Compliance 11 min read

Microbial Testing Controls That Prevent Supplement Recalls

J

Jared Clark

July 23, 2026

The FDA's recent recall of Zen Principle® Moringa Capsules by Relay Peak Research LLC — voluntarily initiated because of potential Salmonella contamination — is worth paying attention to if you manufacture or distribute dietary supplements. Not because of what happened to that company, but because of what it tells you about where contamination risk actually lives in supplement manufacturing and what a working quality system does to catch it before a product ever leaves your facility.

Salmonella in a plant-based capsule is not a random event. It is, almost always, a systems failure — and systems failures are preventable. This article walks through the controls that matter most.


Why Botanical Supplements Carry Elevated Microbial Risk

Before getting into solutions, it helps to understand why products like moringa capsules are in a higher-risk category to begin with.

Raw botanical ingredients — dried leaves, roots, powders — are agricultural products. They come from soil environments where Salmonella and other pathogens are endemic. Unlike food products that go through a kill step (heat, irradiation, pasteurization), many encapsulated botanical supplements receive no pathogen reduction treatment at all. The manufacturer receives a powder, blends it, fills capsules, and ships the finished product.

That model puts enormous weight on supplier qualification and incoming ingredient testing. If those two controls are weak, there is nothing downstream to catch a contaminated lot.

According to FDA data, dietary supplements accounted for a disproportionate share of Salmonella-related recalls between 2010 and 2023, with botanical and herbal products consistently appearing among the highest-risk subcategories. A 2021 analysis published in the Journal of Food Protection found that approximately 15% of raw botanical powders tested from commercial suppliers showed evidence of microbial contamination above acceptable limits — a figure that should concentrate the mind of anyone in this space.


The Regulatory Framework: 21 CFR Part 111

The governing regulation for dietary supplement manufacturing is 21 CFR Part 111 — Current Good Manufacturing Practice (cGMP) in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements. If you are manufacturing supplements and Salmonella is showing up in your finished product, Part 111 has something to say about almost every step where the failure occurred.

The specific provisions most relevant to microbial contamination risk are:

Regulatory Requirement CFR Citation What It Requires
Establish product specifications 21 CFR § 111.70(a) Written specs for every component, including identity and purity
Test components against specs 21 CFR § 111.75(a)(1) Must verify each component meets specs before use
Supplier qualification 21 CFR § 111.75(a)(2) May rely on CoA only if supplier is qualified through appropriate verification
In-process controls 21 CFR § 111.75(c) Monitor points where contamination could occur
Finished product testing 21 CFR § 111.75(d) Must ensure finished product meets specifications
Reserve samples 21 CFR § 111.83 Retain samples sufficient for retesting
Laboratory controls 21 CFR § 111.315 Written procedures for all lab testing

The phrase I want to draw your attention to is in § 111.75(a)(2): you may rely on a supplier's Certificate of Analysis (CoA) rather than testing every incoming lot yourself — but only if you have done the work to qualify that supplier. Relying on a CoA from an unqualified supplier is not compliance. It is paperwork dressed up as compliance, and FDA investigators know the difference.


What a Qualified Supplier Program Actually Looks Like

Supplier qualification is probably the single control that prevents the largest share of contamination-related recalls in the supplement industry. Here is what a functional program includes.

Initial qualification audit. Before you accept a single shipment, you (or a qualified third party) should evaluate the supplier's cGMP status, their own testing protocols, their pest control program, and their handling procedures for botanical raw materials. A questionnaire alone is not an audit.

Periodic re-qualification. Supplier practices change. A facility that was clean three years ago may have had personnel turnover, facility changes, or sourcing shifts. Re-qualification on a defined schedule — typically annually for high-risk ingredient suppliers — catches drift before it becomes your problem.

Lot-specific CoA review with acceptance criteria. The CoA should list actual test results, not just "passes" or "complies." You need numbers — total aerobic count, yeast and mold count, and absence confirmation for specified pathogens including Salmonella, E. coli, and Staphylococcus aureus. If a CoA does not include pathogen testing results for a botanical powder, that is a gap worth flagging immediately.

Independent verification testing. For high-risk botanical ingredients, periodic independent testing by a third-party accredited laboratory is not optional if you want a defensible quality system. You do not have to test every lot independently, but your supplier qualification SOP should define the frequency — typically every fifth or tenth lot, or whenever a supplier changes their source country or processing method.


Incoming Ingredient Testing: The Control That Matters Most

If I had to identify the single most common gap I see when I work with supplement manufacturers on their cGMP programs, it is this: they are accepting botanical powders based solely on a supplier CoA, with no independent verification, from a supplier they have never audited.

That is a recall waiting to happen.

Your incoming ingredient testing program for botanical raw materials should, at minimum, include:

  • Identity testing using an appropriate method (HPTLC, NIR, or organoleptic per a written specification) — this confirms you received what you ordered
  • Microbial limits testing — total aerobic count, yeast and mold, Salmonella (absence in 25g), E. coli (absence or NMT limit per spec)
  • Heavy metals screening — botanical powders from some regions carry lead, arsenic, cadmium, and mercury contamination
  • Pesticide residue screening — particularly relevant for materials sourced internationally

The testing burden scales with risk. Moringa powder, which is sourced primarily from tropical agricultural regions and undergoes no kill step, should sit in your highest-risk ingredient tier. That means more frequent independent testing, stricter supplier qualification requirements, and a quarantine hold policy that does not release any lot to production until testing is complete and reviewed.


In-Process and Finished Product Controls

Even a clean incoming ingredient can become contaminated during manufacturing if your facility, equipment, and personnel controls are not functioning. The areas to audit in your own operation:

Environmental monitoring. A written environmental monitoring program — swabbing surfaces, drains, and equipment contact areas on a defined schedule and testing for pathogens — gives you early warning of facility contamination before it reaches product. FDA expects this under § 111.20 (physical plant and grounds) and the broader cGMP principle that you prevent contamination rather than just test for it after the fact.

Equipment cleaning validation. Your cleaning procedure needs to be validated, not just written. Blenders, encapsulators, and hoppers that contact botanical powders are reservoirs for contamination if cleaning is inadequate.

Personnel hygiene and training. Under 21 CFR § 111.13, all personnel must have the education, training, and experience necessary to perform their assigned functions. That includes specific training on microbial contamination risk, proper gowning, and hand hygiene — not a one-time video, but documented recurring training with competency verification.

Finished product release testing. Your finished product specifications should include microbial limits, and no lot should be released for distribution without a passing result. This is explicit in § 111.75(d). The test result should be reviewed and approved by a qualified individual before release — not after product has already shipped.


The Complaint and Adverse Event System: Your Early Warning Network

One underappreciated prevention tool is a functioning consumer complaint and adverse event reporting system. Under 21 CFR § 111.570, you must establish and follow written procedures for receiving and reviewing consumer complaints. Under the Dietary Supplement and Nonprescription Drug Consumer Protection Act (21 U.S.C. § 379aa-1), serious adverse events must be reported to FDA within 15 business days.

In practice, a well-run complaint system does more than keep you compliant — it surfaces signals. If you are receiving complaints about GI illness from a particular lot, that is a data point that should trigger internal investigation before FDA shows up. Companies that catch their own problems first are in a fundamentally different position than companies that learn about them from a regulatory agency or a news headline.


Recall Prevention vs. Recall Response: A Systems Comparison

There is a meaningful difference between companies that prevent recalls and companies that simply manage them after the fact. The table below captures the distinguishing features.

Quality System Element Prevention-Oriented Program Reactive Program
Supplier qualification Full audit + periodic re-qualification CoA on file, no audit
Incoming ingredient testing Independent lab testing per risk tier Relies solely on supplier CoA
Environmental monitoring Written program, scheduled swabs, trending Sporadic or absent
Finished product release Hold until testing complete and approved Release before results in hand
Complaint handling Documented, trended, triggers investigation Ad hoc, reactive
Internal audits Scheduled, findings tracked to closure Informal or infrequent
CAPA system Linked to root cause, verified effective Corrective actions documented but not verified

The column on the right is not a caricature. I see it regularly in small and mid-size supplement companies, particularly those that have grown faster than their quality infrastructure. The product is selling well, the supplier has never caused a visible problem, and the quality system gets deprioritized in favor of the next SKU launch. That works until it does not.


Practical Steps You Can Take Right Now

If the Zen Principle® recall prompted you to look at your own program, here is where I would start:

1. Pull your supplier qualification files for your top five botanical ingredients. For each one, confirm: Have you audited this supplier, or are you relying solely on their CoA? When did you last re-qualify them? Do their CoAs include actual pathogen test results?

2. Review your incoming ingredient testing SOP. Does it define a risk tier for each ingredient category? Does it specify independent laboratory testing for high-risk botanicals, and at what frequency?

3. Check your finished product release procedure. Is there a documented hold-until-tested policy? Who is authorized to release product, and is that person reviewing actual test results?

4. Audit your environmental monitoring program. If you do not have a written, scheduled environmental monitoring program for your manufacturing space, that gap needs to close.

5. Train your team on microbial contamination risk. This does not have to be elaborate — but it has to be documented, and it has to include botanical-specific risk context, not just generic food safety principles.

None of this is exotic. It is cGMP applied consistently and taken seriously. The difference between a company that gets a recall notice and a company that does not is usually not a technical knowledge gap. It is whether the quality system is functioning day-to-day or sitting in a binder.


A Note on Scale

I want to be direct about something that sometimes gets lost in compliance discussions: the size of your operation does not determine your risk level. Small supplement companies sometimes assume that their scale means FDA is not paying attention, or that their volume is too low to matter. That is not accurate, and it is not a safe assumption.

FDA's recall database includes companies of every size. Salmonella does not scale with revenue. A single contaminated lot, even a small one, can cause serious illness — and the regulatory, legal, and reputational consequences of a recall are disproportionately harder for a smaller company to survive.

The Relay Peak Research LLC recall is a reminder that contamination risk is real, that regulatory expectations under 21 CFR Part 111 apply to every manufacturer regardless of size, and that the controls described in this article are not aspirational — they are the baseline.

If you want a second set of eyes on your supplier qualification program, your incoming ingredient testing protocols, or your overall cGMP readiness, contact Certify Consulting for a gap assessment. We have helped more than 200 clients build quality systems that pass FDA scrutiny on the first try — and more importantly, systems that catch problems before they become recalls.

You can also review our dietary supplement cGMP compliance resources for additional guidance on 21 CFR Part 111 implementation.


Source: FDA Safety Recall Notice — Relay Peak Research LLC Recalls Zen Principle® Moringa Capsules Because of Possible Health Risk. Available at: https://www.fda.gov/safety/recalls-market-withdrawals-safety-alerts/relay-peak-research-llc-recalls-zen-principler-moringa-capsules-because-possible-health-risk

Last updated: 2026-07-23

J

Jared Clark

Principal Consultant, Certify Consulting

Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.