A supplier audit checklist is a structured tool food businesses use to evaluate whether their ingredient and raw material suppliers meet food safety, quality, and regulatory standards. On-site audits typically cover facility sanitation, pest control, allergen management, temperature controls, traceability documentation, and staff hygiene practices. Businesses conducting regular supplier audits reduce contamination risk, meet FSMA and EU regulatory requirements, and build a defensible food safety program. The key to effective auditing is having a standardized checklist that covers all critical control points before, during, and after the supplier visit.
Many food businesses rely on informal or incomplete supplier evaluations. A 2019 FDA analysis of foodborne illness outbreaks found that contaminated raw materials from suppliers were a contributing factor in a significant portion of multi-state outbreaks. The World Health Organization estimates that unsafe food causes 600 million cases of foodborne illness annually, with contaminated ingredients entering the supply chain at the supplier level being a major pathway.
Without a standardized audit checklist, food businesses face several risks. Different staff members may evaluate suppliers using different criteria, leading to inconsistent quality assessments. Critical areas like allergen segregation or cold chain management may be overlooked entirely. Documentation gaps make it difficult to demonstrate due diligence during regulatory inspections. When a recall occurs, businesses without thorough supplier audit records struggle to trace the source of contamination and demonstrate corrective actions taken.
The challenge is compounded for businesses with multiple suppliers across different product categories. Meat suppliers require different evaluation criteria than produce farms or dry goods warehouses. Without category-specific checklists, auditors may miss critical hazards unique to each commodity type. The result is a food safety program that looks complete on paper but has dangerous blind spots in practice.
Regulatory agencies are increasingly scrutinizing supplier management programs. Under FSMA's Preventive Controls rule, food facilities must have a supply chain program that includes supplier verification activities. EU Regulation 852/2004 requires food business operators to ensure that suppliers of raw materials meet hygiene requirements. Businesses that cannot demonstrate systematic supplier evaluation face enforcement actions, warning letters, and potential loss of operating permits.
The Codex Alimentarius General Principles of Food Hygiene (CXC 1-1969, revised 2020) establish that food business operators should evaluate and select suppliers based on their ability to meet specified food safety requirements. This includes assessing supplier HACCP plans, sanitation programs, and recall procedures.
Under FDA 21 CFR Part 117 (FSMA Preventive Controls for Human Food), facilities that receive raw materials must implement a supply chain program when a hazard requiring a supply chain-applied control has been identified. This includes approved supplier verification, which may involve on-site audits, third-party audit review, sampling and testing, or review of the supplier's food safety records.
EU Regulation (EC) No 852/2004 on the hygiene of foodstuffs requires food business operators at all stages of production, processing, and distribution to ensure food safety. Article 3 specifically requires compliance with general hygiene requirements, which extends to verifying that suppliers maintain appropriate hygiene standards. The regulation mandates that operators have procedures in place based on HACCP principles.
The FSA (UK) provides guidance on approved supplier schemes and recommends that food businesses maintain documented supplier approval procedures, conduct risk-based audits, and retain records of supplier assessments. For more on regulatory frameworks that affect your supplier management, see related resources at /food/library/haccp-supplier-verification-requirements/en/.
GFSI-benchmarked schemes (BRC Global Standards, SQF, FSSC 22000) all require documented supplier approval and monitoring programs with defined audit frequencies based on risk assessment.
No matter how carefully you select suppliers,
one contaminated delivery can compromise your entire operation.
Most food businesses manage supplier verification with paper records or informal processes.
The businesses that avoid incidents are the ones that make verification systematic and documented.
Verify your suppliers now (FREE):
Already managing food safety? Show your customers with a MmowW Safety Badge:
安全で、愛される。 Loved for Safety.
Use our free tool to check your food business compliance instantly.
Try it free →Step 1: Pre-Audit Preparation
Review the supplier's previous audit reports, any corrective action requests, and their current food safety certifications. Prepare your category-specific checklist and confirm the audit date, scope, and access requirements with the supplier. Bring temperature monitoring equipment, a camera for documenting findings, and blank corrective action request forms.
Step 2: Document Review
Begin the on-site audit by reviewing the supplier's documentation: their HACCP plan, sanitation standard operating procedures (SSOPs), allergen control plan, pest control records, and employee training records. Verify that their food safety plan addresses all relevant hazards for the products they supply to you. Check that their recall/withdrawal procedure is current and has been tested within the past 12 months.
Step 3: Facility Walkthrough
Conduct a systematic walkthrough of the facility following the flow of product from receiving through storage, processing, packaging, and shipping. Evaluate building maintenance, equipment condition, sanitation practices, employee hygiene, and pest control measures. Use your checklist to score each area and document any non-conformances with photographs and detailed descriptions.
Step 4: Process Observation
Observe critical processes in real time: receiving inspections, temperature monitoring, allergen changeovers, CCP monitoring, and sanitation procedures. Verify that employees follow documented procedures and that monitoring records are completed accurately and in real time rather than retrospectively.
Step 5: Cold Chain Verification
Check temperature records for all cold and frozen storage areas. Verify that transport vehicles meet temperature requirements. Review calibration records for temperature monitoring equipment. Spot-check product temperatures in storage and during processing to verify accuracy of automated monitoring systems.
Step 6: Traceability Test
Conduct a mock traceability exercise: select a finished product lot and trace it back to all raw material suppliers, and select a raw material lot and trace it forward to all finished products. The supplier should be able to complete this exercise within four hours, as recommended by GFSI standards.
Step 7: Closing Meeting and Corrective Actions
Present your findings to the supplier management team. Classify findings as critical, major, or minor non-conformances. For each non-conformance, agree on a corrective action, responsible person, and completion date. Document the audit results in a formal report within five business days and schedule follow-up verification for critical and major findings.
Mistake 1: Using a generic checklist for all supplier types. Meat processing facilities have fundamentally different hazards than produce farms or dry goods warehouses. Create commodity-specific audit checklists that address the unique hazards for each product category you source.
Mistake 2: Only auditing during scheduled visits. Suppliers prepare for announced audits. Incorporate unannounced visits or partial audits into your program. Even a brief unannounced receiving inspection can reveal practices that differ from what you observe during formal audits.
Mistake 3: Failing to verify corrective actions. Identifying non-conformances is only valuable if corrections are implemented and verified. Establish a tracking system for corrective actions and do not close findings until you have evidence that the correction was effective and sustained.
Mistake 4: Not calibrating your audit scoring. If multiple staff members conduct supplier audits, ensure they are trained on the same scoring criteria. Conduct calibration exercises where auditors independently score the same supplier and compare results to reduce variability.
Mistake 5: Ignoring documentation gaps. Missing or incomplete records are often a leading indicator of broader food safety problems. Treat documentation deficiencies as seriously as physical findings — they indicate systemic weaknesses in the supplier's food safety management system.
How often should I audit my food suppliers?
Audit frequency should be risk-based. High-risk suppliers (raw meat, ready-to-eat products, allergen-containing ingredients) should be audited annually at minimum. Lower-risk suppliers (shelf-stable dry goods, packaging materials) may be audited every two to three years with periodic documentation reviews between audits.
Can I accept a third-party audit report instead of conducting my own audit?
Yes, but with conditions. GFSI-benchmarked audit reports (BRC, SQF, FSSC 22000) are widely accepted as evidence of supplier capability. However, review the full report — not just the certificate — and verify that the audit scope covers the products and processes relevant to your supply. Supplement third-party reports with your own receiving inspections and periodic verification activities.
What should I do if a supplier fails a critical audit finding?
Immediately assess the risk to products already in your inventory or distributed to customers. Place the supplier on probationary status and require a corrective action plan with root cause analysis within a defined timeframe (typically 30 days). Conduct a follow-up audit to verify corrective actions before restoring full approved supplier status. If the supplier cannot demonstrate effective correction, remove them from your approved supplier list.
Do I need to audit suppliers if they have food safety certifications?
Certifications demonstrate a baseline level of food safety management, but they do not eliminate the need for your own verification. Your supplier approval program should include a combination of certification review, periodic on-site audits, receiving inspections, and product testing based on risk assessment.
Your food safety system should work as hard as you do. Manual tracking leads to gaps — and gaps lead to violations.
Start your FREE 14-day trial:
→ MmowW F👀D — No credit card required.
安全で、愛される。 Loved for Safety.
Try it free — no signup required
Open the free tool →MmowW Food integrates compliance tools, documentation, and team management in one place.
Start 14-Day Free Trial →No credit card required. From $29.99/month.
Loved for Safety.
Ne laissez pas la réglementation vous arrêter !
Ai-chan🐣 répond à vos questions réglementaires 24h/24 par IA
Essayer gratuitement