Food Safety for Ghost & Cloud Kitchens

A ghost or cloud kitchen is a delivery-only food business with no dine-in area, so its food safety risks concentrate where you have least control: packaging, hold time and the courier's car. In Australia you generally still need to register or notify your premises as a food business under Standard 3.2.2, meet the same construction and hygiene rules as any kitchen, and manage temperature all the way to the customer's door. Confirm your obligations with your local council and state or territory food regulator. Key takeaways: A ghost kitchen is still a food business: you generally must register or notify with your local council under Standard 3.2.2, meet the same premises, equipment and hygiene rules, and appoint a Food Safety Supervisor where your state requires one — confirm locally, as requirements vary by jurisdiction.. Your biggest delivery-only risk is the time and temperature gap between the pass and the customer. Potentially hazardous food must be kept out of the 5°C-60°C danger zone; hot food travels at 60°C or above and cold food at 5°C or below.. Packaging is a food safety control, not just branding — use insulated, tamper-evident, food-grade packaging, vent or separate items to control condensation and sogginess, and keep hot and cold items apart in transit.. Third-party couriers (Uber Eats, DoorDash, Menulog drivers) are usually outside your direct control, so build safety in before hand-off: fast pick-ups, insulated bags, sealed packaging and clear allergen labelling on every container.. Multi-brand and shared commissary kitchens multiply cross-contamination and allergen risk across concepts sharing one line — separate equipment, schedules and clear labelling are essential, and each brand's menu must carry accurate allergen information under Standard 1.2.3.. Delivery temperature controls: Control, Requirement. Hot potentially hazardous food — 60°C or above until the courier collects it. Cold potentially hazardous food — 5°C or below until pick-up. Temperature danger zone — 5°C to 60°C - keep food out of it; verify core temps with a calibrated probe. 2-hour/4-hour rule — Cumulative; delivery time counts and the clock does not reset at the door. What makes a ghost or cloud kitchen different? A ghost kitchen (also called a dark, cloud or virtual kitchen) produces food purely for delivery or pick-up, with no customers on site. Some are single operators cooking one menu; many are 'virtual brands' where one kitchen runs several delivery-only concepts from the same line, or commissary sites where multiple businesses rent bench space. Removing the dining room does not remove any food safety obligation — it adds new ones. In a normal restaurant, food travels a few metres from pass to table in seconds. In a delivery model, the same meal sits in packaging, waits for a courier, rides in a car and finally reaches a doorstep 20 to 40 minutes later. That journey is time and temperature abuse waiting to happen, and it occurs after the food has left your direct control. Everything in a ghost kitchen's food safety program has to account for that final, unsupervised leg. No dine-in area, so all risk shifts to packaging, holding and transport. Longer time between cooking and eating than any table-service model. The final leg is often handled by a third party you do not employ. Multi-brand and shared sites concentrate cross-contamination and allergen risk. Customers cannot see your kitchen, so labelling and packaging carry all the trust. Do you need to register a delivery-only kitchen? Generally, yes. Under Standard 3.2.2 of the Food Standards Code, a business that handles food for sale usually must notify or register its premises with the relevant enforcement agency — almost always your local council — before trading, and delivery-only operations are not exempt. If you cook from a shared commercial or commissary kitchen, check whether that site is already registered and whether your individual business also needs its own notification; running multiple virtual brands from one address does not always mean one registration covers them all. Home-based cloud kitchens face extra scrutiny because domestic kitchens rarely meet Standard 3.2.3 premises and equipment requirements. Because registration, fees and Food Safety Supervisor rules differ by state and territory, confirm exactly what applies to your setup with your local council and state food regulator before you take a single order. Notify or register the premises with your local council before trading (Standard 3.2.2). Check whether each virtual brand or tenant needs its own notification, not just the building. Most states require a certified Food Safety Supervisor for businesses handling unpackaged potentially hazardous food — confirm your state's rule. Home kitchens must still meet Standard 3.2.3 construction and equipment standards, which is often the sticking point. Use ablis.business.gov.au to help identify the licences and registrations relevant to your location. Controlling temperature from the pass to the door Temperature control is the defining challenge of delivery-only food. Potentially hazardous food (cooked rice, meat, dairy, cooked pasta, cut fruit and similar) must be kept out of the 5°C to 60°C danger zone, where bacteria multiply fastest. The practical rule for delivery is simple: keep hot food hot at 60°C or above and cold food cold at 5°C or below, right up to the moment the courier collects it, and package it to hold that temperature for the trip. The '2-hour/4-hour rule' can be applied to food that is briefly out of temperature control during assembly, but this is cumulative and delivery time counts toward that clock — and once food is in a warm car, you have lost your thermometer. Batch cooking to a delivery rush is a classic ghost-kitchen trap: food cooked early sits in the danger zone waiting for orders. Cook and hold correctly, check core temperatures with a probe thermometer, and stage food so it goes into packaging as close to pick-up as possible. Keep hot potentially hazardous food at 60°C or above until hand-off; cold at 5°C or below. Delivery time counts toward the 2-hour/4-hour rule — the clock is cumulative and does not reset at the door. Use a calibrated probe thermometer to verify core temperatures, not just the display. Avoid cooking far ahead of the delivery rush; stage assembly close to pick-up. Never rely on the courier's car to hold temperature — build the buffer into your packaging. Packaging as a food safety control For a ghost kitchen, packaging does the job that a serving window and a waiter do in a restaurant: it protects the food, holds temperature, and proves the meal was not tampered with. Choose food-grade, fit-for-purpose packaging and treat insulation and sealing as safety features, not upsells. Tamper-evident seals matter more in delivery because the food passes through hands you do not supervise; a broken seal tells the customer to reject the order. Condensation is an underrated hazard — a hot lid trapping steam makes food soggy and can drop crumbed or fried items into textures that mask spoilage, so vent where appropriate. Keep hot and cold components physically separate so a warm curry does not heat an adjacent salad into the danger zone. Every container should also carry the information the customer would otherwise ask a server for: what it is, key allergens, and any reheating guidance. Use food-grade, leak-resistant, insulated packaging suited to each dish. Apply tamper-evident seals or stickers so any interference is visible on arrival. Vent or use breathable packaging for hot fried food to manage condensation and sogginess. Pack hot and cold items in separate containers, and ideally separate bags. Label every container with contents, allergens and reheating instructions where relevant. Working with third-party couriers On platforms like Uber Eats, DoorDash and Menulog, the driver who completes your delivery is usually not your employee and is often outside your food safety program entirely. You cannot easily control the cleanliness of their bag, the temperature of their car or how many other orders they carry at once. That means your controls have to be in place before hand-off. Reduce the courier's window by having orders ready at the promised time so hot food is not made to wait, and cold food is not sitting out. Use insulated delivery bags of your own where the model allows, and always seal packaging so it cannot be opened, spilled or contaminated in transit. If you employ your own drivers, they become part of your business and your food safety responsibilities extend to them — including clean, dedicated insulated bags, no transporting food alongside chemicals or pets, and hand hygiene. Keep a simple record of dispatch times so you can investigate if a customer reports a problem. Have orders packed and ready at pick-up time to shrink the courier's holding window. Provide or require insulated, clean delivery bags; keep hot and cold orders separated. Seal every order so tampering, spills and contamination are prevented and visible. Your own delivery staff are part of your food business — apply hygiene and vehicle rules to them. Log dispatch times and courier hand-offs so complaints can be traced. Managing multi-brand and shared kitchens Running several virtual brands from one line, or sharing a commissary with other tenants, is where cross-contamination and allergen risk climb fastest. One kitchen might plate a nut-heavy Thai brand, a gluten-free bowl brand and a fried-chicken brand within minutes of each other on the same surfaces. Under Standard 1.2.3, each brand's menu must give accurate allergen information for the food actually sold, and 'we can't guarantee' disclaimers do not replace correct declarations. Manage this with physical and time separation: dedicated boards, utensils and fryers for allergen-critical items, scheduled production runs, thorough clean-downs between concepts, and clear labelling so staff never mix components between brands. In shared commissary sites, agree in writing who is responsible for cleaning shared equipment, storage separation, pest control and temperature monitoring, and keep your own food covered, labelled and date-marked so it is never confused with another tenant's stock. Provide accurate per-brand allergen information under Standard 1.2.3 — disclaimers are not a substitute. Separate allergen-critical prep by equipment, dedicated fryers and scheduling. Clean and sanitise thoroughly between different brand production runs. In shared sites, agree cleaning, storage and pest responsibilities in writing. Label and date-mark your stock clearly so it is never mixed with another tenant's. Your food safety program and traceability Standard 3.2.2A, which commenced on 8 December 2023, introduced food safety management tools for many food service, catering and retail businesses that handle unpackaged, ready-to-eat potentially hazardous food, and delivery-only operations are generally captured. Depending on your risk classification, you may need to show evidence of key practices — a Food Safety Supervisor, food handler training, and substantiation of critical controls such as temperature and cleaning. Because ghost kitchens sell to customers who never see the premises, records and traceability do double duty: they demonstrate compliance to your regulator and let you respond fast to a complaint or recall. Keep supplier records so you can trace an ingredient back a step and forward to the orders it went into, log fridge and cooking temperatures, and record cleaning. If you sell across suburbs or states, remember that enforcement and specific rules vary by jurisdiction, so confirm what your primary regulator and any council you deliver into expects. Standard 3.2.2A tools (Food Safety Supervisor, handler training, substantiation of controls) generally apply — confirm your risk tier and state's arrangements. Keep supplier and batch records so you can trace ingredients one step back and one step forward. Log cooking and cold-holding temperatures, and cleaning and sanitising activity. Retain dispatch records linking orders to production times for complaint investigation. Requirements vary by state and territory — verify with your regulator and relevant councils. Worked examples: Cooking ahead of the rush: A ghost kitchen batch-cooks curries an hour before the dinner peak so orders go out fast. But food cooked early sits in the 5°C to 60°C danger zone waiting for orders. The safer approach is to hold potentially hazardous food at 60°C or above, stage assembly close to pick-up, and verify core temperatures with a probe rather than cooking far ahead. Two brands, one line: One kitchen runs a nut-heavy Thai brand and a gluten-free bowl brand from the same benches minutes apart. Each brand's menu must carry accurate allergen information under Standard 1.2.3, and disclaimers do not replace correct declarations. Staff use dedicated equipment and scheduled runs for allergen-critical items and clean down thoroughly between concepts so components are never mixed between brands. Checklist: Premises notified or registered with the local council before trading. Each virtual brand and shared-kitchen tenant status confirmed with the council. Food Safety Supervisor certified where the state requires one. Hot food held at 60°C or above; cold food at 5°C or below until pick-up. Calibrated probe thermometer in use and temperature logs kept. Food-grade, insulated, tamper-evident packaging in use for every order. Hot and cold items packed separately; fried foods vented. Every container labelled with contents, allergens and reheating guidance. Orders packed ready at pick-up time to minimise courier holding. Clean insulated delivery bags provided or required; no chemicals/pets alongside food. Dedicated equipment and scheduling for allergen-critical prep across brands. Clean-down between brand production runs documented. Supplier, batch and dispatch records kept for traceability. Cleaning and sanitising schedule recorded and followed. Common mistakes: Assuming a delivery-only or home-based kitchen is exempt from registration — it generally is not.. Batch-cooking to the dinner rush so food sits in the 5°C-60°C danger zone waiting for orders.. Forgetting that delivery time counts toward the cumulative 2-hour/4-hour rule — the clock does not reset when the courier collects the food.. Treating packaging as branding only, and skipping insulation, tamper-evident seals and hot/cold separation.. Relying on the courier's car to keep food hot or cold instead of building the temperature buffer into packaging before hand-off.. Running multiple virtual brands on one line without separating allergen prep or giving each menu accurate allergen information.. Sharing a commissary kitchen with no written agreement on who cleans shared equipment, controls pests and separates storage..