GMP, BRCGS, FSSC 22000: What Supplement Certifications Actually Mean

Those certification badges on a supplement label — GMP, BRCGS, FSSC 22000 — are independent audits of the factory, not tests of the product in your hand. They verify that a manufacturer runs hygienic, controlled, traceable processes to a recognised standard. What they do not do is confirm how much creatine is in your specific jar. That's a separate document: a batch-level Certificate of Analysis. Understanding the difference is the single most useful thing a supplement buyer can learn — so let's make it simple.

If you read our guide to telling whether creatine gummies actually contain what they claim, you already know the uncomfortable headline from 2025: roughly half of the creatine gummies independently tested failed their own label claims. In the aftermath, "certified manufacturing" became a marketing buzzword, and the badges multiplied. GMP. BRCGS. FSSC 22000. ISO 9001. A wall of acronyms, most of them never explained to the person actually buying the product.

This article fixes that. We'll go through what each certification audits, what it can and cannot prove, how the UK, EU and US frameworks differ, and we finish with a buyer's scorecard you can run on any brand in under two minutes.

What a supplement certification actually is (and what it isn't)

A supplement certification is an independent, scheduled audit of a manufacturer's quality-management and food-safety systems, carried out by a recognised third-party certification body against a published standard. The auditor inspects the whole production environment — raw-material sourcing, hygiene, equipment, staff procedures, allergen control, traceability, record-keeping — and either awards certification or doesn't.

That word systems is the crux. A certification tells you the factory is set up to produce safe, consistent, traceable product. It does not, on its own, tell you what is inside the specific bottle you bought. Think of it as the difference between a restaurant's food-hygiene rating and a photograph of your actual plate. The rating makes a good plate far more likely. It is not the plate.

This distinction is where most competitor content on certifications quietly fails the reader. The B2B manufacturing guides explain which badge you need to get into Tesco or onto Amazon. Almost none translate that into the question a buyer is actually asking: does this badge mean my creatine gummies contain the creatine on the label? The honest answer is "it makes it much more likely, but it is not a guarantee — for that, you want the COA." Hold onto that. Everything below builds on it.

GMP: Good Manufacturing Practice — the process baseline

Good Manufacturing Practice (GMP) is the foundational standard that confirms a facility follows controlled, documented, repeatable manufacturing processes. It covers cleanliness, equipment calibration, staff training, batch records, and contamination control. GMP is best understood as the floor, not the ceiling — it's the minimum a serious supplement manufacturer should be able to demonstrate.

There's an important regional wrinkle. In the United States, supplements are regulated as a distinct category ("dietary supplements") and the relevant GMP standard is built on the US Food and Drug Administration's 21 CFR Part 111 regulations, often verified through schemes like NSF-GMP. In the UK and EU, supplements are regulated as food, so GMP principles are folded into broader food-safety standards (BRCGS, FSSC 22000) rather than standing alone as a supplement-specific badge. So a UK creatine gummy made to GMP-grade food-safety standards and a US gummy carrying an "NSF-GMP" badge are meeting different framings of a similar idea. Neither is automatically superior; they answer to different regulators.

What GMP does not prove: that the active ingredient is present at the labelled dose, that the lab testing the product is competent for that specific format, or that any given batch passed. GMP makes consistency possible. It doesn't measure the molecule.

BRCGS: the Global Standard for Food Safety — the retail-grade audit

BRCGS (Brand Reputation Compliance Global Standards) is a rigorous, GFSI-recognised audit of food safety and quality management that UK supermarkets and major retailers effectively treat as a minimum entry requirement for suppliers. Established in 1996 by the British Retail Consortium, it audits food safety, the quality-management system, product and process control, and — critically — the culture of food safety inside the business.

BRCGS is graded (from a starting grade up to AA/A*, with the top grades reserved for near-flawless unannounced audits), and renewed annually. Because UK grocery chains mandate it before they'll even run their own supplier audit, a BRCGS certificate is a strong signal that a manufacturer operates at genuine commercial-retail standard rather than at a hobbyist level. According to the BRCGS Global Standard for Food Safety, certification requires ongoing assessment and continuous improvement — it is not a one-off tick.

For a UK creatine-gummy buyer, BRCGS is one of the more meaningful badges on the list, precisely because it's the one the British retail system itself relies on. What it still doesn't do: test the creatine content of your jar. (You'll notice a pattern.)

FSSC 22000: the ISO-based food-safety management system

FSSC 22000 (Food Safety System Certification) is a GFSI-recognised scheme built on the international ISO 22000 standard, with supplementary sector-specific requirements bolted on. Because it's ISO-based, it integrates cleanly with a manufacturer's other ISO systems — most relevantly ISO 9001 for quality management. It's globally adopted, with tens of thousands of certified sites worldwide, and certificates run on a three-year cycle with annual surveillance audits.

In practice, BRCGS and FSSC 22000 are siblings — both GFSI-benchmarked, both auditing food-safety management systems to a high bar, both accepted internationally. A manufacturer holding either is operating at a recognised global standard; holding both, as some premium manufacturers do, signals belt-and-braces rigour and easier access to multiple export markets.

ISO 9001 and the "consistency, not quality" trap

You'll often see ISO 9001 on a supplement page, and some manufacturing blogs dismiss it outright as meaningless. The truth is more nuanced — and worth a buyer understanding clearly.

ISO 9001 is a quality-management-system standard. It certifies that a company can consistently produce to its own defined specification. The common critique is that you can technically hold ISO 9001 while consistently producing a low-quality product — because the standard governs the process discipline, not the product's quality bar. That critique is fair as a warning against treating ISO 9001 as a food-safety badge (it isn't one). But the buyer reading is more useful than "ignore it":

• ISO 9001 on its own tells you the company has documented, repeatable processes. Helpful, but not a food-safety assurance.
• ISO 9001 alongside a GFSI-recognised food-safety standard (BRCGS or FSSC 22000) tells you the manufacturer pairs process discipline with a high food-safety bar. That combination is a genuinely strong signal.

So the right question isn't "is ISO 9001 worthless?" It's "what is ISO 9001 sitting next to?" Context is the whole story.

The UK vs EU vs US framing (why the same product carries different badges)

Where a supplement is made changes which certifications are relevant — not because one region is automatically safer, but because each regulates supplements through a different legal lens. This trips up a lot of buyers comparing a UK gummy against a US one.

In the UK specifically, two bodies matter. The UK Food Standards Agency (FSA) governs supplement labelling and general food safety — creatine is sold as a food supplement, not a regulated nutrient with a daily reference intake. The Medicines and Healthcare products Regulatory Agency (MHRA) only acquires jurisdiction if a brand crosses into medicinal claims ("treats", "cures", "prevents disease"). For a buyer, this means UK creatine-gummy quality is governed primarily by food-safety certification plus honest labelling — which is exactly why the BRCGS/FSSC badges, and a batch COA, carry the weight they do here.

Sport-specific certifications: a different job entirely

GMP, BRCGS and FSSC 22000 are about food safety and consistency. They are not designed to answer the question a competing athlete asks: could this product cause me to fail a drug test? That's a separate class of certification — banned-substance screening.

• Informed Sport (run by LGC) batch-tests products for substances on the WADA prohibited list, and verifies the manufacturing controls behind them.
• NSF Certified for Sport combines banned-substance screening with a GMP audit.

If you're a tested athlete, these matter as much as the food-safety badges — and they operate at the batch level, closer to a COA in spirit. If you're not competing in a tested sport, they're a nice-to-have rather than a must. We go deeper on this in our buyer's guide to third-party testing for creatine, which covers who tests, what they find, and how to read a results report.

The certification scorecard: how to read any brand in two minutes

Here's the practical payoff. Run any creatine-gummy brand through the scorecard below. It weights what each signal actually proves — and it deliberately rewards the brands that pair facility certification with batch-level evidence, because that combination is the real gold standard.

The scorecard makes the central lesson concrete: certifications and COAs do different jobs, and the brands worth trusting carry both. A wall of badges with no batch-level testing behind them is the supplement industry's version of a beautifully laminated menu in a restaurant you've never seen the kitchen of.

What APMZEE's certifications cover — and where the COA fills the gap

We badge GMP, BRCGS, FSSC 22000, ISO 9001 and ISO/IEC 27001 on our homepage, alongside Made in the UK and no-heavy-metals testing — and we want to be precise about what each one is doing for you, because precision is the whole point of this article.

That last row is the one that closes the loop. Everything above it is the audited system; the COA is the test of your jar. We publish our certifications openly rather than just listing acronyms, and we provide a batch-matched Certificate of Analysis on request — because after 2025, we think showing your work is the only honest standard. If you want the fuller story of how that scandal unfolded and the seven-step check that came out of it, our creatine gummies legitimacy guide is the place to start.

Related guidance

If you're working through supplement quality more broadly, two companion pieces go deeper: our guide to third-party testing for creatine explains who actually runs the tests and how to read a results report, and the creatine gummies legitimacy guide covers the chemistry behind why so many gummies failed and the verification check that followed.

FAQs