Cold chain
What HACCP certification on a cold store does and does not cover
A cold store advertising HACCP certification has told you something real about how it manages food-safety hazards inside its four walls. It has told you almost nothing about whether it can take your volume next month, hold your rate, or still be trading in a year. Exporters and importers routinely treat the HACCP badge as a general seal of approval, and then discover the gap when a shipment arrives at a site whose certificate never covered the activity they needed. This guide separates what HACCP actually verifies from what it does not, so you know exactly what to ask a provider to show you before you book space.
Key facts
- HACCP is a systematic method for identifying food-safety hazards and controlling them at specific points in a process, not a pass/fail grade on a facility as a whole.
- A HACCP plan, HACCP certification under a recognised scheme, and a HACCP-based buyer audit are three different things with three different levels of independent verification, and a provider can hold one without the others.
- Certification scope covers named activities and product categories at a named site. A cold store certified for chilled storage of packaged goods is not automatically certified for blast freezing, repacking, or a second site down the road.
- HACCP says nothing about a provider's financial stability, available capacity, on-time performance, or insurance coverage. Those need separate checks before you commit freight to a site.
What HACCP actually is
Hazard Analysis and Critical Control Points is a method, not a certificate in itself. It was developed in the 1960s for food supplied to crewed space missions, where there was no possibility of recalling a bad batch mid-flight, and the logic behind it has not changed since: rather than inspecting a finished product and hoping defects show up, you map every step of a process, identify where a biological, chemical, or physical hazard could enter or fail to be controlled, and place a monitored control at each of those points. A control point becomes 'critical' when losing it means the hazard is not caught anywhere downstream either.
The Codex Alimentarius Commission, the joint food-standards body run by the UN's Food and Agriculture Organization and the World Health Organization, publishes the internationally referenced HACCP framework and its seven principles: hazard analysis, identifying critical control points, setting critical limits for each, monitoring procedures, corrective actions when a limit is breached, verification that the system works, and record-keeping. National food-safety regulators in most exporting and importing markets require a HACCP-based plan as a baseline for food handling, and it has since been folded into private certification schemes as a required component rather than a standalone deliverable.
The practical point for a buyer: HACCP tells you a site has analysed its own hazards and built monitored controls around them. It does not by itself tell you who checked that the analysis was done properly, how often, or how the site performed against it last month.
What a HACCP plan for a cold store typically controls
For a cold store specifically, the hazard analysis usually centres on temperature as the primary control variable, because temperature abuse is the mechanism through which most storage-stage food-safety failures occur. A typical plan sets critical limits for storage temperature by product category, monitoring frequency (continuous logging is now standard for most schemes, replacing periodic manual checks), and a defined corrective action when a chamber drifts outside its limit, which commonly includes product hold, root-cause investigation, and a decision on whether affected stock can still be released.
Beyond temperature, a cold store's plan will typically address cross-contamination control between product categories sharing a facility (allergen segregation, raw versus ready-to-eat separation, pest control), receiving and dispatch procedures that catch a hazard before it enters storage (incoming temperature checks, vehicle hygiene, seal verification), and traceability, so that if a hazard is found, the site can identify exactly which lots and which customers were affected without a full-facility recall.
Worked example: a chilled distribution centre holding meat, dairy, and ready-to-eat salads under one roof would typically run separate critical control points for each category's storage temperature band, a documented allergen-segregation zone plan, and a corrective-action log showing every temperature excursion in the last twelve months with what was done about it. Asking to see that log, not just the certificate, is the fastest way to tell a site that treats HACCP as a working system from one that treats it as a binder for the auditor's visit.
Plan, certification, and buyer audit are three different things
Having a HACCP plan means a site has done the hazard analysis and written the controls down. It does not mean anyone outside the business has checked that the analysis is sound or that the controls are actually followed. A site can operate entirely on a self-written, self-monitored HACCP plan and never fail to meet the letter of most national food-safety law, because a documented plan is usually the regulatory minimum, not third-party certification.
Being certified against a recognised food-safety scheme is a step further: an accredited certification body, independent of the site, audits the HACCP plan and its implementation against a published standard, on a recurring cycle, and issues a certificate that lists what was found conformant. This is where most of the market-facing HACCP claims a cold store makes actually sit, whether that is a national HACCP certification scheme, or a broader Global Food Safety Initiative-benchmarked standard such as BRCGS Storage and Distribution or the FSSC 22000 storage and distribution scope, both of which build HACCP in as a required foundation rather than a separate add-on.
A buyer audit is different again: it is your own customer, or a certification body engaged on that customer's behalf, physically inspecting the specific site against that customer's own requirements, which are frequently stricter or more specific than the underlying scheme's minimum. A major retailer auditing a cold store for a private-label supply agreement will typically check things a generic scheme certificate never touches: specific packaging integrity requirements, the retailer's own allergen matrix, and operational details like how quickly the site can turn a rejected pallet around. Passing a scheme certification is not the same as passing that customer's own audit, and a site can hold a valid certificate while failing a specific buyer's more demanding requirements.
What HACCP certification does not tell you
The certificate is silent on financial stability. A cold store can hold an immaculate HACCP certificate and still be six months from insolvency, a real risk in a capital-intensive, thin-margin sector where a single lost anchor customer can tip a site into distress. Certification bodies audit food-safety systems, not balance sheets, and nothing in the audit process checks whether the operator can pay its refrigeration compressor maintenance contract next quarter.
It is also silent on capacity and service level. A HACCP-certified site can be running at ninety-eight percent capacity with a three-week waiting list, or have unreliable backup power that trips your temperature logs every time the grid has a bad week, and none of that shows up on the certificate. Certification is a snapshot of a system's design and, at audit time, its implementation. It says nothing about throughput, turnaround time, or how the site performs under peak-season load.
And critically, certification scope is often partial. A certificate covers named activities at a named site: chilled storage, say, but not blast freezing; ambient dry storage, but not the adjoining chilled annex added last year; the head site, but not a satellite depot the provider quietly uses for overflow. Reading the certificate's scope statement, not just its headline standard, is the only way to know what was actually inspected.
How to read a certificate scope line
A genuine scheme certificate states, in specific language, three things: the certified site's exact address, the activities covered (storage, distribution, repacking, blast freezing, and so on, named individually rather than implied), and the product categories included (chilled, frozen, ambient; sometimes further split by category such as meat, dairy, or ready-to-eat). If a certificate lists an address that differs from the warehouse you are actually being quoted for, or names activities that do not include the one you need, the certificate does not cover your shipment even though the provider genuinely holds it.
Worked example: a provider quotes you blast-freezing and cold storage for a seafood shipment, and hands over a certificate whose scope line reads 'chilled storage and distribution of packaged food products.' That certificate says nothing about blast freezing or about seafood specifically if the site's product-category listing is chilled-only. It is not a fake certificate, it is simply a real certificate for a narrower activity than the one being sold to you, and the gap only surfaces if you read the scope line rather than the standard's name on the wall.
Also check the certificate's validity date and issuing body. Schemes run on annual or multi-year audit cycles with surveillance visits between full recertification, and a certificate more than a year past its issue date on an annual-cycle scheme is worth a direct question. The issuing body should be an accredited certification body you can independently verify, most schemes publish a searchable database of currently certified sites, and cross-checking a claimed certificate against that database takes minutes and catches the rare case of a lapsed or fabricated claim.
What to ask for, and what a buyer audit adds
Before committing volume to a cold store on the strength of a HACCP claim, ask for the certificate itself, not a logo on a website, with its full scope statement, site address, and expiry date. Ask whether the specific activity you need (blast freezing, repacking, cross-docking) is named in that scope or only implied by the general standard. Ask for the site's non-conformance history from its last audit report, most reputable providers will share a summary even where they will not share the full report, and a pattern of repeated minor non-conformances on temperature monitoring or pest control is a more honest signal than the certificate's headline pass.
Then treat certification as the floor, not the ceiling. If the shipment matters enough, a buyer audit or a third-party pre-shipment inspection adds what the scheme certificate cannot: verification against your specific product's requirements, a first-hand look at current operating conditions rather than the conditions at last year's audit date, and direct sight of capacity, staffing, and equipment reliability on the day. For an exporter shipping high-value or short-shelf-life product through a new cold store for the first time, that incremental check is usually worth the cost relative to the exposure of a failed load.
The two checks are not substitutes for each other. HACCP certification tells you the site has a credible, independently verified food-safety system. A buyer audit tells you that system is actually working, today, for your product, at this site's real capacity. Providers who can produce both without hesitation are the ones worth building a supply relationship around; providers who can only produce a certificate with a vague or mismatched scope line are worth a harder look before you commit freight.
Can I ship this?
Check the food-safety requirements your destination market applies.
Related services
Try it on your next pack run
Record a receival and a pack run on your phone and watch packout and traceability take care of themselves.
Get started