Allergen Compliance Audits: What Inspectors Look For
Running a food business means wearing dozens of hats at once — buyer, marketer, operations manager, and, increasingly, compliance officer. Allergen management has moved from a background administrativ
Running a food business means wearing dozens of hats at once — buyer, marketer, operations manager, and, increasingly, compliance officer. Allergen management has moved from a background administrative task to a front-and-centre legal obligation, and the scrutiny from inspectors has intensified significantly since the introduction of Natasha's Law in the UK in October 2021. For food businesses selling online through platforms like Shopify, the stakes are even higher: your product labelling, your ingredient disclosures, and your customer-facing information are all fair game during an audit.
The problem is that most food business owners only think about allergen compliance when something goes wrong — a customer complaint, a near-miss, or worse. Inspectors, however, think about it constantly. They arrive at your premises or review your digital storefront with a structured checklist that covers everything from raw ingredient storage to how allergen information appears on your checkout page. Gaps that seem minor to you can translate into formal notices, fines, or even criminal liability under the Food Information to Consumers regulation.
In this post, we break down exactly what compliance inspectors look for when they audit a food business. Whether you operate a physical kitchen, an online Shopify store, or both, you will leave with a clear understanding of the five core areas inspectors prioritise — and what you can do right now to prepare.
1. Documentation and Written Allergen Procedures
The first thing most inspectors ask for when they walk through the door — or review your online operation — is your written allergen management procedure. This is a documented, step-by-step description of how your business identifies, controls, and communicates allergen risks. Under the UK's Food Safety and Hygiene (England) Regulations 2013 and the overarching EU FIC Regulation 1169/2011 (retained in UK law post-Brexit), food businesses are required to have this information available and accurate. In the US, the Food Allergen Labeling and Consumer Protection Act (FALCPA) and the more recent FASTER Act of 2021 impose similar documentation obligations for packaged foods.
Inspectors want to see that your procedure is not a dusty template you downloaded once and forgot about. They look for evidence that it has been reviewed recently, that it reflects your current supplier list, and that it accounts for every one of the 14 major allergens under UK law — including sesame, which was added to the US list of major allergens under the FASTER Act in 2023. A procedure document that lists peanuts but omits lupin or sulphites will raise immediate red flags.
Beyond the document itself, inspectors will cross-reference it against your actual practices. If your procedure says allergen information is updated within 24 hours of a supplier change, they may ask to see your supplier communication log to verify that claim. Inconsistencies between what your paperwork says and what your team actually does are one of the most common reasons food businesses receive improvement notices.
2. Ingredient and Supplier Traceability Records
Allergen compliance does not start in your kitchen or on your product listing — it starts with your suppliers. Inspectors look closely at your ingredient specification sheets, sometimes called technical data sheets, which should be provided by every supplier for every ingredient you use. These sheets confirm whether an ingredient contains a named allergen, and critically, whether it is produced in a facility that also handles allergens — the basis for "may contain" advisory labelling.
A common audit failure point is outdated specification sheets. Suppliers change their manufacturing sites, reformulate products, and update their own allergen controls regularly. A specification sheet from 2021 for a flour you have been ordering since then may no longer be accurate. Inspectors expect you to have a process for periodically reconfirming allergen data with your suppliers — annually at minimum, and immediately whenever a supplier notifies you of a change. For businesses with ten or more SKUs, managing this manually in a spreadsheet becomes genuinely error-prone.
Traceability also covers batch records. If an inspector asks you to demonstrate that a product sold last Tuesday used ingredients from a specific batch, you should be able to answer that question within minutes. This matters especially in the event of a product recall: the Food Standards Agency (FSA) in the UK and the FDA in the US both require food businesses to be able to trace product forward and backward through the supply chain quickly. Businesses that cannot demonstrate this level of traceability face compliance action independent of any allergen incident.
3. Staff Training and Allergen Awareness
Inspectors do not just review paperwork — they talk to your staff. A well-documented allergen procedure counts for very little if the person preparing your food, packing your orders, or answering customer queries cannot explain what it means in practice. Staff training records are a core component of any allergen compliance audit, and they must show that every food handler has received allergen awareness training that is specific to your business, not just a generic online course certificate.
The conversations inspectors have with staff are revealing. They might ask a kitchen employee which products on your menu contain celery, or ask a packing operative what they do when an allergen-containing ingredient runs out mid-shift and a substitution needs to be made. Correct, confident answers demonstrate that your training is embedded into day-to-day practice. Hesitant or incorrect answers suggest the training has not been absorbed — regardless of what the training record says.
For online food businesses selling via Shopify, staff training should also cover how allergen information is updated on product listings. If a recipe changes or a supplier switches a single ingredient, the person responsible for updating your product descriptions needs to understand the legal implications of publishing inaccurate allergen information. A mislabelled product listing is treated with the same seriousness as a mislabelled physical package by both the FSA and local authority environmental health officers.
4. Labelling Accuracy and Point-of-Sale Information
For prepacked food — including anything you box, bag, or seal before sale — labelling accuracy is non-negotiable. Under Natasha's Law, all prepacked for direct sale (PPDS) foods must carry a full ingredients list with allergens emphasised, typically through bold or contrasting text. This includes sandwiches, salads, baked goods, and any other food packed on the same premises where it is sold. Inspectors physically check labels against the actual recipe and ingredient specification sheets during an audit.
For online sales through platforms like Shopify, the equivalent obligation is ensuring that allergen information is clearly visible and accurate on every product page before the customer completes their purchase. The FSA's guidance for online food businesses is explicit: allergen information must be available at two points — before the order is placed, and at the moment of delivery. A product description that buries allergen information below lengthy marketing copy, or omits it entirely from the product page, fails this standard even if the physical label is correct.
Inspectors also pay attention to cross-contamination warnings. Advisory statements like "may contain traces of nuts" are voluntary under UK law, but if you use them, they must be accurate and based on a genuine risk assessment — not added as a blanket disclaimer to avoid liability. Overuse of "may contain" warnings without underlying evidence is increasingly viewed by inspectors as evidence of poor allergen management rather than caution.
5. Kitchen Controls and Cross-Contamination Prevention
Even if your recipes are allergen-free and your labels are accurate, cross-contamination during preparation can render both useless. Inspectors assess your physical kitchen controls with a practical eye: they look at how allergen-containing ingredients are stored, whether equipment is properly colour-coded or designated for allergen-free preparation, and how surfaces are cleaned between production runs.
Specific red flags include shared utensils used across allergen-containing and allergen-free products without adequate cleaning, bulk ingredient storage with inadequate separation, and the absence of a defined allergen-free production schedule for businesses that make products with and without common allergens like gluten or nuts. In smaller kitchens, complete allergen separation may be physically impossible — which is why accurate "may contain" labelling and honest communication with customers matters so much in those contexts.
For Shopify food businesses dispatching from home kitchens or small-batch facilities, this section of the audit can feel the most intimidating. But inspectors are not expecting a factory-grade allergen-free facility from a small producer. They are expecting documented, proportionate controls that match the scale and risk profile of your operation. A clear written cleaning procedure, a simple production schedule, and evidence that you have thought carefully about cross-contamination risks will satisfy most inspectors even in modest kitchen environments. Tools like Allergen Matrix can help you maintain the digital records that support these physical controls.
Conclusion
Allergen compliance audits are not something to fear if you have put the right foundations in place. Inspectors are looking for consistency — between your written procedures and your real-world practices, between your supplier specifications and your labels, and between your staff training records and your team's actual knowledge. The businesses that struggle during audits are almost always those that have treated allergen compliance as a one-time setup task rather than an ongoing operational discipline.
The five areas covered in this post — documentation, traceability, staff training, labelling, and kitchen controls — represent the core of what any audit will assess. Address each one systematically and you move from reactive compliance to genuine food safety confidence. Start with your supplier specifications this week: request updated allergen data from your top five suppliers, and compare it against what your current product listings say.
Try Allergen Matrix free at saltai.app — no credit card required.
SaltAI Team
SaltAI builds focused Shopify apps for food merchants and general merchants. Every app is tested in production at a real food store — including Vanda's Kitchen — before it ships.