Cold Chain Audit Checklist — HACCP, GDP & BRC (Printable)
A single operational audit checklist covering food (HACCP, BRC, IFS, ISO 22000) and pharmaceutical (GDP, GSP) cold chain touchpoints — from receiving to last-mile delivery. Print, walk the site, close the gaps.
Run this audit quarterly for food operations and monthly for pharma. Every failed item needs a CAPA (corrective action, preventive action) with an owner and a date — that is what auditors actually check.
Section 1 — Facility & infrastructure
The building either supports the cold chain or fights it.
- Insulated envelope integrity checked (no visible condensation, thermal bridges, gaps)
- Cold room door seals and air curtains functional at every opening
- Dock levellers and dock shelters seal against trailers (no ambient air infiltration)
- Floor drainage clear, no ice build-up
- Emergency lighting and man-trap alarms tested in walk-in freezers
- Backup power (generator / UPS) tested under load quarterly
Section 2 — Temperature monitoring & data integrity
If it isn't logged, it didn't happen — auditors are ruthless here.
- Calibrated data loggers in every temperature-controlled zone (min 1 per 500 m³)
- Continuous logging at ≤ 15-minute intervals (5-minute for GDP pharma)
- Loggers positioned at worst-case points (return air, near doors, top-of-stack)
- Data retention ≥ 5 years (food) / ≥ product shelf life + 1 year (pharma)
- Alarm escalation tested with response times documented
- Calibration certificates on file (annual, traceable to national standard)
Section 3 — Receiving & dispatch
70% of temperature excursions happen at loading docks.
- Trailer temperature verified against paperwork before unloading
- Product pulp/core temperature checked with calibrated probe on random pallets
- Time-out-of-refrigeration (TOR) recorded per delivery
- Rejection criteria clear and enforced (deviation logs signed)
- Cross-docking windows minimised, with target < 30 minutes for chilled
Section 4 — Storage operations
Rack layout and rotation drive both food safety and OTIF.
- FIFO / FEFO rotation enforced with WMS-driven picking
- Product segregation by allergen, species, temperature class
- No product stored within 15 cm of floor, wall, or ceiling
- No product blocking evaporator airflow
- Damaged / recalled stock quarantined in dedicated zone
- Cleaning schedule executed with signed records
Section 5 — Transport & last mile
The weakest link — and where regulators focus.
- Pre-cool vehicles verified before loading
- Multi-drop routes stay within pre-defined maximum door-open cumulative time
- GPS + temperature telematics live for every temperature-controlled trip
- Driver training current (HACCP / GDP awareness)
- Contingency plan documented for breakdowns (transfer, dispose, insurance)
Section 6 — Documentation, training & recall
Auditors judge the paperwork before they judge the plant.
- HACCP / GDP quality manual signed and version-controlled
- CCPs / temperature limits documented per SKU
- Training records complete for all staff handling temperature-controlled product
- Mock recall exercised annually with time-to-recall under 4 hours
- Deviation register with root cause, CAPA and closure date
- Internal audit run at least twice per year
Copy this checklist into your project workspace
- Audit lead nominated with sign-off authority
- Scope defined (sites, product classes, regulations)
- Previous CAPAs closed before the new audit starts
- All findings logged with severity (critical / major / minor)
- CAPA plan issued within 5 working days of audit close
- Follow-up audit scheduled for critical findings within 30 days
Frequently asked questions
How often should we run a cold chain audit?
Internal: quarterly for food, monthly for GDP pharma. External / third-party: annual for BRC, IFS, ISO 22000, GDP. Post-incident: within 14 days of any critical excursion.
What's the difference between HACCP and GDP?
HACCP is a food-safety framework focused on Critical Control Points; GDP (EU 2013/C 343/01) governs pharmaceutical distribution end-to-end — storage, transport, personnel and documentation. Pharma cold chain typically layers GDP on top of ISO 9001 and GxP.
Do we need continuous logging or is spot-checking enough?
For GDP pharma: continuous logging is mandatory. For food BRC / IFS: continuous logging is best practice and effectively expected on any site above small-scale. Spot-checking alone will fail modern audits.
How do we close findings quickly?
Assign a named owner and a date at the moment the finding is raised, not later. Rank by severity, close criticals first, and verify with photo evidence or reperformed test.