Label literacy

What does "GMP certified" mean on a supplement label?

It means a facility was audited against a manufacturing standard by a private organisation — not that the FDA approved anything, and not that the company went beyond what the law already required of it. Good manufacturing practice for US dietary supplements is a binding federal regulation, 21 CFR Part 111, and it has applied to firms of every size since June 2010. Understanding that one fact changes what the badge is worth: it is not a premium tier, it is independent evidence that a legal floor was actually met. And FDA's own inspection data explains why that evidence is not redundant.

Does "GMP certified" mean FDA approved?

No — and the FDA does not issue GMP certificates to anyone, so there is nothing of its to hold up. This is the single most useful thing to know about the phrase, because almost every consumer misreading of it runs through the assumption that some government body signed off. The FDA does not approve dietary supplements before they go on sale, does not run a GMP certification programme, does not issue a seal or logo for one, and maintains no public register of "GMP certified" supplement companies for a shopper to check a brand against. Presenting an FDA logo on packaging as an endorsement is not permitted.

So when a GMP mark appears on a bottle, it came from one of two places: a private auditing organisation that visited the plant, or the company's own description of itself. Those are very different things wearing very similar words, and separating them is what the rest of this page is for.

If GMP is already the law, what is the "certified" part?

The rule is mandatory; the audit that confirms you followed it is voluntary — and only the second one is what "certified" refers to. This is the framing most articles on the topic get backwards, presenting GMP as an extra step a conscientious company chooses to take. It is not optional at all.

Current good manufacturing practice for dietary supplements is set out in 21 CFR Part 111, a binding federal regulation covering personnel, physical plant, equipment, production and process control, laboratory operations, packaging and labelling, holding and distribution, returns, complaints and records. The final rule was published in June 2007 and phased in by company size — the largest firms first, and the smallest, those with fewer than 20 employees, from June 2010. Every US dietary supplement manufacturer has therefore been legally obliged to follow it for more than fifteen years.

Which leaves a precise definition of the badge. GMP compliant is a statement that a company is doing what the law already requires — true of every legally sold supplement, and therefore not a differentiator. GMP certified should mean an independent organisation went to the facility, audited it against that regulation, and confirmed the result. Compliance is the floor. Certification is third-party evidence the floor was actually there.

If it is mandatory, why does an audit tell you anything?

Because FDA's own inspection results show that a mandatory rule is not the same as a universally followed one — and this is the number the category's articles leave out. When the FDA inspects a dietary supplement facility and finds conditions it considers objectionable, it issues a Form 483 listing the observations. The share of inspected facilities receiving one has been reported, by fiscal year, at roughly:

70% in FY12 · 65% in FY13 · 58% in FY17 · 54% of 591 inspections in FY18 · 47% of domestic firms in FY23.

The direction of travel is genuinely encouraging — that is a fall of more than twenty percentage points across roughly a decade, and it deserves saying plainly rather than being used only as ammunition. But the level is the point: even on the most recent figure, close to one inspected facility in two receives documented observations, and firms that received a 483 have been cited for an average in the region of 5.7 observations each. That is the honest answer to "if everyone has to follow it, why pay someone to check?" A regulation is a requirement, not a result. An independent audit is somebody other than the manufacturer confirming the result.

Figures as reported from FDA inspection data by fiscal year in trade coverage; inspection populations differ year to year, so these describe inspected facilities rather than the industry as a whole.

What does FDA cite most often — and why should a shopper care?

The most common citation is failing to establish product specifications, which is a far more interesting failure than it sounds. In FY23, nearly 33% of facilities issued a Form 483 were cited for not establishing specifications for the identity, purity, strength and composition of the finished supplement; the same observation was the most-cited in FY18 (about 24%) and in FY17. Quality control procedure failures follow close behind, at around 22% of cited firms in FY22.

Read that again in plain terms. The single most frequent finding across the US supplement industry is not contamination, not filth, not a broken machine. It is a company not having written down what its own product is supposed to contain. Part 111 requires a manufacturer to set specifications first and then verify the batch against them — the spec is the reference point that makes every downstream test meaningful, and without one there is nothing for a result to be compared to.

That has a direct consequence on the shelf. A specification is a number. If a company that has established meaningful specifications is a company that can state what a serving contains, then a label that names milligrams of a specific compound per serving has demonstrated something a label of adjectives has not. It is not proof — but it is the shopper-facing shadow of the exact requirement the industry most often fails.

What does Part 111 actually require of a manufacturer?

In plain English, it requires a company to define what it is making, prove each batch matches that definition, and keep the evidence. The regulation runs to fifteen subparts, but the obligations that most affect what ends up in a bottle are these.

Identity testing of every incoming dietary ingredient. Under 21 CFR 111.75(a)(1), a manufacturer must conduct at least one appropriate test or examination to verify the identity of each dietary ingredient it receives. The only way out is a petition to the FDA under 21 CFR 10.30, supported by a scientific rationale and data showing the alternative gives no material diminution of assurance compared with 100 percent identity testing — and it must be granted before it applies. A supplier's certificate of analysis, on its own, does not discharge the requirement. For botanicals this is the requirement that matters most, because the characteristic failure in plant ingredients is one species arriving as another. It is why our page on oil of oregano versus oregano essential oil insists on the binomial: Origanum vulgare and Lippia graveolens are sold under the same English word and are not in the same botanical family.

A master manufacturing record and a batch record. The first states how the product is to be made; the second records how a given batch actually was, with the specifications, the tests and the results.

Reserve samples. A manufacturer must collect and hold reserve samples of each lot of packaged, labelled supplement it distributes, in the same container-closure system as the product itself. Somewhere in a warehouse there is meant to be a sealed bottle from the same lot as yours, held so that a question raised later can be answered against the actual material.

Records kept on a defined clock. Required records must be kept for 1 year past the shelf life date if shelf life dating is used, or 2 years beyond the date of distribution of the last batch associated with them. That is a small detail with a neat consequence: US supplements are not required to carry an expiration date at all, but a company that prints one has anchored its own record-retention clock to it — one of several reasons a printed date is a disclosure rather than a formality, as our page on whether oregano oil expires sets out.

Who actually issues supplement GMP certifications?

Private organisations do, for a fee, and the useful question about any GMP claim is simply which one. The best-known third-party programmes for dietary supplements include NSF International, the Natural Products Association (NPA), UL Solutions and USP, along with several international schemes. Each sends auditors to a facility, assesses it against a standard built on Part 111, and — critically — publishes or maintains a way of confirming who holds the certification.

That publishing step is the whole value. A named certifier is checkable; an unnamed one is not. Which produces a four-second test for any bottle: does the GMP claim name the organisation that granted it? "Manufactured in an NSF-certified GMP facility" names a body whose listings you can look up. "GMP certified" alone names nobody, and there is no federal enforcement mechanism that stops the phrase being printed without an audit behind it. That does not make every unattributed claim false — most are made by ordinary companies describing a genuine certificate held by their contract manufacturer — but it does mean the phrase carries the weight of the name attached to it, and no more.

Does GMP certification mean my specific bottle was tested?

No — a facility audit and a product test are different instruments answering different questions, and conflating them is the most consequential misreading of the badge. A GMP audit examines a site and its documented systems at a point in time. It is evidence that a process capable of producing a consistent product was in place. It is not a measurement of the container in your hand, and it does not certify that a particular lot met its specification, was free of contaminants, or matched its label.

The document that speaks to a specific lot is a certificate of analysis, or independent lot testing by a laboratory. Product-level programmes such as USP Verified sit closer to the finished product than a facility audit does, because they evaluate the product and its ingredients rather than only the plant it was made in. Neither replaces the other. Facility certification tells you the system was sound; lot testing tells you this batch was. A company that offers both has answered both questions, and a company that offers a facility badge in place of a lot result has answered the easier one.

How do the phrases on supplement packaging compare?

They differ enormously in what they cover and in whether you can verify them at all, despite sounding almost interchangeable on a box. The table sorts the common ones from weakest to strongest signal.

General characteristics of certification and registration schemes as publicly described. Programme scopes change; check the certifying organisation's own current documentation.

Why is "FDA registered" the weakest phrase of all?

Because registration is a notification, not an assessment — nobody visits, nobody inspects, and nobody forms a view. US food and dietary supplement facilities are required to register with the FDA, and doing so involves submitting information about the facility. It carries no audit, no evaluation of quality and no approval, and the FDA has been explicit that registration does not denote approval or endorsement of a facility, a company or its products.

The phrase nevertheless appears on packaging in a position and typeface that invites the opposite reading. It sits in the same family as the ungraded grade words — "therapeutic grade", "pharmaceutical grade" — that are unregulated and uncertified by any agency. A useful rule: a phrase that describes a form being filed is not a phrase that describes a product being checked.

What does GMP certification still not tell you?

It says nothing about whether the formula is a sensible one, and this is worth being blunt about even on a page defending the standard. A perfectly-run facility can manufacture a product consistently to a specification that is not worth much: an under-dosed formula, a proprietary blend that hides its proportions, an ingredient with little behind it. GMP asks "did you make what you said you would make, and can you prove it?" It does not ask "was that a good thing to make?"

Nor does it govern the marketing. Advertising claims, website copy and the difference between a permitted structure/function statement and an impermissible disease claim sit under an entirely separate body of law from Part 111. A GMP certificate has no bearing on whether the sentence on the front of the box is legitimate — which is why the label-reading habits set out in our guide to choosing a quality oregano oil still matter on a certified product.

How should I use all this in the aisle?

Rank what you are looking at, rather than looking for a single badge that settles it. In ascending order of information: an unverifiable grade word tells you nothing; "FDA registered" tells you a form was filed; "GMP compliant" tells you a legal minimum is claimed; "GMP certified" without an auditor's name tells you a certificate probably exists somewhere; a named certifier tells you a specific organisation assessed the site; and a lot-specific test result tells you about the bottle you are actually holding.

Then apply the specification test, because it is the one that connects the regulation to the shelf. Given that the most-cited failure in the industry is not establishing specifications, ask whether this label states a specification you could check: a named compound, a quantity, per serving. That question separates products faster than any seal, and it works on brands with no seal at all.

Where does WaveDrops sit?

In a GMP-certified facility, described here as the floor it is rather than the headline it is often made into. WaveDrops Oil of Oregano with Black Seed Oil is manufactured under GMP certification, and this page has argued that such a statement is meaningful mainly as third-party evidence that a mandatory standard was actually met — not as a claim to be operating above the rules.

The part we would rather be judged on is the specification. The label states 18 mg of carvacrol and about 0.9 mg of thymoquinone per 2-drop serving, from wild-harvested Greek Origanum vulgare standardised to 80%+ carvacrol and separately cold-pressed Nigella sativa — roughly 200 servings in a 10 mL amber glass dropper, with no filler carrier oil. Those are numbers with named compounds attached, which is precisely the disclosure the industry's most common inspection finding says is most often missing. The serving is 2 drops, up to 3 times a day, diluted in water or juice and taken with food. The full breakdown sits on the ingredients page, and what carvacrol is explains the compound those milligrams refer to.

Three claims this page will not repeat

Certification articles carry a few confident lines that do not hold up, so they are named here rather than quietly inherited.

"GMP certified means FDA approved." The FDA neither approves supplements pre-market nor certifies GMP, so the two ideas have no point of contact. "GMP certified guarantees the product contains exactly what the label says." A facility audit assesses systems, not the bottle you bought; that guarantee, to the extent one exists, lives in lot-level testing. "A GMP certified supplement is contaminant-free." Part 111 requires specifications and verification, which reduces risk in a structured way, but no audit of a plant is a measurement of a container, and the certifying bodies themselves say so. As always on this site, refusing to repeat a claim is not an argument that certification is worthless — it is an argument that a badge should be read for exactly what it covers.

Next, read how to choose a quality oregano oil for the buyer's checklist this feeds into, or what a carvacrol percentage really tells you for the specification question applied to one number. You can also return to the WaveDrops homepage.

Get WaveDrops on Amazon

These statements have not been evaluated by the FDA. This product is not intended to diagnose, treat, cure, or prevent any disease.