[{"data":1,"prerenderedAt":57},["ShallowReactive",2],{"blog-how-to-choose-food-suppliers-uk-live":3},{"id":4,"title":5,"date":6,"updatedAt":6,"categories":7,"coverImage":9,"content":10,"description":11,"keywords":12,"seoTitle":22,"canonicalUrl":23,"noIndex":24,"imageAlt":25,"faqs":26},"how-to-choose-food-suppliers-uk","How to Choose Food Suppliers in the UK: Complete 2026 Guide","2026-04-28",[8],"Blog","how-to-choose-food-suppliers-uk.jpg","\u003Cp>Your suppliers are your first line of food safety. Every allergen declaration on your menu, every use-by date on a product label, every FHRS score at your next inspection starts with a supplier specification sheet that is either accurate or isn’t.\u003C/p>\n\u003Cp>UK courts have made this increasingly expensive for operators who get it wrong. The 2024-2026 prosecution run has included £7.56 million for a supermarket selling food past use-by, £46,827 for a sandwich maker whose supplier chain let Listeria through, £43,816 for a restaurant whose allergen controls failed a nut-allergic customer, and indefinite food-industry bans for three directors of a rat-infested Knowsley bakery that was supplying other food businesses.\u003C/p>\n\u003Cp>This guide is the complete UK-specific framework for choosing and managing food suppliers in 2026 — the legal requirements, the certifications that matter, what a proper supplier specification sheet contains, the 10-step selection process, and the real prosecutions that show what happens when it goes wrong.\u003C/p>\n\u003Ch2>What UK law requires of food businesses and their suppliers\u003C/h2>\n\u003Ch3>Article 18 — one-up one-down traceability\u003C/h3>\n\u003Cp>\u003Cstrong>Article 18 of assimilated Regulation (EC) 178/2002\u003C/strong> is the single most important supplier-record rule in UK food law. It applies to every food business in Great Britain as assimilated direct legislation, and directly in Northern Ireland under the Windsor Framework.\u003C/p>\n\u003Cp>Article 18(1) verbatim:\u003C/p>\n\u003Cblockquote>\n\u003Cp>“The traceability of food, feed, food-producing animals, and any other substance intended to be, or expected to be, incorporated into a food or feed shall be established at all stages of production, processing and distribution.”\u003C/p>\n\u003C/blockquote>\n\u003Cp>The rule resolves into two parts:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>One step back (Article 18(2)):\u003C/strong> identify any person from whom you’ve been supplied food or an ingredient. Systems must make that information available to competent authorities on demand.\u003C/li>\n\u003Cli>\u003Cstrong>One step forward (Article 18(3)):\u003C/strong> identify the business customers you supplied product to. Sales direct to the final consumer are out of scope.\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>The minimum information to record\u003C/strong>, per FSA traceability guidance:\u003C/p>\n\u003Cul>\n\u003Cli>Name and address of supplier or customer\u003C/li>\n\u003Cli>Description of the food\u003C/li>\n\u003Cli>Quantity\u003C/li>\n\u003Cli>Date of the transaction or delivery\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Retention period.\u003C/strong> Article 18 does not set a fixed period. FSA best practice is to keep records at least until the food is reasonably assumed to have been consumed, and produce them on demand. \u003Cstrong>Failure to produce is a criminal offence.\u003C/strong> Pragmatic UK norms:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shelf-life + 6 months\u003C/strong> for best-before products\u003C/li>\n\u003Cli>\u003Cstrong>6 months\u003C/strong> for highly perishable use-by products\u003C/li>\n\u003Cli>\u003Cstrong>Up to 5 years\u003C/strong> for long-life and ambient goods\u003C/li>\n\u003C/ul>\n\u003Cp>Internal (process) traceability — matching specific inputs to specific outputs — is \u003Cstrong>not\u003C/strong> required by Article 18. It may be required by sector legislation or by private standards like BRCGS.\u003C/p>\n\u003Cp>Article 19 couples with Article 18: food business operators must withdraw or recall unsafe food and notify competent authorities. When traceability fails, the recall cost lands on the business.\u003C/p>\n\u003Ch3>Section 21 of the Food Safety Act 1990 — the due diligence defence\u003C/h3>\n\u003Cp>Section 21(1) verbatim:\u003C/p>\n\u003Cblockquote>\n\u003Cp>“it shall… be a defence for the person charged to prove that he took all reasonable precautions and exercised all due diligence to avoid the commission of the offence by himself or by a person under his control.”\u003C/p>\n\u003C/blockquote>\n\u003Cp>This defence applies to offences under Part II of the Food Safety Act 1990, including section 7 (food injurious to health), section 14 (food not of the nature/substance/quality demanded) and section 15 (false labelling). Regulation 12 of the Food Safety and Hygiene (England) Regulations 2013 mirrors the defence for hygiene offences.\u003C/p>\n\u003Cp>\u003Cstrong>Both limbs must be satisfied\u003C/strong> — reasonable precautions AND due diligence. The burden is on the accused on the balance of probabilities.\u003C/p>\n\u003Cp>\u003Cstrong>What a supplier-related due diligence defence looks like in court:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>Documented HACCP plan integrating supplier risk assessment\u003C/li>\n\u003Cli>Written supplier specifications with allergen information\u003C/li>\n\u003Cli>Signed supplier contracts\u003C/li>\n\u003Cli>Records of supplier audits proportionate to risk\u003C/li>\n\u003Cli>Goods-in checks — temperature, pack integrity, dates, quantity\u003C/li>\n\u003Cli>Staff training records\u003C/li>\n\u003Cli>Corrective-action records when supplier non-conformances occur\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Garrett v Boots\u003C/strong> is the key case for hospitality buyers. It established that larger or professional buyers are expected to actively test supplier claims — blanket reliance on a supplier declaration is not sufficient. If you’re a multi-site operator and a supplier’s spec sheet is wrong, courts expect you to have checked.\u003C/p>\n\u003Cp>\u003Cstrong>Procedural note:\u003C/strong> if you plan to rely on the act or default of another person as part of your defence, \u003Cstrong>section 21(5)\u003C/strong> requires written notice to the prosecutor at least 7 clear days before the hearing. See our \u003Ca href=\"/blog/real-cost-food-safety-non-compliance\">due diligence defence guide\u003C/a> for deeper case analysis.\u003C/p>\n\u003Ch3>Food Information Regulations 2014 — supplier allergen obligations\u003C/h3>\n\u003Cp>The Food Information Regulations 2014 (SI 2014/1855) enforce assimilated Regulation (EU) 1169/2011 in Great Britain, with parallel instruments in Scotland, Wales and NI.\u003C/p>\n\u003Cp>\u003Cstrong>The 14 UK-regulated allergens\u003C/strong> (Annex II of FIC):\u003C/p>\n\u003Col>\n\u003Cli>Celery\u003C/li>\n\u003Cli>Cereals containing gluten (wheat, rye, barley, oats)\u003C/li>\n\u003Cli>Crustaceans\u003C/li>\n\u003Cli>Eggs\u003C/li>\n\u003Cli>Fish\u003C/li>\n\u003Cli>Lupin\u003C/li>\n\u003Cli>Milk\u003C/li>\n\u003Cli>Molluscs\u003C/li>\n\u003Cli>Mustard\u003C/li>\n\u003Cli>Tree nuts\u003C/li>\n\u003Cli>Peanuts\u003C/li>\n\u003Cli>Sesame\u003C/li>\n\u003Cli>Soybeans\u003C/li>\n\u003Cli>Sulphur dioxide and sulphites (above 10 mg/kg or 10 mg/L)\u003C/li>\n\u003C/ol>\n\u003Cp>\u003Cstrong>Article 8\u003C/strong> of FIC makes the food business operator under whose name the food is marketed responsible for the accuracy of allergen information. \u003Cstrong>Article 9\u003C/strong> sets the mandatory particulars.\u003C/p>\n\u003Cp>Practically: your supplier is legally responsible for accurate allergen information on the spec sheet and label. But the Garrett v Boots principle means you are responsible for actively verifying that information reflects reality — supplier declarations are the start of your due diligence, not the end.\u003C/p>\n\u003Cp>\u003Cstrong>Natasha’s Law\u003C/strong> (Food Information (Amendment) (England) Regulations 2019) extended allergen labelling to Prepacked for Direct Sale items from 1 October 2021. Every supplier of a PPDS-bound ingredient must provide complete allergen information. See our full \u003Ca href=\"/blog/allergen-matrix-uk-food-business-guide\">allergen matrix guide\u003C/a> for how to operationalise this across a menu.\u003C/p>\n\u003Ch3>Regulation 853/2004 — approved establishments for Products of Animal Origin\u003C/h3>\n\u003Cp>If you buy meat, fish, dairy, eggs or other Products of Animal Origin (POAO), your supplier is almost certainly operating under assimilated Regulation (EC) 853/2004.\u003C/p>\n\u003Cp>\u003Cstrong>Sectors that require approval:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>Slaughterhouses\u003C/li>\n\u003Cli>Cutting plants\u003C/li>\n\u003Cli>Game-handling establishments\u003C/li>\n\u003Cli>Meat processing (including rendered fats, gelatine, collagen)\u003C/li>\n\u003Cli>Minced meat and meat preparations\u003C/li>\n\u003Cli>Dairies and liquid-milk establishments\u003C/li>\n\u003Cli>Egg packing centres and egg product plants\u003C/li>\n\u003Cli>Fishery product establishments\u003C/li>\n\u003Cli>Bivalve mollusc dispatch and purification centres\u003C/li>\n\u003Cli>Wholesale markets\u003C/li>\n\u003Cli>Cold stores that re-wrap POAO\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>The identification mark\u003C/strong> is an oval containing:\u003C/p>\n\u003Cul>\n\u003Cli>Country (“UK” or “United Kingdom”)\u003C/li>\n\u003Cli>Approval number\u003C/li>\n\u003Cli>Abbreviation\u003C/li>\n\u003C/ul>\n\u003Cp>Typical format: \u003Cstrong>“UK XX 123 EC”\u003C/strong>. For Northern Ireland: \u003Cstrong>“UK (NI)”\u003C/strong>. The “EC” suffix is permitted until 31 December 2028, after which “EU” applies.\u003C/p>\n\u003Cp>\u003Cstrong>Competent authorities:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>FSA\u003C/strong> approves slaughterhouses, cutting plants and game-handling establishments in England, Wales and NI\u003C/li>\n\u003Cli>\u003Cstrong>Food Standards Scotland\u003C/strong> for Scotland\u003C/li>\n\u003Cli>\u003Cstrong>Local authorities\u003C/strong> for most other POAO establishments\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> the FSA publishes a monthly list of approved food establishments in England and Wales. FSS maintains a Scotland list. Northern Ireland has its own register. Cross-checking an approval number is a 2-minute task that closes a significant due diligence gap.\u003C/p>\n\u003Cp>\u003Cstrong>Retail exemption (Article 1(5)):\u003C/strong> retail supply direct to the final consumer is generally outside 853/2004. “Marginal, localised and restricted” inter-retail supply is also exempt.\u003C/p>\n\u003Ch3>The post-Brexit position in 2026\u003C/h3>\n\u003Cp>Under the \u003Cstrong>Retained EU Law (Revocation and Reform) Act 2023\u003C/strong>, from 1 January 2024 “retained EU law” was renamed “assimilated law”. The core UK food legislation is preserved:\u003C/p>\n\u003Cul>\n\u003Cli>Regulation (EC) 178/2002 (general food law, including Article 18 traceability)\u003C/li>\n\u003Cli>Regulation (EC) 852/2004 (food hygiene, including HACCP)\u003C/li>\n\u003Cli>Regulation (EC) 853/2004 (POAO approved establishments)\u003C/li>\n\u003Cli>Regulation (EU) 1169/2011 (food information to consumers)\u003C/li>\n\u003Cli>Regulation (EC) 2073/2005 (microbiological criteria)\u003C/li>\n\u003C/ul>\n\u003Cp>All remain in force as assimilated law in Great Britain. The FSA has confirmed that references in existing guidance to “EU” or “EC” regulations should now be regarded as assimilated law where applicable.\u003C/p>\n\u003Cp>\u003Cstrong>Northern Ireland\u003C/strong> continues to apply the live EU (not assimilated) versions under the Windsor Framework. Operators with supply chains crossing GB and NI need to track both versions.\u003C/p>\n\u003Cp>\u003Cstrong>Delegated powers to restate or replace assimilated law expire 23 June 2026\u003C/strong> — a date worth noting for any supplier contracts running past that window.\u003C/p>\n\u003Ch2>The certifications that matter — and how to verify each one\u003C/h2>\n\u003Ch3>SALSA (Safe And Local Supplier Approval)\u003C/h3>\n\u003Cp>UK food safety standard, aimed at \u003Cstrong>small and micro producers\u003C/strong> under 50 FTE and £10m turnover. Non-profit joint venture of the Food & Drink Federation, NFU and UK Hospitality; IFST-accredited.\u003C/p>\n\u003Cp>\u003Cstrong>Variants:\u003C/strong> Food and Drink Standard; Brokers, Storage and Distribution Standard; SALSA plus Beer (with Cask Marque); SALSA plus Cheese (with the Specialist Cheesemakers Association).\u003C/p>\n\u003Cp>\u003Cstrong>Audit frequency:\u003C/strong> annual on-site; approval takes 1-3 months from payment; audits run 5-6 hours.\u003C/p>\n\u003Cp>\u003Cstrong>Cost:\u003C/strong> roughly £775-£1,550+ per year. Discounted SME rates available through regional programmes.\u003C/p>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> directory at \u003Ca href=\"http://salsafood.co.uk\">salsafood.co.uk\u003C/a> — search by company or certificate number and view the certificate PDF.\u003C/p>\n\u003Cp>SALSA is \u003Cstrong>not GFSI-benchmarked\u003C/strong>, positioned as a stepping stone for small UK manufacturers. Widely accepted by hospitality buyers who want evidence of audited food safety but don’t need BRCGS.\u003C/p>\n\u003Ch3>BRCGS Food Safety (Global Standard, Issue 9)\u003C/h3>\n\u003Cp>\u003Cstrong>Issue 9\u003C/strong> was published August 2022, with audits from 1 February 2023. It’s the first GFSI-benchmarked food safety standard, used by 70% of the top 10 global retailers and 60% of the top 10 QSR chains. Over 22,000 sites certified globally.\u003C/p>\n\u003Cp>\u003Cstrong>Standards suite:\u003C/strong> Food Safety, Packaging Materials, Storage & Distribution, Agents & Brokers, Consumer Products, Retail, Gluten-Free, Plant-Based, Ethical Trade & Responsible Sourcing.\u003C/p>\n\u003Cp>\u003Cstrong>Grading system:\u003C/strong>\u003C/p>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Grade\u003C/th>\n\u003Cth>Conditions\u003C/th>\n\u003Cth>Certificate validity\u003C/th>\n\u003C/tr>\n\u003C/thead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>AA\u003C/strong>\u003C/td>\n\u003Ctd>≤5 minors\u003C/td>\n\u003Ctd>12 months\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>A\u003C/strong>\u003C/td>\n\u003Ctd>5-10 minors\u003C/td>\n\u003Ctd>12 months\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>B\u003C/strong>\u003C/td>\n\u003Ctd>11-16 minors OR 1 major + ≤10\u003C/td>\n\u003Ctd>12 months\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>C\u003C/strong>\u003C/td>\n\u003Ctd>17-24 minors OR 1 major + ≤16 OR 2 majors + ≤10\u003C/td>\n\u003Ctd>6 months\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>D\u003C/strong>\u003C/td>\n\u003Ctd>25-30 minors OR 1 major + ≤24\u003C/td>\n\u003Ctd>6 months\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>Uncertified\u003C/strong>\u003C/td>\n\u003Ctd>below D thresholds\u003C/td>\n\u003Ctd>n/a\u003C/td>\n\u003C/tr>\n\u003C/tbody>\n\u003C/table>\n\u003Cp>A “+” suffix denotes an unannounced audit (mandatory at least every 3 years).\u003C/p>\n\u003Cp>\u003Cstrong>Cost:\u003C/strong> £4,000-£12,000+ per site per year depending on size and certification body.\u003C/p>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> BRCGS Directory at \u003Ca href=\"http://directory.brcgs.com\">directory.brcgs.com\u003C/a>. The new BRCGS Verify tool is rolling out from 2025 with authoritative certificate data.\u003C/p>\n\u003Ch3>Red Tractor\u003C/h3>\n\u003Cp>UK farm-to-fork assurance across 11 sectors: beef, lamb, pork, poultry, dairy, dairy goats, combinable crops and sugar beet, fresh produce, livestock markets, livestock transport, seed potatoes.\u003C/p>\n\u003Cp>\u003Cstrong>The Union Flag in the logo\u003C/strong> means the product was \u003Cstrong>farmed, processed and packed in the UK\u003C/strong>. A plain Union Jack on packaging often only denotes UK processing — not farming — so check before making “British” claims.\u003C/p>\n\u003Cp>\u003Cstrong>Membership:\u003C/strong> approximately 48,000 farmers.\u003C/p>\n\u003Cp>\u003Cstrong>Audit frequency:\u003C/strong> annual for most sectors; 18-monthly for dairy, beef and lamb; plus unannounced spot checks.\u003C/p>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> Industry Checker/Tracker at \u003Ca href=\"http://checkers.redtractor.org.uk\">checkers.redtractor.org.uk\u003C/a>.\u003C/p>\n\u003Cp>\u003Cstrong>Caveat:\u003C/strong> in October 2025 the ASA ruled a Red Tractor advert misleading on environmental claims. If your menu makes welfare or environmental claims based on Red Tractor status, word them carefully.\u003C/p>\n\u003Ch3>Organic — Defra-approved control bodies\u003C/h3>\n\u003Cp>Any business producing, processing, packing, importing or selling organic food, feed or seed must be certified by a Defra-approved control body. Selling unapproved product as “organic” is a criminal offence.\u003C/p>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Code (GB / NI)\u003C/th>\n\u003Cth>Control body\u003C/th>\n\u003C/tr>\n\u003C/thead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>GB-ORG-02 / XI-ORG-02\u003C/td>\n\u003Ctd>Organic Farmers & Growers CIC\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>GB-ORG-04 / XI-ORG-04\u003C/td>\n\u003Ctd>Organic Food Federation\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>\u003Cstrong>GB-ORG-05\u003C/strong> / XI-ORG-05\u003C/td>\n\u003Ctd>\u003Cstrong>Soil Association Certification Ltd\u003C/strong>\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>GB-ORG-06\u003C/td>\n\u003Ctd>Biodynamic Association Certification\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>GB-ORG-13\u003C/td>\n\u003Ctd>Quality Welsh Food Certification Ltd\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>GB-ORG-17\u003C/td>\n\u003Ctd>OF&G (Scotland) Ltd\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>XI-ORG-07\u003C/td>\n\u003Ctd>Irish Organic Association (NI only)\u003C/td>\n\u003C/tr>\n\u003Ctr>\n\u003Ctd>XI-ORG-09\u003C/td>\n\u003Ctd>Organic Trust CLG (NI only)\u003C/td>\n\u003C/tr>\n\u003C/tbody>\n\u003C/table>\n\u003Cp>\u003Cstrong>Rules:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>Product must contain ≥95% organic agricultural ingredients to be labelled “organic”\u003C/li>\n\u003Cli>The certifier code must appear in the same visual field as the EU organic logo\u003C/li>\n\u003Cli>Inspection is at least annual (announced + unannounced) plus UKAS/Defra surveillance\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> Soil Association licensee search at \u003Ca href=\"http://soilassociation.org/certification\">soilassociation.org/certification\u003C/a>.\u003C/p>\n\u003Ch3>RSPCA Assured\u003C/h3>\n\u003Cp>UK’s only welfare-dedicated farm assurance scheme (rebranded from Freedom Food in 2015). Covers pigs, laying hens, pullets, broilers, turkeys, ducks, dairy and beef cattle, sheep, farmed Atlantic salmon and rainbow trout. 4,000+ farms and businesses assessed, covering around 64 million animals.\u003C/p>\n\u003Cp>\u003Cstrong>Risk flag:\u003C/strong> 2024 undercover investigations exposed welfare failures on some RSPCA Assured farms and abattoirs. If you use the scheme in marketing claims, combine with your own due diligence.\u003C/p>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> request a current RSPCA Assured membership certificate; cross-check at \u003Ca href=\"http://business.rspcaassured.org.uk\">business.rspcaassured.org.uk\u003C/a>.\u003C/p>\n\u003Ch3>MSC (wild) and ASC (farmed) seafood\u003C/h3>\n\u003Cp>The \u003Cstrong>MSC blue fish label\u003C/strong> certifies wild-capture fisheries against the MSC Fisheries Standard. The \u003Cstrong>Chain of Custody (CoC) Standard\u003C/strong> applies to every business in the supply chain \u003Cstrong>including restaurants and foodservice\u003C/strong> — with 7,000+ CoC businesses at 51,000+ sites globally.\u003C/p>\n\u003Cp>\u003Cstrong>ASC\u003C/strong> is the parallel responsible-farmed-seafood scheme (green label), with a joint MSC-ASC CoC.\u003C/p>\n\u003Cp>\u003Cstrong>Verification:\u003C/strong> \u003Ca href=\"http://fisheries.msc.org\">fisheries.msc.org\u003C/a> — “Track a Fishery” database.\u003C/p>\n\u003Ch3>Fairtrade / FLOCERT\u003C/h3>\n\u003Cp>The Fairtrade Foundation UK licenses the FAIRTRADE Mark; \u003Cstrong>FLOCERT\u003C/strong> (ISO 17065-accredited) is the global certifier.\u003C/p>\n\u003Cp>Key commodities: coffee, tea, cocoa, sugar, bananas, plus cotton, flowers, wine, gold, fresh fruit, herbs and spices.\u003C/p>\n\u003Cp>Each organisation has a unique \u003Cstrong>FLO ID\u003C/strong> — lookup at \u003Ca href=\"http://flocert.net/fairtrade-customer-search\">flocert.net/fairtrade-customer-search\u003C/a>.\u003C/p>\n\u003Ch3>Certification shortlist — demand vs nice-to-have\u003C/h3>\n\u003Cp>\u003Cstrong>Demand as a risk-management baseline:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>BRCGS or SALSA\u003C/strong> for any manufactured food supplier — primary evidence of an audited FSMS\u003C/li>\n\u003Cli>\u003Cstrong>Red Tractor\u003C/strong> if you make a “British” claim on your menu\u003C/li>\n\u003Cli>\u003Cstrong>Defra-approved organic control body certificate\u003C/strong> if you use the word “organic” (legal requirement)\u003C/li>\n\u003Cli>\u003Cstrong>MSC or ASC Chain of Custody\u003C/strong> if you market seafood as MSC/ASC\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Nice-to-have for premium positioning:\u003C/strong>\u003C/p>\n\u003Cul>\n\u003Cli>Organic beyond the legal minimum\u003C/li>\n\u003Cli>Fairtrade\u003C/li>\n\u003Cli>RSPCA Assured (combine with your own due diligence)\u003C/li>\n\u003Cli>MSC blue label marketing beyond CoC compliance\u003C/li>\n\u003C/ul>\n\u003Ch2>What a good supplier specification sheet looks like\u003C/h2>\n\u003Cp>BRCGS Issue 9 requires sites to maintain “detailed specifications to facilitate the production of food product which is lawful and consistent with compositional and safety standards and good manufacturing practice.”\u003C/p>\n\u003Cp>A supplier spec sheet accepted by a professional UK hospitality buyer should contain every one of the following:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>Full ingredients list with the 14 UK-regulated allergens emphasised\u003C/strong> (bold, caps or colour contrast) per assimilated Regulation 1169/2011\u003C/li>\n\u003Cli>\u003Cstrong>Manufacturing and packaging site details, including approval number\u003C/strong> — the oval health or identification mark for POAO; BRCGS Clause 3.5.1.5 requires knowing the identity of the last manufacturer or packer where sourcing is via brokers\u003C/li>\n\u003Cli>\u003Cstrong>Shelf-life\u003C/strong> — both primary (use-by for microbiologically perishable; best-before for durability) and secondary (once-opened)\u003C/li>\n\u003Cli>\u003Cstrong>Storage conditions\u003C/strong> — the manufacturer’s recommended storage temperature. UK legal maximum is ≤8°C for chilled high-risk food; industry best practice is ≤5°C. Hot-held ≥63°C; frozen ≤-18°C\u003C/li>\n\u003Cli>\u003Cstrong>Allergen handling\u003C/strong> — dedicated lines versus shared lines, validated allergen cleaning, any “may-contain” precautionary labelling\u003C/li>\n\u003Cli>\u003Cstrong>Nutritional information per 100 g or 100 ml\u003C/strong> per FIC Annex XV — energy, fat, saturates, carbohydrate, sugars, protein, salt\u003C/li>\n\u003Cli>\u003Cstrong>Batch and traceability coding\u003C/strong>, plus date-mark format — critical for targeted withdrawal under Article 18 and 19\u003C/li>\n\u003Cli>\u003Cstrong>Certifications and accreditations\u003C/strong> — with certificate numbers, expiry dates and issuing body so you can verify independently\u003C/li>\n\u003Cli>\u003Cstrong>Contact for complaints and recalls\u003C/strong> — 24/7 for higher-risk categories\u003C/li>\n\u003Cli>\u003Cstrong>Reformulation notification commitment\u003C/strong> — essential for allergen management; any recipe change must trigger immediate update to your matrix\u003C/li>\n\u003Cli>\u003Cstrong>Version control and review dates\u003C/strong> — BRCGS Issue 9 requires review whenever the product changes; industry norm is annual minimum plus any change\u003C/li>\n\u003C/ul>\n\u003Ch2>The 10-step supplier selection framework\u003C/h2>\n\u003Ch3>Step 1 — Define requirements\u003C/h3>\n\u003Cp>Volumes, quality standards, delivery frequency, mandatory certifications, price point, service targets (on-time-in-full). The food business operator is legally responsible for placing only safe food on the market — this is the starting point.\u003C/p>\n\u003Ch3>Step 2 — Research candidate suppliers\u003C/h3>\n\u003Cul>\n\u003Cli>Trade directories (Food Manufacture, Big Hospitality, The Caterer)\u003C/li>\n\u003Cli>UKHospitality networks\u003C/li>\n\u003Cli>Trade shows — IFE, HRC at ExCeL, Casual Dining\u003C/li>\n\u003Cli>Wholesale markets — New Smithfield (meat), Billingsgate (fish), New Covent Garden (produce)\u003C/li>\n\u003Cli>SALSA directory for smaller UK manufacturers\u003C/li>\n\u003C/ul>\n\u003Ch3>Step 3 — Request specifications and certifications\u003C/h3>\n\u003Cp>For every candidate:\u003C/p>\n\u003Cul>\n\u003Cli>Full product specification sheet\u003C/li>\n\u003Cli>HACCP summary\u003C/li>\n\u003Cli>BRCGS / SALSA / Red Tractor certificate with expiry\u003C/li>\n\u003Cli>Public Liability and Product Liability insurance certificates\u003C/li>\n\u003Cli>Allergen matrix\u003C/li>\n\u003Cli>A sample Certificate of Analysis (CoA)\u003C/li>\n\u003C/ul>\n\u003Ch3>Step 4 — Independently verify certifications\u003C/h3>\n\u003Cp>Use the verification URLs above. For POAO, cross-check the approval number on the FSA or FSS approved-establishments list. For organic, verify the licensee code is active. For BRCGS, confirm the grade (AA through D).\u003C/p>\n\u003Cp>\u003Cstrong>Never accept a PDF certificate without verifying it on the issuing body’s database.\u003C/strong> Certificate fraud happens.\u003C/p>\n\u003Ch3>Step 5 — Financial due diligence\u003C/h3>\n\u003Cul>\n\u003Cli>Companies House search — is the company active, who are the directors, are accounts filed?\u003C/li>\n\u003Cli>Credit check — are they likely to continue trading?\u003C/li>\n\u003Cli>Check FSA news-alerts for any past Allergy Alerts or Product Recalls linked to the company\u003C/li>\n\u003C/ul>\n\u003Ch3>Step 6 — Site visit or audit\u003C/h3>\n\u003Cp>Proportionate to risk. For high-volume or high-risk suppliers (meat, dairy, ready-to-eat), a physical site visit before first order is normal. For lower-risk packaged goods, a documentation-only remote audit may suffice.\u003C/p>\n\u003Ch3>Step 7 — Sample product evaluation\u003C/h3>\n\u003Cp>Taste, texture, consistency. But also: does the delivery temperature match the spec? Does the label match the spec? Do the batch codes work in your traceability system?\u003C/p>\n\u003Ch3>Step 8 — Commercial negotiation\u003C/h3>\n\u003Cp>Pricing, payment terms, minimum order quantities, delivery schedule, penalties for late or incomplete delivery, price-change notice periods. Get everything in writing.\u003C/p>\n\u003Ch3>Step 9 — Contract and Service Level Agreement\u003C/h3>\n\u003Cp>Explicitly cover:\u003C/p>\n\u003Cul>\n\u003Cli>Specification change notification (within 14 days is normal)\u003C/li>\n\u003Cli>Recall procedure and responsibilities\u003C/li>\n\u003Cli>Insurance obligations\u003C/li>\n\u003Cli>Liability caps and food-safety carve-outs\u003C/li>\n\u003Cli>Audit rights\u003C/li>\n\u003Cli>Termination conditions\u003C/li>\n\u003C/ul>\n\u003Ch3>Step 10 — Onboarding and ongoing performance review\u003C/h3>\n\u003Cp>First-90-day review, then annual. KPIs: on-time delivery, rejection rate, complaint rate, temperature-on-arrival compliance, specification accuracy. A supplier whose performance degrades over time is a prosecution risk in waiting.\u003C/p>\n\u003Ch2>How to spot a bad supplier — the red flags\u003C/h2>\n\u003Cp>Decades of UK food-safety prosecutions share the same early warning signs. If a candidate supplier shows any of these, walk away:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>Refusal or reluctance to share specifications\u003C/strong> or certifications\u003C/li>\n\u003Cli>\u003Cstrong>Spec sheets more than 12 months old\u003C/strong>, or obviously generic templates\u003C/li>\n\u003Cli>\u003Cstrong>Certifications that can’t be verified\u003C/strong> on the scheme directory\u003C/li>\n\u003Cli>\u003Cstrong>No written allergen management policy\u003C/strong>\u003C/li>\n\u003Cli>\u003Cstrong>No batch coding or traceability system\u003C/strong> — which makes them uninsurable against recall\u003C/li>\n\u003Cli>\u003Cstrong>No documented recall procedure\u003C/strong>\u003C/li>\n\u003Cli>\u003Cstrong>A history of FSA Allergy Alerts or Product Recalls\u003C/strong> — check \u003Ca href=\"http://food.gov.uk/news-alerts\">food.gov.uk/news-alerts\u003C/a> by supplier name\u003C/li>\n\u003Cli>\u003Cstrong>Unusually low pricing\u003C/strong> against prevailing market — ask where the cost saving comes from\u003C/li>\n\u003Cli>\u003Cstrong>No site-visit access\u003C/strong>\u003C/li>\n\u003Cli>\u003Cstrong>Undisclosed sub-suppliers or contract manufacturers\u003C/strong> — you can’t do due diligence on what you can’t see\u003C/li>\n\u003C/ul>\n\u003Ch2>Delivery checks and goods-in procedures\u003C/h2>\n\u003Cp>Article 18 traceability starts the moment product crosses your back door. Every delivery should be checked against a documented procedure — see our \u003Ca href=\"/blog/goods-in-delivery-checks-food-safety\">goods-in delivery checks guide\u003C/a> for the operational playbook. The essentials:\u003C/p>\n\u003Ch3>The goods-in checklist\u003C/h3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Driver ID and supplier match\u003C/strong> — is this who you expected?\u003C/li>\n\u003Cli>\u003Cstrong>Vehicle condition\u003C/strong> — is the refrigerated trailer actually cold? (Industry practice: check the unit temperature display and record)\u003C/li>\n\u003Cli>\u003Cstrong>Delivery temperature\u003C/strong> — for chilled, ≤8°C legal max (≤5°C best practice); for frozen, ≤-18°C; for hot, ≥63°C\u003C/li>\n\u003Cli>\u003Cstrong>Pack integrity\u003C/strong> — no crushed, leaking, or compromised packaging\u003C/li>\n\u003Cli>\u003Cstrong>Date marks\u003C/strong> — nothing past or near its use-by\u003C/li>\n\u003Cli>\u003Cstrong>Quantity against delivery note\u003C/strong>\u003C/li>\n\u003Cli>\u003Cstrong>Labelling accuracy\u003C/strong> — allergens emphasised where required\u003C/li>\n\u003Cli>\u003Cstrong>Batch/lot codes\u003C/strong> recorded for traceability\u003C/li>\n\u003Cli>\u003Cstrong>Visual inspection\u003C/strong> — no obvious pest damage, contamination or off-odours\u003C/li>\n\u003C/ul>\n\u003Ch3>When to reject a delivery\u003C/h3>\n\u003Cp>Reject and document any delivery that:\u003C/p>\n\u003Cul>\n\u003Cli>Arrives at a non-compliant temperature\u003C/li>\n\u003Cli>Has damaged or compromised packaging on primary product\u003C/li>\n\u003Cli>Has dates that won’t cover your planned shelf-life use\u003C/li>\n\u003Cli>Shows signs of pest damage or contamination\u003C/li>\n\u003Cli>Doesn’t match the specification on paperwork\u003C/li>\n\u003C/ul>\n\u003Cp>Document every rejection. This is evidence for your due diligence defence.\u003C/p>\n\u003Ch2>Recent UK supplier-chain prosecutions\u003C/h2>\n\u003Cp>These 2024-2026 UK cases show what happens when supplier controls fail. All primary-sourced from the local authority or FSA press release.\u003C/p>\n\u003Cp>\u003Cstrong>FGS Ingredients Ltd / peanut-in-mustard (September-November 2024).\u003C/strong> Mustard powder of Indian origin contaminated with peanuts entered the UK supply chain. The FSA issued 3 primary Allergy Alerts plus 31 follow-ups covering \u003Cstrong>59 brands and 307 products\u003C/strong> including Iceland, Papa John’s, Waitrose, Domino’s, Spar and Harvester. FSA root-cause conclusion: the food business operator’s peanut-allergen controls failed. Every downstream brand then had to manage recall cost and reputation fallout.\u003C/p>\n\u003Cp>\u003Cstrong>Bread Spread Ltd (Uxbridge Magistrates’, March 2025).\u003C/strong> \u003Cem>Listeria monocytogenes\u003C/em> detected in sandwiches and on a tomato slicer; nationwide FSA recall; production continued after a Hygiene Emergency Prohibition Notice. \u003Cstrong>Total fine £46,827\u003C/strong> including a £14,000 personal director fine. The HACCP plan didn’t match operational reality. Poor traceability hindered the recall.\u003C/p>\n\u003Cp>\u003Cstrong>Fears Animal Products and others / Operation Bantam (Inner London Crown Court, August 2025).\u003C/strong> Conspiracy to defraud — diversion of 1.9 tonnes of Category 3 animal by-products into the human food chain. \u003Cstrong>Anthony Fear: 42 months immediate custody, 6-year director disqualification. Azar Irshad: 35 months immediate custody, indefinite food-industry prohibition.\u003C/strong> The operators relying on these products as suppliers had no way of knowing — which is exactly why independent verification of supplier-declared species and grade is a real part of due diligence.\u003C/p>\n\u003Cp>\u003Cstrong>Vitago Foods (Stevenage, January 2025).\u003C/strong> Rat-urine-contaminated food repackaged; director furnished false information to officers. \u003Cstrong>Total £29,126.84\u003C/strong> across company and individual. Had any downstream buyer conducted a proper site visit in the six months before, the offence would have been caught.\u003C/p>\n\u003Cp>\u003Cstrong>Hypergood Ltd / Royal Gourmet (Uxbridge Magistrates’, March 2025).\u003C/strong> Frozen dim sum supplier to other food businesses. Mouse droppings, poor temperature control. Inspected 22 times since 2022 with only 6 compliant outcomes. \u003Cstrong>Total £113,415.\u003C/strong> Every downstream buyer served customers food from a known non-compliant supplier.\u003C/p>\n\u003Cp>\u003Cstrong>SG Perkins (Bath Magistrates’, July 2024).\u003C/strong> Falsified Salmonella testing certificates — 13 of 16 reports faked. \u003Cstrong>Total £50,830.75\u003C/strong>, prosecuted by the FSA National Food Crime Unit with Devon County Council Trading Standards. This is exactly why “verify on the scheme directory” is a non-negotiable step — a certificate PDF can be faked, a scheme database cannot.\u003C/p>\n\u003Cp>For the full picture of 2024-2026 UK food safety prosecutions see our \u003Ca href=\"/blog/uk-food-recalls-fines-2026-report\">UK food recalls and fines report\u003C/a>.\u003C/p>\n\u003Ch2>Post-Brexit supplier documentation\u003C/h2>\n\u003Cp>The Retained EU Law (Revocation and Reform) Act 2023 kept the core food law framework in place. The practical changes for supplier relationships in GB:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>EU terminology is now “assimilated”.\u003C/strong> References to “Regulation (EC) X” in contracts and spec sheets remain valid but are now assimilated law in GB.\u003C/li>\n\u003Cli>\u003Cstrong>Delegated powers to replace assimilated law expire 23 June 2026.\u003C/strong> Supplier contracts running past this date should include a regulatory-change clause.\u003C/li>\n\u003Cli>\u003Cstrong>Supremacy of EU law is abolished.\u003C/strong> Domestic UK legislation now takes precedence over assimilated direct legislation in any conflict.\u003C/li>\n\u003Cli>\u003Cstrong>Northern Ireland continues to apply live EU law\u003C/strong> under the Windsor Framework. If you operate across GB and NI, both legal frameworks apply — and your supplier documentation needs to reflect the destination, not just the origin.\u003C/li>\n\u003C/ul>\n\u003Cp>\u003Cstrong>Windsor Framework “Not for EU” labelling\u003C/strong> Phase 3 commenced 1 July 2025 for composites, fruit, vegetables, fish, eggs, honey and pet food moving GB → NI. Any supplier moving these categories into NI from GB needs to comply.\u003C/p>\n\u003Ch2>The reality for UK food businesses\u003C/h2>\n\u003Cp>Every prosecution above shares a pattern. The downstream operator didn’t know something about their supplier that they could have known if they had verified independently. The specification was out of date; the certificate wasn’t checked on the directory; the goods-in records showed a problem that wasn’t acted on; the allergen matrix didn’t reflect a supplier reformulation.\u003C/p>\n\u003Cp>The businesses that maintain clean records are not lucky. They operate the 10-step framework consistently, they verify certifications at the issuing body rather than accepting PDF certificates, they audit suppliers proportionate to risk, they capture goods-in checks at the point of delivery rather than back-filling them, and they update their allergen matrix the day a supplier notifies them of a reformulation.\u003C/p>\n\u003Cp>That’s the operational story Forkto was built for. Supplier specifications stored digitally and linked to recipes. Allergen matrices that update automatically when a supplier flags a change. Goods-in checks captured on a phone at the back door, time-stamped, attributed, and ready to produce for an EHO or an insurer or a court.\u003C/p>\n\u003Cp>If you’d like to see how it works in a UK kitchen, \u003Ca href=\"/get-started/\">book a demo\u003C/a> or \u003Ca href=\"/resources/checklists/\">browse our free downloadable checklists\u003C/a> — no email required.\u003C/p>\n\u003Chr>\n\u003Cp>\u003Cem>Last updated 28 April 2026. This guide reflects UK food law as at April 2026 including assimilated Regulation (EC) 178/2002 Article 18 traceability, the Food Safety Act 1990 section 21 due diligence defence, assimilated Regulation (EC) 853/2004 approved establishment framework, and the current certification landscapes for SALSA, BRCGS (Issue 9), Red Tractor, Soil Association, RSPCA Assured, MSC and Fairtrade. Verify specific certification details with the relevant issuing body before commercial decisions.\u003C/em>\u003C/p>\n","Complete 2026 UK guide to choosing food suppliers: Article 18 traceability, s.21 due diligence defence, SALSA vs BRCGS vs Red Tractor, supplier spec sheets and the 10-step selection framework.",[13,14,15,16,17,18,19,20,21],"food suppliers uk","how to choose food suppliers","food service companies uk","restaurant food suppliers uk","foodservice supplier selection","salsa certification","brcgs food safety","one up one down traceability","food supplier due diligence","How to Choose Food Suppliers UK: 10-Step Guide & Certifications (2026)",null,false,"Restaurant owner reviewing supplier specifications and food delivery documentation",[27,30,33,36,39,42,45,48,51,54],{"question":28,"answer":29},"What records must UK food businesses keep about their suppliers?","Under Article 18 of assimilated Regulation 178/2002, every food business must maintain one-up one-down traceability. You must record the name and address of each supplier, a description of the food, the quantity, and the date of delivery. Records must be produced to authorities on demand. Failure to produce them is a criminal offence.",{"question":31,"answer":32},"How long should I keep supplier records in the UK?","Article 18 does not set a fixed retention period, but FSA best practice is to keep records at least until the food is reasonably assumed to have been consumed. Industry norms: shelf-life plus 6 months for products with best-before dates; 6 months for highly perishable use-by products; up to 5 years for long-life or ambient goods.",{"question":34,"answer":35},"What is one-up one-down traceability?","It means every UK food business must be able to identify (one step back) the supplier they received each ingredient or product from, and (one step forward) the business customer they supplied it to. Direct-to-consumer sales are out of scope. The rule is in Article 18 of Regulation 178/2002, which applies as assimilated direct legislation in Great Britain and directly in Northern Ireland under the Windsor Framework.",{"question":37,"answer":38},"What certifications should a UK food supplier have?","Demand BRCGS Food Safety or SALSA certification for manufactured food suppliers — these are evidence of an audited food safety management system. Demand Red Tractor when you make a 'British' claim on menus. Demand a Defra-approved organic control body certificate if you use the word 'organic' on packaging or menus — this is a legal requirement. MSC or ASC chain-of-custody certification is required if you market seafood as MSC/ASC.",{"question":40,"answer":41},"What's the difference between SALSA and BRCGS certification?","SALSA (Safe And Local Supplier Approval) is for small UK producers under 50 FTE and £10m turnover — typical cost £775 to £1,550 a year. BRCGS Food Safety is for mid-to-large manufacturers supplying retailers and major foodservice — typical cost £4,000 to £12,000+ per site a year. BRCGS is GFSI-benchmarked and graded AA to D; SALSA is pass/fail. Use SALSA as a stepping stone for small suppliers, BRCGS for anyone supplying retail own-label or major chains.",{"question":43,"answer":44},"How do I verify a food supplier's certification is genuine?","Use the scheme directories directly. SALSA at salsafood.co.uk, BRCGS at directory.brcgs.com, Red Tractor at checkers.redtractor.org.uk, Soil Association at soilassociation.org/certification. For meat, dairy and other Products of Animal Origin (POAO), cross-check the approval number on the FSA's monthly list of approved establishments or the equivalent Food Standards Scotland register.",{"question":46,"answer":47},"What does the Section 21 due diligence defence mean for supplier records?","Section 21 of the Food Safety Act 1990 gives a defence if you can prove you took all reasonable precautions and exercised all due diligence. For supplier-related offences, courts look at: did you obtain and verify supplier specifications, did you audit suppliers proportionate to risk, did you conduct goods-in checks, did you act on non-conformances. Garrett v Boots established that larger professional buyers are expected to actively test supplier claims, not just rely on declarations.",{"question":49,"answer":50},"What are the 14 UK-regulated allergens suppliers must declare?","Celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, tree nuts, peanuts, sesame, soybeans, and sulphur dioxide or sulphites above 10 mg/kg or 10 mg/L. These are listed in Annex II of assimilated Regulation 1169/2011 and enforced by the Food Information Regulations 2014.",{"question":52,"answer":53},"Do I need to know if a supplier is an 'approved establishment' under Regulation 853/2004?","Yes, for any supplier of Products of Animal Origin (POAO) — meat, fish, dairy, eggs. Approved establishments carry an oval identification mark or health mark. The format is typically 'UK XX 123 EC' (moving to 'EU' from 31 December 2028 for NI). Verify on the FSA's monthly approved establishments list for England and Wales, the FSS register for Scotland, or the equivalent NI list.",{"question":55,"answer":56},"What are the biggest red flags when vetting a food supplier?","Refusal or reluctance to share specifications and certificates; spec sheets more than 12 months old; certifications that can't be verified on the scheme directory; no written allergen management policy; no batch coding or traceability; no recall procedure; a history of FSA Allergy Alerts or Product Recalls against the business or its ingredients; no site-visit access; unusually low pricing against market; and undisclosed sub-suppliers or contract manufacturers.",1779266069664]