Compliance Brief

Compliance Brief: FDA's Final NDI Guidance on Identity and Safety — the validation failure it prevents

Team ValidLeaf · October 2026 · 6 min read

Compliance Brief is our series explaining new regulation and guidance in plain terms — what changed, and what it asks of your quality system. This one is not a recall. It is the document that decides whether a new supplement ingredient gets to market cleanly at all: on October 19, 2026, the FDA finalized the identity and safety sections of its new dietary ingredient notification guidance. The gap it closes: a notification that describes an ingredient in prose, instead of proving what the ingredient is with validated methods and linking that proof to the safety case.

What happened

On October 19, 2026, the FDA announced the availability of a final guidance for industry titled “New Dietary Ingredient (NDI) Notifications and Related Issues; Identity and Safety Information About the NDI.” The document finalizes sections VI.A, VI.B and VI.C of the agency’s 2016 revised draft guidance on NDI notifications. The rest of that 2016 draft has not been finalized in this step; the FDA says it plans to finalize the remaining portions individually, and comments on this document can still be submitted under docket FDA-2025-D-6501 (OFW Law; Quality Smart Solutions; FDA guidance index).

The legal frame underneath it is older. A new dietary ingredient is one that was not marketed in the United States in a dietary supplement before October 15, 1994, under section 413(d) of the Federal Food, Drug, and Cosmetic Act. Under section 413(a)(2), the manufacturer or distributor must submit an NDI notification to the FDA at least 75 days before introducing the ingredient, or a supplement containing it, into interstate commerce — unless the ingredient has been present in the food supply as an article used for food without chemical alteration. A supplement marketed without a required notification is treated as adulterated under section 402(f). The new guidance expands on the notification content required at 21 CFR 190.6 (OFW Law).

On identity, the guidance starts from a blunt premise: the agency cannot evaluate the safety of an ingredient until it understands exactly what that ingredient is. Notifiers should expect to provide physical and chemical characterization data, analytical testing results, manufacturing information, product specifications, and validated analytical methods. Identity information also has to be linked to any history of use or scientific studies the notification relies on for safety — the safety evidence only counts if it describes the same material being notified (OFW Law). Reporting on the guidance adds working detail: identity specifications in table form, listing each test, its acceptance criteria, and the method used, with criteria specific enough to mean something — a chromatogram described only as matching a reference is not informative unless its peaks, heights, and locations are described. Botanicals call for the Latin binomial, the plant part used, and a voucher specimen; extracts call for concentration ratios, solvent details, and marker content (Quality Smart Solutions).

On safety, the guidance retires a broad phrase and replaces it with a discipline. References to a “comprehensive safety profile” are gone; every notification now needs a safety narrative — a reasoned scientific explanation of why the ingredient and the finished product can reasonably be expected to be safe under the proposed conditions of use. A strong narrative addresses expected exposure, daily intake estimates, margin-of-safety calculations, supporting toxicology, excipient safety, and any difference between historical and proposed use. Where history of use is the whole case, the FDA generally recommends 25 years of widespread use as the minimum to establish a history of safe use when a company relies on history alone, while allowing that shorter periods may be accepted with additional evidence (OFW Law).

History also has named limits. A higher dose, longer use, a different delivery system, or a concentrated extract can each open a gap between historical consumption and the proposed product — and gaps need other evidence: animal toxicology, dose-response analysis, a no-observed-adverse-effect level, or new approach methods, which the guidance accepts as support but says are unlikely to be sufficient alone. Two categories get special handling: live microbials, where strains must be characterized for toxin production and viability, and nanomaterials, where the FDA recommends early engagement through a pre-NDIN meeting (OFW Law).

An honesty note, because we hold ourselves to it: guidance is the FDA’s current thinking, and its recommendations are not legally binding unless a specific statute or regulation is cited — the binding duties here are the notification requirement and the content rules in the statute and 21 CFR 190.6 themselves. A notification is also not an FDA approval. What the October 19 document changes is what a complete, reviewable submission looks like, in the agency’s own current terms (Quality Smart Solutions; OFW Law).

The validation gap: identity and safety built as a dossier, not a description

Read as a quality-systems document, this guidance is asking supplement makers to do before marketing what this series usually watches them fail to do after it. The Niwali tejocote case was an identity failure discovered in finished product: a botanical on the label was not the botanical in the bottle. The NDI guidance moves that same question to the front of the product’s life, and raises the standard for the answer. A name, a supplier certificate, and a paragraph of history are a description. What the guidance describes instead is a dossier, and building one is validation work:

• Prove identity with a validated method, not a label claim. Characterization data, specifications, and validated analytical methods turn “this is the ingredient” into evidence. If the method cannot distinguish your extract from a different plant part, solvent, or concentration, the identity section has not been written yet — however polished the prose.
• Write specifications as a table an auditor can test. Each test, its acceptance criteria, and its method, side by side. Vague criteria cannot fail, and a specification that cannot fail cannot protect a batch either. The table format the guidance expects for a notification is the same discipline a GMP specification needs on the plant floor.
• Link every safety claim to the exact material tested. A study of a dilute traditional preparation does not automatically support a concentrated extract, and a history of intermittent use does not automatically support daily chronic use. The linkage has to be explicit: same identity, same or bridged dose, same or bridged conditions of use — or the difference is named and closed with other evidence.
• Do the exposure math before the reviewer does. Estimated daily intake, acceptable daily intake, a no-observed-adverse-effect level where toxicology supports one, and the margin of safety between them are not decoration. They are the quantitative bottom line of the safety narrative, and a narrative without numbers is an opinion.
• Treat new categories as new, early. Live microbials need strain-level characterization; nanomaterials warrant a pre-NDIN conversation. Waiting until the notification is assembled to discover that your category carries extra expectations burns the 75-day clock you do not get back.

Dietary supplement manufacturers should see the continuity with plant-floor rules: Part 111 already requires specifications for identity, purity, strength, and composition, and testing to verify them. This guidance applies the same instinct one step earlier, to the ingredient’s right to be in the product at all. A company whose identity program is a filed certificate of analysis is being asked, in writing, to build the program it skipped.

How a GMP Readiness Assessment catches it

This is exactly the failure pattern a GMP Readiness Assessment is built to find. Over four weeks, it reviews:

• Your identity program for new ingredients — are characterization, specifications, and analytical methods validated and specific, or does identity rest on supplier paperwork?
• Specification quality — do your specifications state a test, a method, and an acceptance criterion that can actually fail, in a form a reviewer or auditor can check?
• Evidence linkage — can every safety or history claim be traced to the exact material, dose, and conditions of use in the product you sell?
• Exposure and margin-of-safety calculations — are intake estimates and safety margins documented, current, and tied to the finished product, not just the ingredient?
• Gap-bridging and pre-submission readiness — where proposed use differs from historical use, is the additional evidence planned before the 75-day clock starts, including early engagement for live microbial or nanomaterial ingredients?

It closes with a gap assessment, a remediation roadmap, and starter IQ/OQ/PQ templates — so the fix starts before the lab report does.