How to vet a co-packer's food safety certifications

When your beverage brand's reputation depends on a co-packer's facility, a logo on their website isn't enough. A co-packer can display any certification badge, but what matters is whether that certification is current, in scope, and verifiable in a public registry. Here's how to vet a co-packer's food safety certifications so you can avoid regulatory risk and supply chain disruptions.

What "certified" actually means

The Global Food Safety Initiative (GFSI) is the reference framework. GFSI doesn't certify facilities itself—it recognizes third-party certification schemes that meet its benchmarking requirements. The four most common GFSI-recognized schemes are:

• BRCGS – preferred by European retailers; strong on allergen control and labeling compliance
• FSSC 22000 – built on ISO 22000; the fastest-growing scheme globally, preferred by multinational manufacturers
• SQF – dominant in North America; the only scheme with a dedicated quality code alongside food safety
• IFS Food – widely used in Germany, France, and Central Europe; scoring-based system focused on private label

The scheme that matters most depends on your target market. A brand selling into UK retail needs BRCGS. One targeting US grocery chains will prioritize SQF. Exporting to a German retailer typically requires IFS. Source

Most retailers require a GFSI-recognized food-safety certification, and for co-packers that is usually SQF. Source

Verify certifications in public registries

Each major scheme maintains a public register where you can check a co-packer's status:

• FSSC 22000 → fssc.com/public-register – shows current status, plant scope, and certificate validity
• BRCGS Directory Pro → directory.brcgs.com – tracks over 55,000 certified sites
• SQF – use the SQF database to confirm the certificate number and scope

Always confirm that the certification covers the specific plant and product category you're sourcing. A certificate for a different facility or product line doesn't protect your brand. Source

Look beyond GFSI: GMP, HACCP, and FDA compliance

Even if a co-packer holds a GFSI certification, you should also verify foundational practices:

• Good Manufacturing Practices (GMP) – ensures basic sanitation and process controls
• HACCP – a systematic preventive approach to food safety
• FDA facility registration – required for any facility manufacturing food for US consumption

Food and beverage brands should look for a recognized food-safety certification such as SQF, BRC, or FSSC 22000, plus GMP and HACCP practices and FDA facility registration. Source

Also, check for certifications relevant to your product, such as organic, gluten-free, or kosher. For example, a co-packer's non-GMO certification includes rigorous ingredient verification, supply chain audits, and labeling protocols. Source

Conduct a second-party audit

One way to determine if your co-manufacturer meets your food safety requirements is through a second-party audit, where you hire qualified auditors to assess the facility. Source

During the audit, focus on:

• Quality control systems – regular testing of raw materials, monitoring of production processes, and inspection of finished products
• Traceability – systems to track and trace ingredients and finished products throughout production and packaging, enabling quick recalls
• Allergen management – segregation of allergens, thorough cleaning procedures, and proper labeling

SQF-certified co-packers are required to undergo a full third-party certification audit at least once per calendar year. Source

Actionable checklist for vetting a co-packer

1. Identify your target market's required scheme – US retail: SQF; UK/EU: BRCGS or IFS; global: FSSC 22000.
2. Check the public registry – verify the certificate number, scope, and expiration date.
3. Request the certificate – ask for a copy and cross-reference it with the registry.
4. Verify FDA registration – confirm the facility is registered with the FDA.
5. Review GMP and HACCP documentation – ask for their food safety plan and prerequisite programs.
6. Conduct a second-party audit – hire a qualified auditor to assess the facility on-site or virtually.
7. Check for product-specific certifications – organic, gluten-free, kosher, non-GMO, etc.
8. Include them in your internal audit schedule – treat the co-packer as an extension of your operation.

How the Featured Expert Can Help

Pete Grego Consulting provides brand strategy, go-to-market, production, and compliance services to help businesses launch and grow sustainably. They specialize in aligning co-packers with high-potential opportunities and navigating regulatory requirements, including TTB and FDA standards. If you need help vetting a co-packer or ensuring your supply chain is compliant, visit Pete Grego Consulting to book a consultation.

Quiz

Which GFSI-recognized certification is most commonly required by US retailers for co-packers?

• SQF
• BRCGS
• IFS Food

Correct answer: SQF