Audit-readiness isn’t a feeling. It’s a packet you can produce in 48 hours. Either your 3PL has the documentation in a Quality Management System and can hand it to you on a Tuesday afternoon, or they don’t. There’s no in-between.
This checklist is for the supplement brands who wants to find out before a retailer or the FDA does.
The audit-readiness test, in 8 questions
Run your current 3PL through these. The answer should be yes, on the spot, with documentation produced within 48 hours.
1. Can your 3PL produce a current FDA establishment number for every facility you ship from?
2. Can they produce cGMP procedures for receiving, storage, picking, and shipping?
3. Can they produce a lot history for every product shipped in the past 12 months?
4. Can they produce a recall response playbook?
5. Can they produce certificates of analysis on file for the lots that shipped?
6. Can they produce documentation of FIFO or FEFO enforcement?
7. Can they produce GFSI / BRCGS or equivalent third-party audit reports?
8. How long does each of these take to produce?
If any answer is we’d have to check, we can probably get that, or let me circle back — the gap is real and it costs you in the moment that matters.
What 48-hour audit prep actually requires
A real Quality Management System, not a shared Google Drive. Documented SOPs maintained continuously, not assembled when an auditor asks. A dedicated Quality and Compliance representative at every facility. Lot history captured at receipt and kept on file in line with 21 CFR Part 111.
The 3PLs that ship audit packets in 48 hours have built their operations around the assumption that they will be asked. The ones that take two weeks have built theirs around the assumption that they won’t.
The retailer side of audit-readiness
Whole Foods, Sprouts, Target, and most national grocery and natural channels conduct supplier audits. They review your 3PL’s certifications, SOPs, and operational practices as part of evaluating you as a supplier. A finding at the 3PL level becomes a supplier finding for your brand.
What retailers typically ask for:
– GFSI / BRCGS or SQF certification
– cGMP procedures and SOPs
– Lot traceability documentation
– Allergen control protocols (where applicable)
– Temperature management documentation (where applicable)
– Routing guide adherence records
– Recall response capabilities
If your 3PL can’t produce any of these, the retailer relationship is exposed before the audit even concludes.
The brand-level questions you need to answer
Audit-readiness is shared between your brand and your 3PL. You also need to know:
– What’s your category, and what does the FDA require of you specifically?
– Have you ever had an FDA inquiry, warning letter, or recall?
– Do you have certificates of analysis on file for every lot you’ve sold?
– Do you have product-level state registration where required?
These are your responsibilities. Your 3PL’s job is to handle theirs and support you on yours.
Talk to a specialist
Scale your brand. Not your risk. Book a 30-minute compliance review with a ShipMonk specialist and we’ll run your current 3PL through this checklist on the call.
Frequently asked questions
What does it mean for a 3PL to be audit-ready?
Audit-readiness means your 3PL can produce documentation in 48 hours — not “we can get that for you.” It covers FDA establishment numbers per facility, cGMP procedures, lot traceability records, and recall response protocols. Either the documentation exists in a Quality Management System or it doesn’t. There’s no version where you find out at the audit.
What documentation should I request from my 3PL before an FDA audit?
Before an FDA audit, request your 3PL’s FDA establishment number for every facility, current cGMP procedures for receiving and storage, lot traceability records tied to your shipments, FEFO enforcement logs, and their documented recall response process. Our guide to choosing a supplement 3PL includes additional compliance checkpoints to verify before you sign.
What certifications should a supplement 3PL have for retailer audits?
For retailer audits, a supplement 3PL should carry GFSI certification (BRCGS or SQF), current cGMP procedures and SOPs, allergen control protocols, temperature management documentation, and routing guide adherence records. Retailers treat your 3PL as a supplier — a finding at the 3PL level becomes a finding for your brand.
What is an FDA establishment number and why does my 3PL need one?
An FDA establishment number identifies a specific facility as registered with the FDA for dietary supplement storage and handling. Your 3PL should hold one for every facility your inventory ships from — not just their flagship location. If they can’t produce it on request, that facility isn’t properly registered. See our FDA-registered 3PL guide for what registration actually requires.
How does lot traceability work in a supplement 3PL, and what does it cover?
Lot traceability at a supplement 3PL means every inbound carton is assigned a lot number and expiration date at receiving, and that data is tied to every pick and outbound shipment. In a recall, you need to identify exactly which customers received which lot. Without full traceability, you’re guessing — and the FDA isn’t.
What’s the difference between a 3PL’s audit responsibilities and mine as a supplement brand?
Your 3PL owns facility-level compliance: FDA registration, cGMP procedures, lot tracking, FEFO enforcement, and recall documentation. You own product-level compliance: certificates of analysis per lot, product state registrations, and your own FDA inquiry history. Audit-readiness is shared — if your 3PL isn’t ready, it creates gaps in your brand’s compliance record too.
What happens if an FDA warning letter is triggered during a 3PL audit?
An FDA warning letter triggered during a 3PL audit typically cites specific deficiencies — inadequate lot controls, cGMP failures, or traceability gaps. The findings attach to your brand, not just the facility. Our guide on what triggers an FDA warning letter for supplement brands walks through the most common causes and what documentation prevents them.
How does ShipMonk support supplement brands during FDA or retailer audits?
ShipMonk supports supplement brands during FDA and retailer audits by maintaining lot-level traceability records, FEFO enforcement logs, FDA establishment numbers for all facilities, and cGMP procedures on file. When an auditor or retailer requests documentation, ShipMonk can produce it without a 48-hour scramble — because the records are built into standard operating procedures, not assembled after the fact.
