How Often Should Supplement Brands Test for Heavy Metals?

There is no federally mandated testing frequency for heavy metals in dietary supplements, which means every brand must design and defend its own cadence. This guide explains what FDA's cGMP rule actually requires, the risk factors that should drive frequency (input volatility, supplier history, lot size, and the claims you make), how skip-lot testing works, how certification surveillance differs from internal QC, and a decision framework mapping product types to sensible starting cadences.

"How often do you test?" is one of the first questions retail buyers and certifiers ask, and "whenever we launch a new SKU" is the answer that ends conversations. The good news is that a defensible answer does not require testing everything always. It requires a documented rationale that connects your frequency to your risk.

Is there a legally required testing frequency?

No. Federal law sets no fixed schedule for heavy metals testing, and no generally applicable federal numeric limits for lead, arsenic, cadmium, or mercury in finished supplements exist either. What FDA's cGMP rule requires is structural: you must establish specifications, including "limits on those types of contamination that may adulterate" your product (21 CFR 111.70), and you must verify them. For finished batches, 21 CFR 111.75(c) requires verification for every batch, or for "a subset of finished dietary supplement batches that you identify through a sound statistical sampling plan." For components, you may rely on supplier certificates only after qualifying the supplier and with periodic re-confirmation.

Read carefully, that gives you exactly two compliant postures: test every batch, or operate a written, statistically sound sampling plan that justifies testing less than every batch. What the rule does not permit is ad hoc testing with no plan. "Periodically," "sound statistical sampling plan," and "subset" all imply something an investigator can read.

One category note: the era of pure voluntariness is narrowing at the state level. California's SB 646, enacted October 2025, mandates heavy metals testing and disclosure for prenatal vitamins (bill status), and pending SB 1033 would extend testing and disclosure duties to protein products. If you sell in those categories, statute may soon set your floor.

What factors should drive your testing frequency?

Frequency should be an output of a risk assessment, not a budget line that survived last year. Four variables do most of the work:

Input volatility. This is the biggest driver. Mineral salts and agricultural ingredients vary with source geology, soil, water, and harvest; a new mine face or growing region can move results with no change on the supplier's paperwork. High-purity synthetics (creatine monohydrate, most amino acids) are far more consistent lot to lot. Volatile inputs justify tighter cadence; stable inputs can earn longer intervals, with evidence.

Supplier history. Frequency is something a supplier earns. A new supplier, or a qualified supplier after a source change, process change, or out-of-trend result, warrants every-lot verification. Years of consistent results across many lots justify stepping down. This mirrors the qualification logic of supplier certificate of analysis verification: reliance is built by confirmation and decays without it.

Lot size and production pattern. A batch that becomes 200,000 units carries more exposure than a pilot run, and infrequent large batches argue for testing each one, since each batch is a large fraction of your annual output. Conversely, continuous production of many small, homogeneous batches is where statistical sampling plans genuinely fit.

Claims and channels. The moment you print "tested for heavy metals" on a label or website, FTC substantiation rules apply: claims must be truthful and must not overstate what your testing covered (FTC Health Products Compliance Guidance). A testing claim substantiated by one lot from 2023 is a liability. Selling into California adds Prop 65 exposure, where private enforcement judges your product against safe harbor levels like 0.5 µg/day for lead (OEHHA); more frequent data is how you know where you stand.

What is skip-lot testing?

Skip-lot testing is a structured way to test less than every lot without abandoning control. Instead of testing every incoming ingredient lot or every finished batch, you test on a defined cadence (for example, one lot in every three, or one batch per production month), under written rules that specify three things: the entry criteria (how many consecutive passing lots earn a material or product its way into skip-lot status), the skip pattern itself, and the exit criteria (any failure, out-of-trend result, supplier change, formula change, or process change returns the material to every-lot testing until it re-qualifies).

Done properly, skip-lot testing is the practical implementation of the "sound statistical sampling plan" language: the skipped lots are covered by the demonstrated stability of the process, and the documentation shows why. Done improperly, meaning without written entry and exit rules, it is just testing less and hoping, which neither an FDA investigator nor a plaintiff's attorney will read charitably. Skip-lot logic applies at both layers of a program, ingredients and finished product; how those layers divide the work is covered in ingredient testing vs finished product testing.

How does certification surveillance differ from internal Qc frequency?

They serve different purposes, so they run on different logic. Internal QC frequency exists to release batches and control suppliers: it is dense, tied to production, and tuned by your risk assessment. Certification surveillance exists to keep an independent claim honest over time: a certifier retests certified products on its own cadence, on samples it controls, to verify that the product in the market still conforms to the published standard. Surveillance is therefore sparser than your QC program but harder to game, precisely because you do not schedule it around your best batches. Some programs, such as USP Verified and Clean Label Project, sample off the shelf or from retail purchases; the common thread across credible programs is that surveillance continues after the mark is granted.

Heavy Metal Certified maintains certification through ongoing testing coordinated with qualified independent laboratories, rather than a one-time pass. The practical point for planning: certification surveillance supplements your internal cadence, it does not replace it. Batch release remains your job under 111.75(c); surveillance is what lets the market trust it without taking your word.

What cadence should each product type start from?

The table below is a planning framework, not a rule, a regulatory requirement, or a program specification. Your own risk assessment, formula, suppliers, and claims should move any cell up or down, and "up" should always win ties.

Whatever cadence you choose, write it down as a testing plan: which products and materials, which analytes, which laboratories, what frequency, what statistical basis for any subset, and what triggers a change. The document does double duty. Internally, it keeps frequency decisions deliberate when budgets tighten. Externally, it is the artifact that converts "we test regularly" from an assertion into evidence, and it is one of the first documents a certifier or retail auditor will request.

Triggers that should immediately increase frequency regardless of the table: a new or changed supplier, a new country of origin, any reformulation, a processing or facility change, any result out of trend even if passing, any failure (see what happens when a supplement fails heavy metal testing), and any expansion of marketing claims. Reading results well enough to spot "out of trend" is its own skill; our guides on how to read a heavy metal certificate of analysis and how to evaluate a heavy metal testing laboratory cover the interpretation side, and ICP-MS testing for supplements explains why modern methods make trending at trace levels possible at all.

Faq: Heavy metal testing frequency

Is heavy metal testing frequency mandated by FDA? No fixed frequency is mandated. FDA's cGMP rule requires you to establish contamination specifications and verify finished batches, either every batch or a subset chosen through a sound statistical sampling plan, and to periodically re-confirm supplier certificates. The schedule itself is yours to design and document.

Is testing every batch required? Not necessarily. Every-batch testing is one compliant posture; the other is a written, statistically sound sampling plan that justifies a subset. Ad hoc testing without a documented plan is the posture that fails inspections.

What is skip-lot testing? A documented program where, after a material or product earns its way in through consecutive passing results, testing moves to a defined pattern (such as one lot in three), with automatic return to every-lot testing on any failure or change.

Should mineral-based products be tested more often than synthetics? Generally yes, as a starting assumption. Mineral and agricultural inputs vary with source and environment, while high-purity synthetics tend to be consistent, but the assumption must be confirmed by your own trend data, not presumed.

How is certification surveillance different from my QC testing? Your QC cadence releases batches; surveillance is a certifier's independent retesting over time, on samples you do not select, to keep the public claim current. Surveillance complements internal QC and never replaces batch release duties.

Does making a "tested" claim change how often I should test? Yes. Under FTC guidance, claims must be substantiated and must not overstate what testing covered. An ongoing claim implies ongoing evidence, so your cadence needs to keep pace with your marketing.

What frequency do certification programs require? It varies by program and product. Credible programs define initial testing plus ongoing surveillance in their published standards; review the standard, not the marketing page, and see our overview of heavy metal certification for supplements for how programs structure this.

If you would rather anchor your cadence to an independent published standard, and let a verification page answer the "how often" question for you, start with a preliminary certification assessment. Review the heavy metal testing and certification standard or apply for certification when you are ready.