Does a quality agreement actually protect me, or am I still on the hook if my manufacturer fails?

This is United States federal law, read for four product classes: dietary supplements, human food, over-the-counter drugs and cosmetics. It is about what happens to you, not about what a court would do with your contract, which is a separate question for your own counsel.

Read this before the requirements below. The good manufacturing practice rules people quote in this argument may not all reach you, and where one does not, that changes more than it looks. You are subject to the dietary supplement part if you manufacture, package, label or hold a supplement; the part states that as a sufficient condition, and the only exception it states is a narrow one for holding at a retail establishment for the sole purpose of direct retail sale to individual consumers (21 CFR 111.1(a), 111.1(b)). A cosmetic responsible person or facility under the statute’s sales threshold that does not make the four product types the section lists is a small business and not subject to the good manufacturing practice section or the registration and listing section (21 U.S.C. 364h(a), 364h(b)). The food preventive controls and supply-chain subparts carry their own exemptions, including one for a qualified facility and one for a facility solely storing unexposed packaged food. Read both to the end, because neither removes everything: a qualified facility is subject to modified requirements instead, at section 117.201, and a storage-only facility to the modified requirements at section 117.206 for food that needs time or temperature control (21 CFR 117.5(a), 117.7(a), 117.7(b)). And the drug part is not enforced against over-the-counter drug products where the products and all their ingredients are ordinarily marketed and consumed as human foods. That provision does not leave you outside a manufacturing rule; read on and it names the rule that applies instead, saying that until further notice parts 110 and 117, and where applicable parts 113 through 129, are applied in determining whether those products are made under current good manufacturing practice (21 CFR 211.1(c)).

Now the part that decides how much that matters, because two of the four defect routes below are built on a manufacturing rule rather than standing beside it. For a cosmetic, one route adulterates only for failing the good manufacturing practice requirements of section 364b, and that section does not state any: it directs the Secretary to establish them by regulation, on a timetable it sets (21 U.S.C. 361(f), 364b(a), 364b(c)). No such regulation is cited here at the read date at the foot of this page, so check that rulemaking at its source. A small business outside section 364b is outside that route with it (364h(a)). For a drug, the defect route is triggered by failure to comply with parts 210, 211, 213, 225 and 226, so a forbearance on part 211 reaches it too (21 CFR 210.1(b), 211.1(c)).

What no exemption from a manufacturing rule touches is everything after that: the defect routes that do not run through one, the act of putting an adulterated article into commerce, and the proceeding against the goods. Those are written about the product and about the act of shipping it, not about your operations.

On this page: What protection would have to mean · The defect is in the product; the act is yours · What the penalty section says · The one instrument the statute names · If your maker is offshore · What the agreement is actually worth · Where the gap opens · What a finding looks like · Four things to check

What protection would have to mean

People asking this question are usually asking three things at once, and they have different answers.

The first is whether the agreement stops FDA acting against you and your product. The second is whether it stops you being prosecuted personally. Both of those are federal law and both are answered below. The third is who ends up paying for the destroyed inventory, the recall and the customer claims. That one is decided by your contract, your indemnities and your insurance, and it is not a question this page can answer for you. What follows changes none of it, and it is worth being clear that a document can be worth having for the third reason while doing nothing at all for the first two.

The defect is in the product; the act is yours

Start with how a product becomes legally defective. In every class it is a statement about the article: none of these provisions asks who made it, and none conditions the defect on what two companies agreed. One of them does go on to name a party, and it is worth noticing which one and on what basis.

A dietary supplement is adulterated if it has been prepared, packed or held under conditions that do not meet the good manufacturing practice regulations (21 U.S.C. 342(g)(1)). Food is adulterated if it has been prepared, packed or held under insanitary conditions whereby it may have become contaminated with filth, or whereby it may have been rendered injurious to health (21 U.S.C. 342(a)(1), limb (4)). For drugs the regulation says it outright: failure to comply with the drug manufacturing regulations renders the drug adulterated, and the drug, as well as the person responsible for the failure to comply, is subject to regulatory action (21 CFR 210.1(b)). A cosmetic is adulterated on three separate routes: if it has been prepared, packed or held under insanitary conditions of the same kind; if it has been manufactured or processed under conditions that do not meet the good manufacturing practice requirements of section 364b, which that section directs the Secretary to establish by regulation rather than stating itself; and if the cosmetic product, including each ingredient in it, does not have adequate substantiation for safety as the statute defines that term (21 U.S.C. 361(c), 361(f), 361(g), 364b(a)).

Read them again for what is not in them. Not one asks who made the product, who was contractually responsible for the step that failed, or what the two companies agreed in writing. The drug regulation is the only one that names a party at all, and the party it names is the person responsible for the failure to comply, which is a fact about who did the work rather than about who signed what. The adulteration itself is a property the article carries out of the plant, and your agreement cannot argue with it because there is nothing in it to argue with.

Then comes the act. The introduction or delivery for introduction into interstate commerce of any food, drug, device, tobacco product or cosmetic that is adulterated or misbranded is a prohibited act (21 U.S.C. 331(a)). So is the receipt in interstate commerce of an adulterated or misbranded article and the delivery or proffered delivery of it, for pay or otherwise (331(c)). If your maker ships to you and you ship to your customers, the second one describes exactly what you did.

And the goods themselves can be proceeded against directly. An article of food, drug or cosmetic that is adulterated or misbranded when introduced into or while in interstate commerce, or while held for sale after shipment in interstate commerce, is liable to be proceeded against on libel of information and condemned in a district court (21 U.S.C. 334(a)(1)). That proceeding runs against the article itself. The provision naming it says nothing about which company answers for the goods, and there is nothing in it for an agreement between two companies to reach.

What the penalty section says, and what it does not

This is where the fear behind the question usually sits, so read the section itself rather than what people say about it.

Any person who violates a provision of the prohibited acts section shall be imprisoned for not more than one year or fined not more than $1,000, or both (21 U.S.C. 333(a)(1)). The next paragraph raises that to three years or $10,000 where the person commits the violation after a conviction has become final, or commits it with the intent to defraud or mislead (333(a)(2)).

Those two figures are the ones this section prints. What a court would actually impose is a question of federal sentencing law, which this page does not read, so treat the amounts as the section’s own words rather than as the number on a bill.

The part worth your attention is elsewhere. Put the two paragraphs side by side: a state of mind appears in the second and not in the first. That contrast is on the face of the section, and it is the reason people say you can be exposed without having known anything. How courts have applied that in practice is case law, which this page does not read and does not pretend to; if that is the part you are worried about, it is a question for a lawyer and not for a quality document. What the statutory text supports is narrower and still worth knowing: the lighter penalty provision does not, in its own words, require that you knew.

The one instrument the statute names, and it is not your quality agreement

The Act does contain a document that relieves a person of penalties for someone else’s failure. It is not a quality agreement, it is not an indemnity, and almost nobody buying a quality agreement has one.

The relief provision runs to six numbered routes, and four of them can reach a person who received an article and passed it on. Two carry most of the weight and are set out below. The other two are narrower: one covers adulteration by an uncertified color additive, on a guaranty from the manufacturer of that color additive, and one covers a failure to carry adequate directions and warnings on an article received in interstate commerce, where the delivery was made in good faith and the labeling was unchanged from what it carried at receipt (21 U.S.C. 333(c)).

1. The good-faith deliverer. No penalty under the lighter provision for having received an article in interstate commerce and delivered it or proffered delivery of it, if that delivery or proffer was made in good faith, unless the person refuses to furnish, on request of an officer or employee duly designated by the Secretary, the name and address of the person from whom the article was purchased or received and copies of all documents, if any there be, pertaining to its delivery. Read the disqualifier carefully, because it is a refusal to furnish and not an inability to produce, and the words “if any there be” contemplate that there may be no delivery documents at all. The route is not conditioned on documents existing. It is defeated by withholding what there is.
2. The guaranty. No penalty under the lighter provision for having violated the introduction-into-commerce paragraph, or the paragraph on introducing an article that may not lawfully be introduced, if the person establishes a guaranty or undertaking signed by, and containing the name and address of, the person residing in the United States from whom the article was received in good faith, to the effect that the article is not adulterated or misbranded within the meaning of the Act.

Three things about that second route decide whether it is worth anything to you. It is a statement about the article, not an allocation of manufacturing tasks, so a quality agreement assigning who performs stability testing is not it. The residency condition attaches to the person you received the article from, not to whoever made it, so the party to ask is the one in your own chain: where you take delivery from a United States importer or distributor, that is the party who can sign, whatever the address of the plant. And it relieves the penalties of the lighter provision only. Nothing in it reaches the seizure and condemnation of the goods, which is a separate section, and nothing in it reaches the aggravated penalty paragraph.

If your maker is outside the United States, the program is in your name

This one is worth reading closely, because the rule says exactly how far the work can be moved and where the moving stops. Except as that section itself specifies otherwise, the foreign supplier verification requirements apply to all food imported or offered for import into the United States and to the importers of such food (21 CFR 1.501(a)), and importer means the United States owner or consignee of an article of food being offered for import, or, where there is no United States owner or consignee at the time of entry, the United States agent or representative of the foreign owner or consignee, confirmed in a signed statement of consent (21 CFR 1.500). A dietary supplement is deemed to be a food within the meaning of the Act, except for two named purposes (21 U.S.C. 321(ff)), and the supplement part points you at this subpart itself (21 CFR 111.5).

A qualified individual must develop your program and perform each of the activities it requires (21 CFR 1.503(a)), and you must ensure that, for each line entry, your name, electronic mail address and a unique facility identifier recognized as acceptable by FDA are provided electronically at entry, identifying you as the importer (21 CFR 1.509(a)). Now the honest reading of how far that can be arranged. Who the importer is turns on facts two parties can set: the United States owner or consignee is the person who, at the time of entry, owns the food, has purchased it, or has agreed in writing to purchase it, and where there is no United States owner or consignee the foreign owner or consignee must designate a United States agent or representative as the importer (21 CFR 1.500, 1.509(b)). The activities can be moved too: a qualified individual may be, but is not required to be, an employee of the importer (1.500), and the subpart lets you meet several of its requirements by relying on work another entity did, including your foreign supplier’s own hazard analysis, provided you review and assess it and document that review (1.504(d), 1.506(e)(2)(i)).

Read the shape of that. The work moves; the review of the work does not, and neither does the name on the entry. That is the same answer this page gives everywhere else, written out clause by clause by the one subpart that bothered to. This subpart is about food; it does not reach a drug or a cosmetic.

What the agreement is actually worth

None of the above makes the document pointless. It makes its job a different job, and a narrower one that it does well: it decides whether you can answer, with records, when somebody asks.

The supplement rules are explicit that the people doing your quality work do not have to be your employees. Quality control personnel means any person, persons or group, within or outside of your organization, who you designate to be responsible for your quality control operations (21 CFR 111.3). Read what that permits and what it does not. You may hand the work out; the definition still calls them yours. You must identify who is responsible for your quality control operations, and each person must be qualified and hold responsibilities distinct and separate from what they do when not performing quality control (21 CFR 111.12(b)). You must determine whether the specifications you establish under section 111.70 are met (21 CFR 111.73). The verb is yours in all three, and the “you” in all three is a person the part reaches under its own applicability clause.

Then the records. If the part reaches you, you must have all records required under it, or copies of them, readily available during the retention period for inspection and copying by FDA when requested (21 CFR 111.610(a)). That is the sentence a quality agreement earns its fee on. If the batch records sit in your maker’s building and your agreement does not entitle you to copies, the failure to produce them on request is yours, not theirs.

The same shape appears in the other classes. For drugs, all production and control records, including packaging and labeling, are to be reviewed and approved by the quality control unit to determine compliance with all established, approved written procedures before a batch is released or distributed, and any unexplained discrepancy or specification failure is to be thoroughly investigated whether or not the batch has already been distributed (21 CFR 211.192). For cosmetics, the responsible person is the manufacturer, packer or distributor whose name appears on the label (21 U.S.C. 364(4)), and that person shall ensure, and maintain records supporting, that there is adequate substantiation of safety of the product, with one exception on the face of the section: it does not apply to a coal-tar hair dye that otherwise complies with the general cosmetic adulteration provision, and the responsible person for such a dye maintains records related to its safety instead (21 U.S.C. 364d(a), 364d(b)). Read what the definition does and does not settle. Whose name goes on the label is a thing two companies decide between them, so the status can be arranged; what cannot be arranged is being the named person and not owing the duty. Once your name is the one on the label, the substantiation is yours to hold, and if it lives in your formulator’s files you are the one who owes what you do not have.

Where the gap actually opens

The failure underneath this is not a document failure. It is the ordinary failure at the edge between two organizations: a scope that stops short of what the party relying on it assumed it contained, with each side writing its own version of the shared step so that the allocation is agreed by neither.

Here is what it looks like in practice. An agreement says the manufacturer will investigate out-of-specification results in accordance with its own standard procedures. It reads as settled. It names a party and an activity, and everyone signs. Then a result comes back out of specification, the investigation is performed to procedures you have never seen, and you are asked to show that you determined whether your specifications were met. The clause allocated the work and allocated no evidence, and the rule asking you the question is still the one that says you must determine (111.73).

The second half of the pattern is the agreement that governs nothing. It is signed, it is filed, and nothing on either floor is run to it, so the departure from it stops being seen as a departure. A signed document that describes work nobody performs is worse than no document, because it reads as evidence to the person holding it and evidences nothing to the person asking.

What an FDA finding actually looks like

It is worth seeing how this is written up, because the shape of the record is the argument. Reading FDA’s own published inspection and compliance data on August 18, 2026: a drug quality assurance inspection of OraLabs, Incorporated of Parker, Colorado ended on October 2, 2025 and was classified Official Action Indicated. The posted observations from that inspection were written under six clauses: equipment cleaning and maintenance (21 CFR 211.67(a), 211.67(b)), written production and process control procedures (211.100(a)), in-process sampling and testing (211.110(a)), laboratory controls (211.160(a)) and production record review (211.192). A warning letter followed on March 11, 2026 from FDA’s drug center, case 720690.

Every one of those clauses is about how that plant ran its own operations. Not one of them is an allocation between two companies. The part does reach an outside party in places, requiring that consultants advising on manufacture be qualified and that records of them be kept (21 CFR 211.34), and that sanitation procedures apply to work performed by contractors as well as by employees (211.56(d)). Even those are requirements on the establishment about the outsiders it uses, not a split of duty between two firms. What this does not evidence: we read the inspection and compliance records, not the warning letter itself, so nothing here is a statement about what the letter said. It says nothing about the brand owners whose products were made in that building, and nothing about what any agreement between them provided. What it shows is the shape of the instrument: findings are written against operations, at the party performing them, and the separate question of who is answerable for the finished article is settled somewhere else entirely.

Four things to check before you rely on the document you have

1. Take a dated copy before you touch anything. An executed agreement is a controlled record. Revising one is a decision for your own quality function and your own counsel, and you cannot show what a clause used to say once you have overwritten it.
2. Find the clauses that get you records, not the clauses that promise performance. Batch records, out-of-specification investigations and their conclusions, deviation reports, complaint files, the distribution list behind a recall. A promise to do the work is not a right to see the work, and where the supplement part reaches you it is the record you have to produce (111.610(a)).
3. Ask whether anyone has signed a guaranty. Not the quality agreement, and not an indemnity: the instrument the Act names, signed by the person residing in the United States from whom you received the article in good faith, stating that the article is not adulterated or misbranded (333(c)). The signer is the party you received it from, which is not always the party that made it, so the question is who sits in your own chain inside the United States.
4. Settle what your product legally is first. Every row of the table above turns on that one answer, and a product marketed with a drug claim is not in the regime its owner assumed. Our article on whether a product is a cosmetic, a drug, a supplement or a food works through the definitions. If the prior question for you is whether you need a separate quality document at all, that is answered in quality agreement or supply contract.