--- title: "The supplier letter of guarantee: the 1938 document your audit folder is missing" description: "What a continuing letter of guarantee actually is, the legal defense it comes from, what it does not prove, and how to build the one-PDF-per-supplier folder that passes a Whole Foods or ReposiTrak document check." canonical: https://fsma204hub.com/blog/supplier-letter-of-guarantee published: 2026-08-19 --- # The supplier letter of guarantee: the 1938 document your audit folder is missing > What a continuing letter of guarantee actually is, the legal defense it comes from, what it does not prove, and how to build the one-PDF-per-supplier folder that passes a Whole Foods or ReposiTrak document check. There is a one-page document, invented by Congress in 1938, that costs nothing to collect, takes a supplier five minutes to sign, and shows up on nearly every retailer and auditor document checklist in the food industry. Most small producers have never collected one. In the [Whole Foods supplier audit teardown](/blog/how-to-pass-a-whole-foods-supplier-audit), failure mode #3 was the supplier approval program that is mostly verbal: you have bought milk from the same farm for eight years, you trust them completely, and you have not one page of evidence on file. The auditor flags every receiving event as missing supplier-approval documentation. The letter of guarantee is the cheapest page in that missing folder, and the one this post is about. ## What it actually is A letter of guarantee (you will also see "continuing letter of guarantee," "letter of continuing guarantee," and "LOG") is a signed statement from your supplier that the goods they ship you comply with the Federal Food, Drug, and Cosmetic Act: not adulterated, not misbranded, and legal to introduce into interstate commerce. It exists because of a specific legal mechanism. Under [section 303(c)(2) of the act](https://www.law.cornell.edu/uscode/text/21/333), a person is not subject to penalties for receiving adulterated or misbranded goods if they can establish "a guaranty or undertaking signed by, and containing the name and address of" the US supplier from whom they received the goods in good faith. Read that from your buyer's chair and the whole document-request economy of the food industry snaps into focus. If a jar of your sauce turns out to be misbranded on Whole Foods' shelf, Whole Foods wants a signed guaranty from you on file, because that piece of paper is its statutory shield. And if the problem traces back to a flavor blend inside your sauce, your shield is the guaranty you collected from the flavor house. The letter is not required by any regulation. Nobody has to issue one. It became universal because every party in the chain wants the defense, so every party asks the party upstream to sign. That is why the request flows in both directions: you collect letters from your suppliers, and you should have your own letter ready to sign the day a retailer or distributor asks for it. They will ask. ## Limited vs. continuing FDA publishes suggested wording in [21 CFR 7.13](https://www.law.cornell.edu/cfr/text/21/7.13), in two forms: **Limited guaranty.** Covers one shipment. It is designed to ride on the invoice: "no article listed herein is adulterated or misbranded" within the meaning of the act. Nobody wants to manage a guaranty per invoice, so this form is rare in practice. **General and continuing guaranty.** Covers every shipment the supplier makes to you from the date of signature forward. One page, signed once, refreshed periodically. This is the form the industry standardized on and the one an auditor means when they say "letter of guarantee." Two details in the regulation are worth knowing because auditors know them: 1. **The guaranty must carry the guarantor's name and address and a signature.** An unsigned PDF template downloaded from the supplier's website is not a guaranty. The statute's defense requires a signed document. 2. **The guaranty expires in effect, if not on paper, the moment the goods change.** It speaks to the articles as shipped by the guarantor. If the supplier reformulates, moves production, or the goods become adulterated after they leave the supplier's dock, the old letter covers nothing. This is the legal root of the refresh habit below. ## What a letter of guarantee does not prove The most common supplier-folder mistake is treating the LOG as the folder. It is one of four artifacts, and it is the weakest one, because it is a promise rather than evidence. | Artifact | What it proves | What it cannot prove | |---|---|---| | **Letter of guarantee** | The supplier legally stands behind their goods | Anything about how the goods are actually made | | **GFSI certificate (or HACCP plan for very small suppliers)** | A third party audited their food safety system | Anything about the specific lots you received | | **Certificate of Analysis, per lot** | This lot met spec when tested | What is inside the formulation | | **Sub-ingredient and allergen declaration** | What is actually in the ingredient, layers deep | That the supplier will keep making it that way | Failure mode #1 in the Whole Foods teardown lives in that last row: a banned ingredient hiding three layers deep in a natural flavor, invisible because the producer never asked for the full breakdown. A letter of guarantee does not surface it. A guaranty from a supplier whose spec sheet hides a sub-ingredient is a signed promise about goods neither of you fully understands. So the folder standard, per supplier, one PDF: 1. Current continuing letter of guarantee, signed and dated 2. Current GFSI certificate, or the HACCP plan if the supplier is too small to certify 3. Most recent COA for each lot received in the last 90 days 4. Complete sub-ingredient and allergen declaration for every flavor, color, preservative, and processing aid That one-PDF-per-supplier structure is exactly what uploads cleanly into [ReposiTrak](/blog/repositrak-supplier-onboarding-playbook) and answers the supplier-approval section of any [retailer questionnaire](/blog/retailer-fsma-204-questionnaire) without a scramble. ## The template that gets signed Suppliers sign fastest when you remove all work from their side. Send a filled-in, one-page letter that needs only a signature. Adapted from FDA's suggested continuing form in 21 CFR 7.13: > **Continuing Letter of Guarantee** > > [Supplier legal name], located at [supplier address], hereby guarantees to [your legal name] that each shipment or other delivery made on or after the date below of the articles listed here, or of all articles supplied, is, as of the date of shipment or delivery, not adulterated or misbranded within the meaning of the Federal Food, Drug, and Cosmetic Act, and is not an article that may not be introduced into interstate commerce under section 404 or 505 of the act. > > Articles covered: [list, or "all food products and food ingredients supplied"] > > Signature, printed name, title, date. Three practical rules: **Refresh annually, and on any change.** Common practice across the industry is a fresh letter every year, and immediately when the supplier changes formulation, production site, or ownership. No regulation sets this cadence. Auditors still read the date first, and a letter from 2022 is stale evidence. **Match the legal entity names.** A guaranty from "Sunrise Flavors" when the invoice says "Sunrise Flavor Technologies LLC" gives an auditor a reason to dig and a lawyer a reason to worry. The statute requires the name and address of the person you received the goods from. **File it where receiving can see it.** The guaranty defense turns on receiving goods in good faith under the guaranty. A letter buried in email is doing less work than a letter in the supplier's folder next to the COAs your receiving log points at. ## Where FSMA 204 fits, and where it does not A letter of guarantee has nothing to do with [FSMA 204](/blog/tlc-vs-kde-vs-cte). The rule is about traceability records: [lot codes](/blog/what-is-a-traceability-lot-code) and [Key Data Elements captured at each Critical Tracking Event](/blog/fsma-204-kde-checklist). No letter, however well signed, substitutes for a receiving record with the supplier's lot code on it. They intersect somewhere more practical: the same buyer asks for both, usually in the same portal, often in the same week. [Every major grocer's supplier program](/blog/retailer-fsma-204-deadlines) bundles the document folder (guarantees, certificates, declarations) with the data asks (ASNs, lot codes, KDEs). Producers who discover their supplier folder is verbal tend to discover their lot-code trail is verbal at the same moment, because both gaps have the same cause: eight years of trust and zero pages of evidence. The folder half of that problem is an afternoon of emails with the template above. The data half is what [FSMA204Hub](/) exists for: one row per lot received and produced, supplier lot codes captured at receiving, and a [compliance score](/score) that tells you which lots would fail a buyer's request before a buyer runs one. If a retailer document request is sitting in your inbox asking for both, [start a free 14-day trial](/sign-up). No credit card. We answer questions within a working day. --- **Further reading** - Cornell LII: [21 U.S.C. 333(c), the guaranty defense](https://www.law.cornell.edu/uscode/text/21/333) - Cornell LII: [21 CFR 7.13, suggested forms of guaranty](https://www.law.cornell.edu/cfr/text/21/7.13) **Related on this site** - [How to pass a Whole Foods supplier audit](/blog/how-to-pass-a-whole-foods-supplier-audit) - [ReposiTrak supplier onboarding: a 7-day playbook](/blog/repositrak-supplier-onboarding-playbook) - [What your retailer's FSMA 204 questionnaire is asking for](/blog/retailer-fsma-204-questionnaire) - [The FSMA 204 KDE checklist by event type](/blog/fsma-204-kde-checklist) - [Every major grocer's traceability deadline has already passed](/blog/retailer-fsma-204-deadlines) *Written by [Anas Marwan](/authors/anas-n), Co-founder of Darza Technologies. Last reviewed 2026-08-19.* --- Source: https://fsma204hub.com/blog/supplier-letter-of-guarantee (https://fsma204hub.com)