Out-of-Specification Results in Supplement Testing: What FDA Expects You to Do Next

Most brands treat third-party testing like a pass/fail gate. The lot sits on hold, the COA arrives, you check the boxes, and the product ships. When everything passes, the process is invisible. When something fails, most brands reach immediately for their phone — and their first question is almost always the same: “Can you just retest it?”

That question, asked in that order, is how OOS results become compliance problems.

An out-of-specification result isn’t just a bad data point. It’s a federally governed event that triggers a defined investigation protocol under the dietary supplement GMP regulations in 21 CFR Part 111. How your brand responds in the hours and days after that call will either build or undermine your compliance record. We’ve seen brands handle this well and handle it badly. The difference almost never comes down to the testing itself. It comes down to whether anyone in their quality chain knew what to do before it happened.

What “Out of Specification” Actually Means in a Supplement Testing Lab

An OOS result occurs when a test result falls outside the acceptance criteria in your finished product specification — or outside a compendial limit, like the USP <61>/<62> microbial enumeration thresholds or a label claim tolerance for potency. It could be a protein content reading 18% below label claim on a whey powder. It could be an aerobic plate count above your internal limit in a probiotic capsule. It could be a lead reading that clears the California Prop 65 limit but fails your own tighter internal spec.

OOS is different from out-of-trend (OOT), and the distinction matters. An OOT result sits within specification but tracks in the wrong direction — potency declining across three consecutive stability time points in a pattern that predicts a failure at month 18, even if month 6 technically passes. OOT results don’t trigger the same mandatory investigation chain, but they deserve attention. Many OOS failures that shock brands were preceded by OOT signals in incoming raw material data or in-process testing that nobody escalated.

The instinct when an OOS result comes in is to assume the lab made a mistake. That’s understandable — nobody expects to fail a test they were confident about. But a well-run ISO 17025 accredited supplement testing lab runs system suitability checks before every analytical sequence, maintains reference standard traceability to NIST or USP reference materials, and documents instrument performance continuously. Analytical errors do happen, but they’re less common than most brands assume. The investigation process is designed to determine whether one occurred — and that determination has to be documented regardless of outcome.

Phase 1: The Lab’s Investigation — and Why ISO 17025 Makes It Non-Negotiable

When an OOS result is identified, the investigation starts at the lab. This is Phase 1. Under ISO/IEC 17025:2017 section 7.10, nonconforming work must be formally evaluated — including whether the result itself may have been affected by an analytical problem. An accredited lab isn’t doing this as a courtesy. It’s a requirement of their accreditation.

Phase 1 covers a defined set of checks: instrument calibration state and system suitability performance at the time of the run; reagent and reference standard lot numbers and expiration dates; sample preparation records including extraction steps and dilution calculations; analyst documentation for transcription or calculation errors; and chromatographic data review for methods involving HPLC or GC. For microbiology OOS results, the review also covers incubation temperature logs, media lot certification records, and analyst competency documentation.

A thorough Phase 1 typically takes 24 to 72 hours, depending on method complexity and the volume of documentation requiring review. If the investigation identifies a confirmed assignable cause — a documented instrument malfunction, an expired reagent used inadvertently, a transcription error caught in the data trail — the original result can be invalidated. The lab retests the retained sample under corrected conditions and issues results based on the valid analysis.

The catch: “suspected” error isn’t sufficient. The assignable cause must be documented and defensible. And the retained sample for the retest must come from the original submission — not a fresh pull from the same lot, and not a new sample collected after the fact.

Here’s what surprises most brands: the majority of OOS results survive Phase 1. The lab finds no analytical error, closes the Phase 1 investigation with the original result confirmed, and notifies you. At that point, the data is yours to investigate — and FDA expects exactly that.

Phase 2: The Manufacturing Investigation Your Brand Has to Lead

Phase 2 is where the dietary supplement GMP regulations shift the burden directly to the manufacturer or brand. 21 CFR Part 111 requires that when a finished dietary supplement doesn’t meet specifications, a documented written investigation must be conducted. That requirement applies whether or not you ultimately find an assignable cause. The investigation itself — with a documented conclusion — is mandatory.

This is the phase most supplement brands have no established procedure for. And the absence of a procedure is itself a GMP finding waiting to surface during an FDA inspection.

A Phase 2 investigation starts with the batch production record. You’re examining: raw material COAs from every ingredient in that batch, and whether those COAs were verified by your incoming quality controls or simply filed away; any in-process testing results; blend uniformity data; equipment cleaning and sanitization records for the production run; environmental monitoring data from that manufacturing day; and any deviations or exceptions documented during production. If the OOS is a potency failure, you’re asking whether the raw material assay was actually verified at incoming or whether the supplier COA was accepted at face value. If it’s a microbial failure, you’re asking whether your environmental monitoring program is catching facility drift before it shows up in finished product.

On retesting: yes, Phase 2 retesting is permitted. FDA’s 2006 guidance on OOS investigations — developed for pharmaceutical production under 21 CFR Part 211 but widely applied as the standard investigative framework in supplement facilities — is specific about what valid retesting looks like. The retest must use retained sample from the original lot, be conducted by a different analyst using the same validated method, and the results must be statistically evaluated alongside the original OOS data. Three to five additional determinations is typical. What you cannot do is run a second set of tests, get passing results, and average them against the original OOS to land on a number that passes. That isn’t a retest — it’s dilution of a real failure, and FDA’s guidance addresses this directly.

If Phase 2 retesting confirms the OOS, you have a confirmed batch failure. If the retest results pass and you have a scientifically documented explanation for the discrepancy — an identified process variable, a confirmed sampling anomaly — lot release may be defensible. But that rationale must be documented, signed off by your quality authority, and retained in the batch record permanently.

What Happens to Your COA — and Your Lot Release Decision

A certificate of analysis is a legal representation of the lot it covers. A reputable ISO 17025 accredited supplement testing lab won’t amend a COA to show passing results while a Phase 1 investigation is open, and won’t issue a clean COA for a confirmed OOS result without documented scientific justification for doing so.

This creates real operational pressure when a lot is sitting at a 3PL warehouse waiting on a release decision. The answer is that the lot stays on hold. Shipping product against an unresolved OOS isn’t just a GMP violation — it’s direct liability exposure if that lot later generates consumer complaints, an FDA adverse event report, or ends up in a recall inquiry.

A complete OOS investigation closes in one of three ways:

Lab error confirmed. Phase 1 identifies and documents an assignable analytical cause. The original result is invalidated, the retained sample is retested under valid conditions, and a new COA reflects the valid result. This outcome is relatively uncommon but does happen, particularly when a reagent problem or instrument malfunction can be definitively traced.

No lab error found; Phase 2 resolves the discrepancy. The manufacturing investigation identifies a process variable or sampling explanation, the retest data supports release, and your quality authority documents a scientific rationale for lot disposition. The batch record is closed with the full investigation included. The lot may be released if the documented rationale is defensible.

Batch failure confirmed. The lab investigation finds no assignable cause, and the Phase 2 manufacturing review finds no acceptable explanation. The lot is rejected. Disposition options include destruction, reprocessing under documented GMP conditions where the product type allows it, or return to the contract manufacturer. A corrective and preventive action (CAPA) is initiated. Every step is recorded in the batch record, permanently.

Build Your OOS SOP Before the Call Comes In

The brands that handle OOS results cleanly are the ones that already have a written procedure when the lab calls — not because they assumed they’d fail, but because they understood that a quality system doesn’t start working when you need it. It works because it was in place before you needed it.

An OOS SOP for a supplement brand doesn’t need to be a 50-page document. It needs to define: who gets notified when the lab reports an OOS result and within what timeframe; who is responsible for initiating Phase 2 and owning the investigation documentation; what the lot hold protocol looks like in your warehouse and with your 3PL; who has authority to make the final lot disposition decision; and how the investigation outcome gets documented and retained in the batch record. Review it annually. Practice it with a mock scenario. The first time your team runs through an OOS investigation should not be when a real one is open.

One pattern worth naming directly: don’t send the same sample to a second lab before Phase 1 closes at the first. Testing the same lot at multiple laboratories for the purpose of obtaining a passing result — without a pre-defined, science-based protocol for doing so — is inconsistent with CGMP obligations. If your testing strategy involves more than one lab, that multi-lab approach needs to be documented in advance and rooted in method comparison rationale, not in response to an inconvenient result.

The brands that avoid OOS crises aren’t the ones with the most sophisticated testing programs. They’re the ones verifying incoming raw material COAs with check-test data rather than filing them, running in-process controls that catch blend issues before the batch closes, and treating third-party finished product testing as confirmation — not as the last line of defense.

When the lab calls with an OOS, the first thing your quality team should reach for isn’t a phone to argue. It’s the SOP that tells them exactly what happens next.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA Inspection Readiness and 21 CFR Compliance Strategy — Aurora TIC helps regulated companies build audit-ready quality systems and navigate FDA oversight with confidence.
• Incoming Raw Material Testing and Supplier COA Verification — Ayah Labs provides contract testing services for raw material qualification, helping brands catch ingredient failures before they become finished-product OOS events.
• Health Canada GMP Compliance and NHP Testing — Androxa supports Canadian supplement brands with GMP-aligned testing programs under Health Canada’s Natural Health Products Directorate.