Guide to NPRA Registration With an OEM Supplement Manufacturer in Malaysia

By Aisyah Karim · Halal Cosmetics & Market Entry Advisor · Published 11 Sep 2026

How NPRA product registration actually works when an OEM makes your health supplement — who holds the registration, who prepares each part of the dossier, and the decisions you must settle in the contract before a single capsule is filled.

Quick answer: how does NPRA registration work with an OEM supplement manufacturer?

In Malaysia, a health supplement must be registered with the Drug Control Authority, through the National Pharmaceutical Regulatory Agency (NPRA), before it can be sold, and the registration is held by a Malaysian-incorporated company called the product registration holder. When an OEM makes your product, the factory supplies the manufacturing evidence — its licence, GMP status, formula data, specifications and stability results — while the holder submits and owns the registration. The single most important decision is who that holder is, because it decides whether the product can follow you if you ever change factory. Settle it in writing before development starts.

Key takeaways

• A registered health supplement carries a MAL registration number on its label; selling an unregistered product that should have been registered is an offence, not a paperwork gap.
• The registration has one holder. If your OEM holds it, your product’s legal existence is tied to that factory; if you hold it, you carry the workload but keep the portability.
• The OEM is the natural author of the technical half of the dossier. You are the natural author of the label, the claims and the commercial decisions — and you remain accountable for all of it as holder.
• Registration does not approve your advertising, does not make the product halal and does not protect your brand name. Those are three separate tracks with three separate authorities.
• Changing manufacturer, formula or pack after registration is a regulated change that needs approval. Plan for it on day one rather than discovering it during a supplier dispute.

Who this guide is for

This guide is for brand owners, distributors and founders who have decided to launch a capsule, tablet, softgel or powder health supplement in Malaysia and plan to outsource manufacturing. It assumes you have a product idea and possibly a shortlist of factories, but have not yet signed. If you are still choosing a partner, read our guide on how to choose an OEM supplement manufacturer in Malaysia first; this page picks up at the point where registration becomes a contract term rather than an abstract requirement.

Why does a health supplement need NPRA registration at all?

Health supplements are regulated as products under the Control of Drugs and Cosmetics Regulations 1984, made under the Sale of Drugs Act 1952, and that framework requires them to be registered before sale. The National Pharmaceutical Regulatory Agency evaluates the application and acts as the secretariat to the Drug Control Authority, which grants the registration. Both instruments can be read on the Attorney General’s Chambers Laws of Malaysia portal.

The word that matters is “health supplement”. Not every product a supplement factory makes falls under NPRA. A ready-to-drink functional beverage or a fortified food is usually handled under the Food Act 1983 by the Ministry of Health’s Food Safety and Quality Programme instead, with no NPRA registration involved. Which side your product lands on depends on its form, dose, ingredients and claims — our explainer on what an OEM supplement manufacturer in Malaysia is walks through that boundary. If you genuinely cannot tell, NPRA operates a classification process for products at the food–drug interface. Use it before you pay for a dossier, not after.

Who are the three parties in a registration, and what does each one own?

A supplement registration involves three parties: the product registration holder, the licensed manufacturer and the regulator, and each owns a different part of the outcome. Confusing the first two is the root of most registration disputes between brand owners and factories.

The product registration holder is the company named on the registration. It must be incorporated in Malaysia, and it is legally responsible for the product on the market — its quality, its labelling, its safety reporting and its compliance for as long as it is sold. The manufacturer must hold a manufacturing licence from the Drug Control Authority and operate to Good Manufacturing Practice, which NPRA inspects; Malaysia is a member of the Pharmaceutical Inspection Co-operation Scheme (PIC/S), so the GMP standard applied is an international one. NPRA evaluates the file, can ask questions or reject it, and keeps the registration under review after approval. Notice what is missing from that list: the brand owner has no automatic role at all. Unless your company is the holder, you are simply a customer of the company that is.

Should you or your manufacturer hold the registration?

Hold the registration yourself if you intend to build a lasting brand, and let the manufacturer hold it only when speed and a light workload genuinely matter more than the freedom to leave. Many Malaysian OEMs offer to register the product in their own name as part of a turnkey package. It is convenient, and it is also the single clause most likely to trap you later.

The reason is portability. A registration belongs to its holder and names its manufacturer. If the factory holds it and you later want to move production — because of quality, price, capacity or a dispute — you cannot simply take “your” product with you. You need the holder’s cooperation to transfer the registration, or you start a new registration in your own name with a new manufacturer, during which your product may be off the shelf. A third option, a regulatory consultancy acting as holder, sits in between and suits foreign brand owners without a Malaysian company.

Our view is plain: for anyone building a brand rather than testing a product, the first row is the right answer, and the extra workload is the price of owning what you are selling. If you accept the second row for speed, put a transfer obligation in the manufacturing agreement — stating that the factory will cooperate with a change of holder on reasonable notice — before you spend money on artwork. The commercial model you choose affects this too; our comparison of OEM vs ODM vs private label supplements explains why an ODM base formula can make the factory reluctant to let the registration leave.

What goes into the registration dossier, and who prepares each part?

A health supplement dossier combines product information, quality data and labelling, and in an OEM arrangement the factory normally prepares the technical half while the holder owns the label, the claims and the submission. NPRA publishes the authoritative requirements in its Drug Registration Guidance Document, which covers health supplements and is updated from time to time — always work from the current version on the NPRA site rather than from a factory’s old template.

Read the right-hand column as a to-do list for yourself. As holder you sign for the whole file, so a weak stability study or a subcontracted process you never heard about becomes your problem at the first NPRA query. Ask for copies of every technical document the factory submits on your behalf, and keep them. If the relationship ends, those copies are what let a new manufacturer and a new application pick up where the old one left off.

How does the registration process run from first sample to MAL number?

The process runs in a predictable order — classify, formulate within limits, generate data, draft the label, submit, answer queries and only then produce commercially — and most delays come from doing those steps out of order. We deliberately give no durations here, because they depend on the product, the completeness of the file and NPRA’s workload at the time.

1. Confirm the classification. Establish that the product is a health supplement rather than a food, a traditional product or something requiring a stricter route.
2. Lock the formula against the permitted-ingredient rules. An ingredient or level that is not allowed is cheaper to discover at the whiteboard than in an NPRA query letter.
3. Produce pilot batches and start stability testing in the final pack, because the shelf-life claim must rest on data from the product as sold.
4. Draft label and claims using the permitted claim wording, and have them reviewed against the current guidance before artwork is printed.
5. Submit through Quest3+, NPRA’s online system, under the holder’s account.
6. Answer queries promptly and completely. An incomplete reply usually costs more time than the original question.
7. Receive the registration and MAL number, then release commercial production and print final packaging.

The practical trap is step 7 happening before step 6 finishes. Founders under launch pressure print packaging, commit inventory and book retail listings on an assumed approval date. If NPRA then asks for a label change, the printed stock is scrap. The checklist in our supplement brand launch checklist shows where registration sits in the wider launch plan.

What can your label and your marketing say once you are registered?

Your label can carry only the claims approved in the registration, and your advertising generally needs a separate approval — registration alone does not license you to promote the product however you like. Health supplements are limited to the categories of claim NPRA permits for them, and they cannot claim to prevent, treat or cure a disease.

Advertising is the gap most first-time brand owners miss. Under the Medicines (Advertisement and Sale) Act 1956, advertisements for registered health products generally require approval from the Medicine Advertisements Board, administered through the Ministry of Health’s Pharmaceutical Services Programme. That covers far more than print: social media posts, influencer scripts, marketplace listings and packaging inserts can all fall within scope. Build advertising approval into the launch plan alongside registration, and brief anyone who creates content for you that “registered” is not the same as “approved to say anything”. Our article on mistakes to avoid with an OEM supplement manufacturer covers other claim-related errors worth avoiding.

What happens if you change manufacturer, formula or pack after registration?

Almost any material change after registration — a new manufacturer, a formula adjustment, a new pack or a longer shelf life — is a regulated variation that must be applied for and approved before the changed product is sold. Some changes can be handled as a variation; others amount to a new product and need a fresh registration. The current guidance defines which is which, and it is worth reading before you negotiate anything with a factory.

This is why the holder decision matters so much. Consider the common scenario of a brand whose factory raises prices sharply after two years. If the brand holds the registration, it qualifies a new manufacturer, generates the required data at the new site and applies for the change — slow, but in its own hands. If the factory holds it, the brand is negotiating with the one party that benefits from making the exit difficult. The same logic applies to smaller changes: a switch from bottles to blister packs usually needs fresh stability data in the new pack, so a packaging saving can carry a regulatory cost you should price in before you chase it. The operating habits in our guide to best practices for working with an OEM supplement manufacturer help keep change control disciplined.

What are your obligations after the product is on the shelf?

Registration is the start of the holder’s obligations, not the end: the holder must keep the registration valid, report safety problems, manage complaints and recalls, and keep the product matching what was approved. Registrations are time-limited and must be renewed, so put the renewal date in a calendar the day approval arrives.

Safety reporting is the obligation brand owners most often assume the factory handles. It usually does not — adverse events are reported to NPRA by the holder, and customers contact the brand, not the plant. Set up a simple route for complaints to reach whoever is responsible for reporting, and agree in the quality agreement how quickly the factory must supply batch records if an investigation starts. Recalls work the same way: the factory holds the batch data, but the holder is the party answerable for pulling product from the market. A recall plan written before launch is worth more than any clause written after one.

Where do halal certification and trademarks fit in?

Halal certification and trademark registration run on separate tracks from NPRA registration, with different authorities, and each should be started in parallel rather than after approval. None of the three confers the others.

Halal certification in Malaysia is issued by JAKIM and the state Islamic religious authorities, and it attaches to specified products made at specified premises. Your factory holding halal certification does not make your new product halal automatically; the product must be brought within scope, and capsule shells, gelatin sources, flavourings and processing aids all need documentation. From a market-entry view, decide early whether halal is essential for your channel, because it can change the ingredient choices that feed the NPRA dossier. Your brand name, meanwhile, is protected only by trademark registration with MyIPO. File it in your own company’s name before the name appears on submitted artwork; a registration number protects the product, not the brand.

What are the red flags in how a manufacturer talks about registration?

The clearest red flag is a factory that treats registration as a formality it will “take care of” without explaining who the holder will be. That answer is usually sincere, and it usually means the factory intends to hold the registration itself. Other warning signs deserve a pause:

• It quotes a guaranteed approval date. Nobody controls NPRA’s queries, so a promised date is a sales line.
• It cannot show a current manufacturing licence covering your dosage form, or offers one belonging to another company.
• It proposes label claims that sound stronger than the permitted wording, which tends to fail at evaluation or invite enforcement later.
• It is vague about which plant will physically make the product — a common sign of subcontracting, explored in our guide to supplement examples by dosage form.
• It will not give you copies of the technical documents it submits in your product’s name.

What questions should you ask your OEM before you sign?

Ask questions that force the registration arrangement into writing, because every item left verbal becomes an argument if the relationship ends. These seven cover most of it:

1. Who will be the product registration holder, and will the agreement oblige you to cooperate with a transfer to us on request?
2. Does your manufacturing licence cover this dosage form at the premises where our product will be made?
3. Which dossier documents will you prepare, and will we receive copies of all of them?
4. Will stability testing be run in our final commercial pack, and what shelf life do you expect the data to support?
5. How do you handle NPRA queries, and who pays if a query results from an error in your data?
6. Is any part of manufacturing, testing or packing subcontracted, and to whom?
7. If we change the formula or pack later, how will you support the variation, and on what terms?

Frequently asked questions

Can a foreign company register a health supplement in Malaysia?

Not directly. The product registration holder must be a company incorporated in Malaysia, so a foreign brand owner either sets up a local company, appoints a local distributor as holder, or uses a regulatory consultancy. If the product is also manufactured abroad, the holder needs import licensing and acceptable GMP evidence for the foreign plant. Choose the holder with the same care as the factory, and secure transfer terms in writing.

Does my OEM’s existing registration cover my product if the formula is the same?

No, not as your product. A registration covers a specific product from a specific holder, so a factory’s existing registered formula belongs to whoever holds it. Selling it under your brand requires your own registration or a licensing arrangement the regulations permit. Ask the factory exactly which registration your packs would carry, and check the product on Quest3+.

How can I check whether a supplement is registered?

Search the product on NPRA’s Quest3+ system using its name or MAL registration number. The record shows the holder and the registration status. Check your own product after approval, and check any competitor or factory reference product before relying on a claim that it is registered.

Is NPRA registration the same as halal certification?

No. NPRA registration concerns the product’s quality, safety and permitted claims; halal certification is issued separately by JAKIM or a state Islamic religious authority and covers specified products at specified premises. A product can hold either without the other. Decide early whether your market needs halal, because it affects ingredient sourcing.

Should I pay a consultant or let the factory handle registration?

That depends on who you want to own the result. A factory-run registration is usually quicker for you and cheaper up front, but it may leave the factory as holder. A consultant costs more but can file in your company’s name. If you use the factory, make holdership and transfer terms explicit in the agreement.

Sources and how to verify

• National Pharmaceutical Regulatory Agency (NPRA) — health supplement registration, manufacturer licensing, GMP inspection and the Drug Registration Guidance Document.
• Quest3+ — NPRA’s online system for submitting registrations and checking registered products.
• Laws of Malaysia (Attorney General’s Chambers) — Sale of Drugs Act 1952, Control of Drugs and Cosmetics Regulations 1984, and the Medicines (Advertisement and Sale) Act 1956.
• Pharmaceutical Services Programme, Ministry of Health — Medicine Advertisements Board approvals.
• Food Safety and Quality Programme, Ministry of Health — products handled as food rather than health supplements.
• PIC/S — the international GMP inspection scheme of which Malaysia is a member.
• JAKIM and MyIPO — halal certification and trademark registration respectively.

For more guides in this category, browse our supplement and functional food OEM guides.

Limitations and scope

This guide explains the structure of health supplement registration in an outsourced-manufacturing arrangement. It is not a substitute for the current NPRA guidance, and we did not audit factories or review any specific dossier for this article. It deliberately publishes no fees, processing timelines or prices, because they change and depend heavily on the product and the completeness of the file. Traditional products, products at the food–drug boundary and imported products each carry additional requirements only summarised here. Confirm your own position directly with NPRA and the other authorities linked above before committing to a formula, a holder arrangement or packaging.

This article is general information, not regulatory or legal advice. Requirements change — verify current rules and your product’s classification directly with the relevant Malaysian authorities before you submit a registration or print packaging.

About the author
Aisyah Karim writes on market entry and halal compliance for Malaysian consumer health and beauty brands, with a focus on the regulatory decisions that determine whether a product can reach the shelf.