We import some very low risk minerals (calcium chloride; sodium bicarbonate) from a small company in Canada. They have a full HACCP plan in place and are following the FSVP rules for import during shipping, however I'm wondering how we can make sure we are compliant with FSVP and FSMA on this. It wouldn't be cost sufficient for them to obtain a SQF or GFSI certification as they are about 1000 square feet and only have 6 employees working at the facility.
Has any one had success using a supplier questionnaire and reviewing supplier HACCP plans to justify not requiring GFSI certification? Would we need to audit the facility on a frequency or could we use their documentation to justify?