How to Build a Supplier Approval Program

A supplier approval program is a documented process for assessing, approving and monitoring the businesses you buy food and ingredients from. Under the Food Standards Code, you are responsible for the safety of everything you receive, so approve suppliers against set criteria, record the decision, verify each delivery and review performance regularly. This protects your customers and makes traceability and recalls far faster. Key takeaways: You are legally responsible for the safety of food you receive, so a documented approval process protects both customers and your business.. Approve suppliers against written criteria, record the decision, then verify every delivery on receipt rather than assuming ongoing compliance.. A current approved supplier list with product and contact details is one of the fastest ways to trace and act on a recall.. Match how much scrutiny you apply to how risky the product is: ready-to-eat and allergen-bearing items warrant deeper checks.. Review suppliers on a set schedule and after any incident, and remove those who repeatedly fail your standards.. Why a supplier approval program matters When you buy food or ingredients, you inherit whatever food-safety risk came with them. If a supplier ships product that is temperature-abused, contaminated, mislabelled or carries an undeclared allergen, the harm lands on your customers and the liability lands on you. A structured approval program is how you show you took reasonable steps to source from businesses that can consistently supply safe, correctly labelled food. Standards 3.2.2 and 3.2.2A of the Food Standards Code require food businesses to receive food safely, keep it protected and be able to trace it one step back and one step forward. A supplier approval program is the practical engine behind those obligations. It turns 'we trust our suppliers' into a documented, repeatable process a regulator, auditor or your own team can follow. It also pays off commercially. Fewer rejected deliveries, less waste, cleaner audits and dramatically faster recall response all flow from knowing exactly who you buy from, what they supply and how they have performed. Set your approval criteria first Before you assess anyone, write down what 'approved' actually means for your business. Clear criteria keep decisions consistent and defensible, and stop approval becoming a gut-feel exercise that varies by whoever placed the order. Base your criteria on the risk of the products involved and on evidence the supplier can control that risk. Consider requiring: Business identity and licensing: legal name, address, ABN and any required food business registration or licence — requirements vary by state and territory, so confirm with your local council or regulator.. Food safety evidence: a current food safety program, HACCP-based system or recognised third-party certification where appropriate to the product.. Product specifications: agreed specs covering ingredients, allergens, shelf life, storage and transport temperatures, and labelling.. Cold chain capability: evidence they can hold and transport chilled food at 5°C or below and hot food at 60°C or above.. Traceability: batch or lot coding and the ability to identify where their inputs came from.. Assess and approve new suppliers With criteria set, gather evidence before the first order rather than after a problem. For lower-risk items a completed supplier questionnaire and copies of key documents may be enough. For higher-risk products, add a review of their certification, specifications and, where practical, a site visit or trial delivery. Weigh the risk of the product, not just the supplier. Ready-to-eat foods, raw ingredients eaten without further cooking, and anything carrying one of the declared allergens under Plain English Allergen Labelling (Standard 1.2.3) deserve deeper scrutiny than shelf-stable, low-risk packaged goods. Record the outcome. A short approval record should name the supplier, the products they are approved to supply, the evidence you reviewed, who approved them and the date. Approve suppliers for specific products or categories, not as a blanket 'approved for anything', so a new or riskier line triggers a fresh check. Verify every delivery on receipt Approval is a starting point, not a guarantee. The moment food arrives is your best and cheapest chance to catch a problem, so build a consistent incoming-goods check into receiving. Check that the delivery came from an approved supplier and matches the order, then inspect condition and temperature. Chilled food should be at or below 5°C and hot food at or above 60°C; anything drifting into the 5–60°C temperature danger zone needs a judgement call using the 2-hour/4-hour rule and your own policy. Confirm packaging is intact, dates are in range and labelling — including allergen declarations — is correct. Reject and record deliveries from unapproved suppliers or that fail your checks.. Log temperatures, use-by dates and any non-conformances so patterns are visible.. Keep delivery dockets and batch codes — they are the backbone of one-step-back traceability.. Monitor performance and review suppliers A good program treats approval as ongoing. Track how each supplier actually performs: late or rejected deliveries, temperature failures, labelling or allergen errors, and complaints traced back to their product. This turns anecdotes into evidence you can act on. Set a review schedule appropriate to risk — for example an annual review for most suppliers and more frequent checks for high-risk products or any supplier with a poor record. Refresh expiring certification and confirm specifications still match what you are receiving. Also review after any incident. A recall, a serious non-conformance or a run of failed deliveries should trigger a reassessment, corrective actions and, where needed, suspension or removal from your approved list. Document the decision either way. Keep records that make recalls faster The real test of a supplier program is a recall. When a supplier notifies you that a batch is affected, you need to know within minutes whether you received it, where it went and what to do. That only works if your records are current and connected. Maintain a single, up-to-date approved supplier list showing each supplier's contact details, the products they supply and their approval status. Link it to your receiving records so a batch or lot code ties back to a delivery, a supplier and a date. Store records so any trained team member can retrieve them, not just the person who set the program up. Whether you keep them on paper or in a digital system, consistency and accessibility matter more than the format. This is where one-step-back and one-step-forward traceability under the Code becomes a fast, practised routine rather than a scramble. Checklist: Approved supplier list is current, with contact details, products supplied and approval status. Written approval criteria exist and are scaled to product risk. An approval record is kept for each supplier (evidence, products, approver, date). Incoming deliveries are checked against an approved supplier before acceptance. Delivery temperatures, dates and non-conformances are logged. Batch or lot codes are captured and linked to deliveries. A review schedule is set and expiring certifications are refreshed. Records are stored so any trained staff member can retrieve them quickly. Common mistakes: Approving suppliers informally with no written record of who decided or why. Treating approval as permanent and never re-checking certification or performance. Skipping the delivery check and assuming an approved supplier is always compliant. Applying the same light scrutiny to high-risk ready-to-eat and allergen products as to shelf-stable goods. Keeping the approved supplier list in one person's head or inbox, so no one can act during a recall. Not capturing batch or lot codes, leaving you unable to trace which delivery an affected product came from.