How to Verify a Brazilian Food Supplier

Start with legal and operational identity: the registered entity, the physical plant that would manufacture your product, the declared activities and whether production is in-house or subcontracted. Then compare that identity against certificates, specifications, laboratory reports and any applicable public registration. Legitimacy is established by consistency across independent sources, not by a single document. Where sources disagree — an invoice entity, a certificate address and a presentation describing a different plant — the difference should be clarified before approval rather than after the first shipment.

Yes, this is one of the most frequent verification questions. It involves confirming the legal entity, the manufacturing address, the declared activities, ownership of the formulation, whether any step is subcontracted, where packaging occurs and which company appears on certificates and registrations. Many legitimate Brazilian suppliers use contract manufacturers, related companies or shared packing sites. The risk is not the arrangement itself, but a supply-chain structure that differs from what the buyer believes it is approving.

In several regulated categories, yes. MAPA maintains SIPEAGRO-related systems and public data covering registered establishments and products in the agricultural categories under its competence, and ANVISA publishes information for products under its own competence. Whether a useful public record exists depends on the product, the activity and the responsible authority. A record can confirm registration status for a defined scope; it cannot confirm that the registration covers the facility, product or market that matters to your purchase.

No. A registration is a regulatory status granted for defined activities, products and a specific establishment. It does not evaluate your specification, your destination-market requirements, your allergen or testing expectations, your certification requirements or the supplier's current performance. Regulatory registration is an important verification element when applicable, and its absence in a category that requires it is a serious finding — but supplier approval remains a buyer decision based on buyer criteria.

Read the scope statement rather than the cover page. It should identify the certified legal entity, the site address, the certified activities and product categories, the standard and version, the certification body, the issue and expiry dates and any exclusions. Confirm that the certification body is recognised for the scheme, and where the scheme provides a public directory, check the status independently instead of relying only on the PDF supplied by the supplier. Then compare the certified address with the plant that would produce your product.

Not on its own. A valid certificate is evidence of a certification outcome within a defined scope at a point in time. It does not confirm that the scheme matches your requirements, that the certified site is the one manufacturing your product, that findings are closed, or that your product-specific and customer-specific requirements are addressed. Certification reduces uncertainty; it does not transfer your responsibility for defining the requirements that matter and verifying that they are met.

Typically: legal and facility identification, applicable registrations, certification certificates including scope pages, product specifications, process flow and hazard analysis, allergen and sanitation controls, traceability procedures, a testing plan with representative laboratory reports, complaint and nonconformity history, and corrective-action records. Always ask which facility each document refers to and request dated scope pages, not only cover sheets. The value of a document package comes from reconciling it, not from collecting it.

Partially, and in many cases that is the right first step. Remote verification can include official-record checks, certification validation, document review, technical interviews, a live facility walkthrough, live review of original records, a traceability exercise and assessment of laboratory evidence. It is often appropriate for preliminary approval, lower-risk products, shortlist screening, targeted questions and follow-up between audits. Its limitations — controlled camera selection, preselected records, uncertainty about physical conditions — are reported explicitly rather than left implicit.

An on-site audit becomes appropriate when control depends heavily on physical conditions, when the product or volume is strategic, when a new facility or private-label production is involved, when evidence conflicts, when traceability is weak, when an authenticity concern remains unresolved, or when a customer or contract requires it. It is not needed by default. When a targeted verification can answer the question efficiently, the process should escalate only as far as the decision requires.

Yes. A result only means something in context: sample identity and lot, who sampled and when, the method and matrix, the laboratory's competence and accreditation scope, limits of detection and quantification, the specification or regulatory limit applied, and how out-of-specification results were handled. Reviewing certificates of analysis in that context often reveals whether the testing programme actually addresses the hazards relevant to your product, or whether it repeats a convenient parameter set.

Often yes, within limits. A lot can be selected by the reviewer, records requested live, quantities reconciled and the raw-material path followed backwards during a video session. This demonstrates far more than a traceability procedure does. The limitation is that records shown remotely may be preselected and physical verification of stock, labelling and segregation is not possible. A remote exercise reduces uncertainty; a witnessed on-site exercise closes more of it.

Yes, this is examined as part of identity verification. It involves comparing the legal entity, registrations, certificates, specifications and process description, and asking directly which steps are performed in-house, where packaging occurs and whether the supplier can move production between sites. Subcontracting is common and legitimate. What matters is whether it is disclosed, controlled, covered by the relevant certifications and registrations, and visible to the buyer before approval.

Yes. Inconsistencies are treated as questions requiring clarification rather than as evidence of misconduct. The work involves isolating exactly what differs — entity, address, scope, date, quantity, specification or analytical result — requesting the specific evidence that could resolve it, interviewing the responsible technical personnel and, where necessary, recommending direct verification. The output states what was resolved, what remains open and what the remaining uncertainty means for the buyer's decision.

Yes, when the product or supply chain justifies it. The assessment can include supply-chain mapping, raw-material origin, mass-balance review, specification assessment, a targeted analytical strategy, review of the supplier's own fraud controls, traceability and investigation of inconsistencies. This is a vulnerability assessment, not an accusation: it identifies where substitution, dilution or misdeclaration would be economically attractive and technically difficult to detect with the tests currently in use.

It can support them. FDA requires FSVP importers to conduct risk-based activities to verify that imported food is produced in a manner consistent with applicable U.S. safety requirements, including evaluating the food and the supplier and performing appropriate verification activities. FDA also allows importers to rely on analyses, evaluations or activities performed by other entities in defined circumstances, provided the importer reviews and assesses the relevant documentation. Brazil-based document review, interviews, record review and on-site audits can feed that process.

No. The FSVP importer is defined by FDA regulation and remains the responsible party for its own programme. InspectIQ can perform verification activities and provide documentation for the importer to review and assess, but it does not assume the importer's obligations, does not make a binding compliance determination and does not sign as the FSVP importer. The importer must decide whether each activity is appropriate for the food and supplier concerned.

No. InspectIQ improves the quality of the evidence available to the buyer. Approval is a buyer decision made under the buyer's own procedure, criteria and risk appetite. Reports state what was independently confirmed, what the supplier claimed, what remains unresolved and what the limitations of the work were. A simplistic approved or not-approved stamp is only used when the buyer's own procedure expressly defines and owns that decision.

No, and no verification provider honestly can. Verification describes evidence available at a point in time, within a defined scope. Facilities change lines, personnel, raw-material sources and certification status. That is why verification is normally paired with a defined re-verification interval, change notification requirements in the supply agreement and monitoring of complaints, results and nonconformities during the commercial relationship.

There is no universal timeframe. It depends on the scope of the question, supplier responsiveness, the quality and completeness of documents, product complexity, whether site access is required and how many questions remain unresolved after the first round of evidence. A narrow document and registration check is a short exercise; a project involving interviews, a traceability exercise, laboratory review and a facility visit takes considerably longer. A realistic estimate is given once the scope is defined.

The decision you need to make, the product and specification, the destination market, the supplier name and any known facility details, your certification and testing requirements, the documents you already hold, the concerns that triggered the review and your timing. Buyer criteria matter more than volume: without knowing what would make the supplier acceptable to you, verification has no reference point and produces observations rather than decisions.

It depends on the activity. Public-record checks, certificate validation and review of documents you already hold can normally be performed without contacting the supplier. Interviews, record requests, traceability exercises and site visits require engagement, and in most cases some disclosure. Buyer identity and sensitive project information are managed according to the agreed engagement, and the level of disclosure required for each activity is discussed before it is performed.

Yes, and it is often more useful then. Early verification of identity, registration status, certification scope and manufacturing capability can prevent months of negotiation with a company that cannot supply what you need or is not the actual producer. Early-stage work is usually narrower and document-focused, escalating only if the candidate advances. Verifying before commitment is generally less expensive than resolving the same question after a contract or a first shipment.