HACCP audit checklist for food safety reviews

How to use this HACCP checklist

Use this HACCP checklist to review an existing food safety plan with the people responsible for production, sanitation, engineering and food safety. Have the plan, process flow diagram, monitoring logs and corrective action records available before you start.

Tick an item after reviewing it. A tick means it has been reviewed. Use the notes to record the finding, evidence reference, owner and follow-up date. Add site-specific checks where needed. The PDF and CSV buttons inside the checklist export your notes and added items; the download button above gives you a blank PDF.

This is a HACCP audit checklist, not a daily temperature log or a completed HACCP plan. Your food safety team must determine hazards, critical limits and corrective actions for your actual products and process.

What a HACCP review should prove

A HACCP review should do more than confirm that a plan exists. It should show that the plan still matches the real operation and that the controls are being followed consistently.

The evidence should help the team answer practical questions:

• Does the process flow match what happens on site?
• Are significant hazards identified and controlled?
• Are critical limits measurable and supported?
• Are monitoring checks completed at the required frequency?
• Do deviations lead to immediate, traceable corrective action?
• Does verification show that the system continues to work?
• Can records be retrieved and understood by someone outside the usual process?

If the team cannot answer one of these questions with current evidence, the review has found a gap worth investigating.

Cover the seven HACCP principles

The FDA HACCP principles and application guidelines describe seven principles. This table translates them into evidence to bring to a review; it does not set limits for your process.

For step-by-step plan development, use the FAO GHP and HACCP toolbox. It also covers the preliminary work: forming the team, describing products and consumers, and confirming the process flow on site.

Worked example: a missing monitoring entry

Illustrative finding: a reviewer discovers a blank entry in a CCP monitoring log. The following entry is within the site's limit, but there is no record explaining the gap.

Record the affected log, time period and batch references. Ask the responsible food safety lead to assess the gap under the site's plan and document any product decision. Do not backfill a measurement that was never taken or treat a later reading as proof of an earlier condition.

A useful closure note identifies the decision record, the cause of the missed check, the assigned action and the follow-up evidence reviewed. “Operator reminded” alone leaves those questions unanswered.

Review monitoring records for signals, not just completion

Sample records across different products, shifts, days, and operators. Look for patterns that a simple completion check can miss:

• Missing, late, altered, or repeated entries.
• Results recorded exactly at the critical limit every time.
• Deviations without a linked product decision.
• Corrective actions with no owner or follow-up.
• Checks completed by staff without current competency evidence.
• Supervisor reviews completed long after the monitoring date.

The purpose is not to find fault with individual operators. It is to test whether the monitoring process produces trustworthy evidence and whether staff know what to do when a limit is missed.

Check corrective actions from deviation to closure

A useful corrective action record tells the full story. It identifies the deviation, affected product, immediate control, product disposition, root cause, preventive action, owner, and verification of effectiveness.

“Temperature corrected” may describe the immediate fix, but it does not explain what happened to the product or why the deviation occurred. Strong closure evidence should make both decisions traceable.

Turn recurring HACCP evidence into reminders

Some checklist findings are one-off actions. Others reveal records that need a recurring schedule. Common examples include:

• HACCP plan and flow-diagram reviews.
• Calibration and maintenance certificates.
• Refresher training and competency checks.
• Supplier approvals and specification reviews.
• Pest-control, sanitation, and environmental checks.
• Verification activities and internal audits.
• Corrective action follow-up.

Assign a named owner and backup, set the next review date, and define the evidence needed for completion. Reminder timing should reflect the risk and the time required to complete the work.

Run a traceability and retrieval test

Select a recent production batch or monitoring period and trace it through the relevant records. Confirm the team can retrieve the applicable plan, monitoring results, deviations, product disposition, verification evidence, and supporting certificates.

This exercise tests whether the system works as a connected whole. It often exposes gaps that are invisible when each record is reviewed separately.

Common HACCP review gaps

• Flow diagrams that do not match the current process.
• Hazard analyses that were not reviewed after a change.
• Critical limits with no clear validation basis.
• Monitoring records with blanks or missing review.
• Deviations without traceable product disposition.
• Corrective actions that fix the event but not the cause.
• Expired calibration, training, or supplier evidence.
• Old versions of the HACCP plan still available to staff.

Key takeaways

• A HACCP checklist should test whether controls work in practice, not simply whether a plan exists.
• Process changes should trigger a review of the flow diagram, hazards, controls, and supporting evidence.
• Monitoring records are most useful when reviewed for patterns and linked to clear deviation actions.
• Corrective actions need product decisions, ownership, follow-up, and proof that the fix worked.
• Recurring evidence should have named owners, review dates, and reminders.

FAQs

Can I download the HACCP checklist for Excel?

Yes. Choose CSV inside the checklist to export the checks, evidence prompts, review status and notes. Open the CSV in Excel or Google Sheets. Choose PDF for a printable copy. Neither download requires an account.

Is this a daily food safety checklist?

No. Use it to audit your plan and supporting records. For day-to-day procedures and diary sheets, small food businesses can consult the relevant Safer food, better business pack. Check the UK food safety management guidance for the system appropriate to your operation.

What is a HACCP checklist?

A HACCP checklist is a structured review tool used to check the hazard analysis, control points, critical limits, monitoring, corrective actions, verification, and recordkeeping that support a HACCP system.

Is this checklist a HACCP plan?

No. It is a review aid for organizing HACCP-related evidence and recurring checks. A complete HACCP plan should be built for the specific process and site.

What HACCP dates should teams track?

Teams may need to track plan reviews, calibration and maintenance checks, training renewals, supplier approvals, specification reviews, verification activities, internal audits, and corrective action follow-up. The right dates depend on the process, risk, and applicable requirements.

When should a HACCP plan be reviewed?

Review the plan on its scheduled cycle and whenever a change could affect food safety. Triggers can include new products, ingredients, suppliers, equipment, layouts, processes, complaints, incidents, or new guidance.

What should happen when monitoring finds a deviation?

The team should control the affected process or product, record what happened, decide the product disposition, investigate the cause, assign corrective action, and verify that the action was effective.

What records support a HACCP review?

Useful records can include the current plan, hazard analysis, flow diagram, monitoring logs, deviation and corrective action records, verification results, calibration certificates, training evidence, supplier approvals, sanitation records, and internal audit findings.