Monograph 06 · manufacturing

What a cGMP audit and heavy-metal testing really mean

“Produced in a GMP Facility” on the Soda Boost label describes the legal minimum for every supplement sold in the U.S. It is not a certification, it names no plant, and it says nothing about test results. Here is what the rule requires and what extra proof looks like.

Updated November 7, 2026Technical dossier

7 min read · Regulatory dossier · Reviewed November 7, 2026

The rule in one paragraph

The current good manufacturing practice rule for dietary supplements, 21 CFR Part 111, covers personnel, buildings, equipment, production and process controls, laboratory controls, batch records, holding and distribution, returned products and complaints^[1]. Its core is specifications: the manufacturer must define identity, purity, strength and composition limits for each finished product and limits on contaminants, then verify them. Each dietary ingredient's identity must be confirmed before use.

What it does not do

It does not make FDA approve the product or its claims before sale^[2].
It does not require the results to be published or printed.
It does not say whether the product works; efficacy is outside the rule.
It does not certify anyone. “FDA registered” means a facility filed a registration, not that it passed anything.

Heavy metals and contaminants

Botanicals can carry lead, arsenic, cadmium and mercury from soil and processing. The U.S. Pharmacopeia publishes limits for elemental contaminants in dietary supplements (General Chapter <2232>), and many manufacturers write those limits into their specifications. A certificate of analysis shows the measured values for a lot. Microbial limits (yeast, mold, bacteria) and residual solvents from extraction are tested the same way.

What extra proof looks like

Proof beyond the cGMP minimum
Evidence	What it shows	Seen for Soda Boost?
Named manufacturer and facility	Who is accountable; whether FDA inspected them	No: unnamed GMP facility
Lot certificate of analysis	Identity, potency markers, metals, microbes for your batch	Not published
Third-party program seal (USP Verified, NSF/ANSI 173)	Independent audit plus product testing	None shown
Published FDA inspection history	Any warning letters or observations	Cannot be checked without a facility name

How to read a certificate of analysis

The lot number matches the one on your bottle.
It names the testing laboratory and the methods.
Each test lists a specification (the limit) and a result.
Identity tests name each botanical, ideally by method (for example HPTLC).
Heavy metals are reported in micrograms per serving or parts per million against a stated limit.
It is dated and signed.

Applying it to the Soda Boost supplement

The label offers the minimum statement and the distributor's name (Instituto Experience, Lakeland, FL 33804). Everything else needs a request. Because the blend is 82 mg a day, the absolute amount of any contaminant would be small even near a limit; the bigger value of a certificate here is identity, given how loosely catuaba is traded^[3]. Our transparency page has a copy-ready request email. For general guidance on choosing supplements, NCCIH's overview is a good start^[4].