GMP's are not the same as following FSMA which is an entire food safety program or system..............
I did find the following which looks like as a receiving facility, you are only required to obtain attestation from the vendor that THEY have PC in place .......I've also attached the link for your viewing pleasure
2. If my facility supplies raw materials or other ingredients to a manufacturer/processor covered by the human food preventive controls requirements, and my facility is responsible for controlling the potential hazards, what information should I provide to the receiving facility regarding my status as a qualified facility, or any change in status from qualified to “not a qualified facility”? In some circumstances, when a facility supplies a raw material or other ingredient to a manufacturer/processor that is covered by the human food preventive controls requirements, it is considered a “supplier” (see definition of “supplier” in 21 CFR 117.3). The manufacturer/processor is considered a “receiving facility.” A receiving facility must establish and implement a supply-chain program for raw materials and other ingredients when a hazard identified by the receiving facility is controlled by a supplier. (See 21 CFR 117.405(a)(1)). The receiving facility may rely on certain written assurances from a supplier that is a qualified Contains Nonbinding Recommendations 11 facility (see 21 CFR 117.430©) rather than rely on other verification methods, like an onsite audit. If you are a supplier to a receiving facility, the receiving facility must obtain written assurance from you that you are a qualified facility before first approving you as a supplier for an applicable calendar year, and on an annual basis thereafter, by December 31 of each calendar year, for the following calendar year (see 21 CFR 117.430©(1)). The receiving facility must also obtain other written assurance from you every two years that you are producing the raw material or ingredient in compliance with applicable FDA food safety regulations (or, when applicable, the food safety regulations of a country whose food safety system FDA has recognized as comparable or equivalent). This written assurance must include either: 1. a brief description of the preventive controls you are implementing to control the applicable hazards in the food; or 2. a statement that you are in compliance with State, local, county, tribal, or other applicable non-Federal food safety law. (See 21 CFR 117.430©(2)). If a receiving facility will rely on your written assurance that you are a qualified facility, you would provide the receiving facility with written assurance of your status as a qualified facility before the receiving facility approves you as a supplier, and on an annual basis thereafter. Because the human food preventive controls requirements require the receiving facility to obtain the written assurance by December 31 of each calendar year, a receiving facility has flexibility to work with you to determine the specific date within a calendar year for annual notification to the receiving facility. As a matter of a business agreement with the receiving facility, it is possible that you would provide the written assurance earlier than December 31 of each calendar year.
2. If my facility supplies raw materials or other ingredients to a manufacturer/processor covered by the human food preventive controls requirements, and my facility is responsible for controlling the potential hazards, what information should I provide to the receiving facility regarding my status as a qualified facility, or any change in status from qualified to “not a qualified facility”? In some circumstances, when a facility supplies a raw material or other ingredient to a manufacturer/processor that is covered by the human food preventive controls requirements, it is considered a “supplier” (see definition of “supplier” in 21 CFR 117.3). The manufacturer/processor is considered a “receiving facility.” A receiving facility must establish and implement a supply-chain program for raw materials and other ingredients when a hazard identified by the receiving facility is controlled by a supplier. (See 21 CFR 117.405(a)(1)). The receiving facility may rely on certain written assurances from a supplier that is a qualified Contains Nonbinding Recommendations 11 facility (see 21 CFR 117.430©) rather than rely on other verification methods, like an onsite audit. If you are a supplier to a receiving facility, the receiving facility must obtain written assurance from you that you are a qualified facility before first approving you as a supplier for an applicable calendar year, and on an annual basis thereafter, by December 31 of each calendar year, for the following calendar year (see 21 CFR 117.430©(1)). The receiving facility must also obtain other written assurance from you every two years that you are producing the raw material or ingredient in compliance with applicable FDA food safety regulations (or, when applicable, the food safety regulations of a country whose food safety system FDA has recognized as comparable or equivalent). This written assurance must include either: 1. a brief description of the preventive controls you are implementing to control the applicable hazards in the food; or 2. a statement that you are in compliance with State, local, county, tribal, or other applicable non-Federal food safety law. (See 21 CFR 117.430©(2)). If a receiving facility will rely on your written assurance that you are a qualified facility, you would provide the receiving facility with written assurance of your status as a qualified facility before the receiving facility approves you as a supplier, and on an annual basis thereafter. Because the human food preventive controls requirements require the receiving facility to obtain the written assurance by December 31 of each calendar year, a receiving facility has flexibility to work with you to determine the specific date within a calendar year for annual notification to the receiving facility. As a matter of a business agreement with the receiving facility, it is possible that you would provide the written assurance earlier than December 31 of each calendar year.