safety Laboratory Should Be Running

Not every shipment requires independent laboratory analysis. That would be logistically impossible and isn’t what FDA requires. But your verification testing frequency must be proportional to the risk level your hazard analysis established. Here’s how that plays out across the most common food safety hazard categories:

Microbiological testing is the most common supplier verification activity for ready-to-eat foods and for raw ingredients that won’t undergo a validated kill step before consumption. Salmonella, Listeria monocytogenes, E. coli O157:H7, aerobic plate count, and yeast and mold counts all appear regularly in FSVP-aligned testing programs. Methods under FDA’s Bacteriological Analytical Manual (BAM) are the standard reference — and it’s worth confirming that your lab runs those methods specifically, not in-house modifications that haven’t been validated against BAM protocols.

One practical note: Salmonella confirmation under BAM methods typically takes 5–7 business days including enrichment and selective plating steps. If your FSVP program requires pre-release testing on every incoming lot, that creates an inventory hold situation you’ll want to plan around. Most importers work with their lab to establish a statistically sound sampling frequency — testing a defined number of lots per quarter rather than every shipment — that satisfies the risk-based requirement without grinding your supply chain to a halt.

Elemental contaminants and heavy metals have become an increasingly prominent focus, particularly for botanicals, spices, teas, dried mushrooms, rice, and seafood. FDA’s action levels for lead (0.1 ppm in certain baby foods, with proposed limits across broader food categories), inorganic arsenic (10 ppb in infant rice cereal), and cadmium apply to all food sold in the US, regardless of origin. ICP-MS is the method of choice for this work — its detection capabilities in the sub-parts-per-billion range make it far better suited to food matrices than older ICP-OES platforms for most elemental applications.

Pesticide residue screening is relevant for fresh and dried produce, grains, herbs, and botanicals sourced from regions where pesticide use patterns differ substantially from US agricultural practice. EPA’s tolerances under 40 CFR Part 180 apply to all food sold domestically, imported or not. A multi-residue screen that covers 200+ compounds is a reasonable baseline for high-risk commodities; your lab should be able to match the analytical scope to the compounds of concern for your specific supply chain.

Allergen verification matters for any product containing or potentially cross-contacted with one of the nine major allergens recognized under the FASTER Act: peanuts, tree nuts, milk, eggs, wheat, soybeans, fish, shellfish, and sesame — the last of which was added to the major allergen list in January 2023. If your foreign supplier claims allergen-free status, you need laboratory data to substantiate that claim. ELISA-based methods are the most common approach; PCR is increasingly used for species identification in complex matrices.

A well-structured food safety testing laboratory will help you build a testing matrix that maps each identified hazard to a specific analytical method, sample frequency, and acceptance criterion. That matrix should live inside your FSVP documentation file — it’s exactly what an FDA investigator will want to trace when they pull your records.

Choosing an ISO 17025 Food Safety Laboratory for FSVP Verification

This is where a lot of importers make a costly mistake: they route their FSVP testing to the cheapest lab that offers a quick turnaround, without checking whether that lab’s accreditation actually covers the methods and matrices in question.

ISO/IEC 17025:2017 accreditation is the baseline for defensible results. This international standard — administered in the US primarily through A2LA and Perry Johnson Laboratory Accreditation (PJLA) — requires labs to demonstrate technical competence, method validation, and measurement traceability for each test in their accredited scope. The scope document is the key artifact here. A lab can hold an ISO 17025 certificate while running only a handful of accredited methods — ask for the actual scope, not just the certificate number, and confirm that your specific tests and food matrices are listed.

Reporting quality matters as much as technical capability. For FSVP purposes, your Certificate of Analysis needs to clearly state the analytical method used, the detection limit or reporting limit, the quantified result, and a pass/fail determination against your acceptance criterion. Vague CoAs — results reported without method references, or with detection limits higher than your specification threshold — create documentation problems when FDA reviewers compare your CoAs against your hazard analysis.

Lab location and sample stability can quietly undermine your program. For perishable or temperature-sensitive matrices, shipping time from your receiving dock to the laboratory adds to your inventory hold period. Working with an accredited food safety testing lab that can receive and process samples quickly without compromising sample integrity is a logistics question as much as a technical one.

At Qalitex, we work with food importers to design FSVP-aligned testing programs from the ground up — mapping hazards identified in the importer’s analysis to specific tests, sampling frequencies, and acceptance criteria that hold up under FDA review. Our ISO 17025 accredited scope covers microbiology, elemental analysis, and a range of chemical contaminants across food matrices, from spices and botanicals to protein ingredients and packaged foods.

The FSVP Gaps That Most Commonly Trigger FDA Scrutiny

FDA’s 483 observations and warning letters involving FSVP deficiencies point to a few recurring patterns that are worth knowing before you think your program is airtight:

Hazard analyses that don’t go far enough. Many importers conduct a cursory review and conclude “no significant hazards identified” — then import commodities with a well-documented contamination history. FDA investigators know what hazards are associated with which food categories. If you’re importing dried chili peppers and your hazard analysis doesn’t address aflatoxin, Salmonella, or heavy metals, expect that to be questioned.

Using audit results as a substitute for testing when testing is warranted. Supplier audits and laboratory testing serve genuinely different purposes under FSVP. An audit verifies that a facility has adequate food safety systems in place. Testing verifies that the actual product leaving that facility is safe. For biological hazards in raw agricultural commodities, in particular, FDA’s guidance makes clear that analytical testing of the product is a more appropriate verification activity than an audit alone.

Testing at a frequency that doesn’t reflect the actual risk. A single annual test on a supplier you’re buying from monthly may not constitute adequate “periodic testing” under the rule. Frequency needs to be tied directly to your written risk assessment: the nature of the hazard, the supplier’s compliance history, and any corrective actions previously taken all factor in.

FSVP records that are complete but disorganized. Under 21 CFR 1.512, FSVP records must include your hazard analysis, supplier verification activities, corrective actions, and periodic supplier reassessments. Many importers have all the underlying data but haven’t assembled it into a coherent, retrievable file. When an FDA investigator requests records during a port examination, “let me find that for you” is not a useful answer.

Getting FSVP right isn’t just about clearing an FDA inspection. It’s about actually knowing what’s in the food you’re bringing into the country and selling to US consumers. That’s a standard worth holding regardless of what FDA happens to audit.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA FSMA Compliance Consulting and Audit Preparation — Aurora TIC helps food importers and manufacturers navigate FDA regulatory requirements, including FSVP program design and 483 response support.
• Raw Material Supplier Qualification and COA Verification Testing — Ayah Labs provides independent analytical testing and supplier qualification support for globally sourced food and ingredient supply chains.