Category: Quality & Buying

CBD Manufacturing Standards: What GMP, Organic and Hemp Certifications Mean

By Sarah Miletich 8 min read

When a CBD label says "GMP," "USDA Organic" or carries a third-party seal, it is describing how the product was made, not what is in a specific bottle. GMP (good manufacturing practice) means a facility follows documented controls for making products consistently. USDA Organic means the agricultural ingredients were grown and handled under federal organic rules and checked by an accredited certifier. A third-party seal means an outside organization audited the company against its own standard.

Each can be meaningful. But CBD sits in a regulatory gap: the FDA's position is that CBD products are excluded from the definition of a dietary supplement, so the federal GMP rules written for supplements do not directly cover them. That makes GMP claims on CBD largely voluntary, and it makes it more important to know who checked what.

Here is what each term means, what it does not tell you, and what to ask.

Key takeaways

  • The dietary supplement GMP rule is 21 CFR Part 111. Because the FDA says CBD cannot be sold as a dietary supplement, GMP claims on CBD products are voluntary or by analogy.
  • "FDA registered" is not "FDA approved." The FDA does not issue or recognize registration certificates.
  • Hemp can be certified USDA Organic, and the seal has specific rules about how much of a product must be organic.
  • Third-party programs such as the U.S. Hemp Authority audit companies against their own standards. Check the certified list.
  • No certification replaces a lab report for your batch.

What GMP means for supplements

For dietary supplements, the FDA's current good manufacturing practice rule is 21 CFR Part 111, "Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements." FDA published it as a final rule in June 2007 (FDA).

The FDA describes the rule's purpose as making sure a product contains what it is labeled to contain and is not contaminated with harmful or undesirable substances. It covers identity, purity, strength and composition through specifications, testing, record keeping and handling of complaints. The rule's subparts run from personnel and equipment to master manufacturing records, batch production records, laboratory operations and product complaints.

In plain terms, GMP is about process: written procedures, trained people, clean equipment, records for every batch, and a way to trace and fix problems.

Why GMP claims on CBD are voluntary

As of 23 September 2026, the FDA's position is that THC and CBD products are excluded from the dietary supplement definition under the Federal Food, Drug, and Cosmetic Act (FDA). The only FDA-approved CBD product is a prescription drug.

That leaves a gap. A CBD tincture is not a lawful dietary supplement in the FDA's view, so Part 111 does not formally apply to it. When a CBD brand says its products are "made in a GMP facility," it usually means the facility follows supplement or food GMP standards voluntarily, or that an outside auditor checked it against a GMP-based standard. Both can be real and valuable. Neither is the same as an FDA inspection finding. This is general information, not legal advice; state rules on hemp products also vary, so check your state.

A GMP claim is most useful when it comes with details:

  • Which standard? Supplement GMP (Part 111), food GMP, or a private standard based on them.
  • Who verified it? A named third-party auditor, or the company's own statement.
  • Which facility? Many brands use contract manufacturers. The claim should apply to the place your product is made.
  • When? Audits happen on a cycle. Ask for the date.

"FDA registered" is not "FDA approved"

Some labels say a product is made in an "FDA-registered facility." Registration means the facility has told the FDA it exists and what it does. It is not an approval, a certification or an endorsement. The FDA says it "does not issue a certificate of registration," nor does it "recognize a certificate of registration" issued by a private business, and it warns that private use of the FDA logo would wrongly suggest endorsement, which the FDA "does not and cannot do" (FDA).

If you see an FDA logo on a CBD product or a "certificate of FDA registration," treat it as a red flag.

What USDA Organic means for hemp

Hemp can be certified organic. The USDA National Organic Program says that hemp produced in the United States may be certified as organic if it is produced under the U.S. Domestic Hemp Production Program and the USDA organic regulations (USDA AMS, NOP 2040).

Organic products must be overseen by a USDA-accredited certifying agent and produced without prohibited methods and substances. The label rules depend on how much of the product is organic (USDA AMS):

Label wording Organic content (excluding salt and water) USDA seal allowed?
"100 percent organic" 100% Yes
"Organic" At least 95% Yes
"Made with organic (ingredient)" At least 70% No
Organic ingredients listed only in the ingredient list Less than 70% No

Two things are worth knowing. First, "organic hemp" in an ingredient list is not the same as an organic product: a product can contain some organic ingredients and still not qualify for the seal. Second, you can check whether a farm or company is certified in the USDA's Organic Integrity Database, which lists operations certified by USDA-accredited certifiers.

Organic certification is about how ingredients were grown and handled. It does not measure the CBD in a bottle or test it for THC.

Third-party hemp certifications

Some industry groups run their own certification programs. The best known in hemp is the U.S. Hemp Authority, which says it certifies hemp and CBD growers and products through independent third-party audits, and that more than 50 companies have been awarded its seal since the program started in late 2018. As of September 2026, its website lists the steps to certification (an audit, resolving any issues found, then a licensing agreement) and its current standard, and covers topics including quality management systems, good manufacturing practices and hemp farming practices (U.S. Hemp Authority).

A seal like this tells you a company chose to be audited against a published standard. To make it meaningful:

  • Check that the company appears on the program's own list of certified companies.
  • Check which products or facilities the certification covers.
  • Remember that a program's standard is set by the program, not by a government agency.

What certifications do not tell you

GMP, organic and third-party seals describe systems and sourcing. None of them tells you what a specific batch contains. For that you still need a certificate of analysis (COA) that matches your bottle.

That matters because independent testing has found CBD products that contain more or less CBD than their labels say. Our guide to choosing a quality CBD product shows how to read a COA against a label.

For our part, we post our COAs on our lab testing page. Our finished-product COAs from SC Labs (May 2025) cover potency and microbials, and the full contaminant panels (pesticides, heavy metals, residual solvents and mycotoxins) are on the reports for our raw ingredients, the CBD distillate and the CBN isolate. Our Tested Clean page explains what each panel checks.

Questions to ask a brand about how it makes CBD

  1. Where is the product made, and by whom?
  2. Does that facility follow GMP, and who audited it, when?
  3. Can I see the certificate, not just the logo?
  4. If it says organic, which certifier, and does the product qualify for the USDA seal or only list organic ingredients?
  5. Can I see the COA for my batch, and which tests does it cover?

Our guide to choosing a quality CBD product puts these alongside the label and lab report checks.

FAQ

Is there an official GMP certification for CBD?

Not from the FDA. The FDA's supplement GMP rule (21 CFR Part 111) does not formally apply to CBD, because the FDA says CBD cannot be sold as a dietary supplement. GMP claims on CBD products come from voluntary programs or third-party audits.

Can CBD be USDA Organic?

The hemp it comes from can be. A finished product can carry the USDA organic seal only if it meets the organic content rules and is certified by a USDA-accredited certifying agent.

Does "FDA registered" mean the FDA approved the product?

No. Registration is a listing with the FDA, not an approval or certification. The FDA does not issue registration certificates.

Is a certified product safer than one without a seal?

A seal tells you a company was audited against a standard. It does not replace a batch lab report, which is still the best way to check what is in your bottle.

Related reading

These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.

Share

Still have questions about Quality & Buying? See the Quality & Buying FAQ

Part of our CBD guides: Explore our CBD Learn Hub for practical guides, helpful resources, and answers to common questions.