How to vet a botanical ingredient supplier: a due diligence checklist

Any supplier can publish a list of certifications. Due diligence is the process of confirming that the claims describe the company you are actually buying from.

Establish what they actually are

Manufacturer, processor, or trading intermediary? None of these is disqualifying, but each implies different control over quality. Ask directly, and ask which steps happen at their own facility versus a partner's.

A trader with strong quality systems can be an excellent partner. A trader presenting as a manufacturer is a different matter.

Documents worth requesting

• Business registration and export licence — basic legal standing.
• Facility certifications — with scope annexes and validity dates, not just logos.
• A recent third-party COA — for the specific product you intend to buy.
• Organic or kosher/halal certificates — if relevant, checked against the product list.

Test the technical conversation

Send a written specification and ask them to respond to it point by point. A capable supplier will engage with the details, push back where something is unrealistic, and tell you what they cannot do.

A supplier who agrees to every parameter without discussion is either exceptional or not reading carefully. Establish which.

Sample properly

Request a sample with its matching COA, and test it independently against your specification. Then — this is the part most often skipped — compare your first production lot against that sample. Consistency between the two is the real signal.

Small signals that matter

• Response times and clarity of communication during the quoting stage.
• Whether lead times are itemised or given as a single optimistic number.
• Willingness to discuss what went wrong on a previous shipment for another customer.
• Whether pricing is explained in terms of specification rather than simply discounted.

Start small, then commit

A modest first order tests the entire chain — documentation, packing, transit, and how the supplier behaves when something needs fixing. That information is worth more than any certificate.