When a HACCP plan is commonly requested
A small food business may be asked for a HACCP plan before a buyer approves the product, before a co-packer runs production, during a health department review, or during an audit. The request may not always mean the business is subject to the same regulation as another product category. It may mean the reviewer wants to see a controlled, documented food safety system.
Start with the HACCP Plan Guide for Small Food Businesses if you need the full structure. Use the HACCP plan template when you are ready to organize the file.
Practical decision points
Ask these questions before deciding what to build:
- What product category are you making?
- Is the product ready-to-eat, refrigerated, acidified, low-acid, raw, baked, frozen, dried, or shelf-stable?
- Is there a kill step, cooling step, allergen changeover, metal detection step, or other key control?
- Are you selling direct to consumers, wholesale, online, through retail, through foodservice, or through a distributor?
- Has a buyer, co-packer, regulator, or auditor specifically requested HACCP?
- Does a certification program or customer standard apply?
- Are you also subject to FSMA preventive controls or other food safety plan expectations?
The answer is often not a simple yes or no. A bakery with direct retail sales, a co-packed sauce, a refrigerated ready-to-eat product, and a wholesale snack business can face different documentation expectations.
HACCP plan or food safety plan?
A HACCP plan is built around hazard analysis and critical control points. A food safety plan, especially under FSMA preventive controls, may include hazard analysis, preventive controls, supply-chain controls, sanitation controls, allergen controls, recall plan elements, and other records.
For some businesses, a HACCP plan is the language the customer uses. For others, a food safety plan is the expected structure. Read HACCP Plan vs Food Safety Plan before building two overlapping binders.
Practical checklist
Use this checklist to prepare a first conversation with a regulator, customer, consultant, or co-packer:
- Identify the exact product and packaging format.
- Document storage and distribution conditions.
- Write a basic process flow from receiving to shipping.
- List ingredients, sub-ingredients, allergens, and packaging materials.
- Identify any kill step, cooling step, pH/water activity control, allergen control, or foreign material control.
- Gather supplier specifications and allergen statements.
- Collect current GMP, sanitation, training, pest control, calibration, and production records.
- Ask the requester what format they expect and whether HACCP, FSMA food safety plan, or certification documentation is required.
- Keep the response in writing when a buyer or auditor gives requirements.
Common mistakes
Common mistakes include assuming every buyer request is a law, copying a generic plan from another product, building a plan before confirming the process, ignoring allergen and label controls, and forgetting that records must exist before an audit or buyer review.
Another mistake is writing a plan that names controls the business cannot actually perform. If a record, thermometer, calibration schedule, or employee responsibility does not exist, fix the operating system before relying on that control in a HACCP file.
QA perspective
From a QA perspective, the better question is not only “Do I need HACCP?” The better question is “What documentation proves this product is made under control?” If a buyer asks for HACCP, they usually want to see hazard analysis, clear controls, monitoring, corrective action, verification, and records.
Build the file around real production. A short accurate plan is stronger than a long plan copied from another business.
Source notes
For official and final decisions, verify the product category and requirements with applicable regulators, customers, certification bodies, or qualified professionals. Useful starting points include:
- FDA FSMA Final Rule for Preventive Controls for Human Food.
- eCFR 21 CFR Part 117 for current Good Manufacturing Practice and preventive controls provisions.
- SQFI SQF Food Safety Program when customer or certification requirements apply.
FAQ
Does every food business need a HACCP plan?
No. The need depends on the product, process, location, regulatory category, customer expectations, and certification program. Some businesses are asked for a HACCP plan even when a different food safety plan format may also apply.
Who might ask for a HACCP plan?
A buyer, retailer, co-packer, distributor, health department, auditor, certification body, or customer may request a HACCP plan or HACCP-style documentation.
What should I prepare before writing a HACCP plan?
Prepare product descriptions, process flow diagrams, ingredient and allergen information, supplier documents, existing GMP records, and a list of controls already used in production.