Foodservice HACCP implementation step by step
Discover effective HACCP implementation in foodservice. Ensure food safety step by step and meet the requirements of Sanepid.
For a HACCP implementation to succeed, start with one thing: make sure good hygiene practice (GHP) and good manufacturing practice (GMP) are working in your establishment, then appoint a HACCP team and carry out a baseline audit. Without this foundation, even the best documentation will not protect you from non-conformities during an inspection by Sanepid (the State Sanitary Inspection). GHP and GMP are the foundation of an effective HACCP system - without implementing them first, the whole project loses its footing.
The first actions that have a real impact on the result of an inspection:
- Baseline audit - review the establishment and identify gaps in hygiene, documentation and equipment.
- Appointing a HACCP team - designate the people responsible for the individual areas (kitchen, storeroom, management).
- Calibrating thermometers and refrigeration equipment - this is the first CCP that Sanepid checks.
- List of products and processes - draw up a preliminary list of dishes/products and the main stages of their preparation.
- Collecting existing documentation - check what you already have and what is missing.
After completing these five steps you have a ready starting point for work on the full documentation. The risk of a negative inspection result falls, and the team knows who is responsible for what.
Pro tip: Do not start by writing procedures. Start by walking around the establishment with a notebook and writing down what actually happens. Documentation is meant to describe reality, not an idea of it.
Table of contents
- What to do on the first day and in the first week?
- How does implementing a HACCP system in 12 stages work?
- Who is on the HACCP team and how to assign responsibilities?
- How to describe a product and map the production process?
- How to carry out a hazard analysis and determine CCPs?
- How to set critical limits, plan monitoring and describe corrective actions?
- How to check that the HACCP system actually works?
- What documentation must you prepare for the HACCP system?
- Staff training and GHP/GMP as the foundation of the system
- How long does HACCP implementation take and how much does it cost?
- How to prepare the establishment for a Sanepid inspection?
- How to use ready templates safely and what to avoid?
- Key takeaways
- Why do practical templates save time and reduce stress?
- Ready HACCP documentation packages from GastroReady
- Useful sources and legal acts
What to do on the first day and in the first week?
A good start is a specific list of tasks, not a general plan. Below you will find a breakdown into three time horizons.
Day 1:
- Carry out a baseline audit: walk around the establishment, check equipment temperatures, the state of hygiene and the availability of cleaning and disinfecting products.
- Calibrate or verify the thermometers (each should have a current calibration certificate or verification record).
- Open the first temperature register for fridges and freezers.
- Appoint the leader of the HACCP team and inform the staff about the project.
Week 1:
- Draw up a list of all products/dishes and assign them risk categories (raw meat, fish, ready-to-eat products).
- Map the main processes: receiving raw materials, storage, preliminary processing, heat treatment, serving.
- Carry out a short induction training for kitchen staff - at least 30 minutes on hygiene rules and handwashing.
- Collect current raw material specifications and certificates from suppliers.
- Check whether the establishment has a current contract for rodent control and insect control.
Month 1:
- Complete the hazard analysis and determine the CCPs.
- Develop or adapt procedures and registers to the actual processes.
- Carry out the first formal training session with attendance records.
- Carry out an internal audit and close the non-conformities from the baseline audit.
How does implementing a HACCP system in 12 stages work?
Implementing a HACCP system is based on 12 stages derived from the Codex Alimentarius. Each stage has a specific purpose and a measurable result.
- Management commitment and provision of resources - management approves the food safety policy and allocates a budget and staff time. Without a formal management decision the project will not start.
- Appointing a HACCP team - designating people from different areas of the establishment, with a division of roles and responsibilities.
- Product description - drawing up a product sheet: composition, physicochemical parameters, storage conditions, intended consumer.
- Determining the intended use - establishing who consumes the product (vulnerable groups: children, seniors, people with allergies).
- Drawing up a process flow diagram - a block diagram from receiving the raw material to serving the product, covering all stages and decision points.
- On-site verification of the process flow diagram - comparing the diagram with what actually happens in the kitchen/production. This is the stage that makes process mapping credible.
- Hazard analysis (Principle 1) - identifying biological, chemical and physical hazards at each stage of the process.
- Identifying CCPs (Principle 2) - using a decision tree to identify the critical control points.
- Establishing critical limits (Principle 3) - defining measurable limit values (e.g. internal temperature of a dish min. 75°C) (an example value from practice; the rules do not give a figure).
- CCP monitoring system (Principle 4) - a measurement plan: who measures, with what, how often and what they record.
- Corrective actions (Principle 5) - procedures for what to do when a critical limit is exceeded.
- Verification, documentation and review (Principles 6 and 7) - internal audits, review of records, updating the system after changes to the menu or processes.
Stages 7-12 are the heart of the system. Stages 1-6 are the preparation without which the hazard analysis will be incomplete.
Who is on the HACCP team and how to assign responsibilities?
Management cannot delegate responsibility for food safety entirely to one person. Its role is formal and non-transferable: it approves the food safety policy, provides resources (time, equipment, a training budget) and signs the key documents.
Composition of the HACCP team in a typical foodservice venue:
- Team leader - a person with HACCP knowledge, most often the kitchen manager or the quality manager; coordinates the work and keeps the documentation.
- Kitchen/production representative - a cook or head chef; knows the processes from the inside and verifies the diagrams.
- Person responsible for the storeroom - controls the receipt of raw materials, storage temperatures and stock rotation.
- Management representative - approves documents, provides resources, signs the policy.
In a small venue one person can hold two roles, but each role must be formally assigned in a role card.
| Role | Main tasks | Required competences |
|---|---|---|
| HACCP team leader | Project coordination, keeping the documentation, internal audits | HACCP training, knowledge of Regulation 852/2004 |
| Kitchen representative | Verifying diagrams, hazard analysis, staff training | Practical knowledge of production processes |
| Person responsible for the storeroom | Control of deliveries, temperatures, labelling | Knowledge of GMP principles, use of thermometers |
| Management | Approving documents, providing resources | Decision-making, knowledge of the safety policy |
Pro tip: Keep the role card together with the HACCP documentation and update it with every personnel change. A Sanepid inspector asks about it as one of the first documents.
How to describe a product and map the production process?
A product sheet is a document that links the recipe with the risk analysis. Without a reliable product sheet the hazard analysis will be incomplete, because it is not known what the product is made of or who consumes it.
Elements of a product sheet:
- Product name and its category (e.g. ready-to-eat dish, raw meat, confectionery product).
- Raw material composition and allergens.
- Physicochemical parameters: pH, water activity (Aw), salt content - if they matter for safety.
- Storage conditions and shelf life.
- Intended use: is the product intended for vulnerable groups (children, seniors, people with weakened immunity)?
- Packaging and distribution method.
| Product sheet element | Example for a chicken fillet |
|---|---|
| Name | Roasted chicken fillet |
| Composition | Chicken breast fillet, rapeseed oil, spices |
| Allergens | None (verified with every delivery) |
| Storage conditions | refrigeration temperature before processing, serve immediately after preparation |
| Internal temperature after processing | Min. 75°C for at least 15 seconds |
| Intended use | General population, including vulnerable groups |
A process flow diagram is a block diagram that shows every stage from receiving the raw material to serving the dish. Draw it together with the cook, not from behind a desk. A typical diagram for a poultry dish looks like this: receiving the raw material → checking temperature and quality → refrigerated storage → thawing (if applicable) → preliminary processing → heat treatment → cooling or immediate serving → service.
A process diagram that has not been verified at the production site is just a drawing. Go out onto the production floor with the cook and walk through every step physically - only then does the diagram become a document of the HACCP system.
Pro tip: Every diagram and product sheet should have a version number and the date of the last update. When you change the menu or the supplier, you update the document and archive the previous version. This protects you during an inspection when the inspector asks about the history of changes.
How to carry out a hazard analysis and determine CCPs?
Hazard analysis is the most substantive part of the system. Its result decides how many CCPs there will be in the establishment and what the monitoring will look like.
Step 1: Identifying hazards. For each stage of the process, list the biological hazards (bacteria, viruses, parasites), chemical hazards (cleaning product residues, pesticides, allergens) and physical hazards (glass, metal, bones). Typical hazards in foodservice are Salmonella and Campylobacter in poultry, Listeria monocytogenes in refrigerated ready-to-eat products and allergens in multi-ingredient dishes.
Step 2: Risk assessment. For each hazard, assess the likelihood of occurrence and the severity of the consequences on a scale of 1-3 or 1-5. The product of the two values gives the risk level. High-risk hazards require a control measure.
Step 3: Determining control measures. A control measure is an action that eliminates a hazard or reduces it to an acceptable level. It may be heat treatment, cooling, allergen segregation or supplier verification.
Step 4: Applying the decision tree. For each hazard with an assigned control measure, ask the four decision tree questions (in line with the Codex Alimentarius): does the control measure eliminate the hazard? Is the stage specifically designed to eliminate the hazard? Will a lack of control cause an unacceptable risk? Will a subsequent stage eliminate the hazard? If the answer points to a CCP - record it formally.
Pro tip: Do not look for as many CCPs as possible. Too many CCPs mean the system is difficult to monitor and employees stop using it. It is better to have three well-monitored CCPs than ten that exist only on paper.
| Hazard | Process stage | Risk level | Control measure | CCP? |
|---|---|---|---|---|
| Salmonella in poultry | Heat treatment | High | Internal temperature min. 75°C | Yes |
| Allergen cross-contamination | Food preparation | Medium | Equipment segregation, marking | No (GMP) |
| Listeria in ready-to-eat products | Refrigerated storage | High | refrigeration temperature, FIFO rotation | Yes |
| Foreign bodies (glass) | Receiving raw materials | Low | Visual inspection on receipt | No |
How to set critical limits, plan monitoring and describe corrective actions?
A critical limit is a measurable value whose exceedance means loss of control over the CCP. It must be based on scientific evidence or legal regulations, not on intuition. For the heat treatment of poultry the critical limit is 75°C inside the product for at least 15 seconds - a value that results from microbiological data on the inactivation of Salmonella.
Rules for formulating critical limits:
- They must be measurable (temperature, time, pH, Aw).
- They must be validatable - possible to verify in the conditions of the establishment.
- They should include a safety margin (e.g. an operating limit of 77°C with a critical limit of 75°C).
| CCP | Critical limit | Measurement method | Frequency | Responsible |
|---|---|---|---|---|
| Heat treatment of poultry | Min. 75°C inside the product | Probe thermometer | Every batch | Cook on duty |
| Refrigerated storage | refrigeration temperature | Electronic thermometer | 2 × daily | Storekeeper |
| Cooling after processing | Below 10°C within 2 h | Probe thermometer | Every batch | Cook on duty |
You trigger a corrective action when a measurement exceeds the critical limit. The procedure must specify: what to do with the product (hold, destroy, reprocess), how to restore control over the process and what to record in the register.
In the corrective action register you record: the date and time, the measured value, the action taken, the decision on the product and the signature of the responsible person. You confirm the effectiveness of the correction with another measurement after the process has been restored.
Pro tip: The corrective action register is one of the most important documents during an inspection. The inspector checks whether the system reacts to deviations - no entries in this register is worse than a few recorded non-conformities.
How to check that the HACCP system actually works?
Verification is the systematic checking of whether the HACCP system has been implemented as planned and whether it effectively controls hazards. It differs from monitoring: monitoring checks the CCPs on an ongoing basis, verification assesses the whole system.
Elements of an internal audit:
- Review of CCP monitoring records for a selected period.
- Checking whether critical limits are observed and whether corrective actions were taken correctly.
- Observing employees carrying out procedures (whether they do so in line with the instructions).
- Review of training - whether all employees have current entries in the training register.
- Verification of the calibration of measuring equipment.
- Review of the documentation for completeness and currency.
Carry out an internal audit at least once a year, and after every significant change to the menu, processes or staff. Record the results in an audit report, which contains: the scope of the audit, the date, the auditor, a list of non-conformities and a corrective action plan with deadlines.
Pro tip: An internal audit is carried out by a person other than the one who runs the given area day to day. Self-assessment is not an audit. In a small venue you can ask for a mutual review between employees from different areas.
You can confirm the effectiveness of monitoring with microbiological tests of swabs from work surfaces or finished dishes. This is not mandatory in every establishment, but it is strong evidence of the system's effectiveness during a Sanepid inspection.
What documentation must you prepare for the HACCP system?
The obligation to keep documentation follows directly from Art. 5 of Regulation (EC) No 852/2004. The documentation must reflect the actual processes of the establishment - an inspector will recognise a document copied from the internet without adaptation.
| Document | Content | Who signs |
|---|---|---|
| Food safety policy | Management commitment, objectives of the system | Management |
| Product sheets | Composition, parameters, intended use | HACCP team leader |
| Process flow diagram (verified) | Block diagram with a verification signature | Leader + cook |
| CCP sheets | Critical limits, monitoring, corrective actions | HACCP team leader |
| Monitoring registers | Measurements of temperature, pH, time | Employee on duty |
| Corrective action register | Deviations and actions taken | Employee + manager |
| Training register | List of participants, topic, date | Trainer |
| GHP/GMP procedures | Cleaning, disinfection, staff hygiene | HACCP team leader |
Documents are divided into procedures (they describe how to do something), instructions (detailed steps for an employee) and registers (evidence that the procedures were applied). Keep registers for a minimum of a year, and for products with a longer shelf life - for the entire shelf life plus additional time.
Ready-made, non-personalised documentation templates often do not match the reality of the venue and may be challenged during an inspection. Every document must contain the name of the establishment, the address, a version number and a date.
Pro tip: Do not create a separate "HACCP book" as a decorative binder. Create documents that employees actually use. One legible temperature register stuck by the fridge is worth more than fifty pages of procedures locked in a cupboard.
Staff training and GHP/GMP as the foundation of the system
HACCP training is not a one-off event. It is a continuous process that starts with GHP and GMP, because without these basics employees do not understand why the HACCP procedures make sense.
The knowledge every employee must have:
- Personal hygiene rules: handwashing, state of health, work clothing.
- Preventing cross-contamination: segregation of raw materials and finished products, marking of chopping boards.
- Rules for storage and stock rotation (FIFO).
- Procedures for cleaning and disinfecting equipment and surfaces.
- How to use the registers and what to record.
- What to do when something goes wrong (corrective actions at employee level).
The most effective training formats in foodservice:
- Short practical modules (15-20 minutes) delivered at the workstation - the employee sees what the procedure looks like in reality.
- Job instructions in the form of laminated cards with pictograms, placed at workstations. Visual job cards increase compliance with procedures and make it easier to introduce new employees.
- Mentoring - for the first few days the new employee works with an experienced colleague who shows the procedures in practice.
- Formal training with a test - once a year, with attendance records and test results.
The training register must contain: the employee's name, the training topic, the date, the duration and the participant's signature. Frequency: induction training on hiring, periodic training at least once a year, supplementary training after every change of procedures.
Pro tip: HACCP training for a new employee cannot be limited to signing an attendance list. Check their knowledge with a short test or observation at the workstation - it is the only way to be sure the procedures are understood, not just signed.
You will find more about implementing GHP and GMP in the venue on the GastroReady blog.
How long does HACCP implementation take and how much does it cost?
The implementation time depends on the scale of the establishment, the number of products and the state of the existing documentation. In a small foodservice venue the sequence of stages looks like this:
- Stages 1-2: baseline audit, appointing the team, describing products, mapping processes.
- Stages 3-4: hazard analysis, identifying CCPs, setting critical limits.
- Stages 5-6: developing procedures, instructions and registers, staff training.
- Stages 7-8: introducing monitoring, collecting the first records, internal audit.
The total implementation time depends on the size of the venue and the completeness of the documents, as well as on the team's commitment. With no prior preparation or a large number of products the implementation process may take longer.
| Cost component | Scope | Notes |
|---|---|---|
| Staff time | The biggest hidden cost | 2-4 h a week for 2 months |
| External training | Varies | Depends on the format and the number of participants |
| Measuring equipment | Thermometers, pH meters | One-off purchase |
| Personalising the documentation | Depends on the approach | Ready templates reduce the amount of your own work |
| Microbiological tests | Optional | Recommended at the start of the system |
The cost of HACCP implementation with external support depends on the scope of the work. Using ready, editable documentation templates instead of commissioning everything from an external consultant lets you significantly reduce this expense without losing the quality of the system.
Where you can save without risk: ready templates instead of documentation created from scratch, internal training instead of only external, an internal audit instead of only an external one. Where it is not worth saving: calibration of measuring equipment and verification of critical limits require reliable data.
How to prepare the establishment for a Sanepid inspection?
A Sanepid inspection may be announced or unannounced. The establishment must always be ready, not only before a planned visit. A practical pre-inspection checklist helps you quickly check the venue's readiness.
Documents and registers:
- A current food safety policy signed by management.
- A complete set of product sheets and verified process flow diagrams.
- CCP sheets with critical limits.
- Monitoring registers from the last 12 months (or since the start of the system).
- The corrective action register.
- The training register with employee signatures.
- Current sanitary-epidemiological examination certificates of staff.
- Contracts for rodent control, insect control and disinfection with protocols.
Hygiene and condition of the establishment:
- Temperatures of refrigeration equipment and freezers within the norm and recorded.
- Thermometers calibrated, with a current verification record.
- Work surfaces clean, with no visible damage.
- Segregation of raw materials and finished products in the fridges.
- Labelling of products: date of receipt, shelf life, allergens.
The most common non-conformities detected by Sanepid: missing or outdated temperature registers, no training documentation, unverified process flow diagrams, documentation that does not match the actual state of the establishment, no corrective action procedure.
When an inspector appears unannounced: stay calm, make the documentation available, do not fill in registers retroactively. If a register is incomplete, it is better to say so openly than to risk an accusation of falsifying documents.
Pro tip: Once a quarter, carry out your own inspection of the establishment, using the same checklist that Sanepid uses. You will find non-conformities before the inspector does, and you will have time to remove them.
You will find a detailed overview of Sanepid requirements for foodservice in a separate guide on the GastroReady blog.
How to use ready templates safely and what to avoid?
A ready, editable template is a starting point, not a finished product. The difference between a template and a HACCP document is that the document describes your establishment, your products and your processes.
Template editing checklist:
- Change the name and address of the establishment in all documents.
- Replace the sample products with your own products and recipes.
- Verify the process diagrams against the actual stages in your kitchen.
- Check whether the critical limits match your processes and equipment.
- Fill in supplier details and raw material specifications.
- Add the allergens characteristic of your menu.
- Make sure every document has a version number, a date and the signature of the responsible person.
- Remove the sample entries from the registers and replace them with real data.
Copying templates without adaptation is one of the most common mistakes when implementing HACCP in a restaurant. Inspectors recognise documents that do not fit the establishment - a different number of employees, different products, different opening hours. Such a document not only fails to protect against a fine (mandate fine), but can worsen the inspection result, because it points to an apparent, rather than real, implementation of the system.
Pro tip: Before submitting the documentation for inspection, ask someone from outside the project - e.g. a kitchen employee who did not take part in writing the procedures - to read a job instruction and say whether they understand what they are supposed to do. If they do not understand, the procedure needs simplifying.
GastroReady provides editable templates that meet the requirements of the Chief Sanitary Inspectorate (GIS) and the EU, and that include step-by-step implementation instructions. Thanks to this you know not only what to change, but also why - which translates into documentation that actually describes your establishment.
Key takeaways
Effective HACCP implementation first requires solid GHP/GMP foundations, then appointing a team with clearly assigned roles, and only then work on the hazard analysis and documentation adapted to the establishment's real processes.
| Point | Details |
|---|---|
| GHP/GMP as the foundation | Without good hygiene practices in place, the HACCP system will be neither effective nor credible to the inspector. |
| Personalising the documentation | Every document must describe your establishment - ready templates need adapting before use. |
| Monitoring and registers | Regular CCP monitoring records are proof that the system works; no entries is worse than recorded deviations. |
| Implementation schedule | The time needed to implement the system depends on the size of the venue and the completeness of the documents, as well as on the team's commitment. |
| GastroReady as a tool | GastroReady's editable documentation packages make it easier to prepare documents that meet the requirements of GIS and the EU; adapting them to the venue remains the owner's responsibility. |
Next steps for 30 days: complete the baseline audit, appoint the team, develop product sheets and verified process flow diagrams, carry out the first staff training.
Next steps for 90 days: close the hazard analysis, introduce CCP monitoring, collect the first records, carry out an internal audit and remove non-conformities.
Why do practical templates save time and reduce stress?
One pattern often recurs in foodservice: establishments that start by writing documentation from scratch lose time on formatting and structure instead of on the substantive hazard analysis. Meanwhile, establishments that start from a well-prepared, editable template can focus straight away on what really matters: verifying process diagrams, hazard analysis and staff training.
A ready template does not replace thinking. It replaces the tedious work of formatting and structuring documents that someone has already done. It is the difference between building a house from the foundations and finishing a ready shell.
It is also worth saying plainly: a food safety culture in an establishment does not come from documents. It comes from the everyday habits of staff, which documents merely describe and confirm. That is why the best HACCP implementations are those in which templates are a starting point for a conversation with the team, not an end in themselves.
Ready HACCP documentation packages from GastroReady
Instead of weeks spent writing procedures from scratch, you can start from complete, editable HACCP and GMP documentation that you adapt to your venue. That is less work during implementation.
GastroReady offers documentation packages that meet the requirements of GIS and the EU, adapted to the realities of Polish foodservice. It is ready-made HACCP documentation in editable files.
Every package comes with a lifetime licence - you buy once and update the documents yourself whenever something changes in the establishment. No subscription, no dependence on an external consultant.
Check the available packages and start implementing: HACCP documentation for foodservice.
Useful sources and legal acts
Before a Sanepid inspection it is worth having the following documents and resources at hand:
- Regulation (EC) No 852/2004 - the basic EU legal act regulating food hygiene and the obligation to implement HACCP.
- European Commission guidance on implementing food safety management systems - practical guidance on prerequisite programmes and HACCP procedures, including the flexibility principle for small businesses.
- Chief Sanitary Inspectorate - hygiene requirements and the HACCP system - official GIS information for business operators, a list of GHP/GMP guides.
- National Centre for Nutrition Education - stages of implementing a HACCP system - a description of the 12 implementation stages and the principles of traceability.
- GIS - information for food sector operators - legal obligations, including the requirement for staff training under Chapter XII of Annex II to Regulation 852/2004.
| Document | Use | Where to look |
|---|---|---|
| Regulation (EC) No 852/2004 | Legal basis of HACCP in the EU | EUR-Lex |
| EC guidance | Implementation flexibility, prerequisite programmes | EUR-Lex |
| GHP/GMP guides (GIS) | Industry hygiene guidelines | gov.pl/gis |
| Act on Food and Nutrition Safety (25 August 2006) | National legal basis | ISAP |
| Regulation (EC) No 178/2002 | Traceability and general principles of food law | EUR-Lex |
When using these sources to prepare documentation, always check the date of the last update of the document. EU regulations are directly binding, but national GIS guidelines may be updated - it is worth following the announcements on the gov.pl website. When opening a new venue, also check the deadlines for notifying Sanepid, because the registration obligation comes before the obligation to implement full HACCP documentation.
This article is informational and does not replace legal advice or consultation with a sanitary inspector. Before an inspection, verify the current requirements directly with GIS or with the competent County State Sanitary Inspector (PPIS).