The FDA Survival Guide: Mastering DSHEA Compliance for Supplement Startups
· 17 min read · By Rocktomic Labs Team
Dietary supplements do not need FDA approval before they hit the market. The brand on the label owns that responsibility instead. Under the Dietary Supplement Health and Education Act of 1994 (DSHEA), your company is legally responsible for product safety, label accuracy, and the truth of every claim you make. The FDA says it plainly on its Questions and Answers on Dietary Supplements page: the agency does not approve dietary supplements before they are sold.
So treat compliance as a checklist, not a riddle:
- Statement of identity on the front label
- Supplement Facts panel
- Claims that avoid disease language
- cGMP manufacturing with a Certificate of Analysis
- Adverse event records
- FTC-clean advertising
This guide hands you the exact rules, the claims wording that passes review, and an 8-step pre-launch checklist to run before your first order ships.
What is DSHEA and why does it matter to supplement startups?
DSHEA, signed in 1994, amended the Federal Food, Drug, and Cosmetic Act. It created the regulatory framework for dietary supplements, legally defined the category, and made one thing clear: the FDA does not pre-approve supplements before sale. The FDA’s own Questions and Answers on Dietary Supplements page is direct about who carries the load: manufacturers and distributors must evaluate the safety and labeling of their products so those products meet the law’s requirements.
See the first-90-days cash a traditional private label run actually demands – next to what the same launch costs on Rocktomic.
Practical result: the name on the label owns safety, label accuracy, and claim substantiation. Nobody approves you in advance. Compliance is pre-launch homework, not a permit you wait for.
You can knock out most of that homework before you hold a single unit of inventory. Review the legal basics of a zero-inventory supplement company to see how entity structure and supply agreements sit underneath your DSHEA duties.
Who polices what: FDA vs FTC and the two rulebooks every brand must pass
Two agencies police this category, and they answer to different rulebooks. The FDA governs labeling: the package, inserts, and point-of-sale materials. The FTC governs advertising: ads, social posts, influencer posts, and testimonials. Both coordinate under a liaison agreement, per the FTC Health Products Compliance Guidance (December 20, 2022). That agreement keeps enforcement from duplicating, but it does not give you one standard to meet.
DSHEA’s structure/function rules apply to labels, not to FTC review of advertising. The split matters because the agencies ask different questions. The FDA asks whether a claim is properly framed as a structure/function statement. The FTC asks whether the message is truthful, not misleading, and substantiated before publishing.
Two reviews, two standards, one product. Most founders assume a single compliance review covers the brand. It does not. The physical label and the marketing message are separate legal objects, and the agencies treat them that way.
Two checklists, one product
The division of labor lands in two columns.
| FDA governs labeling | FTC governs advertising |
|---|---|
| Statement of identity | Truthful ads |
| Supplement Facts | Substantiation before publishing |
| Disclaimer | Endorsements and disclosures |
| NDI and claim notification | No bright-line structure/function carve-out |
| cGMP | |
| Adverse event reporting |
Read the columns as a sequence, not a menu. The FDA works from the physical item outward: what the label says, what the formula contains, how it was made, and what happens after a consumer reports a problem. The FTC works from the message inward: what you claim, when you claim it, and who says it on your behalf. Endorsements and testimonials fall to the FTC, which is why influencer posts count as advertising the moment you approve them.
Notice the last line in the FTC column. No bright-line structure/function carve-out means an ad does not inherit the label’s structure/function allowance. It is judged by its own standard: truthful, substantiated, and clear about who is speaking.
Budget for two compliance passes before launch, and build both into your go-live plan. Review label copy against FDA rules. Review every ad, caption, and influencer script against FTC rules. Keep the reviews separate, because one clean pass does not guarantee the other.
What can you say? Structure/function claims vs disease claims with wording that passes
A structure/function claim describes the role of a nutrient or dietary ingredient in the normal structure or function of the body. It names no disease. The moment your wording diagnoses, treats, cures, or prevents a disease, the FDA treats the product as an unapproved drug, not a supplement. That is the line every label and ad decision hangs on, per the FDA guidance on label claims for conventional foods and dietary supplements (retrieved September 2026).
Phrases that describe function without crossing into disease
The FDA allows statements that describe how a nutrient affects the body’s normal structure or function. Work from examples like these:
| Permitted phrasing |
|---|
| Supports muscle recovery |
| Supports immune function |
| Aids digestion |
That table is a starting point, not a loophole. Every claim must be truthful and substantiated before it is published. A permitted phrase can still fail if the surrounding copy implies a disease benefit, so audit the full product page, not just the bullet point.
The disclaimer duty and the 30-day notice
Structure/function language triggers two obligations. First, under 21 CFR 101.93, the label must carry the two-part disclaimer language that separates your statement from disease treatment claims. Second, you must submit a structure/function claim notification to the FDA within 30 days of first marketing the product. The verbatim disclaimer block appears later in this guide. Here, the point is simpler: your wording decides whether those duties apply, so settle claim language before labels go to print.
What the FTC expects from your wording
The FTC applies its own science bar to advertising, independent of FDA labeling rules. It expects competent and reliable scientific evidence for every claim you publish. Anecdotes, single customer stories, and survey responses do not qualify as substantiation, per the FTC Health Products Compliance Guidance (December 20, 2022).
So before you launch, decide how you would defend each phrase with real research. Read how to cite studies without FTC violations to keep your sourcing clean and your claims defensible.
Labeling 101: statement of identity, Supplement Facts, and the two-part disclaimer
A compliant label is a checklist, and every element traces to a specific FDA rule. One missing line turns a finished product into a federal liability. That is why label compliance gets checked before production, not after the first order prints.
| Label element | What it does | Governing rule |
|---|---|---|
| Statement of identity | Characterizes the product as a dietary supplement. | 21 CFR 101.3(g) |
| Supplement Facts panel | Serving size and ingredient amounts. | 21 CFR 101.36 |
| Net quantity | States the amount of product in the package. | 21 CFR 101.105 |
| Two-part disclaimer | Required adjacent to each structure/function claim. | 21 CFR 101.93 |
| Domestic address or phone number | Contact point for adverse event reports. | 21 U.S.C. 343(y) |
Work down the list the way a compliance reviewer does. The statement of identity comes first and tells the buyer exactly what kind of product this is. The Supplement Facts panel puts serving size and ingredient amounts in one format that regulators and marketplaces can verify at a glance.
Net quantity states what is inside the package. The two-part disclaimer guards every structure/function claim. The domestic address or phone number gives the FDA a contact point for adverse event reports. Five elements, each tied to a numbered rule.
You can reformulate a weak product. You can’t un-ship a label. Marketplaces scan label images before a single unit moves, and a clean formula with a broken label reads exactly like a product with something to hide.
That is why label compliance is a pre-production gate, not a post-production afterthought. Reviewing a proof costs minutes. Rescuing a suspended listing costs weeks.
The two-part disclaimer, word for word
This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.
This disclaimer does not fix a claim that crosses into disease territory, because a disease claim converts the product into an unapproved drug.
Run the checklist before you print
Label errors are the first thing a marketplace or regulator sees. If the disclaimer is missing, misworded, or placed away from the structure/function claim, the product stalls in review or gets pulled from the storefront. The article FDA disclaimer mistakes that tank stores walks through that exact failure pattern and how to avoid it.
Verify every element on the label template before the first order prints. Run the checklist once for the master label, then again for every product variation. A typo in a serving size or a disclaimer buried in the wrong spot costs more in lost listings than a second proof review.
Manufacturing compliance: cGMP, third-party testing, and the Certificate of Analysis
DSHEA did more than set the rules for what you can claim on a label. It gave the FDA the authority to write current good manufacturing practice rules for dietary supplements. The agency finalized those rules in 2007 as 21 CFR Part 111, and they still govern how supplements are manufactured, tested, labeled, and stored. The FDA’s backgrounder on the final cGMP rule for dietary supplements, retrieved September 2026, walks through the full scope. You do not need to memorize every line. You do need to know who is responsible when a batch goes wrong.
The brand on the label is the responsible party. That is the part founders get wrong. If a contract manufacturer makes your product, you still own the compliance. The FDA’s cGMP backgrounder spells this out: the firm whose name appears on the finished product is accountable for meeting the rule.
Your contract with the manufacturer should require cGMP compliance, per-batch testing, and clean batch records you can pull on request. A handshake with a copacker is not a compliance plan. If the FDA comes asking, it will ask your brand, not your manufacturer.
A GMP-certified facility plus third-party testing gives you the evidence document buyers actually request. When a marketplace or a wholesale account vets your brand, it asks for a Certificate of Analysis for the batch in question. The COA is the batch-level lab report that verifies identity, purity, strength, and composition. Before you pick a manufacturer, learn what a Certificate of Analysis covers, because it is the document that separates organized brands from amateurs.
Rocktomic manufactures in US-based, GMP-certified facilities and provides a COA with every batch. You can review the full program in the Rocktomic quality and COA hub. Every product in the catalog ships with its own certificate, which means your brand always has the documentation a marketplace, buyer, or customer will ask for. That turns a regulatory requirement into a selling point.
Post-market duties: adverse event reporting and records you must keep
Manufacturing compliance covers the day your product is made. Post-market compliance starts the day it sells. Congress passed the Dietary Supplement and Nonprescription Drug Consumer Protection Act of 2006 to close a gap: supplement brands had no formal channel for consumers to report problems. The act answers that gap, and your brand is the responsible person under it.
Report serious adverse events to the FDA within 15 business days using MedWatch Form 3500A. Keep records of all adverse event reports for 6 years and show a domestic address or phone number on the product label so consumers know where to report. Serious adverse events mean death, a life-threatening event, inpatient hospitalization, persistent or significant disability, a congenital anomaly or birth defect, or an intervention needed to prevent permanent impairment. Those definitions come from 21 U.S.C. 379aa-1 and FDA guidance issued under the act.
Treat the law as a documented intake process that protects the brand when a complaint arrives, not as a filing chore. Build the system before you need it:
- Log every adverse event report the day it lands, serious or not.
- Name one owner for the file and the 15-business-day clock.
- Route serious events to MedWatch Form 3500A before the deadline.
A brand with this system can answer the FDA in minutes. A brand without it turns one complaint into an inspection problem.
A complaint usually arrives with a label or lot number. The COA file you built at launch tells you exactly what that batch contained and when it was made. That is the value of keeping per-batch certificates current. It is regulatory paperwork that also answers the first question every investigator asks: what was in that bottle?
The real cost of non-compliance versus the cost of a compliant launch
A warning letter is the cheapest way to learn DSHEA the hard way, and it still costs you weeks and legal fees. Federal and state agencies, ad platforms, and online marketplaces all police supplement marketing. Their tools include warning letters, product seizures, ad-account bans, and revoked marketplace approvals. The difference is predictability. Regulators and platforms do not publish a rate sheet for failure. They just apply it.
Here is what a compliant launch actually costs.
| Failure mode | Compliant launch |
|---|---|
| Warning letter | Free plan at $0/month |
| Ad account bans | Flat ~$2 per item fulfillment fee |
| Relabeling pallets | Scale plan at $297/month for the full catalog and lowest wholesale pricing |
| Lost marketplace approvals | Zero inventory: a claim fix never strands stock |
Failure modes are not abstract. A warning letter means legal review, corrected labels, and deadlines before you can keep selling. An ad-account ban cuts off the channel where your audience already follows you, and rebuilding there is slow. Relabeling pallets means paying for labels twice plus the labor to swap them. Lost marketplace approvals can end the brand outright.
The expensive path is the warning letter, the seizure, or the ban. The cheap path is a compliant launch with a US GMP manufacturer, a COA per batch, and zero inventory. The zero-inventory model behind how Rocktomic works means a claim fix never strands stock. Manufacturers that force pallet buys turn one label mistake into a warehouse of mislabeled bottles. Zero inventory turns the same mistake into an edited label file, and the next bottle prints clean.
The flat ~$2 per item fee covers pick, pack, and label. That is the whole fulfillment cost per order. You pay it only when a customer order ships. No inventory to finance, no minimums to hit, and no pallets waiting to be relabeled when a claim changes.
Run your own numbers in the startup cost comparison tool before you commit to a manufacturer. The entire compliant stack is small: Free at $0/month, or Scale at $297/month for the full catalog and the lowest wholesale pricing. Compare either one against a single relabeling project or one lost marketplace approval. Failure is the premium option, and it buys you nothing. Compliance is not a cost center; it is the cheapest part of the launch.
The pre-launch compliance checklist: 8 steps before your first order
Run this checklist before the first order prints. Each step takes minutes and prevents the expensive failure modes from Part 6.
Work down the list in order before you approve a label proof or place a bulk order. Steps 1 through 4 govern what the label says. Steps 5 through 8 govern what you keep on file and what you send to FDA. Skip one and a small error becomes a reprint, a return, or an FDA inquiry.
- Confirm the statement of identity on the principal display panel characterizes the product as a dietary supplement, not as a conventional food or a drug.
- Verify the Supplement Facts panel data against the batch formulation that actually went into production, not the spec sheet from development.
- Add the two-part FDA disclaimer to the label in the exact wording and placement the regulations require.
- Run every claim through the structure/function test: it must describe the role of a nutrient or ingredient in the body’s normal structure or function, and nothing beyond that.
- Collect the Certificate of Analysis for the batch before it ships and keep it with your batch records.
- Add adverse event contact information to the label and document a complaint intake process so every report gets logged and triaged.
- File a substantiation binder for every claim, pairing each claim with the underlying study, review, or reference that supports it.
- Submit required notifications to FDA, including the structure/function claim notification within 30 days of first marketing.
A checklist plus a manufacturing partner that runs the cGMP and COA side is a compliant launch. That is why Rocktomic exists: each order ships from a US GMP-certified facility with a Certificate of Analysis, so you own the label and marketing steps while Rocktomic handles manufacturing, testing, and documentation.
DSHEA compliance FAQs for supplement startups
What is DSHEA and what does it require from a supplement startup?
DSHEA, the Dietary Supplement Health and Education Act of 1994, amended the FD&C Act and created the legal category for dietary supplements. Under DSHEA, supplements do not require FDA pre-approval before sale. The brand owner carries responsibility for product safety, accurate labeling, and truthful claims. A startup must ensure its products are manufactured under current good manufacturing practices and that every marketing statement complies with structure/function rules before the first bottle ships (FDA, retrieved September 2026).
What is the difference between a structure/function claim and a disease claim?
A structure/function claim describes how a supplement supports normal structure or function of the body, such as “supports muscle recovery.” Disease language states or implies that the product diagnoses, treats, cures, or prevents a disease, such as “reduces risk of heart disease,” and is not permitted on a dietary supplement label. Structure/function claims must carry the two-part FDA disclaimer, and the manufacturer must notify FDA within 30 days of first marketing the product with the claim (FDA Label Claims page, retrieved September 2026).
Does the FDA approve dietary supplements before they are sold?
No. The FDA does not approve dietary supplements before they are sold. A brand must file a New Dietary Ingredient (NDI) notification for any ingredient not marketed in the United States before October 15, 1994. Brands also must submit structure/function claim notifications within 30 days of first marketing. After launch, the FDA can take enforcement action against unsafe products, false claims, or labeling violations, so ongoing compliance review matters as much as pre-launch preparation (FDA, retrieved September 2026).
Who regulates supplement labels versus supplement advertising?
The FDA regulates supplement labeling, including labels, packaging, and most product literature. The FTC regulates supplement advertising, including ads, social posts, and influencer content. The two agencies share a formal liaison relationship and coordinate on matters of mutual interest. DSHEA structure/function rules do not govern FTC advertising review. The FTC evaluates ad claims under its own standard requiring competent and reliable scientific evidence, so a claim that passes FDA labeling rules may still fail FTC scrutiny (FTC Health Products Compliance Guidance, December 20, 2022).
What documents should a supplement brand hold before launch?
A supplement brand should hold a Certificate of Analysis (COA) for each batch, proof of current good manufacturing practice (cGMP) compliance under 21 CFR Part 111, Supplement Facts data, a claim substantiation file, and a compliant label that includes a domestic address or phone number. The substantiation file should document why each claim is truthful and not misleading. Record systems should keep these documents for at least six years. Having this file ready protects the brand before the first order ships.
How much does a compliant launch cost on a zero-inventory model?
A zero-inventory launch keeps regulatory exposure low because no stock sits on a shelf waiting to be relabeled if a claim needs fixing. Rocktomic’s Free plan costs $0 per month with no minimum order and a flat fulfillment fee of about $2 per item. The Scale plan costs $297 per month and adds lower per-unit wholesale pricing plus the full product catalog. Since products are made to order, a claim revision costs nothing in wasted inventory, which keeps the compliance side of a launch inexpensive.
How does working with a US GMP manufacturer reduce regulatory risk?
A US-based, GMP-certified manufacturer handles much of the documentation burden that falls on a supplement startup. Rocktomic is an example: it manufactures in US facilities under GMP certification and provides a Certificate of Analysis with every batch, so a brand starts with auditable quality records rather than guesswork. That shifts risk away from the brand owner. On Rocktomic’s Free plan, a brand pays $0 per month plus the roughly $2 per item fulfillment fee; the Scale plan costs $297 per month.
Can a private label brand stay FDA-compliant without holding inventory?
Yes. Because compliant artwork is built into a single label template and printed on every order, a label change never strands paid stock. A brand on Rocktomic’s Free plan pays $0 per month plus the flat fee of about $2 per item only when an order ships. The Scale plan costs $297 per month for lower wholesale pricing and the full catalog. With no inventory, a brand can adjust claims and labels without writing off product, which keeps the brand compliant at every stage.
Launch compliant: compare membership pricing and book your call
Launching compliantly is a checklist plus a manufacturing partner that already runs the cGMP and COA side. Rocktomic gives creator-operators a $0/month entry into US GMP manufacturing with a COA on every batch, zero inventory required. Own the brand, keep the customer relationship. Compare Rocktomic membership pricing to find the right plan. For hands-on label or claim questions, book a call.
Last updated: September 2026.