Food safety software for small dairy processors.

I am not a dairy operator. I run a CFIA-licensed (Canadian Food Inspection Agency) mushroom production facility in Brantford, Ontario. My critical control points are growth-room temperature, post-harvest cooling, and packaging integrity — not pasteurization, not phosphatase, not a chart recorder. But when small cheesemakers, yogurt founders, and ice cream operators started asking me whether HACCPlan could carry their records, I went deep on the regulation. The math is different from mine. The software needs are the same shape: pasteurization log, CIP record, environmental monitoring program, supplier verification, inspector-ready binder. Here is what I learned and what I built.

01The mismatch

Why a dairy plant needs different software than a restaurant or a bakery.

Dairy is the most regulator-marinated category in food. A small cheesemaker sees a Grade A state milk inspector every 30 to 90 days. FDA cycles through periodically and faster if a phosphatase test runs high or an environmental swab comes back positive. State milk authorities sample the raw-milk supply. If the operator is in Canada, CFIA layers on the Safe Food for Canadians Regulations (SFCR) and the provincial milk act. Every one of those visitors wants records, and every one wants them in a slightly different shape.

Most food-safety software was built for a different room. Generic HACCP apps assume one "cook step" CCP, a quarterly inspection, and recordkeeping that happens weekly. A dairy plant's recordkeeping cadence is every batch, every shift, every Clean-In-Place (CIP) cycle. Generic SaaS treats records as occasional. Dairy is not occasional.

The job of dairy food-safety software is not to invent compliance work. The Pasteurized Milk Ordinance (PMO) and 21 CFR Parts 117, 131, and 133 already define every record the regulator expects. The job is to turn the signals that already exist (the chart recorder, the flow-diversion event, the swab result, the supplier Certificate of Analysis) into the format the inspector wants to see, with retrieval fast enough that the audit does not become a 90-minute archaeology dig.

02The regulatory stack

The regulations every dairy operator should know by name.

Quick context on what governs you. Dairy lives at the intersection of two federal regimes in the US, plus state milk law, plus (north of the border) CFIA and provincial milk acts. Here is the short version. Every one of these is a real document a real inspector will reach for.

A note on acronyms because dairy is dense with them. CCP is Critical Control Point — the step where you apply a control to prevent, eliminate, or reduce a hazard to an acceptable level. CIP is Clean-In-Place — the automated cleaning cycle that runs through the pasteurizer, the silos, and the lines without disassembly. EMP is Environmental Monitoring Program — the swab-and-trend system that catches Listeria niches in the room before they migrate to product. FDD is Flow Diversion Device — the valve that automatically routes undertemperature milk back to the raw side. RTE is Ready-To-Eat — the regulatory category every cheese, yogurt, ice cream, and plant-based milk falls into.

03The CCPs

The Critical Control Points every dairy HACCP plan names.

A dairy HACCP plan (or, in Canada, a section 86 PCP) almost always names the same CCPs. The specific time and temperature depends on the process. The structure is universal.

1. 01

   Pasteurization — the defining dairy CCP

   PMO-recognized minimum time-temperature combinations. HTST (High-Temperature Short-Time) — 161 degrees Fahrenheit (72 Celsius) for 15 seconds. The industry standard for fluid milk. HHST (Higher-Heat Shorter-Time) — for example 191 F (89 C) for 1.0 second, 194 F (90 C) for 0.5 seconds, 201 F (94 C) for 0.1 seconds, 212 F (100 C) for 0.01 seconds. Vat or Batch (LTLT — Low-Temperature Long-Time) — 145 F (63 C) for 30 minutes. Used by farmstead cheesemakers and small ice cream operators. UHT (Ultra-High Temperature) — 280 F (138 C) for 2 seconds for shelf-stable products. PMO Item 16p adds 3 F (1.7 C) to all minimums when the product has more than 10% milkfat, added sweetener, or is eggnog.

2. 02

   Cooling

   Post-pasteurization cooling to below 40 degrees Fahrenheit (4.4 Celsius) within 4 hours. State rules vary; some are stricter. For aged-cheese operations, controlled-temperature cooling curves are part of process validation.

3. 03

   Aging — for raw-milk hard cheese

   21 CFR 133.150(b) allows hard cheese made from raw or unpasteurized milk only if cured for at least 60 days at not less than 35 degrees Fahrenheit (1.7 Celsius). The 60-day clock is treated as a CCP in those plans. Important and current: FDA's 2025 surveillance sampling found H5N1 highly pathogenic avian influenza (HPAI) surviving past 60 days of aging. The floor under the 60-day rule may move as the science evolves; your hazard analysis should explicitly address H5N1 in 2026 even if you are not making process changes yet.

4. 04

   Acidification — for cultured products

   Yogurt, sour cream, cultured buttermilk: pH at or below 4.6 within a defined time window prevents pathogen growth. Track pH and the time-to-target as the CCP.

These are the CCPs. Around them sit a row of Preventive Controls that are not CCPs in the strict definition but get treated with the same rigor under 21 CFR Part 117: allergen control (flavored ice cream, yogurt-based desserts, novelty bars routinely contain peanuts, tree nuts, wheat, eggs, soy); sanitation and EMP for Listeria; supplier verification for raw milk, packaging, cultures, rennet, fruit and flavor purees; recall plan with annual mock recall.

04Pasteurization records

The pasteurization log a Grade A inspector actually reads.

PMO Item 16p(E)(1)(a) defines what has to live on every pasteurization record. This is not a generic temp log; it is a specific data structure the inspector will tick against item by item. The required fields are:

1. 01

   Date, product, and batch ID

   Three identifiers that tie this run to a specific kettle, a specific tank, and a specific finished-product lot. The batch ID is the backbone of any later trace.

2. 02

   Time of beginning and end

   Start and stop of the cycle. The shift, the operator on duty, and the time tie everything else together.

3. 03

   Temperature throughout the cycle

   Chart recorder ribbon or electronic equivalent. Continuous, not point-in-time. Every minute the product was above the legal hold temperature has to be documentable.

4. 04

   Flow Diversion Device readings

   Every diversion event documented — date, time, duration, reason. If the FDD never tripped during the run, the log says so. A blank FDD field on a busy day is one of the first things a Grade A inspector questions.

5. 05

   Operator signature

   The person who ran the cycle signs the record. Not the supervisor at end-of-shift. The cycle operator, at the time of the cycle.

Then verification — the "did it actually work?" check. The standard is the alkaline phosphatase test. Native phosphatase in milk is destroyed by pasteurization, so a positive result on finished product means something went wrong. The Grade A threshold is below 350 milliunits per litre on fluid pasteurized milk by approved electronic procedure (FDA M-a-98). A reading at or above 350 mU/L flags one of three problems: undertemperature, raw-milk contamination of the finished product, or excessive raw-milk regeneration through the regenerator section. The phosphatase log lives alongside the pasteurization log in any plant the regulator considers serious.

05The EMP

Environmental monitoring — the program that costs lives when it is thin.

Every recent FDA warning letter to a small dairy or ice cream producer cites Environmental Monitoring Program (EMP) deficiency. FDA's draft Guidance on Control of Listeria monocytogenes in Ready-To-Eat Foods defines the four-zone framework every inspector now expects to see:

• Zone 1 — Food-contact surfaces (FCS). Filler nozzles, freezer barrels, vat surfaces, packaging-machine product-contact parts.
• Zone 2 — Non-FCS surfaces near Zone 1. Equipment exterior, framework, push-buttons, conveyor undersides.
• Zone 3 — Processing room, not adjacent to FCS. Walls, floors, drains, doors, overheads.
• Zone 4 — Outside processing rooms. Hallways, locker rooms, maintenance areas, loading docks.

The sampling rule is cleanest to dirtiest — swab Zone 1 first, then Zone 2, then 3, then 4 (never back-track with the same gloves or swabs). A reoccurring Zone 2 hit escalates to vector swabbing plus Zone 1 plus product testing. A Zone 1 positive on a food-contact surface is presumptively adulterating unless rigorous corrective action is documented and effective.

“

We had a Zone 2 Listeria hit. Our existing food safety binder said "investigate and resample." Three sentences. Now FDA wants a real EMP with corrective action thresholds, vector swabbing, and verification — and I am building it from scratch the week of the audit.

”

Composite — small ice cream producer, post-warning-letter

The reason EMP shows up on every dairy 483 is structural. Listeria monocytogenes is the dairy ghost. It lives in floor drains, walk-in gaskets, condensate puddles on overhead pipes, the ceiling of an aging room. It is resilient in cold; it grows in biofilms; it migrates from Zone 3 to Zone 2 to Zone 1 if nothing in the program is hunting it. A binder that says "swab quarterly and resample if positive" is not a program. A program has a site map with every Zone 1, 2, 3, and 4 point identified; a swab schedule on rotation so the same drain does not get swabbed every Friday at 4 PM; a trend dashboard that shows whether Listeria spp. counts are rising; an escalation flow that says exactly what happens when a Zone 2 swab comes back positive, then again three weeks later.

I will not pretend HACCPlan or any software would have prevented these outbreaks. People died because programs that existed on paper did not run in the room. What software can do is make running the program less frictional — make the swab schedule a Tuesday morning task on the QA's phone instead of a quarterly memory; make the trend visible so a Zone 2 reoccurrence is obvious in week 3, not week 12; make the corrective-action threshold a built-in rule, not a sentence in a Word doc.

06H5N1 + raw milk

What changed in dairy in 2024 — H5N1 and the raw-milk regime.

In late 2024, H5N1 highly pathogenic avian influenza was confirmed in US dairy cattle. The regulatory cascade was fast:

• November 2024 — California regulators recall raw milk and cream from Raw Farm after H5N1 detected in product.
• December 6, 2024 — USDA Federal Order requires nationwide raw-milk sample collection for HPAI testing.
• January 2025 — FDA begins surveillance sampling of 60-day aged raw cow's milk cheese.
• March 2025 preprint — 60-day aging insufficient to inactivate H5N1 in raw-milk cheese. Heating to 54 C for 15 minutes or 60 C for 10 seconds required.

For raw-milk operators (roughly 12 states allow some form of retail sale), the practical effect is that any tool that does not have HPAI-specific testing logs, herd-source verification, and a clear hazard-analysis hook for influenza viruses is missing the most current dairy hazard in the system. For aged-cheese operators running 21 CFR 133.150(b) raw-milk hard cheese: the regulatory floor under your business is moving. Your hazard analysis should address H5N1 in 2026, even if you are not changing process yet.

I will be plain on the raw-milk question. Raw-milk retail is legal in some US states and tightly limited or prohibited in others; herd-share and private-membership arrangements add another layer. Software is not a substitute for confirming your specific situation with your state milk authority. HACCPlan provides templates for documentation that would be expected if your state allows the sale; it does not provide legal advice on whether your model qualifies.

07What is inside

What is inside the dairy build of HACCPlan.

None of this is generic software with a "dairy" label glued on. Each piece exists because a real operator pointed at a real record the regulator was going to ask for.

1. 01

   PMO-aligned HACCP and PCP templates

   Pre-built CCPs for HTST, HHST, UHT, vat (LTLT), aging, acidification, and packaging. Hazard analysis pre-loaded with the named hazards per sub-category (Listeria in soft cheese and ice cream, Salmonella in flour-adjacent products, HPAI in raw-milk operations as of 2026, allergens in flavored products). The Canadian PCP variant uses section 86 structure and section 87 retention windows.

2. 02

   Pasteurization CCP monitoring

   Electronic equivalent of PMO Item 16p. Date, product, batch ID, start and end time, temperature curve from the chart recorder or compatible sensor, FDD event log, operator signature. Continuous temperature integration with supported sensors (verify the current supported-device list before you commit; the list grows).

3. 03

   Phosphatase test log with 350 mU/L threshold alarm

   Enter the reading, the system flags anything at or above 350 mU/L with the corrective-action workflow attached. Audit trail of the test, the operator, the corrective action, and the disposition of the batch.

4. 04

   EMP with Zone 1 to 4 mapping

   Site map for your facility with every Zone 1, 2, 3, and 4 point identified. Swab scheduler that rotates so the same drain does not get swabbed every Friday. Trend dashboard for Listeria spp. counts. Escalation logic that fires when a Zone 2 reoccurs — vector swab, Zone 1 verification, product test. Corrective-action thresholds built in as rules, not as Word-doc sentences.

5. 05

   Cheese aging clock

   For 21 CFR 133.150(b) raw-milk hard cheese. 60-day timer with continuous temperature verification. Releases the batch only when both the time and the temperature evidence meet the rule. 2026 hazard-analysis prompt for H5N1 attached to raw-milk recipes.

6. 06

   Raw milk supplier verification

   Herd-source identification, somatic cell count, antibiotic residue, HPAI testing status (per the December 2024 USDA Federal Order), Certificate of Analysis review per lot received. Critical for the FDA preventive-controls rule on supplier programs.

7. 07

   Allergen control with line scheduling

   For flavored ice cream, yogurt-based desserts, novelty bars, plant-based products with tree nut or soy ingredients. Run-order enforcement (allergen-free first, allergens last, full cleaning between). ELISA swab log on cleaned equipment with corrective-action triggers on positives.

8. 08

   CIP record integration

   Clean-In-Place cycle logs — start time, temperature, chemical concentration, contact time, rinse verification. Tied to the equipment that was cleaned so the EMP swab schedule and the CIP record speak to each other.

9. 09

   FSMA 204 traceability builder

   Most dairy products are on the FDA Food Traceability List (FTL). The 2-hour traceback target is built into the mock-recall workflow. Lot-to-lot relationships from raw-milk receipt through finished product, with sellable / shippable / shipped status per lot.

10. 10

    Bilingual EN/FR rendering for Quebec Bill 96

    French at least as prominent as English on every consumer-facing label. Required for Quebec retail since June 1, 2025. New products immediate; existing have until June 1, 2027.

11. 11

    Inspection-day binder, one tap

    HACCP/PCP plan. Last 30 days of pasteurization, phosphatase, FDD, CIP, EMP, and cooling logs. Supplier COAs. Mock-recall records. Allergen program. Generated in the order the Grade A inspector or CFIA inspector typically works through it, exportable as a single PDF or visible directly on the tablet you hand them.

08Sub-types

The dairy sub-types HACCPlan templates.

Dairy is not one vertical; it is six or seven that share a regulatory stack. The templates differ by sub-type. Pick the one closest to your operation and adjust from there.

1. 01

   Farmstead and artisan cheese

   Either pasteurize or age at least 60 days at not less than 35 F (21 CFR 133.150(b)). Listeria niches in brining tanks, aging-room ceilings, and floor drains. Multiple multistate Listeria outbreaks have come from this category, often from small operators with under-resourced programs.

2. 02

   Soft and fresh cheese

   Highest-risk dairy category. Queso fresco, fresh mozzarella, ricotta. Short shelf life, RTE, often consumed by vulnerable populations. EMP is the controlling program here; pasteurization alone does not protect against post-pasteurization environmental contamination.

3. 03

   Yogurt and cultured products

   CCP shifts to acidification (pH at or below 4.6 within the defined window). Allergen risk in fruit-on-bottom and flavored varieties. Cultures and fruit purees both flow through supplier verification.

4. 04

   Ice cream and frozen novelties

   21 CFR 135.110. Pasteurization of the mix is the CCP. Allergen cross-contact is the number-one recall driver in this sub-category. Freezer environment is a Listeria niche; the EMP must include the freezer barrel, the filler, and the packaging line.

5. 05

   Plant-based dairy (almond, oat, coconut, cashew)

   UHT and aseptic-filled. Treated as RTE high-risk after the Joriki/Silk outbreak. Allergen risks (tree nut, coconut, soy). FDA labeling enforcement on the use of "milk" terms is ongoing. Co-packing contracts now routinely ask for weekly environmental swabbing in plant-based rooms; an 8-employee co-packer needs a system, not a clipboard.

6. 06

   Butter, cream, half-and-half

   Lower microbial growth potential but allergen labeling and supplier verification remain. Cultured butter adds fermentation control.

7. 07

   Powdered and dehydrated (milk powder, whey)

   Cronobacter sakazakii is the named hazard (21 CFR Parts 106 and 107 for infant formula). Non-infant whey and skim powder facilities increasingly run Cronobacter EMPs.

09For Canadian operators

For Canadian operators.

If you operate under the Safe Food for Canadians Regulations, the dairy build of HACCPlan covers the Canadian-specific differences without making you map them yourself.

1. 01

   Section 86 PCP structure

   The HACCP plan is formatted as a section 86-compliant Preventive Control Plan with the additional Canadian sections (traceability, recall, complaints) built in. CFIA inspectors expect the PCP language, not the FDA preventive-controls language.

2. 02

   2-year record retention under section 87

   Matches the CFIA requirement. Records archived but retrievable for the full retention window. Pasteurization logs, CIP records, EMP swabs, supplier COAs — all stored against the retention clock.

3. 03

   Bilingual EN/FR label generation

   Every consumer-facing label generated in both English and French. Required by CFIA for all packaging. Quebec Bill 96 requires French at least as prominent as English; the label preview shows the layout so you can verify before print.

4. 04

   Canadian priority allergen list

   Includes mustard and added sulphites above 10 ppm in addition to the US Big 9. Gluten sources include wheat, rye, barley, oats, and triticale.

5. 05

   Provincial dairy licence tracking

   Ontario, BC, and most provinces require a provincial licence on top of CFIA SFCR. The licensing record sits alongside the federal one with renewal alerts at 60, 30, and 7 days.

“

Every food safety SaaS we tried wanted me to map my CCPs to a generic "cook step." I do not have a cook step. I have HTST at 162 F for 16 seconds, a phosphatase log, a chart record, a flow-diversion log, and a CIP record. None of their fields existed. I built it in HACCPlan in an afternoon because the fields were already there.

”

Composite — 6-person creamery, Ontario

10Starter templates

Where to start — the free logs that cover the most-cited gaps.

If you are not ready to commit to software, start with the logs that get cited most often on dairy 483s and CFIA inspection reports. These are fillable PDFs you can use on a tablet or print to a clipboard. No account needed, no email gate.

These are the universal logs. The dairy-specific records — phosphatase log, FDD event log, EMP swab schedule, Zone 1-4 site map, raw-milk supplier verification — ship inside the software. Get the universal logs running on paper first; the software layer is the version that ties them together, time-stamps them, and makes the inspector binder a one-tap export.

11Getting started

What the first 30 days on HACCPlan actually look like for a dairy operator.

A realistic onboarding for a single-location creamery, yogurt startup, or ice cream operator runs roughly like this. Multi-product or multi-line operations add a setup week per additional line.

1. 01

   Days 1 to 3 — set up the basics

   Create the facility, add the manager and operator details, load your existing HACCP or PCP plan (or generate a starter from the dairy template that matches your sub-type). Upload the chart-recorder model, the pasteurizer make and capacity, the FDD model. Add the Grade A inspector contact and the most recent inspection report.

2. 02

   Days 4 to 10 — load suppliers and recipes

   Add every raw-milk supplier with herd-source, SCC, antibiotic residue, and HPAI testing status. Add cultures, rennet, fruit and flavor purees, packaging. Build the recipe-to-allergen mapping for any flavored or value-added product.

3. 03

   Days 11 to 20 — go live on the records

   Switch pasteurization, phosphatase, FDD, CIP, cooling, and cleaning logs from paper or chart-only to the digital record. Pair supported sensors if you use them. Spend one cycle per process shoulder-to-shoulder with the operator until the rhythm clicks. Keep the paper backups for the transition month.

4. 04

   Days 21 to 30 — build the EMP

   Map every Zone 1, 2, 3, and 4 point in your facility. Set the swab rotation so the same drain does not get swabbed every Friday at 4 PM. Configure the escalation rules (Zone 2 reoccurring within X weeks triggers vector swab plus Zone 1 plus product test). Run a mock recall against your actual lot records to verify the 2-hour traceback target works on your data.

By day 30 you should be running the inspection-day binder export against a real practice run. Hand it to your QA lead and have them pretend to be the Grade A inspector. If they can find the phosphatase result for last Tuesday's HTST run in under 30 seconds, the system is working. If not, that is what month two cleans up.

Footnotes

1.Grade A Pasteurized Milk Ordinance — 2023 Revision PDF — agriculture.ny.gov

2.21 CFR Part 117 — Preventive Controls for Human Food — ecfr.gov

3.21 CFR Part 131 — Milk and Cream standards of identity — ecfr.gov

4.21 CFR Part 133 — Cheeses, including section 133.150(b) 60-day aging rule — ecfr.gov

5.FDA Draft Guidance — Control of Listeria monocytogenes in Ready-To-Eat Foods (Zone 1-4 framework) — fda.gov

6.FDA — Investigation of Avian Influenza H5N1 Virus in Dairy Cattle — fda.gov

7.USDA Federal Order — National Milk Testing Strategy for HPAI (December 2024) — usda.gov

8.FDA Outbreak Investigation — Listeria monocytogenes in Frozen Supplemental Shakes (February 2025) — fda.gov

9.FDA Warning Letter — Ice Cream House LLC (September 24, 2024) — fda.gov

10.Government of Canada — Conclusion of Joriki / Silk Plant-Based Beverage Investigation — canada.ca

11.CFIA — Preventive Controls for Dairy Products — inspection.canada.ca

12.Canada Gazette SOR/2024-244 (December 18, 2024) — gazette.gc.ca

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 13 min read· Wikidata Q139112497