Hot holding food safely: 63°C and the two-hour rule

What hot holding is for

Cooking is meant to make food safe to eat. Hot holding is meant to keep it that way while people are still being served. Between 8°C and 63°C, many of the bacteria that cause food poisoning grow quickly. Some, including the spores that survive a normal boil in rice, can multiply and produce toxin if the food then sits warm for a long time. A later blast of heat does not reliably destroy every toxin that has already formed. That is why "it will be cooked again at the pass" is not a plan for a tray that has been lukewarm since noon.

Food business operators have to keep food safe and to have procedures based on HACCP principles that work in the kitchen they actually run. The Food Standards Agency's Safer Food, Better Business pack for caterers treats hot holding as part of the cooking safe method, not as a piece of equipment you bought and then forgot. The method should name the foods you hold, the equipment you use, the temperature you check, who probes, and what happens when the reading is short. A sentence copied from a blank pack, with no mention of the soup kettle or the carvery, will not help a new cook or an officer.

Hot holding is not cooking, cooling, or reheating. It does not finish an undercooked joint. It does not replace the cooling method when service is over. It does not replace a proper reheat of food that has been in the fridge. If you blur those jobs, the display looks under control while the food is in the worst part of the temperature range.

The temperature you are holding to

In England, Wales and Northern Ireland, food that has been cooked or reheated and is kept hot for service or display must be kept at 63°C or above. That figure is in the food hygiene regulations for those countries. It is a food temperature, not the temperature of the water under the tray, the air in the cupboard, or the setting on the lamp. Scotland also expects hot food for service to be held at 63°C or above. Scottish businesses should follow CookSafe and the Food Hygiene (Scotland) Regulations, and should not paste an English tolerance into a Scottish pack unless that pack, based on CookSafe, actually says so.

63°C is the legal line for hot holding. It is not a target to bounce around. A sauce that reads 63°C at the edge and 54°C in the middle is not being held at 63°C. A reading taken once at 11am does not describe a carvery that runs until 3pm. Write the check into the method at the times you can actually do it: when food goes in, and then often enough through service that a drop would be noticed while you still have a choice. Many kitchens probe at the start of service and again part-way through, and probe again if the equipment is opened constantly or the tray was topped up.

The probe has to be one you trust. A thermometer that has not been checked in iced water and boiling water can make a pass look like a fail, or the reverse. The probe calibration guide covers those two checks, how often to do them, and what to write down. Disinfect the probe before it touches ready-to-eat food, and between raw and cooked food if the same probe is used for both. A dirty probe is a cross-contamination problem sitting on top of a temperature problem.

What counts as hot holding in a real kitchen

If cooked food is waiting, hot, for someone to take it, it is being hot held. The equipment does not have to look like a textbook bain-marie. Walk the service and list the places food actually waits:

• Bain-marie and hot wells. Gravy, curry, chilli, custard, vegetables in water. The water can be hotter than the food, especially if the tray was filled from a pot that had already cooled.
• Hot cupboards and plate warmers used for food. A cupboard that only warms plates is not a hot hold. A cupboard with a hotel pan of lasagne in it is. Measure the lasagne.
• Heat lamps and carvery decks. Joints, Yorkshire puddings, roast potatoes. Lamps colour the surface. They are poor at keeping a thick joint hot in the centre if the joint went on warm rather than hot.
• Soup kettles and rice cookers on "keep warm". Useful if the food is already at temperature and is stirred. Useless as a way to heat a cold pan, and dangerous if the warm setting sits the food in the 40s and 50s for the afternoon.
• Heated displays. Pies, sausage rolls, fried chicken, pizza slices. The glass looks like a control. Probe the filling, not the pastry crust.
• Spits and doner machines while they are in service. Meat shaved for a customer now is a cooking check. Meat left on a switched-off spit is not hot holding. It is food with no temperature and no time.

A short rest after cooking, so a joint can be carved, is not the same thing as a service hold. Say so in the method: how long the rest is, where the joint sits, and the point at which it moves to the hot hold and starts to be probed. An open-ended "resting on the side" becomes a two-hour gap with no record. Insulated delivery bags are not hot-holding equipment either. Food should leave the kitchen hot, inside the time your method allows. The bag does not reset the clock and it does not replace a probe before the food goes in.

Food goes in already hot

Preheat the equipment before the food arrives. A cold bain-marie pulls heat out of the first tray. Then put food in that is already at 63°C or above. Safer Food, Better Business is clear that hot-holding equipment keeps food hot. It does not cook it and it does not reheat it. Ladle, rice, or a joint that goes in at 50°C will sit in the danger zone for the whole of service while the display looks normal.

If a probe at the point of loading is short, take the food back to a real heat source: the hob, the oven, or the equipment you use to reheat. Bring it to steaming hot all the way through, probe again, and only then move it to the hold. Turning the lamp up, closing the cupboard door, or stirring once and walking away does not finish that job. Do not move undercooked food into hot holding to "come up". Undercooked is a cooking failure. Deal with it as a cooking failure, then hold it.

Depth matters. A deep pot of chilli can be violent at the edges and merely warm in the centre. Split it into shallower trays if that is what it takes for the centre to be at temperature before it goes on the pass. The same is true of rice. A rice cooker left full and unstirred will lie to a probe that only touches the top.

How to probe hot-held food

Probe the food, in the centre, after you have stirred anything that can be stirred. Sauces, soups, stews and gravy should be stirred so you are not recording the one hot corner next to the element. For a tray of solid food, probe the thickest piece, and probe more than one piece if the tray is large or the back of the well is cooler than the front. Wipe and disinfect the probe between dishes so you do not carry allergens or raw juices. Record the number you actually saw.

Do not probe only the water. Water at 80°C can sit under a tray of sauce at 58°C if the sauce was filled cold or the tray is too full. Do not probe only the air in a hot cupboard. Air temperature is a useful clue that the cupboard is on. It is not the food. An infrared gun reads a surface. It can tell you the top of a pie is hot and miss a cold filling. Use it as a screen if you want, then confirm with a probe in the food when the decision matters.

Write the check where it will be done. A sheet in the office, filled in at the end of the week from memory, is not a hot-holding record. A column of identical 75s, with the same handwriting, for every item, every day, is what officers have learned to distrust. A page that shows 61°C, then a reheated 82°C, with a time and a name, is a working control.

When the temperature drops: the two-hour rule

Food will not sit at a perfect 63°C for every minute of a busy service. Lids come off, new trays go in, and the front of a display runs cooler than the back. In England, Wales and Northern Ireland it is an offence to keep food that needs hot holding below 63°C. There is a defence if that food has been kept for service or display for less than two hours, and has not already been kept for service or display by you. Safer Food, Better Business calls this the two-hour rule and treats it as once only. It is a controlled exception, not a routine way to run the pass. Do not wait until the clock hits two hours. The defence stops before then, so the decision belongs inside the window.

Use it like this. When you find food below 63°C, write the time. If you know when it fell, the window runs from then, and it is less than two hours. If you do not know when it fell, you do not invent a start time that makes the food legal. You throw it away, or you cool it only if you can still show that the cooling method will make it safe. A guess of "it was fine at lunch" is not a start time.

Inside that single window you can serve the food, or you can reheat it until it is steaming hot all the way through and put it back at 63°C or above. That spell below 63°C is used once. After you have brought the food back up, you do not get another period below 63°C, and a new person on the next shift does not reset the clock. If the food has already been out of hot holding for two hours, either cool it as quickly as possible using your chilling method and refrigerate it at 8°C or below, or throw it away. Write which one you did. The defence does not cover a second display.

Keep this separate from the rule that you reheat a chilled cooked dish only once. Bringing a tray back up during the same service, because it dipped, is the hot-holding corrective action. Cooling that tray, refrigerating it, and reheating it again tomorrow is a second reheat of food that has already been through the danger zone too often. If the food was already a reheat when it went into the hot hold, the safe end of the two-hour window is to serve it or throw it away, not to cool it for another day. The reheating guide sets out the once-only rule in full.

Scottish kitchens should not assume this two-hour window is theirs. Follow CookSafe. If the food is below 63°C and your Scottish method does not give you a written time tolerance, the practical choices are to reheat it properly and return it to a real hot hold, cool it safely, or throw it away. Do not borrow an English paragraph because it is convenient on a Saturday.

Stirring, topping up and display

Stir held sauces, soups and stews so the surface does not cool while the bottom sits on the heat. A skin on the top of a gravy is not just a quality problem. It is a sign the surface has been left alone. Keep lids on where the equipment is designed for them. A lid that does not fit, or a gastronorm that is bowed, lets heat out and dust in. Fix the container rather than propping a tray over the top.

Do not top up a hot tray with a cold portion from the fridge. The cold food pulls the whole tray down, often below 63°C, and you have now mixed a known hot batch with a batch that has not been reheated. Heat the new portion until it is steaming hot, probe it, and then add it. The same applies to rice and to vegetables. "Freshening up" a display with a cold ladle is how a passing check becomes a failing one.

Display food still has to be protected. Sneeze guards, lids and the distance from customers are part of the method, but they do not replace temperature. A pie that has sat under a lamp since the shop opened needs a time as well as a probe. If you cannot say when it went in, you cannot use the two-hour rule honestly. Smaller batches, cooked or reheated closer to service, are usually safer than one deep tray loaded at 10am and hoped over until 4pm.

Allergens do not pause because the food is hot. A spoon from the nut-free tray used in the satay tray is still a failure. Keep separate utensils, and do not let hot-holding records become the only record you keep while the allergen matrix is out of date. Hot holding is one safe method. It sits next to the others.

Rice, carvery, gravy and the spit

Cooked rice is the dish that punishes a casual warm hold. A normal boil does not destroy Bacillus cereus spores. If the rice then sits warm, those spores can grow and produce a toxin that reheating later will not reliably remove. Rice is either served, held at 63°C or above with a real probe of the rice itself, or cooled quickly and refrigerated as the cooling guide describes. "It is still in the cooker from the lunch menu" is not a method. The keep-warm setting on a domestic rice cooker is a common way to miss 63°C by a wide margin. If you use one, probe the rice. If it will not hold, change the equipment or the timing.

Carvery joints need a centre temperature, not a story about how long they were in the oven. Probe the thickest part, away from bone if you can, when the joint goes on the deck and again during service. Resting juices on the board are not a temperature. If the centre drops below 63°C, start the clock and decide: carve and serve inside the window, return it to the oven until it is hot through and put it back only once, or stop. Do not slice the hot outside and leave the cool centre for "later". Gravy in the well beside the joint is a separate probe. It is often the item that fails, because it was made early and never stirred.

Leftover doner and spit-roast meat at the end of service is a hot-holding decision, not a storage habit. Do not switch the spit off and leave the cone to cool overnight so it can be shaved cold in the morning. Either the meat is still within a written hot hold and is used in line with that method, or it is taken off, cooled in a way your chilling method actually allows for a product of that size, or it is thrown away. A large cone will not cool in 90 minutes in one piece. If you cannot show when the heat was turned down, you do not have a start time. The meat goes. Write the amount and the reason, so the waste is visible at the 4-weekly review rather than a rumour.

What to record

You do not need an essay for every spoonful of beans. You do need a record that shows the foods you hold, the temperature of the food, the time, and the person. When the reading is below 63°C, the record also needs the time you found it, the decision, and what happened to the food. If you reheated it back up, write the new temperature. If you threw it away, write that, and roughly how much. If you cooled it, the cooling record should match the diary.

A hot-holding sheet next to the probe is the usual place. The Safer Food, Better Business diary is the right place for the exception: the day the well failed, the day the rice was binned, the day you changed the time you cook the pies. Opening and closing checks can confirm that the equipment came on and that the probe was there. They do not replace the food temperatures. If a unit is broken, take it out of use, label it, and move the food. A note that says "engineer called" with the food still in a cold well is not a corrective action. The corrective action guide is the standard for that note: problem, immediate action, and what you changed so it is less likely tomorrow.

Keep the sheets for the period your method and your local authority expect, and long enough that a complaint or an inspection can still see them. A week of perfect logs and an empty folder for the month before is a gap. So is a log that lives on a phone gallery with no dates. If you record on paper, the paper has to survive splashes. If you record on a screen, the person on the pass has to be able to enter the reading at the time, not at home after the shift.

What environmental health officers check

Officers look at the food, then at the paper. They will often probe a hot-held dish themselves, or watch you do it. They compare that reading with the last line on your sheet. A log that says 74°C at 12:30, next to a curry that reads 48°C at 12:40, is a worse visit than a log that says 48°C and "reheated, now 79°C, Priya". They also look for food with no time attached: pies that have been in the display "since this morning", rice in a cooker that nobody will claim, a spit that is off but still loaded.

• Whether staff can say which foods are hot held, and which are cooked to order.
• Whether the probe is clean, works, and has a recent calibration check.
• Whether readings are of the food, with times and names, including failures.
• Whether anyone knows the two-hour rule, including that it is once only and that an unknown start time means the food is not kept.
• Whether cold food is being added to hot trays, and whether raw and ready-to-eat service tools are separate.
• Whether leftover hot food at the end of the night is cooled properly, served, or thrown away, and whether that matches the diary.

Hot holding is scored as part of food hygiene and, when the records and the supervision are weak, as part of confidence in management. An officer who finds three different stories from three staff about the same soup kettle will not be reassured by a tidy folder. Train the people who actually stand at the pass, and check a sample of their readings yourself during the 4-weekly review. The SFBB guide explains how that review fits the pack.

Worked example

A pub runs a Sunday carvery from 12:00 to 15:00. The safe method says joints go on the deck only if the centre is at least 63°C, gravy is stirred and probed at noon and again at 13:30, and any item below 63°C is timed. The two-hour rule is written as once only. Rice is not held in the cooker. It is either served from a fresh batch or cooled.

At 11:50 the cook probes the beef: 72°C in the centre. The pork is 64°C. Both go on. Gravy is stirred and reads 68°C. The sheet shows the foods, the temperatures, the time, and the name. That is a normal start.

At 13:35 the gravy reads 59°C. The well at the front had been left open for carving. The cook writes "gravy 59°C, 13:35". The team knows the pot was 68°C at 11:50, but they do not know the minute it fell, so they do not pretend the clock started at 13:35 in order to gain two full extra hours of slack beyond what they can defend. They take the gravy off, bring it back to a proper boil on the hob until it is steaming hot, stir, and probe it at 78°C at 13:50. It goes back into a preheated well. The sheet shows 59°C, then 78°C. The manager's note says the front well is not used for gravy after today, because it cannot hold temperature with the lid off. They do not get a second dip. If that gravy falls below 63°C again, it is served immediately or thrown away. It is not cooled for Monday, because this gravy was already reheated once as the corrective action.

At 15:10 the remaining pork is still 65°C. It is carved and served to the last table, not left on the deck until someone remembers. The beef is below the point they are willing to hold, and nobody can show a clean two-hour story for the end of service because the last probe was 13:40. They bin the leftover beef and write the reason. The 4-weekly review says they will probe the carvery again at 14:30 so the end of service has a time they can use. That is a working hot-holding control, including the food they did not serve.

Common mistakes

• Probing the water, the air, or the dial, and writing that number as the food.
• Putting lukewarm food into a bain-marie and calling it held.
• Using the two-hour rule with no start time, or using it twice on the same food.
• Topping a hot tray with cold food from the fridge.
• Leaving rice on "keep warm" all afternoon without a probe of the rice.
• Switching a doner spit off and leaving the cone overnight.
• Filling the log at the end of the week with the same temperature on every line.
• Cooling a large joint or a whole spit in one piece and assuming it met the cooling target.

Where this comes from

This guide follows the Food Standards Agency's Safer Food, Better Business safe methods on cooking and hot holding, and the hot-holding temperature of 63°C in the food hygiene regulations for England, Wales and Northern Ireland. Those regulations give a defence where food has been kept for service or display below 63°C for less than two hours and has not already been kept for service or display by the same person. The Food Standards Agency's pages on cooking your food and on Safer Food, Better Business for caterers are the public starting point. Scottish businesses should follow Food Standards Scotland and CookSafe. Put your own foods, equipment, probe times and corrective actions into the safe method your team is trained on, and check that the diary matches what the pass actually does.