Most supplier vetting processes focus on price, capacity, and certifications. Regulatory recall history is often an afterthought. Here is how to fix that.
Supplier vetting is one of the most consequential decisions a supply chain team makes. A supplier that passes your initial vetting process becomes embedded in your operations — their quality, compliance, and safety record becomes your quality, compliance, and safety record. Yet most supplier vetting processes focus heavily on commercial and operational criteria (price, minimum order quantities, lead times, certifications) and treat regulatory history as an afterthought.
This is a significant gap. A supplier's regulatory recall history is one of the most reliable predictors of future recall risk. A supplier that has been recalled once is statistically more likely to be recalled again. A supplier with a history of FDA Warning Letters or CFIA inspection failures is operating with documented compliance deficiencies. These are facts that should inform your sourcing decision — and they are facts that are publicly available, if you know where to look.
Here is a practical checklist of regulatory checks to run on any new supplier before you sign a supply agreement.
Search the FDA's Enforcement Report database for the supplier's legal entity name and any known trade names or subsidiaries. Look for recalls in the past five years, noting the recall class, the reason for the recall, and whether the supplier has had multiple recall events. A single Class III recall for a minor labelling issue is very different from a Class I recall for Listeria contamination.
The FDA database is searchable at fda.gov/safety/recalls-market-withdrawals-safety-alerts, but the search interface is limited. For a more comprehensive search, RecallScout's supplier lookup tool allows you to search by firm name across all 8 databases simultaneously.
If your supplier handles meat, poultry, or egg products, check the USDA FSIS recall database separately from the FDA database. FSIS has jurisdiction over these categories and maintains its own recall records. A supplier that has never been recalled by the FDA may have a significant FSIS recall history.
Search the FDA's Warning Letter database for the supplier's name. Warning letters are public record and are searchable at fda.gov/inspections-compliance-enforcement-and-criminal-investigations/compliance-actions-and-activities/warning-letters. A warning letter in the past two years is a significant red flag — it means the FDA has documented a serious compliance violation at this facility.
If you are sourcing from an international supplier, check the FDA's Import Alert database to confirm the supplier is not subject to automatic detention. A supplier on Import Alert 99-33 (the general automatic detention list) cannot legally import product into the United States until the violation is resolved.
Search the CFIA recall database at inspection.canada.ca/food-safety-for-industry/food-recall-warnings-and-allergy-alerts. Canadian suppliers that have been recalled by the CFIA will appear here. Apply the same criteria as the FDA search: look for Class 1 recalls, multiple recall events, and the nature of the violation.
If you are sourcing personal care, health product, or consumer goods ingredients from Canadian suppliers, check the Health Canada recall database separately from the CFIA database. Health Canada has jurisdiction over these categories and maintains its own recall records.
For international suppliers that also export to the European Union, check the RASFF portal for border rejections. A supplier with a history of EU border rejections has documented compliance issues that may not appear in North American databases. The RASFF portal is searchable at webgate.ec.europa.eu/rasff-window/portal.
Supplier vetting is not a one-time event. A supplier that passes all of these checks at onboarding may receive a Warning Letter or be recalled six months later. The most effective supplier risk programs combine rigorous initial vetting with ongoing automated monitoring.
RecallScout is designed for the ongoing monitoring layer. Once you have onboarded a supplier, RecallScout continuously monitors all 8 regulatory databases and alerts you the moment that supplier is flagged — so your vetting investment is protected by continuous surveillance.
The combination of thorough initial vetting and automated ongoing monitoring is the standard that leading supply chain teams are moving toward. The regulatory data is publicly available. The question is whether you have a systematic process to use it.
21-day free trial. No credit card required. 50 suppliers included.
Start free trial