Supplier Approval and Management: A Guide for Small UK Food Producers

Your food safety is only as good as your suppliers

You can run an immaculate operation and still have a food safety problem walk in through your back door, in the form of an ingredient from a supplier you never properly checked. Your finished product is only ever as safe as what goes into it, which is why supplier approval and management is a core part of any food safety system and a focus area in every certification audit.

For small producers this can feel like an awkward dynamic: you're often the smaller party, asking larger suppliers for paperwork. But it's a normal, expected part of running a food business, and done well it protects you. Here's how to approach it.

What supplier approval actually means

Supplier approval is the process of satisfying yourself, before you start buying from a supplier, that they can provide safe, legal materials that meet your requirements. It's not a one-off gesture; it's an ongoing relationship you monitor.

An approved supplier is one you've assessed against defined criteria and documented as acceptable. Buying only from approved suppliers, and being able to show why each was approved, is what an auditor wants to see, and what protects you if something goes wrong.

Setting up an approved supplier register

The foundation is a register: a single, maintained list of every supplier you buy food materials from, with the evidence behind each approval. For each supplier, your register should capture:

1. Who they are - name, contact details, what they supply you.
2. Approval status and date - when you approved them and against what criteria.
3. Evidence held - certificates, specifications, audit results.
4. Review date - when their approval and documents are next due to be checked.

This register is one of the first things an auditor will ask to see, and a complete, current one immediately signals a controlled operation.

What to check before approving a supplier

How rigorously you assess a supplier should be proportionate to the risk of what they supply. A supplier of high-risk ingredients warrants more scrutiny than one supplying packaging. Typical checks include:

• Certification. Do they hold a recognised food safety certification (SALSA, BRCGS, or equivalent)? A current certificate from a recognised scheme does a lot of the assurance work for you.
• Product specifications. Do you have a specification for each material, including allergen information and any relevant parameters?
• Allergen information. Critical, because their allergen status feeds directly into your own allergen management.
• Traceability. Can they tell you where their materials come from?
• For uncertified suppliers, a questionnaire or self-assessment, and possibly a visit, to satisfy yourself they operate safely.

The key principle is that you can justify each approval. If an auditor asks why you buy from a given supplier, "they're certified to BRCGS and here's the current certificate" is a strong answer. "They've always been fine" is not.

The certificate expiry trap

Here's the single most common supplier-related audit finding, and it catches careful producers constantly: an expired supplier certificate.

It happens quietly. You approved the supplier properly, filed their certificate, and got on with running your business. A year later the certificate expired, nobody was tracking the date, and you didn't notice, until the auditor flips to it and finds it lapsed. Suddenly a supplier you've been buying from for months is, on paper, unapproved.

The fix is simple in principle: track every certificate's expiry date and chase the renewal before it lapses. In practice, doing that manually across a dozen suppliers, each with different renewal dates, is exactly the kind of task that slips. This is why certificate tracking is one of the most useful things to automate. FoodSafe's supplier register tracks certificate expiry and flags certificates before they lapse, which turns this perennial finding into a non-issue, because you're warned in advance rather than caught out after the fact.

Ongoing management

Approval isn't the end. Suppliers should be reviewed periodically, with the frequency reflecting risk. Ongoing management includes:

1. Keeping certificates and specifications current as they renew.
2. Reviewing performance - quality issues, complaints, or delivery problems should feed back into whether a supplier stays approved.
3. Reassessing when something changes - a supplier changing site, ownership, or formulation may need fresh assessment.
4. Handling problems - a clear approach to what happens when a supplier fails to meet requirements, including when to suspend or remove approval.

When a delivery isn't right

Supplier management also includes what happens at goods-in. Your team should check deliveries against agreed criteria, temperature for chilled and frozen goods, condition, date codes, and correct documentation, and know what to do when a delivery fails. Rejecting a substandard delivery is part of supplier management in action, and recording the rejection is part of demonstrating control.

Build the register, watch the dates

Supplier approval comes down to two disciplines: approve suppliers against criteria you can justify and document, and keep their paperwork current so an approval never quietly lapses. Set up a proper register, assess proportionately to risk, track every expiry date, and review regularly. Do that, and the supplier section of your next audit becomes one of the easy parts, rather than the place a forgotten certificate trips you up.

For how supplier records connect to tracing a batch through your whole process, see our guide to food traceability.

Food safety compliance, handled.