CDMO SELECTION RISK · DUE DILIGENCE FRAMEWORK · 6 CATEGORIES
CDMO Due Diligence Checklist for Supplement & Medical Nutrition Brands
Selecting a Contract Development and Manufacturing Organisation (CDMO) is a capital-allocation decision with multi-year operational consequences. Most evaluation processes focus on price-per-unit and brochure claims. The risks that destroy brand value — formula theft, batch rejection, regulatory non-compliance, supply-chain interruption — are structural, not contractual.
This checklist organises the six verified operational risk categories that any executive, strategic buyer, or PE investor should interrogate before committing to a CDMO relationship. Each item requires written evidence — not verbal reassurance.
RISK CATEGORY 01 · TECHNICAL FIT
Technical Fit & Formulation Capability
Before signing a Master Batch Record, verify that the manufacturer can execute your specific formulation at the physical-chemistry level — not just accept your brief and produce a generic substitute.
- Confirmed dosage-form capability for your target form factor (softgel, hard capsule, enteric-coated tablet, sachets, Alu-Alu blister)
- Documented standardisation methodology distinguishing raw_mass_mg from target_active_mass_mg for each active ingredient
- Written scope for product-specific release testing and documentation defined by specification and agreement.
- Demonstrated experience with your physiological axis (e.g., lipid stability for omega-3, CFU viability for probiotics, mineral speciation for chelates)
- Documented process controls for oxygen-sensitive actives: nitrogen blanketing, moisture-barrier packaging
RISK CATEGORY 02 · QUALITY & REGULATORY SYSTEMS
Quality Assurance & Regulatory Compliance
A certificate on a website is not a quality system. Verify current certification scope, audit history, and active regulatory standing — not historical claims.
- Current ISO 22000 or equivalent food-safety certification — confirm issue date, scope, and certifying body
- Documented Incoming Quality Control (IQC) procedure for raw materials: heavy-metals limits (Pb, Cd, As, Hg), pesticide residues, and microbiological standards
- Written recall and CAPA (Corrective and Preventive Action) procedure with traceable incident log
- EU food-supplement notification support: regulatory submission capability for target markets (EU, UK, GCC, others)
- Allergen and cross-contamination management: segregated production lines or validated cleaning validation records
RISK CATEGORY 03 · SUPPLY-CHAIN RESILIENCE
Supply-Chain Resilience & Raw-Material Governance
Supplier continuity, traceability requirements and testing scope should be addressed for the product in the applicable specification and agreement.
- Documented primary and secondary supplier list per critical raw material, with origin traceability to country of cultivation or synthesis
- Written supplier qualification procedure: IQC-on-receipt, CoA verification, and periodic audit protocol
- Defined minimum stock policy or safety buffer for strategic actives
- Commodity-risk transparency: confirmed process for communicating price or availability shifts to the client before purchase order commitment
- Packaging supply chain: verified sourcing for primary packaging components (blister film, bottle, closure) with documented lead times
RISK CATEGORY 04 · BATCH TRACEABILITY
Batch Traceability & Documentation Integrity
In a YMYL product category, incomplete batch records are a regulatory and legal liability. Every lot must be forward- and backward-traceable from raw-material CoA to finished-goods release.
- Full batch record (Master Batch Record + executed Batch Production Record) issued for every production lot
- Certificate of Analysis (CoA) generated from in-house or accredited third-party testing for every finished-goods batch
- Shelf-life and accelerated stability study data for your specific formulation and packaging combination
- Retention sample program: documented retention period and destruction policy
- Defined batch-release signatory and documented on-hold / reject procedure
RISK CATEGORY 05 · IP & CYBERSECURITY
Intellectual Property Protection & Cybersecurity
Formula theft and data-breach risk are non-zero in CDMO relationships. Verify contractual and operational safeguards before sharing a proprietary formula or Medical Dossier.
- Written contractual clause confirming that your formula, MBR, and processing parameters remain the exclusive property of your company — not transferable to third parties or retained by the manufacturer
- Confirmed that the manufacturer operates ZERO competing consumer supplement brands — structural proof that IP conflict of interest is impossible
- NDA and confidentiality agreement with defined governing law, jurisdiction, and breach remedies, signed prior to any formula disclosure
- Documented data security controls for electronic formula records: access-control policy, storage encryption standard, and incident-response procedure
- After full payment and acceptance, the rights to the formulation transfer to you in full.
RISK CATEGORY 06 · TECH-TRANSFER GOVERNANCE
Technology Transfer & Execution Governance
A technology transfer without a documented protocol is an improvised production trial paid for at commercial rates. Verify that the manufacturer has a structured transfer methodology — not an ad-hoc scaling process.
- Written Tech-Transfer Protocol defining trial-batch scope, acceptance criteria, and escalation procedure before scale-up commitment
- Designated project manager and technical lead assigned to your account throughout the transfer period
- Documented equipment qualification (IQ/OQ/PQ) for critical process equipment used in your formulation
- Defined change-control procedure: any process or raw-material deviation must be formally approved before implementation, with client notification obligation
- Exit clause and data-handover protocol: at contract end, all MBRs, stability data, and regulatory dossier elements are returned to the client in a defined, machine-readable format
STRUCTURAL PROOF · CONFLICT-OF-INTEREST ELIMINATION
The Zero-Conflict Business Model
Olympia has no brands of its own and never will – our business model rests on never competing with our clients.
ENTRY GATE · PAID DISCOVERY · EXECUTIVE REVIEW
Apply This Checklist to Your Current Manufacturer
If any of the six risk categories above cannot be documented by your current or prospective CDMO, you are carrying undisclosed operational risk on your balance sheet.
Paid Discovery Core starts at EUR 4,500 for a structured, confidential technical review of a locked supplement scope. Market-Ready pre-PO is an optional EUR 4,000 package; physical Stage II batch records, testing, stability results, and release are separately scoped.
Related Science Dossiers