Form 483 Response Guide for Supplement Companies

An FDA investigator spent several days at your facility, reviewed your records, and handed you a Form 483. The observations on that form likely include testing-related deficiencies -- incomplete identity testing on raw materials, inadequate finished product testing, or missing stability data. What you do in the next 15 business days determines whether this stays as a resolved inspection or escalates to a Warning Letter, an injunction, or worse. This guide covers exactly how to respond, what a good response looks like, common mistakes that make things worse, and how your testing documentation is your strongest defense.

What a Form 483 actually is

A Form 483 is a written notice issued by an FDA investigator at the conclusion of an inspection when the investigator observes conditions that, in their judgment, may constitute violations of the Federal Food, Drug, and Cosmetic Act. It is not a final agency determination. It is not a finding of guilt. It is the investigator's observations. The FDA classifies inspections as NAI (No Action Indicated), VAI (Voluntary Action Indicated), or OAI (Official Action Indicated) after reviewing the 483, your response, and the complete inspection file.

The Form 483 itself is a list of observations, each citing a specific regulatory reference. For supplement facilities, the most commonly cited sections of 21 CFR 111 include:

Your timeline: 15 business days

The FDA expects a written response within 15 business days of the inspection close-out. The response deadline is typically communicated verbally by the investigator during the close-out meeting and may also be stated on the Form 483 itself or in a cover letter.

This timeline is not a suggestion. If the FDA does not receive your response within 15 business days, the agency assumes you do not intend to address the observations. That assumption colors everything that follows, including the compliance officer's recommendation on whether to issue a Warning Letter.

Do not ask for an extension unless you have a genuinely unavoidable reason (the facility burned down, the QA director is hospitalized). "We are still gathering data" is not a valid reason. The FDA will consider a timely but incomplete response far more favorably than a late one.

What to do immediately after receiving the 483:

1. Photocopy the 483 and create a controlled copy for your response team. Do not write on the original.
2. Notify your regulatory attorney or consultant within 24 hours if you have one.
3. Convene a response team that includes your QA director, operations lead, and whoever manages your third-party lab relationships.
4. Pull every record referenced in the observations -- batch records, COAs, SOPs, training logs, calibration records.
5. Start drafting the response. Do not wait until day 10.

⚠️ Note

Never ignore a 483. Even if you believe the observations are incorrect, you must respond. An ignored 483 almost always results in a Warning Letter.

What a good response looks like

A strong Form 483 response has four essential sections for each observation:

1. Acknowledge the observation and its scope

Do not argue, do not minimize, do not blame the investigator. State that you have reviewed the observation and understand the concern. Example:

"In response to Observation 1 regarding identity testing of dietary ingredients under 21 CFR 111.70(e), we have reviewed the batch records for the lots identified during the inspection and acknowledge that identity testing was not performed for three dietary ingredient lots received between January 2026 and March 2026."

2. Root cause analysis

Explain why the deficiency occurred. Be specific and honest. If your procedure required identity testing but your receiving department staff skipped it due to production pressure, say that. If your procedure did not require identity testing (a worse problem), say that too. The FDA wants to see that you understand the underlying system failure, not just the surface observation.

"The root cause was a gap in our receiving procedure SOP-QC-014 Rev 2, which did not require quarantine of incoming dietary ingredients pending identity test results. This allowed materials to be released to production before testing was completed."

3. Immediate corrective action

What have you already done? The FDA expects corrective actions to have started before the response is sent. If you tested the three lots retrospectively and got passing results, state that. If you quarantined affected product, state that. Attach new COAs as exhibits.

"Immediate corrective actions taken: (1) All three lots were retrospectively identity-tested by [ISO 17025 accredited lab name] on [date]. Results are attached as Exhibit A. All lots passed identity by HPTLC and FTIR against authenticated reference standards. (2) A product hold was placed on all finished product lots manufactured from those ingredients pending verification testing."

4. Preventive action (CAPA)

How will you ensure this never happens again? Describe the procedure change, the training, the system upgrade, the new verification step. Attach the revised SOP. Include a timeline for implementation.

"Preventive action: SOP-QC-014 has been revised to Rev 3 (attached as Exhibit B). The revision adds: (a) mandatory quarantine of all dietary ingredient lots upon receipt pending identity test results, (b) a material release workflow requiring QA sign-off before any ingredient moves to production, and (c) a monthly audit of receiving records by the QA manager. Training on the revised SOP was completed for all receiving and QA personnel on [date]. Training records are attached as Exhibit C. Effectiveness verification will be conducted through monthly audits for six months."

Common testing-related 483 observations and sample responses

Observation: Inadequate identity testing (21 CFR 111.70(e))

The FDA requires at least one identity test on each unique dietary ingredient before use in manufacturing. Reliance on supplier COAs alone does not satisfy this requirement unless you have qualified the supplier through audit and ongoing verification -- and even then, the FDA expects you to conduct at least periodic identity testing.

If your 483 cites 111.70(e), your response should include a description of which identity methods you use (HPTLC, FTIR, HPLC, organoleptic with microscopic confirmation), documentation that the methods are scientifically valid, and a revised testing schedule. If you accept supplier COAs in lieu of testing, your response must describe your supplier qualification program in detail.

Observation: Inadequate finished product testing (21 CFR 111.75(a)(2))

This is the most common testing-related 483 observation. The investigator found that your finished product testing does not verify that specifications are met for identity, purity, strength, composition, and limits on contamination.

Your response must enumerate every finished product specification and the corresponding test method. For potency, if your label claims 500 mg of magnesium per serving, you must test for magnesium content by a scientifically valid method (ICP-MS or ICP-OES) and show that results fall within your specification range (typically 90-110% of label claim). Generic testing that checks "heavy metals yes/no" without defined limits is not adequate.

Observation: Unscientifically valid methods (21 CFR 111.75(d))

If your testing lab uses a rapid screening method that has not been validated against a recognized standard, the FDA may cite 111.75(d). This is common with low-cost in-house test kits or colorimetric methods used in place of compendial methods.

Your response must demonstrate method validity. If you use a non-compendial method, you must show validation data: accuracy, precision, specificity, linearity, range, detection limit, and quantitation limit. If you cannot validate the method, state that you are switching to the compendial method (e.g., USP <2232> for heavy metals by ICP-MS) and provide a timeline.

For a deeper look at what finished product testing should include, see our finished product testing guide.

Common mistakes that make a 483 worse

Mistake 1: Arguing with the observations. You may believe Observation 3 is wrong because the investigator misunderstood your system. Even if you are right, a confrontational response letter will not help. Acknowledge the observation, explain your procedure, and provide clarifying documentation. Let your attorney handle any formal dispute.

Mistake 2: Blaming the contract lab. Saying "our third-party lab failed to report results on time" is not a defense. Under 21 CFR 111, you are responsible for the quality of your product regardless of who performs the testing. Your response should describe how you will improve your lab oversight -- more frequent communication, documented periodic review of lab performance, or switching to a lab with stronger capabilities.

Mistake 3: Promising corrective actions with no timeline. "We will implement a new testing program" means nothing without a date. Every corrective and preventive action must have a completion date, a responsible person, and a plan for verifying effectiveness.

Mistake 4: Submitting a one-page response to a multi-observation 483. If the investigator spent four days at your facility and listed six observations, a one-page letter saying "we fixed everything" will not prevent escalation. A thorough response typically runs 20 to 60 pages with exhibits.

Mistake 5: Not attaching supporting documentation. Your response letter says you completed identity testing. Great. Where are the COAs? The FDA wants evidence, not promises. Every claim in your response should be backed by an attached exhibit.

When to hire a regulatory attorney

You do not need an attorney for every 483, but you should strongly consider hiring one if:

• The observations are numerous (more than 5-6), systemic, and suggest fundamental GMP failures
• The investigator noted that observations may be referred for enforcement action
• Your facility has a recent Warning Letter or prior 483 history
• The observations relate to products that have been associated with adverse events
• You are not confident in your internal team's ability to write a thorough, technically accurate response

A regulatory attorney with FDA experience will cost $300 to $800 per hour. For a moderate 483 with 3 to 5 observations, expect $5,000 to $15,000 in legal fees for response preparation. That is a fraction of the cost of a Warning Letter response, a recall, or litigation.

For guidance on what to expect during an FDA inspection from the testing perspective, see our coverage of 21 CFR 111 testing requirements.

What happens after you respond

After you submit your response, the FDA district office reviews it along with the inspection file. The agency classifies the inspection as NAI (No Action Indicated), VAI (Voluntary Action Indicated), or OAI (Official Action Indicated). You may or may not be notified of the classification directly. You can request a copy of the Establishment Inspection Report (EIR) through the FDA's FOIA process, though this can take months.

If your response is adequate and the agency accepts your corrective actions, the inspection is typically classified VAI and no further action is taken. If your response is inadequate or the observations are serious enough, the FDA may issue a Warning Letter, escalate to a follow-up inspection, or, in rare cases, refer for injunction or seizure.

For what happens when a 483 response fails, see our guide on FDA warning letters for supplements.

Quick Reference

Lab Category Matching

Real Methods Explained

What Sample to Send

Send retain samples corresponding to the lots identified in the 483. If the 483 references raw material lots, send retain samples of those lots. If the 483 references finished product lots, send retains of those lots. If retain samples are not available, state that in your response and describe how you will address the data gap (e.g., testing current production lots and extrapolating, or conducting a risk assessment).

Expected Turnaround Time

Accreditation Notes

All retrospective testing submitted with a 483 response should be performed by an ISO/IEC 17025 accredited laboratory. The FDA may not reject results from a non-accredited lab outright, but the agency will give less weight to those results. When your response is under legal and regulatory scrutiny, use accredited labs. Ensure the COAs submitted as exhibits clearly show the lab's accreditation body and certificate number.

Price Ranges

Country/Region Targeting

Form 483s are specific to FDA inspections of US facilities (including foreign facilities that manufacture for the US market). For facilities exporting to multiple countries, note that a 483 response submitted to FDA may also need to be submitted to other regulatory bodies (Health Canada, TGA, EU competent authorities) if those agencies have mutual recognition agreements. Consult your regulatory counsel on parallel reporting obligations.

FAQ

Q: How serious is a Form 483 compared to a Warning Letter?

A Form 483 is significantly less serious than a Warning Letter. A 483 is an investigator's list of observations -- it is not a final agency finding and does not carry legal consequences by itself. A Warning Letter is an official FDA communication asserting violations and demanding correction, and it is published on the FDA's public website. However, a poorly handled 483 response is the most common path to a Warning Letter. The 483 is your opportunity to resolve issues before they escalate.

Q: What is the deadline for responding to a Form 483?

The standard deadline is 15 business days from the date the Form 483 is issued. The investigator will typically state the deadline during the close-out meeting. Some 483s include the deadline in writing. If no deadline is specified, use 15 business days. Late responses are considered non-responsive and significantly increase the risk of escalation to a Warning Letter or other enforcement action.

Q: Should I test every lot referenced in the 483 before I respond?

Yes, if retain samples are available. If the investigator noted that three raw material lots were not identity-tested, test all three lots retrospectively and include the COAs as exhibits. If retain samples are not available, clearly state that in your response and explain your alternative approach (e.g., testing the finished products made from those ingredients, or conducting a risk assessment based on supplier qualification data). Never claim to have tested lots that you have not actually tested. Submitting fabricated test results to the FDA is a criminal offense.

Q: Can I write the 483 response myself or do I need a lawyer?

You can write it yourself if the observations are limited in number and scope and you have internal QA/regulatory expertise. For a moderate or serious 483 with systemic observations, an FDA-experienced regulatory attorney or consultant is strongly recommended. The response will be read by FDA compliance officers who evaluate it for legal sufficiency. A poorly worded response can create liability. If you write it yourself, have it reviewed by someone with FDA response experience before submitting.

Q: What testing records should I attach to my 483 response?

Attach everything that substantiates your corrective actions. Include: COAs for all retrospective testing, revised SOPs with revision tracking, training records showing personnel were trained on new procedures, qualification records for any new equipment or methods, supplier qualification records if applicable, and a summary table mapping each observation to its corrective action with completion dates. Organize exhibits with a numbered exhibit list and reference them in the body of the response. Every factual claim should be supported by a visible exhibit.

Get lab testing quotes →