21 CFR Part 111 Identity Testing: What Analytical Laboratories Actually Help You Prove

Scroll through the FDA’s recent dietary supplement warning letters — not just the headlines, but the actual 483 observations — and one failure type surfaces with uncomfortable regularity: the company couldn’t demonstrate that its incoming ingredients were what the supplier claimed them to be. Not labeling errors. Not heavy metal overages. Identity.

And that’s a fixable problem. Under 21 CFR Part 111, identity testing requirements are specific, documented, and entirely achievable with the right analytical laboratory partner. The brands that end up with 483s aren’t usually cutting corners intentionally — they’re operating under a genuinely common misread of what the regulation requires.

What 21 CFR §111.75 Actually Says (The Language Is More Specific Than Most People Think)

Section 111.75 of the CGMP rule for dietary supplements lives in Subpart E, which governs requirements for incoming components. The operative sentence is in §111.75(a)(1)(i): you must conduct at least one appropriate test or examination to verify the identity of any component that is a dietary ingredient.

That’s a mandatory testing trigger, not a best practice. And the phrase “appropriate test or examination” has been clarified through FDA guidance and inspection experience: organoleptic evaluation — smelling it, looking at it, rubbing it between your fingers — does not satisfy the requirement when used as the sole verification method for a dietary ingredient. It can support a determination. It can’t constitute one.

Section 111.75(a)(2) offers a limited exception: for components that are not dietary ingredients (excipients, processing aids, packaging materials), you may rely on a supplier’s certificate of analysis if you’ve first established supplier reliability through a qualifying testing program. For dietary ingredients themselves — the botanicals, amino acids, minerals, and vitamins that are the actual functional content of your product — §111.75(a)(1)(i) provides no such carve-out. Every lot, every time.

Here’s where even experienced QA managers hit a wall: “every lot” isn’t negotiable based on supplier tenure. If you’ve been purchasing ashwagandha root extract from the same Indian supplier since 2019 with zero issues, that track record matters for your supplier qualification documentation. It doesn’t satisfy the incoming identity testing requirement for a new lot received last Tuesday. FDA investigators ask for testing records by lot number — not by supplier relationship history.

The Three-Method Toolkit Analytical Laboratories Use for §111.75 Compliance

The regulation tells you what to accomplish; it doesn’t mandate a specific method. Qualified analytical laboratories select from a tiered toolkit based on ingredient type, physical form (whole herb, powder, standardized extract), and your existing specification:

HPTLC — High-Performance Thin Layer Chromatography

HPTLC is the botanical identity reference method recognized in both the USP Dietary Supplements Compendium and the American Herbal Pharmacopoeia. A properly developed HPTLC plate produces a visible chromatographic fingerprint that’s compared directly against authenticated reference standards. For common botanicals — echinacea, valerian, elderberry, ginger root, milk thistle — USP maintains physical reference standards that analytical labs run simultaneously with your sample. A mismatched fingerprint is obvious. Partial adulteration, where a lower-cost species is blended in at 20–30%, shows up as extra bands or anomalous Rf values.

One thing worth knowing: HPTLC can occasionally miss a sophisticated adulteration where the substitute species carries a similar flavonoid or alkaloid profile. That’s precisely why high-risk botanicals warrant a second method.

DNA Barcoding (PCR-Based Species ID)

PCR amplification targeting the ITS2 or psbA-trnH region of plant chloroplast DNA delivers species-level identification that no chromatographic method can match for precision. This matters most for botanicals where genus members vary dramatically in activity or safety. Panax ginseng and Siberian ginseng (Eleutherococcus senticosus) are different genera with different pharmacology — and they’ve appeared interchangeably in supply chains. Berberine-containing herbs like barberry root and goldenseal get substituted against each other routinely. DNA barcoding puts a species name on the ingredient, full stop.

One practical caveat: heavily processed extracts and some spray-dried powders degrade DNA sufficiently to produce ambiguous amplification. A competent analytical laboratory knows which matrices are good candidates for PCR and which require HPTLC as the primary method, with barcoding as confirmation.

FTIR — Fourier Transform Infrared Spectroscopy

FTIR generates a rapid bulk-chemical fingerprint across a broad wavenumber range. It’s faster than HPTLC — typically under 30 minutes per sample — and particularly useful for mineral-form ingredients, amino acids, and excipients. For complex botanical powders, FTIR alone usually doesn’t satisfy §111.75 identity requirements, but it functions as an efficient screening step before committing to full chromatographic analysis. A first-pass FTIR sweep that looks anomalous is a signal to escalate immediately; one that looks clean narrows the risk profile before HPTLC is run.

Building a Testing Program That Holds Up When FDA Investigators Arrive

Having test results is half the compliance picture. Having a documented, systematic program is the other half — and the half that more often determines inspection outcomes.

Here’s the five-step framework we walk new clients through:

1. Write specifications before the first lot arrives. Your specification for each incoming dietary ingredient must define what “identity confirmed” means before you receive anything. Which method? Which reference standard? What acceptance criteria constitutes a pass? A test result that predates a written spec doesn’t demonstrate compliance — it demonstrates you ran a test. The specification anchors the result.

2. Select an ISO 17025-accredited analytical laboratory. ISO 17025 accreditation means the laboratory’s methods are validated, equipment is calibrated to traceable NIST standards, and results are defensible in a regulatory proceeding. Accreditation scope is the detail most brands miss: confirm that HPTLC and DNA barcoding are within the lab’s accredited scope for your specific ingredient types — not simply “offered” outside the accreditation umbrella.

3. Request CoAs that name the method, not just the verdict. A CoA stating “Identity: Pass” without identifying the method used, the reference standard lot number, and the analyst is functionally useless for cGMP documentation. Your incoming CoA should reference the USP or AHP method, the specific reference standard batch, and ideally include the HPTLC plate image or the PCR output as an attachment. That documentation is what you hand to an FDA investigator, not a one-line result.

4. Establish your skip-lot testing policy in writing — and get the scope right. Some QA programs implement skip-lot testing for low-risk components from historically reliable suppliers. Under §111.75(a)(2), that’s permissible for non-dietary-ingredient components with a documented supplier qualification basis. For dietary ingredients, skip-lot is not a valid option — period. If your SOP incorrectly extends skip-lot testing to a botanical ingredient, you’ve created a documentation deficiency that’s harder to defend than a missing test record.

5. Archive each lot as a complete packet. Every incoming lot should have a receiving record, a quarantine label, a test requisition, the resulting CoA, and a disposition record — all linked by lot number. When FDA requests documentation for 20 incoming ingredient lots from the past 18 months, you should be able to pull 20 complete packets within the hour. If assembling that documentation requires searching three separate file systems and calling your lab for copies, you have an archival problem that exists independently of whether your testing was technically sound.

Working with an Analytical Laboratory in the Midwest: What the Process Looks Like

Ayah Labs receives botanical samples at our Countryside, IL facility and transfers them to Qalitex’s ISO 17025-accredited California laboratory for method-based testing. Standard turnaround from receipt to final CoA is 5–7 business days. For HPTLC identity testing, samples run against authenticated USP reference standards with plate images included in the CoA package. For botanicals where DNA barcoding is appropriate — high-adulteration-risk ingredients, complex genus/species pairs, or any ingredient flagged in USP’s Botanical Adulterants Prevention Program — we recommend dual-method testing and document the rationale in the test report.

Most Midwest brands approaching their first §111.75 program don’t know exactly which ingredients need which methods, and that’s a normal starting point. Our standard intake process includes a review of your incoming ingredient list against documented adulteration surveillance data. Elderberry, turmeric, ashwagandha, bilberry, and several berberine-containing herbs appear in adulteration databases repeatedly — those get flagged for HPTLC plus barcoding by default. Ingredients with clean surveillance histories and USP monographs may qualify for HPTLC alone. The testing strategy is ingredient-specific, not one-size.

The Practical Takeaway

Pull your current incoming ingredient list. For each item classified as a dietary ingredient, ask one question: can you produce a test record for every lot received in the last 12 months that names the method, references an authenticated standard, and links to a disposition decision? If the answer is no for any ingredient — not the riskiest one, not the newest supplier, any ingredient — that’s your compliance gap and your starting point.

The regulation isn’t ambiguous on this. What remains unclear for most brands is how to build the program efficiently, which methods satisfy the “appropriate test” standard for which ingredients, and how to document it so that the records stand on their own under scrutiny. That’s where a qualified analytical laboratory earns its role in your quality system — not just running tests, but giving you results that function as compliance evidence.

---

Written by Nour Abochama, VP Operations, Qalitex | Quality Consultant, Ayah Labs. Learn more about our team

Ship your sample to our Chicago facility — get a Qalitex CoA in 5–7 days. Contact us

Related from our network

• ISO 17025 Accredited Supplement Testing — Qalitex Laboratories — Qalitex performs HPTLC, DNA barcoding, ICP-MS, and USP microbiology testing under full ISO 17025 accreditation for dietary supplement raw materials and finished products.