Food safety plan templates.

01The terminology problem

Three documents, one name.

Year two into Nature Lion, my first major wholesale buyer asked for our “Food Safety Plan.” I sent them our HACCP plan. They came back asking where the seven FSMA elements were. That confusion cost us a month of rebuilds and one near-miss on a purchase order.

The hard part of a food safety plan isn't writing it. The hard part is figuring out which one the person asking actually wants. The phrase “Food Safety Plan” has at least three legitimate definitions in 2026:

1. 01

   To FDA, it's a Food Safety Plan (FSP)

   The seven-element document FSMA (Food Safety Modernization Act) created in 2015. Required of most FDA-registered food manufacturers that aren't qualified-facility exempt.21 CFR §117.126

2. 02

   To USDA, it's a HACCP Plan

   HACCP = Hazard Analysis and Critical Control Points. The original food-safety system from the 1960s. Required for meat, poultry, egg, juice, and seafood plants.9 CFR Part 417

3. 03

   To CFIA, it's a Preventive Control Plan (PCP)

   SFCR = Safe Food for Canadians Regulations. Every CFIA licence-holder needs one. Structure overlaps heavily with the US FSP, organized under different headings.SFCR §86

They overlap. They are not interchangeable. A clean HACCP plan will not pass an FDA inspector who asks where you're addressing §117.135(c)(2) allergen preventive controls. A clean FSP will not pass a CFIA inspector who asks about SFCR §89 traceability. The right document for your situation is downstream of one question: who is asking, and under which rule do you operate?

“

The wrong template doesn't fail because it's a bad template. It fails because it's the wrong template.

”

What every QA lead figures out eventually

This hub maps every plan an operator may be expected to produce, cites the actual regulation each one satisfies, and routes you to the right template. Every plan listed here was built and refined in a small, CFIA-licensed facility — not assembled by an anonymous “team.”

02Which plan do you need

Pick by who is asking.

Before you download anything, answer one question: who is asking for the plan, and what rule do they enforce? The answer routes you to a different starting template.

1. 01

   US food manufacturer, FDA-registered, not meat or poultry

   You need an FSP. Seven elements: hazard analysis, preventive controls, monitoring, corrective actions, verification, supply-chain program, recall plan. If your customer or auditor says “food safety plan,” this is what they mean.21 CFR §117.126

2. 02

   US meat, poultry, egg, juice, or seafood plant

   You need a HACCP plan. Seven principles instead of seven elements. Functionally similar to the FSP but organized around Critical Control Points (CCPs) rather than the broader Preventive Controls (PCs) framework.9 CFR 417

3. 03

   Canadian CFIA licence-holder

   You need a PCP. Five main elements. Same scaffolding as the US FSP; different organizing language. If you also ship into the US, your PCP can serve as your FSP with a few section additions.SFCR §86

4. 04

   Pursuing SQF, BRCGS, or FSSC certification

   SQF = Safe Quality Food. BRCGS = Brand Reputation through Compliance Global Standard. FSSC = Food Safety System Certification. You need all of the above plus the additional plans the scheme requires — typically crisis management, food defense, food fraud, and an allergen control plan as standalone documents.

5. 05

   Restaurant or food-service operator

   Most state and provincial health departments accept a HACCP-based food safety plan written against the FDA Food Code. Different from the FSMA FSP. Some provinces (BC, Ontario) publish their own restaurant-specific template.FDA Food Code

6. 06

   US importer of food

   You need an FSVP plan. FSVP = Foreign Supplier Verification Program. Required of every importer not specifically exempted. Distinct from the FSP — it covers what your foreign supplier does, not what you do.21 CFR Part 1 Subpart L

03FSP vs HACCP vs PCP

The terminology untangler.

This is the single most-asked question in the food-safety stack and the worst-answered one. Here is the plain-English version.

HACCP (1960s → Codex 1993 → 9 CFR 1996)

The original. Built for NASA to keep astronauts from getting food poisoning in space, formalized by Codex Alimentarius in 1993, written into US meat and poultry rules in 1996. Seven principles: hazard analysis, identify CCPs, set critical limits, monitor, take corrective action, verify, keep records.

Decision logic centers on the CCP — a step where you can prevent, eliminate, or reduce a hazard to a safe level. Cooking is a CCP for poultry. Metal detection is a CCP for ground beef. Pasteurization is a CCP for juice. Things outside the CCP table (sanitation, allergens, supplier approval) sit in “prerequisite programs” or PRPs.

FSP (FSMA 2015 / 21 CFR Part 117)

FDA's 2015 update for the rest of the US food supply — everything outside meat, poultry, egg, juice, and seafood. HACCP-aligned but broader. Seven required elements per §117.126:

1. 01

   Hazard analysis

   Identify known or reasonably foreseeable hazards.§117.130

2. 02

   Preventive controls

   Broader than HACCP's CCPs. Includes process controls, food allergen controls, sanitation controls, and supply-chain controls.§117.135

3. 03

   Monitoring

   Procedures, frequency, who does it.§117.140

4. 04

   Corrective actions and corrections

   What to do when monitoring shows a problem.§117.150

5. 05

   Verification

   Validation of controls, calibration of instruments, records review, environmental monitoring where appropriate, product testing where appropriate.§117.155, §117.160, §117.165

6. 06

   Supply-chain program

   Approve and verify suppliers of any ingredient where the hazard is controlled by the supplier.§117 Subpart G

7. 07

   Recall plan

   Required as a written sub-document inside the FSP.§117.139

The functional difference from HACCP: the FSP pulls allergen, sanitation, and supply-chain into the preventive-controls table itself, rather than leaving them in PRPs. Every CCP is a preventive control; not every preventive control is a CCP.

PCP (CFIA SFCR §86, in force since 2019)

Canada's equivalent of the FSP. Required of every CFIA licence-holder. Five main elements per CFIA guidance: description of the food and business, hazard identification and analysis, control measures, monitoring procedures and corrective actions, verification procedures and records. Same scaffolding as the FSP, slightly different organizing terminology.

SFCR §87 layers in record retention (two years). SFCR §89 layers in traceability (one-up / one-back, lot-level data). SFCR §53 covers sanitation specifics. A well-built PCP often satisfies both Canadian and US expectations with section additions; the reverse (a US FSP repurposed as a PCP) usually needs more rebuild than operators expect because the SFCR traceability and labelling sections are stricter.

04The 12 plan templates

The plans, with the regulation each one cites.

These are the twelve plan templates the hub indexes. Each links to a dedicated sub-page with the full template, fillable fields, scheme alignment notes, and a one-page summary. Cards listed in roughly the order a typical operator builds them.

1. 01

   Food Safety Plan (FSP)

   The seven-element master document FSMA requires. Hazard analysis, preventive controls, monitoring, corrective actions, verification, supply-chain program, recall plan. Word + PDF + Google Docs. Cites every CFR subsection in the section header.21 CFR §117.126

2. 02

   HACCP Plan

   Seven principles. Process flow diagram, hazard analysis worksheet, CCP decision tree, critical limits, monitoring procedures, corrective actions, verification procedures, records. Industry variants for meat, poultry, seafood, juice, and dairy ship as separate files.Codex CAC/RCP 1-1969 / 9 CFR 417

3. 03

   CFIA Preventive Control Plan (PCP)

   Five elements. Built for Canadian licence-holders. Includes §87 records section and §89 traceability section that the US FSP doesn't carry. EN/FR bilingual version in progress.SFCR §86

4. 04

   Recall Plan

   Written procedures to notify direct consignees, notify the public, conduct effectiveness checks, and dispose of recalled food. FDA expectation: executable in 4 hours from decision to first customer call. Includes the Reportable Food Registry notification template (24-hour requirement) and a class I/II/III determination worksheet.21 CFR §117.139 / SFCR §85

5. 05

   Food Defense Plan

   Sized for the small-facility reality. FDA's Food Defense Plan Builder is excellent but engineered for plants with 500-plus employees. This template is 5 to 8 pages and covers the four required elements: vulnerability assessment, mitigation strategies, mitigation strategy management, reanalysis. Threshold note: facilities under 500 employees were deferred to 2020 compliance; under $10M sales fully exempt.21 CFR Part 121

6. 06

   Allergen Control Plan

   The FASTER Act added sesame as the ninth major allergen effective January 1, 2023. Big-9: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, sesame. The plan covers receiving controls, segregation, scheduling, cross-contact controls, sanitation validation, labeling controls, reformulation, training. Undeclared allergens drive roughly half of FDA Class I recalls — this is the highest-leverage plan most operators underbuild.§117.135(c)(2) / FALCPA + FASTER Act

7. 07

   Sanitation Plan / Master Sanitation Schedule

   The frequency × area × chemical × method matrix. Every cleanable surface, the frequency it gets cleaned, the chemical and concentration, the validation method, the responsible person. Ships with site map, equipment inventory, chemical inventory with SDS, frequency calendar, pre-op inspection procedure, and daily fill-in logs.§117.35 / SFCR §53

8. 08

   Pest Management Plan

   Integrated Pest Management (IPM). Bait station map, contractor service tickets, monthly trend log, exclusion checklist, threshold-action procedures. Most facilities outsource the visits to a licensed PCO and keep the plan as the policy document the PCO operates under.§117.35(c) / SFCR §59

9. 09

   Environmental Monitoring Program (EMP)

   The most-asked-for, least-supplied template in the stack. Required for Ready-to-Eat (RTE) producers with environmental pathogen exposure — Listeria monocytogenes most often, Salmonella in low-moisture, pathogenic E. coli in produce. Risk-based zoning (Zone 1 food-contact through Zone 4 outside production), sampling map, schedule, COA tracking, positive-investigation form, trend worksheet. Ships as a multi-document set.§117.165(a)(3)

10. 10

    Food Fraud Vulnerability Assessment (VACCP)

    Required by every major GFSI scheme. Scored risk register for ingredients (and sometimes packaging) against Economically Motivated Adulteration (EMA), substitution, dilution, mislabeling. Typical 3×3 or 5×5 likelihood-by-impact matrix. High-value, easily adulterated ingredients — olive oil, honey, spices, fish species, organic claims — score highest.GFSI BR §3.11.1 / SQF §2.7.2

11. 11

    Crisis Management / Emergency Response Plan

    Distinct from the recall plan and the food defense plan. Covers physical events (fire, flood, power outage), regulatory events (FDA Class I recall, USDA detention), reputational events (social media, media inquiry), and supply-chain disruption. Required explicitly by SQF Edition 9. Recommended for any operator above $5M revenue regardless of scheme.SQF §2.1.5 / BRCGS §3.11.1

12. 12

    FSVP Plan

    For US importers. Hazard analysis for each food imported, foreign supplier evaluation, verification activities (audits, sampling, or supplier-records review), corrective actions. Three common variants: standard-risk supplier, certified produce, very-small-importer. Pick the variant that matches your scope.21 CFR Part 1 Subpart L

05The supporting logs

The logs that operationalize the plan.

A plan is a policy document. Inspectors do not audit policy in isolation — they audit whether the policy actually ran. Every plan above is supported by daily, weekly, or monthly logs that prove the plan operated as written. Without the logs, the plan is theory.

The logs below are the ones every facility should print first and pin to a clipboard or load on a tablet. They feed upward into the sanitation plan, the HACCP plan, the recall plan, and the FSP all at once.

The pattern: the plan says “cold-holding food is kept at or below 41°F.” The log proves it actually was, every shift, for the last 14 days. Inspectors look at the log first because it's faster to audit than a plan document.

06Scheme alignment

How the plans map across schemes.

If you're certified under SQF, BRCGS, or FSSC — or pursuing certification — the same twelve plans satisfy different clauses in each scheme. The substance doesn't change. The audit-trail mapping does.

1. 01

   FSMA stack

   FSP (§117.126), recall plan (§117.139), supply-chain program (Subpart G), sanitation PC (§117.135(c)(3)), allergen PC (§117.135(c)(2)), EMP where appropriate (§117.165(a)(3)), training (§117.4). Food defense is separate under Part 121 and only if you're in scope.21 CFR Part 117

2. 02

   USDA HACCP stack

   HACCP plan with the seven principles, sanitation SSOPs under 9 CFR Part 416, daily signed SSOP records (stricter than FSMA's weekly verification), pre-shipment review.9 CFR 417

3. 03

   CFIA SFCR stack

   PCP with five elements, records under §87 retained two years, traceability under §89 with lot-level data, sanitation under §53, allergens under §47, pest under §59, training under §73, recall under §85.SFCR §86

4. 04

   SQF Edition 9 stack

   FSP/HACCP under §2.4 + §2.5, recall under §2.6.3, crisis management under §2.1.5, food defense under §2.7.1, food fraud under §2.7.2, allergen under §2.8.1, sanitation under §11 and §12.

5. 05

   BRCGS Issue 9 stack

   HACCP under §2, incident and recall under §3.11, supplier approval under §3.5, housekeeping and hygiene under §4.11, allergen under §5.3, food fraud under §5.4.

6. 06

   FSSC 22000 V6 stack

   ISO 22000 plus FSSC additional requirements. HACCP / preventive controls under ISO 22000 §8.5, sanitation under ISO/TS 22002-1 §11, allergen under §10.1, training under §18, food defense / fraud / crisis under FSSC additional requirements §5.7.

The takeaway: write the plan once. Tag it against the scheme clauses it satisfies. Re-tag if you change schemes. Don't rewrite the substance — rewrite the audit trail.

07The integration map

How the plans connect.

At our second internal audit at Brantford, the auditor pulled three plans off the shelf — the recall plan, the allergen control plan, and the sanitation plan — and asked me to walk through what happens after a positive allergen swab on a food-contact surface during a non-allergen run. The answer requires all three documents to agree.

They did not all agree. I had updated the sanitation plan's post-positive corrective action procedure six months earlier and never updated the allergen control plan's reference back into it. The auditor caught it in under five minutes. That was the most embarrassing finding of the year and the most useful one — it forced me to build an integration map.

The map below is how the twelve plans cross-reference each other. Print it. Tape it to the inside of the binder cover. When you update one plan, walk the map and check whether anything else references the section you changed.

1. 01

   FSP is the master document

   References the HACCP plan (or absorbs it), the recall plan (§117.139), the supply-chain program (Subpart G), the sanitation PC (§117.135(c)(3)), the allergen PC (§117.135(c)(2)).

2. 02

   HACCP plan references

   The sanitation plan, the allergen control plan, the validation plan for each CCP, and the EMP for any Listeria-control CCP.

3. 03

   Recall plan references

   The crisis management plan, the supplier approval program for traceability, the customer complaint log, and the EMP positive-result investigation procedure.

4. 04

   Food defense plan references

   The crisis management plan and the training plan (security awareness component).

5. 05

   EMP feeds upward

   Positive results trigger sanitation plan corrective actions, HACCP plan verification entries, and may trigger FSP reanalysis under §117.170.

6. 06

   Allergen control plan references

   The sanitation plan (allergen cleanouts), the training plan, the supplier approval program (allergen declarations), and the labeling controls in the FSP.

7. 07

   Sanitation plan references

   The pest management plan (bait station chemicals), the training plan, and the validation plan (cleaning effectiveness studies).

8. 08

   Supplier approval program references

   FSVP for imported ingredients, allergen control plan for supplier declarations, and the food fraud assessment for high-risk ingredients.

08The Canadian PCP

A note on the CFIA PCP specifically.

CFIA publishes excellent preventive-control guidance — 80 pages of narrative across the inspection.canada.ca preventive-controls section. What CFIA does not publish is a fillable PCP template. The My CFIA portal lets licence-holders upload their PCP. It does not generate one. Every PCP in Canada gets rebuilt from scratch in Word against the CFIA narrative.

When I went through CFIA licensing in 2023, the PCP build took three weeks. The frustrating part wasn't the work. The frustrating part was that the document was rebuilt entirely from regulator narrative with no scaffold — and every other PCP across the country was being rebuilt the same way, in parallel, with the same inefficiency.

The PCP template indexed here is the third revision of the PCP I actually use at Brantford. It carries:

1. 01

   The descriptive elements

   Required Canadian-licence-holder context: food description, intended use, distribution, licence number.SFCR §86(b)(i)

2. 02

   Two-year record retention sections

   Sized for the Canadian standard, not the FSMA two-year minimum which sometimes drifts shorter in US-origin templates.SFCR §87

3. 03

   One-up / one-back traceability

   Lot-code structure, supplier-records template, customer-records template. Stricter than US traceability rules currently in force.SFCR §89

4. 04

   Bilingual labelling cross-references

   Food and Drugs Act plus Consumer Packaging and Labelling Act. Required for bilingual labelling sections at the federal level and Charter-of-the-French-Language sections in Quebec.

5. 05

   Importer vs domestic licence distinction

   Importers carry a slightly different PCP scope. The template flags which sections apply to each.SFCR §94

A bilingual EN/FR version is in progress for the Quebec market and bilingual federal requirements. Ships at parity with the EN version.

09The recall plan in particular

The plan most operators underbuild.

Of the twelve plans, the recall plan is the one most often present-but-untested. Operators write a recall plan once at audit prep, file it, and never run a mock. FDA's expectation under §117.139 is that the recall plan is executable in four hours from decision to first customer call. Most paper recall plans cannot meet this bar.

The benchmarks an effective recall plan should hit:

1. 01

   Customer-reach 95% within 48 hours

   Every direct consignee notified, with documented acknowledgement, in two days. Requires up-to-date contact lists and tested call trees.

2. 02

   Product-reach 80% within 72 hours

   Of the affected lot quantity, at least 80% accounted for — either recovered, in transit, or confirmed consumed — in three days. Requires lot-code traceability that ties shipment records to customer accounts.

3. 03

   Reportable Food Registry within 24 hours

   If the food is FDA-jurisdiction and meets the reportable threshold, FDA notification within 24 hours of decision. The template includes the RFR notification fields.

4. 04

   Annual mock recall

   FSMA verification expectation plus every major GFSI scheme. A recall plan without an executed mock in the last 12 months reads as untested. The template includes the mock-recall worksheet.

10When templates aren't enough

What templates can't do.

A template is a scaffold. It cannot replace the hazard analysis specific to your facility, the validation studies specific to your process, or the supplier records specific to your ingredients. Templates that pretend otherwise — the “fill in your name and you're compliant” variety — are the templates that fail audits.

What every template above does:

1. 01

   Cites the regulation in section headers

   Every section header carries the CFR, SFCR, or scheme clause it satisfies. An inspector or auditor can match each section to a requirement in under a minute.

2. 02

   Pre-fills the boilerplate

   Definitions, scope, document control, revision history, signature blocks. The structural work most operators reinvent from scratch.

3. 03

   Cross-references the other plans

   Each template flags where it references and is referenced by the others in the stack.

4. 04

   Ships in multiple formats

   Word for editing, PDF for sharing, Google Docs for collaborative editing. Plans with matrix components (allergen, sanitation, EMP, supplier, training) also ship in Excel and Google Sheets.

What you still have to do yourself:

1. 01

   The hazard analysis

   Your products, your process, your facility. A template gives you the structure of a hazard analysis. It cannot identify which hazards are reasonably foreseeable in your specific operation.

2. 02

   The validation

   Cook studies, kill-step validation, sanitation validation, allergen residue validation. Site-specific and process-specific.

3. 03

   The training records

   Each employee, each task, signed. A template gives you the log; you have to actually run the training.

4. 04

   The reanalysis schedule

   Every three years under FSMA §117.170, or after any of five trigger events. The template carries the schedule; you have to actually do the reanalysis.

If you want plans pre-filled with your facility data, scheme-mapped, version-controlled, and audit-ready — with the integration map automatically updated when you edit any one document — that's what the HACCPlan app does. The templates above are the free, ungated, build-it-yourself path. Both work. The app is for operators who'd rather not maintain a binder.

11FAQ

Common questions about plans.

Is “Food Safety Plan” the same as “HACCP plan”?

No. They overlap. An FSP includes everything in a HACCP plan plus allergen, sanitation, and supply-chain controls inside the preventive-controls table rather than in PRPs. Most FDA-registered manufacturers write a single document called a “HACCP-based Food Safety Plan” that satisfies both.

Do I need an FSP if I'm not FDA-registered?

If you sell food that crosses state lines or that's otherwise in FDA jurisdiction, you almost certainly need to register, and registration triggers FSP requirements unless you're qualified-facility exempt (essentially: under $1M in annual food sales). Some carve-outs apply for restaurants, very small farms, and dietary supplements.

I'm Canadian. FSP template or PCP template?

PCP. SFCR requires it of every CFIA licence-holder. If you also ship into the US, your PCP can serve as your FSP with section additions; the reverse path (FSP retitled as PCP) requires more rebuild because the CFIA traceability and labelling sections are stricter.

How many plans do I actually need?

Most small manufacturers need four: FSP (or HACCP, or PCP depending on jurisdiction), recall plan, allergen control plan, and sanitation plan. Add food defense if you're in Part 121 scope. Add EMP if you make RTE food. Add the rest as your scheme or your customers require.

Can one plan reference another?

Yes, and they should. Every plan above explicitly cross-references the others where appropriate. The integration map shows the connections. The single-point-of-update rule: change one, walk the map, update everything that references the section you changed.

Will inspectors and auditors accept these templates?

The templates carry the regulation citations in the section headers, which is what inspectors verify against. An auditor will not accept any template as compliant in itself — they audit whether the plan reflects your actual operation and whether your records prove it operated. The template gets you to a defensible scaffold faster; the operation has to back it up.

How often do I update the plans?

FSP requires reanalysis every three years under §117.170 or after any of five triggers (new hazard, ineffective control, change to facility, change to product, new science). PCP under SFCR has no fixed cycle but the verification element implies annual review. GFSI schemes require annual review at minimum. Practical answer: walk every plan annually as part of your internal audit, update on triggers in between.

Is there an EN/FR version of the PCP?

In progress. The English version ships now. The French version is being finalized for Quebec and bilingual federal compliance and will ship at parity within the next release cycle.

What's the difference between a plan, an SOP, and a program?

A plan is the policy document — the strategic level. A program is the broader operational system covering the plan plus the people, the schedule, and the resources. An SOP (Standard Operating Procedure) is the step-by-step instruction for a single task that sits underneath the plan. A sanitation plan says “all food-contact surfaces are cleaned and sanitized between product changes.” The sanitation program is how that gets staffed, supplied, and scheduled. The slicer-cleaning SOP tells one employee how to disassemble and clean the slicer.

Are the templates free for commercial use?

Yes, free for single-business commercial use. Use them in your facility. Don't resell them as your own product.

12Where to start

Pick the first three.

If you have nothing in place and need to build a full plan stack, build in this order:

1. 01

   Start with the FSP, HACCP, or PCP — whichever applies

   Two to three weeks of work for a small operation. This is the master document everything else references. Until this exists, the other plans don't have an anchor.

2. 02

   Add the recall plan next

   One week. The plan that's most often missing or unrunnable. Run a mock recall as soon as the plan is written — that's how you find the gaps.

3. 03

   Add the allergen control plan and the sanitation plan in parallel

   Two weeks. These are the two most-cited preventive controls and they reference each other heavily. Build them together.

The other plans — food defense, EMP, food fraud, crisis management, FSVP — add as your scheme, your customers, your scope, or your inspection findings require. Don't build all twelve on day one. Build the four that anchor your operation, run them for 90 days, then layer in the rest. The point of the plans is the operating discipline they document, not the binder thickness.

Footnotes

1.21 CFR Part 117 (FSMA Preventive Controls for Human Food) — ecfr.gov

2.21 CFR §117.126 (Food Safety Plan) — ecfr.gov

3.21 CFR §117.139 (Recall Plan) — ecfr.gov

4.21 CFR Part 121 (Intentional Adulteration / Food Defense) — ecfr.gov

5.21 CFR Part 1 Subpart L (FSVP) — ecfr.gov

6.9 CFR Part 417 (USDA HACCP) — ecfr.gov

7.SOR/2018-108 Safe Food for Canadians Regulations — laws-lois.justice.gc.ca

8.CFIA Preventive Control Plans Guidance — inspection.canada.ca

9.FDA Food Allergens (FALCPA + FASTER Act) — fda.gov

10.FDA Food Defense Plan Builder — fda.gov

11.Codex CAC/RCP 1-1969 (HACCP Annex) — fao.org

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 14 min read· Wikidata Q139112497