Supplement fulfillment under 21 CFR 111, with the MLM and DTC paths separated.

The FDA promulgated 21 CFR Part 111 in 2007 as the current Good Manufacturing Practice rule for dietary supplements^[1]. The rule covers manufacturing, packaging, labeling, and holding operations. Most fulfillment houses that store and ship sealed finished goods do not run full manufacturing under Part 111, but they still inherit holding-stage requirements: cleanliness, pest control, segregation, proper temperature, lot identification, and quarantine procedures for damaged or returned product.

The FDA inspects supplement manufacturers and sometimes their fulfillment partners. Warning letters from the agency in 2023 and 2024 cited inadequate batch records, missing identity testing for components, and failure to maintain reserve samples^[2]. While the bulk of these citations land on the contract manufacturer, brands that source through a single fulfillment partner often inherit the documentation gap.

For a 3PL, the practical bar is: written SOPs for receipt, storage, and shipping; lot identification at the case and pallet level; segregation between approved and quarantine inventory; pest control logs with monthly inspections; and a recall drill executed at least annually with results documented. If a 3PL cannot show those artifacts, the brand should not be storing inventory there.

Every supplement bottle carries a lot code and an expiration date. The lot ties the unit back to the manufacturing batch, the certificate of analysis (COA), and the identity testing the manufacturer performed. The expiration date is the manufacturer's attestation that potency holds through that point under specified storage.

Inside a fulfillment center, that creates two hard requirements. First, lot codes must be captured on inbound at the case level (and in some cases the bottle level via aggregation) and stored in the WMS against location. Second, the WMS must pick by FEFO (First Expired, First Out) so that the oldest viable lot ships first. If a bottle expiring in three months sits in the same bin as one expiring in eighteen, the WMS must pull the three-month bottle first.

Subscription brands feel this acutely. A monthly subscriber buying a 30-day supply in March expects the bottle to last through April. If the lot expires April 15, the customer feels cheated and cancels. The brand pays $50 in CAC for the subscriber and loses them on a $0.10 rotation error. FEFO is not a logistics nicety; it is the retention number on the dashboard.

Channel rules add a layer. Amazon FBA requires a minimum of 90 days remaining shelf life on units inbound to a fulfillment center, and pulls product from the front-end shelf at 50 days remaining^[5]. Sephora, Whole Foods, GNC, and the Vitamin Shoppe all enforce minimum-shelf-life clauses in vendor agreements, typically 9 to 12 months on receipt.

The Poison Prevention Packaging Act of 1970 (PPPA) and its enforcement under 16 CFR 1700 require child-resistant packaging for substances that pose a serious risk of injury or illness to children^[6]. The Consumer Product Safety Commission (CPSC) enforces. For supplements, the most common in-scope categories are products containing iron above a certain dose threshold (250 mg or more elemental iron per package), nicotine and certain pharmacologic agents, and certain concentrated formulations.

Melatonin gummies have been the recent flashpoint. After a sharp rise in pediatric exposures reported to poison control centers, the AAP and CDC issued warnings^[7], and CPSC opened a rulemaking review on whether gummies require CRP. Some states and large retailers preemptively require CRP packaging or bottles for melatonin gummies. Brands selling at Target and Costco have voluntarily moved to push-and-turn caps.

Operationally, this affects packout. A 3PL packaging a kit (a multi-bottle bundle) must preserve the original child-resistant closure on the in-scope bottle. Shrink wrapping a CRP bottle into a non-CRP outer pack does not satisfy the rule because the outer pack is now the user-facing closure. Brands often miss this when they build subscription kits or holiday gift sets.

The Dietary Supplement Health and Education Act (DSHEA) of 1994 allows supplement marketers to make structure-function claims about how a nutrient or ingredient affects normal structure or function in humans, but prohibits disease claims unless the product is approved as a drug^[9]. The line is thin. "Supports immune function" is generally allowed. "Treats the flu" is not. "Helps maintain healthy cholesterol levels" is allowed. "Lowers cholesterol" crosses into drug territory.

The FTC enforces against deceptive advertising on top of that. Recent FTC actions in the supplement space have targeted unsubstantiated cancer prevention claims, COVID-19 treatment claims, and weight-loss claims with implied medical outcomes^[10]. Settlement orders routinely require destruction of inventory bearing the offending claims and disgorgement of revenue.

For fulfillment, that means inserts and over-stickers are part of the regulated product. A 3PL that adds a marketing insert to a kit or applies an over-sticker to a bottle is now part of the labeling chain. The brand's regulatory team needs to approve those assets before they enter the warehouse, and the WMS needs to track which lots received which inserts so a future enforcement action can isolate the affected batch.

The FDA publishes recall classifications weekly. Class I (reasonable probability of serious adverse health consequences) requires a brand to identify, quarantine, and notify customers within hours, not days. The FDA expects a recall plan on file for Class I-eligible products and demonstrated capability to execute^[12].

For supplement brands, the recall test is mostly about lot data quality. The question is: given a lot number, can you produce a list of every order shipped from that lot, with customer name, address, email, and tracking number, in under four hours. If the WMS captured lot data on inbound and lot-allocated on outbound, this is a SQL query. If it captured it inconsistently, this is a panic.

Ship-to address verification matters too. Customers who moved between purchase and recall need to be reached at the email address on file with the brand, not the shipping address from the original order. A 3PL recall workflow that hands the brand a cleaned list with both fields, organized by state for any state-specific health department notification, saves the brand a day during the worst week of the year.

Most supplement bottles label storage as "store in a cool, dry place" with a recommended range typically below 77F (25C) and 60 percent relative humidity. Probiotics often require refrigeration (35 to 46F) to maintain colony forming units. Fish oils and other lipid-heavy products oxidize in heat, going rancid before the printed expiration date.

A 3PL handling supplements should run a climate-controlled warehouse with logged temperature and humidity monitoring. For probiotic SKUs, refrigerated reserve storage and insulated mailers for transit are mandatory. A summer shipment of a live-culture probiotic from a hot trailer through a 95F porch will lose 30 to 50 percent of its CFU count by the time the customer opens it. The customer's experience is "this product does nothing", and the cancel button is one tap away.