FSVP Requirements for Spices

FSVP puts the burden on the U.S. importer, not the exporter

The Foreign Supplier Verification Program (FSVP), under 21 CFR Part 1 Subpart L, makes the U.S. importer of record legally responsible for confirming that its foreign suppliers are producing spices under controls that meet U.S. food safety standards. Unlike registration, which is a facility-level obligation the exporter handles, FSVP is an importer-level obligation — it does not matter how compliant the foreign supplier believes itself to be if the importer cannot produce documentation proving it verified that compliance.

An FSVP plan built for spices needs to go well beyond a generic hazard checklist. FDA's own risk-profile work on this category is public, detailed, and specific about which spices carry which risks, which means a plan that doesn't name those specifics reads, to an FDA reviewer, as though it was never actually built for the product being imported.

The four hazard categories every spice FSVP plan should address

Why country and supplier history matter as much as the product

FDA's spice-safety data isn't limited to product categories — it's tied to specific countries and, in enforcement terms, specific facilities. Shipment sampling has found Salmonella-contaminated spice from dozens of countries, and FDA maintains standing Import Alerts naming specific product-and-origin combinations, including one that applies to black pepper from India for Salmonella, filth, and mold. A facility with a documented contamination history can be placed on Detention Without Physical Examination (DWPE) — meaning every future shipment from that facility is automatically detained, regardless of what that particular shipment's own testing shows, until the facility demonstrates the underlying issue is fixed.

This is why an FSVP plan built for spices should reference the applicable Import Alert numbers for the specific spice and country combination being sourced, rather than a general statement that "supplier verification activities are ongoing." Reviewers checking FSVP records are typically looking for evidence the importer knows the specific risk landscape for what it's importing.

Choosing the right verification activity

FSVP allows importers to select from several verification activities depending on the hazard and the supplier's risk profile: onsite audits, sampling and testing of the food or its environment, review of the supplier's relevant food safety records, or — for lower-risk situations — other appropriate procedures. For a spice supplier with no history of contamination and a straightforward, well-documented pathogen-reduction process, periodic record review paired with product testing is often sufficient. For a supplier sourcing from a region or category FDA has specifically flagged — turmeric from South Asia, for example — an onsite audit is generally the more defensible choice, since it lets the importer confirm the pathogen-reduction and heavy-metal controls are actually implemented, not just described on paper.

Verification is not a one-time exercise. Suppliers should be reevaluated periodically, and immediately if something changes the risk picture — a new Import Alert, a customer complaint, a recall, or a shift in the supplier's own processing.