Food safety software for SFCR-licensed Canadian operators.

I run a CFIA-licensed (Canadian Food Inspection Agency) food production facility in Brantford, Ontario. I went through the SFCR (Safe Food for Canadians Regulations) licensing process myself in 2022 and 2023 — application through the My CFIA portal, the FSSI (Food Safety Supplementary Information) questionnaire, the pre-issuance review, the $307.96 fee, eight months of waiting, and a licence issued in 2023. Since then I have kept a written PCP (Preventive Control Plan), one-up / one-back traceability records, and bilingual English and French labels. Nature Lion Inc. has shipped 50,000+ orders under that licence across three divisions. I built HACCPlan because the existing software either ignored Canada or translated a US Food and Drug Administration product into French and called it SFCR. This page is what built-for-Canada actually looks like.

01The inspection wave

Why the 2026 CFIA inspection push is real, and why you are probably in it.

If you got a Safe Food for Canadians licence between 2022 and 2024 and a CFIA inspector has never walked into your facility, you are not lucky. You are in the priority cohort. CFIA published a notice to industry in July 2025 committing to inspect more than 2,400 previously-uninspected Manufactured Foods establishments by fall 2026. The trigger was a tragedy nobody in Canadian food wants to repeat.

The Joriki / Silk case is the reason CFIA changed posture. In June 2024 Listeria monocytogenes was detected in a Silk unsweetened coconut milk sample manufactured at the Joriki Inc. facility in Pickering, Ontario for Danone Canada. The recall warning landed July 8, 2024. Final outcome: 20 reported illnesses, 15 hospitalizations, three deaths. CFIA inspectors observed condensation on the ceiling and peeling paint on the floor in the pasteurization areas. Freedom-of-information documents later revealed that the facility's PCP did not list Listeria as a hazard for a ready-to-eat refrigerated dairy-alternative beverage. The plant ceased operation at the end of 2024.

This page is built for what happens when the inspector arrives at your door. The Joriki case is real and a tragedy — three people died, and I am not citing it as marketing leverage. I cite it because the PCP gap pattern (a binder that exists on paper but is not a working document) is exactly what the inspector is now looking for, and the SME software market in Canada has not been serving operators well enough to catch it.

02The regulation

What the SFCR actually requires — the 90-second operator version.

The Safe Food for Canadians Regulations (SOR/2018-108) came into force January 15, 2019, with phased compliance through 2022 for Manufactured Foods. The regulation consolidated 14 prior commodity-specific Canadian food rules into one outcome-based framework structured around three pillars: licensing, preventive controls, traceability.

1. 01

   Licensing — §§ 26 to 33

   A Safe Food for Canadians (SFC) licence is required if you import food, export food, send food across a Canadian provincial border, slaughter food animals, or store and handle imported edible meat. Purely intraprovincial operations do not need a federal licence but still follow provincial rules. The licence costs $307.96 CAD as a base fee, takes 4 to 16 weeks to issue, is valid for two years, and renews on a 120-day window. Miss the renewal and you lose the licence — which means you lose the wholesale buyer the next morning.

2. 02

   Preventive controls — §§ 86 to 89

   Most licence holders must prepare, keep current, and implement a written PCP. The PCP has seven content areas under § 89: hazard identification and analysis, control measures, monitoring, verification, corrective action, records, and competency. Section 89(4) adds importer-specific content — foreign supplier verification and hazard allocation by supplier. There is a narrow $100K exemption for the written PCP requirement; you still have to apply preventive controls, and exporters do not get the exemption regardless of revenue.

3. 03

   Traceability — §§ 90 to 91

   Section 90 requires one-up / one-back traceability — every lot you receive and every lot you ship has to be tied to its immediate upstream supplier and immediate downstream customer. Section 91 requires the records to be kept for two years and made available to CFIA within 24 hours of a request, accessible in Canada. The 24-hour clock is the one that breaks operators who keep their lot codes in a binder at receiving, a different sheet at production, and a bill of lading at shipping that does not carry the lot code forward.

A few more sections that drive inspections: § 218 mandates bilingual English and French labelling on most prepackaged consumer foods sold across Canada. § 23 governs pre-shipment release for exported products requiring certificates. § 47 sets out general record-keeping. And the Agriculture and Agri-Food Administrative Monetary Penalties Act is what CFIA uses to fine you when you fail any of the above.

The full regulation lives at Justice Laws Canada — SFCR SOR/2018-108. The operator-friendly walkthrough is CFIA's SFCR Handbook for Food Businesses.

03The PCP

The Preventive Control Plan — § 86 domestic, § 89(4) importer.

The PCP is the document the CFIA inspector reads first. It is also the document most operators have not touched since the consultant delivered it in 2020. The seven content areas under § 89 are not optional and are not generic.

When I wrote the first PCP for my Brantford facility in 2022, I was working through a specialty cultivation hazard profile that CFIA's generic templates did not cover — mushroom cultivation, fermentation, and dehydration in one facility. CFIA pushed back on three things in pre-issuance review. I fixed two of them and explained the third in writing with a control rationale. The licence was issued. The lesson: the PCP does not have to be perfect, but it has to be specific to your operation, current, and implemented. A generic template downloaded from a US blog will not pass.

What HACCPlan's PCP Builder does, in operator terms:

1. 01

   Guided seven-area template aligned to CFIA's published guidance

   Walk through hazard identification, control measures, monitoring, verification, corrective action, records, and competency in order, with prompts for each. The output is a PCP structured the way the inspector reads it.

2. 02

   Hazard library with Canadian-specific pathogens

   Listeria monocytogenes for RTE refrigerated foods (the Joriki anchor). Salmonella in flour, dried herbs, and powdered ingredients. E. coli O157:H7 in leafy greens and undercooked meats. Clostridium botulinum in low-acid canned and acidified products. Each hazard linked to the typical control measure and the CFIA guidance reference.

3. 03

   Importer variant with foreign supplier verification module

   Section 89(4) requirements broken out as a separate workflow — foreign supplier list, supplier-by-supplier hazard allocation, certificate-of-analysis tracking per shipment, lot-level import linkage.

4. 04

   PCP currency tracking

   The PCP is not a one-time document. Section 87 requires it to be kept current. The system flags when a hazard analysis has not been reviewed in 12 months, when a control measure references a supplier you no longer use, or when a process change is not yet reflected in the plan.

5. 05

   Consultant-PCP migration

   Most Canadian SMEs already have a PCP written by a consultant — Normex, Safe Food Compliance Canada, Arora 297, SFPM, others. Upload the Word document or PDF and HACCPlan breaks it into the seven § 89 content areas, flagging gaps where a section is thin or missing. The consultant built the foundation; the platform keeps it living.

“

We paid $12,000 in 2021 for a consultant to write our PCP. It is a beautiful 60-page document. Nobody has opened it in three years. The 2026 inspection commitment terrifies me because I know what the inspector is going to find. I need a tool that turns this binder into something the line supervisors actually use.

”

Composite — QA manager, 75-employee Quebec manufacturer

The point: HACCPlan does not replace your consultant. The consultant builds the PCP at depth; HACCPlan is the system that keeps it current, implemented, and inspector-ready between consultant engagements. Many Canadian SMEs have a consultant relationship they trust, and this page is not asking you to break it.

04Traceability

One-up / one-back traceability under § 90 and the 24-hour clock under § 91.

The most common failure mode in a CFIA inspection is not the PCP — it is traceability. Section 90 requires that for every lot of food you handle, you can trace it one step back to your immediate supplier and one step forward to your immediate customer. Section 91 requires those records to be producible within 24 hours of a CFIA request, in a format CFIA can read, accessible in Canada.

The typical paper-binder operation fails the 24-hour test on the first inspection. Lot codes get captured on a receiving sheet, transferred to a different sheet at production, and lost at shipping because the bill of lading does not carry the lot code forward. When the inspector asks "show me one-up / one-back for lot 240617-A," the answer is six hours of binder archaeology and an apologetic email. The Canadian SFC licence holder who passes this test cleanly in 15 minutes is rare.

What HACCPlan's traceability engine does:

1. 01

   Lot-code generation in three formats

   Julian date plus shift plus sequence. Calendar date plus product code plus sequence. Or your existing lot scheme if you already have one — the system adapts. Codes get stamped on the receiving record automatically, propagated to production runs, and printed onto the shipping documents.

2. 02

   Critical Tracking Event capture

   Three CTEs (Critical Tracking Events) at minimum: receiving, production, shipping. Each event captures the lot, the quantity, the location, the time, and the responsible person. For incorporated foods (a granola made from oats, nuts, and dried fruit), the system maintains parent-child relationships so a Salmonella alert on the oat supplier traces forward to every granola batch and every customer.

3. 03

   24-hour response export under § 91

   One click produces a sortable spreadsheet — by lot, by product, by customer, or by date range — in the format CFIA expects. The export goes from request to PDF in under five minutes, not five hours. The audit trail showing who exported what and when is itself a record.

4. 04

   Canadian-region server storage

   Production data lives in a Canadian Supabase region. Records are physically resident in Canada, accessible from Canada, and exportable within the § 91 24-hour window. PIPEDA (Personal Information Protection and Electronic Documents Act) does not legally require Canadian-only storage — but § 91 requires accessibility in Canada, and the cleanest answer is Canadian infrastructure. No "data residency available on the enterprise plan" footnote.

05Bilingual labels

Bilingual English and French under § 218, plus Quebec Bill 96 predominance.

Section 218 of the SFCR mandates bilingual English and French on mandatory information for most prepackaged consumer food labels sold across Canada. Limited exemptions exist (foods sold in a local area where one official language is spoken by 10% or less of the population, and shipping containers to commercial enterprises not resold to consumers), but for almost any operator selling through Sobeys, Loblaws, Costco Canada, Whole Foods Canada, or Amazon.ca, both languages are required.

Quebec adds a second layer. Bill 96 ("An Act respecting French, the official and common language of Quebec") requires that French be at least equally prominent on terms no less favourable than any other language on products sold in Quebec. Practically, French is the predominant language and English is subordinated. Key dates and penalty band:

The labelling angle is where the difference between built-for-Canada and translated-for-Canada becomes most visible. US-built software offers translation — usually some flavour of machine translation with a human-review option. That handles the words. It does not handle:

• CFIA-prescribed terms — common names, prescribed expressions, allergen statements, nutrition fact table headers. These are not free translations. CFIA prescribes the exact French wording for hundreds of terms, and substituting Google Translate output gets the label rejected.
• Quebec Bill 96 predominance logic — French has to be at least as prominent. A label where French is in 8-point type and English is in 10-point type fails. A label where French is below English in the visual hierarchy fails. The platform has to model size and position, not just text content.
• § 218 exemption mapping — the operator needs to know when single-language is permitted (local-area, commercial-only carve-outs) and when it is not. Getting this wrong creates inventory the buyer rejects.

HACCPlan's bilingual document builder ships with side-by-side English / French composition, validated translations for CFIA-prescribed terms, a Quebec Mode toggle that enforces Bill 96 predominance, and an export preview that catches size and prominence violations before the print run. The right reference for the federal layer is CFIA's § 218 bilingual labelling guidance. The Quebec layer is governed by the Office québécois de la langue française.

06Provincial overlay

Federal licence is not the only licence — the provincial layer most software ignores.

Federal SFCR licensing does not replace provincial requirements when both apply. A federally licensed manufacturer in Ontario still has to comply with provincial food premises rules when on-site retail is part of the operation. A federally licensed bakery in Quebec still needs a MAPAQ (Ministère de l'Agriculture, des Pêcheries et de l'Alimentation du Québec) permit. The dual-jurisdiction stack is the default for any Canadian operator combining wholesale with retail or food service.

HACCPlan's provincial tracker maintains your federal SFC licence (where applicable) alongside your provincial licence(s) with renewal dates, training certification expiries, and inspection history per jurisdiction. At launch the provincial layer covers Ontario, Quebec, BC, and Alberta — together these account for the large majority of Canadian SME food operators. Saskatchewan, Manitoba, Atlantic provinces, and the Territories are on the Phase 2 roadmap.

The federal renewal tracker handles the part that bites operators most often: the 120-day SFC licence renewal window. Miss it and the licence lapses, the buyer asks for the number, and the wholesale order goes elsewhere. The system pushes alerts at 120, 90, 30, and 7 days before expiry, so the renewal never sneaks up.

07AMP exposure

The CFIA AMP penalty calculator — free, no signup, embeddable.

Under the Agriculture and Agri-Food Administrative Monetary Penalties Act, CFIA issues Administrative Monetary Penalties for SFCA / SFCR / Food and Drugs Act violations. Knowing your exposure before the inspector arrives is the difference between a calm conversation and a panicked one. The 2026 amounts:

Three things to understand about how AMPs work:

1. 01

   Multiple violations issue separately

   A facility with five "serious" findings from a single inspection could face $15,000 × 5 = $75,000 in AMPs from that one visit. CFIA does not bundle.

2. 02

   Early-payment discount

   Pay within 15 days of service and the amount is reduced by 50%. A $15,000 AMP becomes $7,500 if you accept the finding and pay promptly. This matters more than most operators realize — the consultancy bill to dispute a $15,000 AMP often exceeds the discount.

3. 03

   Gravity is determined by harm, history, and intent

   Actual or potential harm to public health. Your prior compliance history. Whether the violation was negligent or intentional. A first-offence record-keeping miss is "minor"; a repeat allergen mislabelling that puts a consumer at risk is "very serious."

HACCPlan ships a free CFIA AMP Penalty Calculator at /tools/cfia-amp-calculator. Model your exposure by number of violations, severity per violation, early-payment discount, and compliance history. Free, no email gate, embeddable on your own site if you are a Canadian food consultant or trade publication. The full AMP regime is at CFIA's Administrative Monetary Penalties guidance.

08Inspection prep

The Inspector-Ready Binder — what to hand the CFIA inspector at minute one.

When the inspector arrives, the question is not whether you have the records — it is how fast you can produce them. The 15-minute prep window is the difference between an inspection that goes smoothly and one that turns into a 90-minute scavenger hunt while the inspector writes notes.

The Inspector-Ready Binder export contains, in the order CFIA inspectors typically work through:

1. 01

   Current SFC licence and activity authorizations

   The licence number, expiry, and the specific activities authorized — manufacturing, importing, exporting, slaughter, storage — in one PDF.

2. 02

   The PCP, current and dated

   All seven § 89 areas, with the last-reviewed date and the person responsible. If your PCP was last touched in 2020, the export will say so — better to know before the inspector does.

3. 03

   Environmental monitoring records

   Especially for RTE facilities — Listeria environmental swabbing schedule, results, corrective actions taken. The Joriki gap pattern is the inspector's first question post-2025.

4. 04

   Implementation records — the last 90 days

   Temperature logs, sanitation logs, batch records, training records, supplier verification records. The proof that the PCP is implemented, not just written.

5. 05

   Traceability one-up / one-back for a random recent lot

   Inspectors increasingly do a "show me lot X" test live in the facility. The system pre-stages a recent lot trace so the export is ready before the question is asked.

6. 06

   Labelling compliance — current label files

   Every SKU's current label with the § 218 bilingual check passed. If selling into Quebec, the Bill 96 predominance check applied.

7. 07

   Mock-recall evidence

   Last mock recall date, scope, outcome, time-to-trace. CFIA wants evidence that your recall plan would actually function.

By the time you hand the binder over, the inspector has the entire compliance picture in one PDF. Inspection time drops from a multi-hour binder hunt to a structured walkthrough. That is what 15-minute prep looks like.

09The Brantford story

Why this is built by a Canadian operator and not adapted from a US product.

I want to be specific about this because it is the most important thing on the page. Every other food-safety SaaS that claims to handle Canada was either built in the United States and translated, or built in Canada by a consultant who has not personally held a CFIA licence. HACCPlan is built by a CFIA-licensed Brantford operator. I went through the licensing process myself. I have the licence on the wall. The product is the operating system I needed.

The Brantford story in five beats:

1. 01

   2022 — the wholesale ambush

   A buyer asked me for my CFIA licence number. I did not have one. I had been operating as a provincial-only business. The wholesale order went somewhere else. I started the licensing process the same week.

2. 02

   2022 to 2023 — the eight-month licensing journey

   Application through the My CFIA portal. The FSSI (Food Safety Supplementary Information) questionnaire. The pre-issuance review, with three pieces of CFIA pushback to address. The $307.96 fee paid. Eight months from submission to licence issued in 2023. Mushroom cultivation, fermentation, and dehydration in one facility — a specialty hazard profile that CFIA's generic templates did not cover, so I wrote the PCP from scratch and defended it section by section.

3. 03

   The provincial overlay at one address

   Same Brantford address, two regulators. CFIA federal SFC licence governing my interprovincial wholesale. Brant County Public Health Unit governing my on-site retail under Ontario's Food Premises regulation. Two sets of inspection visits, two sets of records, one operation. I built HACCPlan's provincial layer because I needed the dual-jurisdiction tracker for myself first.

4. 04

   50,000+ orders shipped under SFC licence

   Three Nature Lion divisions — cultivation, consumer, private label — operating under one Safe Food for Canadians licence. Daily traceability records. Monthly mock-recall exercises. Bilingual English and French on every consumer SKU. The volume is what stress-tests the records system; the system that works at 50 orders a week breaks at 5,000.

5. 05

   The academic anchor

   I am the contributing author of Chapter 29 in Mushroomology (Brill, 2026, ISBN 9789004751699, edited by Prof. Jianping Xu, McMaster University). Brill is a 340-year-old academic publisher. The chapter exists because the Brantford operation became the data set for it. The peer-reviewed credential is not the point of HACCPlan; the operator credential is. But it is what tells you the regulatory and scientific work behind the platform is real.

No US vendor — and very few Canadian consultancies — can claim a CFIA-licensed founder. This page exists to surface that within the first scroll, because it is the single most defensible trust signal on the entire haccplan.com domain.

10When this is the wrong tool

Honest comparison — built-for-Canada vs translated-for-Canada, and when neither is the right answer.

I want to be honest about three things: where HACCPlan is the right tool, where it is not, and where the value of a Canadian consultancy outranks any SaaS.

Where HACCPlan fits cleanly: Canadian SMEs operating under SFCR with $300K to $50M in food sales. Manufactured foods under § 86 — bakeries, sauce makers, snack manufacturers, kombucha brewers, jerky shops, specialty supplements, RTE prepared foods, plant-based beverages. Specialty cultivation — mushrooms, microgreens, urban farms with interprovincial wholesale. Fermented and acidified foods. Importers under § 26 / § 89(4). Multi-licence operators including co-packers. Provincial-only operators scaling to interprovincial trade.

Where HACCPlan is not the right tool today:

• Federally inspected slaughter. Establishment Recognition Numbers, shift approval workflows, FSIS-equivalent inspector-in-residence integration — out of scope at launch. If you operate a federally licensed abattoir, purpose-built abattoir software serves you better today.
• Deep GFSI scheme tooling as primary positioning. SQF, BRCGS, FSSC 22000 certification prep at GFSI-audit depth is partial in our /product/certification-prep module. If GFSI certification is your top operational priority, evaluate purpose-built certification-management tools alongside HACCPlan.
• Recipe and nutrition labelling calculation. Trustwell Genesis is purpose-built for nutrition fact panel math. HACCPlan handles label language (English, French, Quebec Bill 96 predominance); it does not calculate calorie counts or DRI percentages.
• Enterprise supplier-network marketplaces. TraceGains, FoodLogiQ Trustwell — these are enterprise tools for 500-store operations with corporate supplier-management teams. HACCPlan is sized for SMEs.

Where a Canadian consultancy outranks any SaaS. If you are licensing for the first time, an experienced Canadian consultancy — Normex, Safe Food Compliance Canada, Arora 297, SFPM Food Consulting, others — is worth the engagement. They charge $5,000 to $15,000 CAD for an initial PCP build and $2,000 to $10,000 per year for ongoing retainers. The consultant brings depth, regulatory relationships, and the experience of having walked through dozens of pre-issuance reviews. HACCPlan is the system the consultant hands off to you after the PCP is built — complementary, not competitive.

US-built SaaS (FoodDocs, FoodReady, SafetyChain, TraceGains, SafetyCulture, Jolt) are good products for their target market — US operators under FSMA. They were not designed for SFCR § 86 vs § 89(4) variant logic, native § 218 bilingual labelling with Quebec Bill 96 predominance, the provincial regulator layer, the CFIA AMP regime, or Canadian-region server storage as default. The framing here is "built for Canada vs translated for Canada," not "FoodDocs is bad."

11Pricing

Canadian pricing in CAD — public, no surprise FX, no "talk to sales."

Public pricing in Canadian dollars is itself a trust signal. Every other SFCR-claiming vendor hides pricing behind a sales call. Here is what HACCPlan costs:

The math vs a one-time consultancy engagement: a $5,000 to $15,000 CAD PCP build at the lower end pays for roughly 2.5 to 8 years of HACCPlan Pro at $149 / month = $1,788 / year. The consultancy gets you the document. HACCPlan keeps the document alive, adds traceability and labelling on top, and gives you the Inspector-Ready Binder for the 2026 inspection wave. The two work together — the consultant builds, the platform maintains.

12Starter kit + templates

Free SFCR templates — start here.

If you are not ready to commit to software, start with the logs and templates that CFIA inspectors ask for first. Each of these is a fillable PDF you can use on a tablet or print to a clipboard. No account needed, no email gate. The same templates ship inside HACCPlan with the data captured digitally.

Most operators run on the free templates for a few weeks before deciding whether the software fits. That is the right order. Get the records filled out reliably on paper first; the software is just the version that keeps the records integrated, time-stamped, traceable to the lot, and exportable for the § 91 24-hour response.

13Getting started

What the first 30 days on HACCPlan look like for a Canadian operator.

A realistic onboarding for a single-facility SFCR-licensed manufacturer runs roughly like this. Multi-facility operations add a corporate-setup week up front.

1. 01

   Days 1 to 5 — set up the basics

   Create the facility. Add your federal SFC licence number, activities authorized, and expiry. Add your provincial permit (Ontario PHU, MAPAQ, BC RHA, Alberta AHS) and any training certification expiries. Upload your existing PCP if you have one — the importer can take a Word document or PDF from your consultant and break it into the seven § 89 content areas.

2. 02

   Days 6 to 12 — load your suppliers and products

   Add every supplier with their certificate of analysis schedule. Add every product SKU with its recipe, ingredient list, and current label. The system maps each ingredient to the Big 9 plus mustard and sulphites for Canadian allergen disclosure.

3. 03

   Days 13 to 22 — go live on traceability

   Switch your receiving, production, and shipping records from paper to digital. Lot codes generated at receiving, propagated through production batches, printed onto shipping documents. Run one practice 24-hour response export against a real recent lot — if the export comes out clean and under 15 minutes, the system is working.

4. 04

   Days 23 to 30 — labels + inspection prep

   Build the bilingual English / French label files for every SKU. Apply Quebec Mode for SKUs sold into Quebec. Run the Inspector-Ready Binder export and review it as if you were the CFIA inspector. Schedule the first mock-recall exercise for month two.

By day 30 you should be running the Inspector-Ready Binder against a real practice run. If you can produce the binder, the last 90 days of implementation records, and a one-up / one-back trace for a random lot in under 15 minutes, you are ready for the 2026 inspection. If not, month two cleans that up.

Footnotes

1.Safe Food for Canadians Regulations — SOR/2018-108 (full text, Justice Laws Canada) — laws-lois.justice.gc.ca

2.CFIA — SFCR Handbook for Food Businesses — inspection.canada.ca

3.CFIA Notice to Industry — 2,400-establishment inspection commitment (2025-07-04) — inspection.canada.ca

4.Canada.ca — Statement on the Joriki / Silk Listeria investigation conclusion (October 2024) — canada.ca

5.CFIA — Bilingual food labelling (§ 218 guidance) — inspection.canada.ca

6.CFIA — Administrative Monetary Penalties — inspection.canada.ca

7.Agriculture and Agri-Food Administrative Monetary Penalties Act — laws-lois.justice.gc.ca

8.CFIA — SFC Licence Registry (active licence count) — apps.inspection.canada.ca

9.CFIA — 2024-2025 Departmental Results Report (enforcement statistics) — inspection.canada.ca

10.Government of Quebec — Permits and certification for food businesses (MAPAQ) — quebec.ca

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 14 min read· Wikidata Q139112497