We’ve Never Had a Problem — Why That’s Not the Same as Being Compliant

No. A clean enforcement history means FDA has not cited you — it does not mean your records, labels, and supplier files would hold up if someone looked. FDA inspects only a portion of registered facilities each year, so for most small private-label and contract-manufacturing businesses the absence of findings reflects limited agency attention rather than verified compliance.

Why isn’t a clean FDA record proof of compliance?

Because it measures agency attention, not your controls. FDA has finite inspection capacity and allocates it by risk, product category, complaint signals, and prior history. A facility can operate for years without an inspection. When the visit finally happens, the agency evaluates what your documentation shows on that day — not how long you went without being asked.

Who actually tests our compliance first, if not FDA?

More and more often, a customer or a buyer. Large retailers have expanded what they require from private-label suppliers, and a supplier questionnaire or compliance packet request can arrive with a short deadline. Acquirers do the same thing through regulatory due diligence. Both are reading your paperwork, and both are doing it on their schedule rather than yours.

What documents do those reviews actually ask for?

Typically the same core set: product specifications, batch and production records, supplier qualification and approval files, certificates of analysis, complaint and adverse event records, change control documentation, label artwork with a version history, and evidence that your facility registration and product listings are current and accurate. A clean enforcement history tells a reviewer nothing about any of these.

Why is the timing the real risk?

Because the request almost always lands at a moment when you have no slack. Mid-transaction, a documentation gap becomes a diligence finding, and diligence findings move price and terms. Weeks before a shelf reset, a gap can cost the placement outright. Neither is a good moment to discover that a supplier file was never completed or a registration quietly lapsed.

What’s a reasonable first step?

Run a mock document pull. Pick two or three products, and ask your own team to produce, within a few days, exactly what a retailer or an acquirer would ask for. Whatever cannot be produced quickly is your actual gap. Then confirm the quiet items — that your facility registration is current and that your product listings are accurate and up to date — since those are renewal-driven and lapse without anyone noticing.

Frequently asked questions

We’re small. Does FDA really pay attention to companies our size?

Small companies are inspected, receive warning letters, and conduct recalls regularly. Size affects the odds of drawing attention, not the standard you are held to.

Our contract manufacturer is inspected regularly. Doesn’t that cover us?

Not by itself. A contract manufacturer’s inspection covers that facility’s operations. It does not cover your labeling, your claims, your registration and listing status, or your own oversight records.

How often should we run an internal check?

An annual document-readiness exercise is a reasonable baseline, plus a targeted check ahead of any new retailer relationship, product launch, or transaction.

What’s the single most commonly missed item?

Current registration and listing status. It is renewal-driven, it expires on a calendar rather than on an event, and nothing about day-to-day operations signals that it has lapsed.

Is a mock inspection the same as an audit?

Not quite. A mock inspection rehearses how your team responds and what it can produce under time pressure. A formal audit is broader and more systematic. Most businesses benefit from starting with the mock exercise.

Video Transcript

“We’ve been doing this twenty years and never had a problem with FDA.” Sound familiar?

Never having been cited is not evidence that you’re compliant. Most of the time it means FDA hasn’t looked at you yet.

FDA inspects only a fraction of registered facilities in any given year, and its priorities shift. So a clean history isn’t a test you passed. It’s a test you haven’t taken.

And these days, the first real test usually isn’t FDA at all. It’s a retailer’s supplier questionnaire, or an acquirer’s due diligence. Both ask for documents your enforcement record says nothing about: specifications, batch records, supplier qualification files, complaint records, and proof that your registration and listing are current. The gap tends to surface on the worst possible timeline — mid-deal, or weeks before a shelf reset.

Treat “no findings” as untested, not as passed. Run a mock document pull against what a retailer or an acquirer would actually ask you for. And confirm your registration and listing are current, because those lapse quietly.

Find your compliance gap on your own timeline, not mid-deal.

Contact Capote Law Firm today.