How to build an approved supplier program and one-up-one-down traceability in your Australian food business - batch records, receiving checks, and recall…
An approved supplier program means you only buy food from vendors you have vetted and can identify, while traceability means you can track every product one step back (who supplied it) and one step forward (who you supplied). Together they let you isolate affected batches fast during a recall. Australian food businesses must generally be able to identify the food they receive and the supplier's name and Australian address - confirm the detail with your local regulator. Key takeaways: An approved supplier program limits your buying to vendors you have vetted, documented and re-review periodically - it is your first line of defence against contaminated or fraudulent ingredients.. Under the Food Standards Code you must generally be able to identify the food you receive and the supplier's name and address in Australia, and keep those details.. 'One-up-one-down' traceability means recording one step back (your supplier and product) and one step forward (who you sold or supplied to) so a recall can be scoped precisely.. Batch and lot records - linking incoming ingredient lots to the finished products and dates they went into - turn a whole-of-business recall into a targeted one.. Requirements vary by jurisdiction and food type; always confirm with your state or territory food regulator and local council.. What an approved supplier program is and why it matters An approved supplier program (ASP) is a documented system that restricts your business to purchasing ingredients, packaging and ready-to-eat foods only from suppliers you have assessed and formally approved. It is the practical expression of a simple food-safety truth: you can only make safe food from safe inputs. If a supplier ships you contaminated spinach, undeclared allergens or mislabelled product, that hazard flows straight into your kitchen and onto a plate. An ASP matters for three reasons. First, prevention - vetting suppliers up front screens out operators with poor hygiene, weak allergen controls or no recall capability. Second, speed - when a supplier issues a recall or you detect a problem, an ASP tells you exactly which of your products and batches are affected. Third, due diligence - a documented program demonstrates to an environmental health officer (EHO), an auditor or a court that you took reasonable steps to source safe food. For most retail and food-service businesses an ASP is good practice rather than a specific line-item legal requirement, but the underlying obligations to identify your food and suppliers and to keep records are built into the Food Standards Code. Some sectors, third-party certification schemes and customers impose stricter, contractual supplier-approval requirements on top of the Code. Building your approved supplier list Start by listing every supplier that provides food, food-contact packaging or ingredients. For each one, decide what evidence you need before approval - proportionate to the risk of what they supply. A supplier of high-risk ready-to-eat foods (smallgoods, pre-cut salads, dairy) warrants more scrutiny than a supplier of tinned tomatoes. Typical approval evidence includes the supplier's business name and Australian address, a current food safety certification or third-party audit (for example a HACCP-based or GFSI-recognised scheme), product specifications, allergen declarations, and confirmation they have a recall procedure. Record an approval date and a review date. Re-assess suppliers periodically - annually is a common cadence - and immediately if they change ownership, have a recall, or you receive a complaint or non-conforming delivery. Keep the list current: an approved supplier list is only useful if it reflects who you actually buy from today. Legal identity: business name and address in Australia. Certification or audit evidence appropriate to the risk. Product specifications and current allergen declarations. Confirmation the supplier has a working recall procedure. Approval date, reviewer and next review date. Receiving checks: the front line of traceability Traceability begins at the loading dock. Under the Food Standards Code, when a business receives food it should generally only accept it if it can identify the food and the name and Australian address of the supplier - and it must keep those details. Practically, that means every delivery is checked and logged before it is put away. At receipt, confirm the delivery is from an approved supplier, check temperatures of chilled and frozen goods (as a guide, receive potentially hazardous cold food at 5 C or colder and frozen food frozen hard), inspect packaging integrity and use-by or best-before dates, and record the supplier, product, quantity, batch or lot code and date received. Reject and document anything that fails - out-of-temperature, damaged, past date, or from an unapproved source. The delivery docket or invoice is often your primary traceability record, so keep it and make sure it carries the batch or lot information you will need if that product is later recalled. One-up-one-down traceability explained 'One-up-one-down' - also called 'one step forward, one step back' - is the core traceability principle across the Australian supply chain. One step back is knowing who supplied a food to you and being able to identify that food. One step forward is knowing who you supplied it to. For a restaurant or cafe selling directly to the public, 'one step forward' is typically the point of sale, so the back-tracing records matter most. For manufacturers, wholesalers and distributors, both directions are essential. FSANZ guidance for primary producers and processors (for example in horticulture) is explicit that you must be able to trace produce at least one step forward and one step back - who and where you receive produce from, and who and where you supply it to. The same logic underpins effective recalls at every level: if you can only say 'we use lettuce' rather than 'this lettuce, from this grower, this lot, went i
Setting up supplier approval and traceability
List every supplier of food, ingredients and food-contact packaging, and what each one supplies. Flag the higher-risk items (ready-to-eat, chilled, allergen-heavy) that need closer scrutiny.
Decide what each supplier must provide - legal name and Australian address, certification or audit evidence, specs, allergen declarations and a recall procedure - proportionate to risk. Gather it before approving them to your list.
Record each approved supplier with their details, what they supply, approval date, reviewer and next review date. Store it where receiving staff can check it against deliveries.
Set a receiving procedure: confirm the supplier is approved, check temperatures, dates and packaging, and log product, quantity, batch or lot code and date. Define how to reject and record non-conforming deliveries.
For each production run or day, record the finished batch or date code, the ingredient lots used, quantity made and where it was supplied. Keep the linkage tight enough to trace in both directions.
Pick a random ingredient lot and trace it forward to finished products and customers, then pick a finished batch and trace it back to ingredients and suppliers. Time it and fix any gaps you find.
Re-assess suppliers periodically and after any incident. Keep receiving and batch records for at least the period required in your jurisdiction (at least three months where Standard 3.2.2A record-keeping applies), longer for long shelf-life products.
Frequently asked questions
Is an approved supplier program legally required in Australia?
For most retail and food-service businesses, a formal approved supplier program is strong best practice rather than a specific legal requirement. However, the Food Standards Code generally requires you to be able to identify the food you receive and your supplier's name and Australian address, and to keep those details. Some sectors, certification schemes and customers impose more. Confirm what applies with your state or territory food regulator.
What does 'one-up-one-down' traceability actually mean?
It means you can trace food one step back and one step forward. One step back is knowing who supplied a food to you and being able to identify it. One step forward is knowing who you supplied it to. For a cafe selling to the public, the forward step is the point of sale, so back-tracing records matter most; for manufacturers and wholesalers, both directions are essential.
How long do I need to keep receiving and batch records?
Retention requirements vary by business and jurisdiction. Businesses covered by Standard 3.2.2A's record-keeping (evidence tool) requirement must keep the relevant records for at least three months, a period intended to support foodborne-illness outbreak investigations. For products with a longer shelf life, keeping records for at least the life of the product is sensible. Confirm the period that applies to your business with your regulator.
What information should a good receiving record capture?
At minimum, record the supplier's name and Australian address, the food received, the quantity, the batch or lot code, and the date received. Many businesses use the delivery docket or invoice as the primary record, provided it carries the batch or lot information. Also note temperature checks and any rejected deliveries so your records show the food was handled safely on arrival.
How do batch records help during a recall?
Batch records link the ingredient lots you received to the finished products and dates they went into, and to who received those products. When a supplier recalls a specific lot, you can identify exactly which of your batches contained it and which customers got them, instead of withdrawing all recent production. This makes the recall faster, narrower and far less costly.
How often should I re-assess my approved suppliers?
A common cadence is at least annually, plus an immediate review whenever a supplier changes ownership, has a recall, or you receive complaints or non-conforming deliveries from them. Higher-risk suppliers may warrant more frequent checks. The goal is that your approved list always reflects current, verified evidence rather than a one-off assessment made when you first onboarded them.