Supplier Food Safety Audit Checklist
Supplier food safety audits verify that food raw material and ingredient suppliers maintain the food safety management systems required to produce safe, legal, and authentic food materials. FDA FSMA 21 CFR Part 117 Subpart G requires food manufacturers to establish a supply chain programme that verifies all significant hazards controlled at a supplier are effectively controlled; without verified supplier controls, those hazards become the receiving manufacturer's responsibility under HARPC. GFSI
- Industry: Food Manufacturing
- Frequency: Annually / Before approving new supplier
- Estimated Time: 2-4 hours
- Role: Quality Assurance Manager / Supplier Quality Auditor
- Total Items: 16
- Compliance: FDA FSMA Supplier Verification, GFSI Benchmarked Standards, BRC Global Standard, SQF Code, ISO 22000
Supplier Documentation and GFSI Certification (FDA FSMA 21 CFR 117 Subpart G / GFSI Requirements)
Verify the supplier's GFSI certification status, food safety certifications, and regulatory compliance documentation. An expired GFSI certificate or a certificate whose scope does not cover the product being audited does not satisfy FDA FSMA supplier verification requirements.
- Does the supplier hold a current, unrevoked GFSI-benchmarked certificate (BRC, SQF, FSSC 22000, ISO 22000 with FSSC, GlobalG.A.P., or BRCGS Storage and Distribution as applicable), from an accredited certification body, with a scope that explicitly includes the specific product category being supplied?
- Has the supplier provided a current food safety plan (HACCP plan or HARPC-compliant Food Safety Plan), a current SOP for the production process being audited, and evidence of the last internal audit, and are all documents dated within the past 12 months?
- Are all required regulatory registrations and licenses current (FDA food facility registration, state food manufacturing license, organic certification if claimed, specialty certifications such as Kosher or Halal), and have there been no FDA warning letters, import alerts, or consent decrees issued to this supplier in the past 3 years?
Facility Hygiene and Physical Environment (BRC Issue 9 Clause 4.4 / FDA FSMA 21 CFR 117.20)
Inspect the facility's physical condition for hygiene hazards: structural integrity of food production areas, pest control evidence, cleaning and sanitizing practices, and separation of raw and cooked or ready-to-eat production areas. FSMA 21 CFR 117.20 requires that buildings be suitable for their intended use and that food contact surfaces be maintained.
- Are food production areas (floors, walls, ceilings, drains) in good repair with no visible pest evidence (droppings, gnaw marks, live insects, nesting material), no condensation or water pooling, and no peeling paint, rust, or structural damage that could introduce physical contamination?
- Is raw material storage separated from finished product storage and from work-in-progress, with temperature-controlled storage areas at the required temperatures and monitored by a recording thermometer or data logger?
- Is the pest control programme managed by a licensed pest control operator (PCO), with pest control service records available for the past 12 months showing the date, areas treated, findings (pest activity observed), and any recommendations that have been actioned?
HACCP System and Critical Control Point Verification (FDA FSMA 21 CFR 117.126 / HACCP Principles)
Verify that the supplier's HACCP system covers the hazards relevant to the products being supplied, that CCPs are monitored as required, and that CCP monitoring records are current and complete. The HACCP system is the technical core of the food safety audit.
- Has the hazard analysis been conducted for all processes used to produce the supplied products, covering biological, chemical, physical, and radiological hazards, and does the hazard analysis justify each CCP designation with a control measure that achieves the required reduction in hazard?
- Are CCP monitoring records available for the past 30 days of production, complete (no gaps in monitoring intervals), signed at the time of monitoring, and reviewed and co-signed by a supervisor within the same shift?
- Is there documented evidence of HACCP plan verification activities within the past 12 months, including calibration of CCP monitoring equipment, CCP challenge testing (where applicable), internal HACCP audit, and management review of HACCP records?
Allergen Control Programme (BRC Issue 9 Clause 5.3 / FSSC 22000 TS / FDA FALCPA)
Inspect the allergen control programme for segregation, cleaning validation, and labelling accuracy. Major food allergens (milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, sesame -- per FDA FALCPA as amended by FASTER Act 2023) require dedicated controls in all food processing environments where they are present.
- Has an allergen risk assessment been completed for the production facility that identifies all allergens present in raw materials, finished products, and shared equipment, and identifies the cross-contact risks at each production and storage point?
- Is allergen cleaning validated (not just cleaned) between production runs of allergen-containing and allergen-free products on shared equipment, with cleaning validation data demonstrating that allergen residue is reduced below the action level?
- Are finished product labels reviewed against the bill of materials for every product to confirm that all allergens present as ingredients or as reasonably foreseeable cross-contact are correctly declared in the ingredient statement or in a precautionary allergen label ('may contain') where appropriate?
Traceability and Mock Recall Readiness (FDA Food Traceability Rule / ISO 22000:2018 §8.9.5)
Verify the supplier maintains a traceability system that enables rapid identification of affected product in the event of a safety issue, and that a mock recall has been conducted within the past 12 months. ISO 22000:2018 Section 8.9.5 requires that traceability be verified through a documented withdrawal test.
- Can the supplier trace a specified lot of finished product back to the raw material lots used in its production (one-step backward) and forward to all customers who received that lot (one-step forward) within 4 hours of a request?
- Has the supplier conducted a mock recall within the past 12 months, exercising both backward trace (raw material lots) and forward trace (customer distribution), documenting the time to complete the trace, the percentage of the lot accounted for, and any gaps identified?
Personnel Training and Food Hygiene (FDA FSMA 21 CFR 117.4 / BRC Issue 9 Clause 7)
Verify that all food production personnel have received food hygiene and food safety training appropriate to their role, that training records are maintained, and that the training programme is competency-verified and updated when practices change.
- Have all food production personnel (employees and contractors) received food hygiene and safety training appropriate to their role before beginning food production, with training records identifying the training content, date, and competency assessment?
- Are supervisors and food safety team members (HACCP team) trained at a level appropriate for their responsibilities, including food safety training or a recognized food safety qualification (PCQI for FDA FSMA, HACCP training for GFSI), with training certificates on file?
Related Food & Hospitality Checklists
- Cross-Contamination Prevention Checklist
- Food Delivery Temperature Log
- Food & Hospitality Food Temperature Log
- Daily Kitchen Sanitation
- Daily Opening Checklist (Front of House)
- Daily Closing Checklist (Front of House)
- Restaurant Opening Checklist
- Commercial Kitchen Closing Checklist
Related Food Safety Checklists
- HACCP Plan Audit Checklist - FREE Download
- Food Receiving Inspection Checklist - FREE Download
- Walk-in Cooler/Freezer Inspection Checklist - FREE Download
- Kitchen Deep Clean Checklist - FREE Download
- Food Truck Inspection Checklist - FREE Download
- Catering Event Safety Checklist - FREE Download
- Pest Control Inspection Checklist - FREE Download
- Bakery Sanitation Checklist - FREE Download
- Cross-Contamination Prevention Checklist - FREE Download
- Food Delivery Temperature Log - FREE Download
Why Use This Supplier Food Safety Audit Checklist?
This supplier food safety audit checklist helps food manufacturing teams maintain compliance and operational excellence. Designed for quality assurance manager / supplier quality auditor professionals, this checklist covers 16 critical inspection points across 6 sections. Recommended frequency: annually / before approving new supplier.
Ensures compliance with FDA FSMA Supplier Verification, GFSI Benchmarked Standards, BRC Global Standard, SQF Code, ISO 22000, FSSC 22000. Regulatory-aligned for audit readiness and inspection documentation.
Frequently Asked Questions
What does the Supplier Food Safety Audit Checklist cover?
This checklist covers 16 inspection items across 6 sections: Supplier Documentation and GFSI Certification (FDA FSMA 21 CFR 117 Subpart G / GFSI Requirements), Facility Hygiene and Physical Environment (BRC Issue 9 Clause 4.4 / FDA FSMA 21 CFR 117.20), HACCP System and Critical Control Point Verification (FDA FSMA 21 CFR 117.126 / HACCP Principles), Allergen Control Programme (BRC Issue 9 Clause 5.3 / FSSC 22000 TS / FDA FALCPA), Traceability and Mock Recall Readiness (FDA Food Traceability Rule / ISO 22000:2018 §8.9.5), Personnel Training and Food Hygiene (FDA FSMA 21 CFR 117.4 / BRC Issue 9 Clause 7). It is designed for food manufacturing operations and compliance.
How often should this checklist be completed?
This checklist should be completed annually / before approving new supplier. Each completion takes approximately 2-4 hours.
Who should use this Supplier Food Safety Audit Checklist?
This checklist is designed for Quality Assurance Manager / Supplier Quality Auditor professionals in the food manufacturing industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.
Can I download this checklist as a PDF?
Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.