Food safety documents: what to organise before an inspection

Documents are part of the food safety system

Food business operators must have food safety management procedures based on HACCP principles, keep the documents and records that go with them up to date, and review them so they still match the food and the way you work. That is the Food Standards Agency's managing food safety summary of the duty in assimilated Regulation (EC) No 852/2004. For a small caterer, Safer Food, Better Business is often the core of the set: safe methods plus a diary. Our guide to SFBB and the digital diary guide cover those two halves. This page is the rest of the pile officers ask to see beside them.

HACCP principle 7 is documentation and records, sized to the business. A cafe does not need the document control of a manufacturer. It does need a current pack, daily evidence, and a short list of supporting papers with dates. MyHACCP, the FSA's own tool for businesses that write a fuller plan, asks the same practical questions: what you keep, where it lives, how long you keep it, and who looks after it. Answer those for your kitchen even if you use SFBB rather than a formal HACCP study.

Scotland uses CookSafe for many businesses, through Food Standards Scotland. Northern Ireland has its own food safety management guides as well as material published for England and Wales. Use the pack your local authority expects, and file the other documents against that pack so there is one story.

The core pack, separate from the certificates

Start with the documents that describe and prove your controls. Certificates from contractors do not replace them.

• Safe methods that match this menu. Cross-contamination, cleaning, chilling, cooking, management, and any extra method you need, such as cooling rice, vacuum packing, or food you wrap before the customer chooses it. Cross out pages you do not use. Date the version on the wall.
• The diary, current and recent. Opening and closing checks, problems and actions, extra checks, and the 4-weekly reviews. The FSA tells SFBB users to keep completed diary pages until the next visit from a local authority officer, on paper or electronically.
• Temperature history if it is not written inside the diary: fridges, freezers, hot holding, cooling and cooking probes, with the action when a number was wrong. See the fridge log guide and cooling guide.
• The cleaning schedule and the record that it was done, including missed tasks. A schedule nobody initials is a poster.
• Allergen information that matches today's food, including specials and prepacked items. A matrix from last spring, still in the folder, is a contradiction if the menu has moved.
• The staff training record for the people on the current rota, with induction and any certificates. Details are in the training records guide.

Put the current version in one place the shift manager can reach. Put superseded safe methods in an archive sleeve or folder so nobody follows the old cooling time. Two "current" matrices is how allergen mistakes survive.

Registration, suppliers and traceability

Food businesses must be registered with the local authority before they start operating. Registration is not a hygiene rating and it is not, for a typical restaurant, the approval process used for certain premises handling products of animal origin. Keep the confirmation so you can show the business is registered at these premises. If you have changed the address, the operator, or the nature of the food, update the registration rather than hoping the old email still describes you.

Traceability is a separate duty, from assimilated Regulation (EC) No 178/2002. The FSA says you must keep records of the suppliers who provide your food and ingredients, and of any businesses you supply. The records should include names and addresses, the type and quantity of products, and the date of the transaction and delivery. Batch numbers, invoices and receipts help, and often the invoice already holds the detail. Caterers selling to the final consumer are mainly proving one step back: who you bought it from, and when.

Keep a supplier list with the food safety pack: business name, what they supply, and a contact. File delivery notes or invoices for the period you would need if a supplier recalled a batch. The regulation does not set a single retention period for every product. The FSA says records must be up to date and available at inspection, and that they will be checked if there is a safety problem with food you have sold. A practical approach is to keep invoices at least as long as the food might still be in a customer's complaint window, and longer if you have written a period into your own procedure. Do not rely on a memory of "the usual veg company" with no address.

When a delivery is rejected, keep the note with the diary: supplier, food, temperature or damage, and what you did with the stock. A rejection that exists only as an argument on the doorstep will not help if that supplier is later named in a recall.

Pest control, servicing and other dated papers

SFBB treats pests as a safe method and as an extra check: look for signs of pests and for gaps in the building, and write what you found. If you use a contractor, the visit reports are part of that evidence. File them in date order and close the recommendations. A report that says "gap under the back door" is unfinished until the diary or the next report shows the gap was repaired, or shows why you judged the food safe in the meantime and what you did.

• Pest contractor reports and the bait or visit plan, plus your own checks on the weeks they do not come. A contract with no visits in the last year is a piece of paper, not pest control.
• Equipment that holds or cooks food. Fridge and freezer repairs, dishwasher service if you rely on it for disinfection, probe calibration records, and extraction filters if grease is a hygiene problem in the room. Write the date and what was fixed.
• Waste arrangements if an officer asks how refuse is stored and collected. The contract is supporting evidence. The bin store they can see matters more.
• Previous inspection letters and a note of what you changed. Officers re-read their own last report. An open item from last time, with no document and no diary line, is where confidence in management drops.

Insurance schedules, gas safety records and fire certificates matter to the business, and some of them sit with other regulators. Do not assume a food officer is scoring you on the insurance renewal. Do keep food-safety servicing where you can find it, because a fridge that failed and a repair invoice are one story. Label the sleeve "food safety" and leave the unrelated admin out, so the officer is not handed a box of bank statements.

Dates, versions and who can find them

A document list is useful when it shows the next date that matters, not when it is a dump of PDFs. For each item write: what it is, where the current copy lives, the date it was done or expires, and the person who acts. Typical dates:

• Pest visits and any recommendation still open.
• Training refreshers you have chosen to honour, and induction gaps on the rota.
• Probe check frequency, if you have said weekly in the safe method.
• The next 4-weekly diary review.
• Safe-method review after a menu change.
• Supplier list review when you change a wholesaler.

Name files so a search works on a bad morning: "pest-2026-03-visit", not "scan(3)". Paper copies need the same discipline: newest at the front, superseded pages marked, nothing loose in a carrier bag. If you keep scans, keep them with the store they belong to. A photo in a personal camera roll is not a filing system, and it leaves when that person leaves.

Decide a retention rule and write it in one line. Diary pages until at least the next inspection, because that is what the SFBB instructions say. Training rows long enough to cover the people and the period an officer might ask about. Invoices long enough for a recall. Pest reports for the life of the contract plus the last few visits so a gap is visible. You can keep longer. You should not keep three conflicting copies in order to feel thorough.

What environmental health officers check

Authorised officers can inspect at a reasonable time without an appointment, and they can look at records as well as the kitchen. They are not obliged to wait while you drive home for the folder. What they ask for varies with what they find, but a prepared caterer can usually produce:

• The food safety procedures and today's diary or equivalent daily record. The inspection checklist walks through the rest of the visit.
• Recent weeks of temperatures, cleaning and corrective actions, not a single perfect day.
• Training for the people working at the time, especially anyone handling food or allergens.
• Allergen information that matches the menu in front of them.
• Supplier names and enough delivery paperwork to trace a high-risk food back one step.
• Pest control evidence: contract, recent visits, and closed recommendations, or your own recorded checks if you do not use a contractor.
• The last inspection letter and what you did about it.

They will then compare the paper with the room. A pest report that says "no activity" does not outrank droppings in the dry store. A training matrix does not outrank a cook who cannot explain the cooling method. Organised documents make a truthful system easy to show. They do not repair an untruthful one. If something is missing, say so and show the action you have started. Searching in silence for twenty minutes is its own finding.

A simple order that survives a busy week

Use a small number of categories and stick to them. Five is enough for most independent kitchens:

1. System. Current safe methods, cleaning schedule, allergen matrix, supplier list.
2. Diary and temperatures. This period and the previous ones, back to at least the last inspection.
3. People. Training records and certificates for the current team, illness rules included in induction.
4. Site. Pest reports, servicing, structural repairs that affect food rooms.
5. Inspection history. Last letter, your actions, any complaint or recall notes.

Review the set at the 4-weekly diary review. You are not re-reading every invoice. You are checking that nothing in category "site" or "people" has expired, and that the diary you are signing matches the methods in category "system". If the specials board has outgrown the matrix, fix the matrix before you file anything else. The inspection checklist template is a useful prompt for that review. It is not a substitute for the records themselves. Certificates, pest reports and servicing papers are the set described on documents and inspection reports.

Worked example

A takeaway keeps a crate in the dry store: a pest report from fourteen months ago with "seal the back door" still open, a gas invoice, three training certificates including one for a leaver, an allergen sheet that does not list the new garlic sauce, and no diary for the last six weeks because the diary is in the manager's car. The officer is due in the sense that everyone knows a visit is likely; no date has been announced. They stop adding paper to the crate.

They make five wallets. System: the caterers safe methods, updated so the garlic sauce is on the allergen list and on the training line for the people who portion it, plus the supplier list with addresses. Diary: blank weeks left blank, a note that recording restarts today, temperatures on one sheet with the fridge names. People: current staff only, induction dated, leaver certificate in an archive envelope. Site: the old pest report at the back, a new visit booked, and a diary line when the back door is sealed, photographed only as a prompt until the contractor's next report confirms it. Inspection history: the previous letter, with two items ticked and one still open, written in the 4-weekly review rather than hidden.

Nothing in the wallets is backdated. When the officer asks for pest control, the manager shows the open recommendation, the date it was closed, and the gap in contractor visits instead of pretending the fourteen-month report was last week. The gas invoice stays in the accounts box. The food safety story is shorter and is true.

Common mistakes

• A thick folder of expired certificates and no current diary.
• Two allergen matrices, or a matrix that does not match the specials board.
• Pest reports filed and never actioned.
• Supplier knowledge that lives in one person's head, with no invoices.
• Training certificates for staff who have left, offered as the current team.
• The only copy in a car, a home office, or a personal phone.
• Backdating missing weeks or missing induction before a visit.
• Mixing payroll, bank statements and food safety in one box, so the food documents cannot be found quickly.

Where this comes from

This guide follows the Food Standards Agency pages on managing food safety and Safer Food, Better Business, including up-to-date procedures and records, supplier and traceability records, training evidence, and diary pages stored until the next local authority visit. Traceability detail comes from assimilated Regulation (EC) No 178/2002 as the FSA explains it: suppliers, and businesses you supply, with names, addresses, products, quantities and dates. The HACCP procedure duty is assimilated Regulation (EC) No 852/2004. Scottish businesses should use Food Standards Scotland guidance and CookSafe where that is their pack. Keep the documents that match the checks you have promised, current, and available to the people on shift.

Related pages

What is SFBB?Digital SFBB diaryOpening and closing checklistEHO readiness quizRestaurantsPaper SFBB pack comparison

Sources

Last reviewed 22 October 2026. These links are the pages this guide was checked against. They are not an endorsement of Localyn, and they do not make a kitchen compliant.

• Managing food safety (Food Standards Agency)
• Managing food safety
• Safer Food, Better Business for caterers (Food Standards Agency pack)
• Food safety inspections and enforcement

Template, tool and hub

• Food safety inspection checklist
• Restaurants