HACCP Plan for Cold Storage: A B2B Warehouse Template
Written for refrigerated warehouse operators, blast freezing plants and food producers planning a new facility — not for restaurant kitchens. Twelve steps to build the plan, the temperature monitoring specification behind it, how to control cross-contamination in a multi-client 3PL site, and the exact document pack an auditor will ask for.
Twelve steps to an audit-ready cold storage HACCP plan
- STEP 1
Define scope and assemble the team
State exactly which chambers, docks, blast cells and client accounts the plan covers. Name the HACCP team leader, engineering representative and a trained deputy — auditors check the deputy is competent, not just listed.
- STEP 2
Describe products and intended use
In a multi-client warehouse this is a product-category matrix (raw meat, RTE, seafood, dairy, produce, pharma) rather than one product sheet, each with its storage class and shelf-life basis.
- STEP 3
Draw the process flow and site plan
Receiving → probe check → putaway → storage → picking → staging → loading → dispatch, overlaid on a floor plan showing personnel, pallet and waste flows plus raw/RTE zoning.
- STEP 4
Verify the flow on the floor
Walk the flow on both a peak inbound day and a night shift. Undocumented practices — dock parking, cross-docking, re-palletising — are where most audit non-conformances originate.
- STEP 5
Run the hazard analysis
For each step list biological, chemical, physical and allergen hazards with likelihood × severity scoring and the prerequisite programme or control that addresses each one.
- STEP 6
Apply the CCP decision tree
Most warehouse hazards are controlled by prerequisites. Genuine CCPs are usually inbound temperature acceptance, chamber temperature control, blast freeze/chill cycles and dispatch loading.
- STEP 7
Set and justify critical limits
Every limit needs a source: regulation, client specification or a validation study. Record the source next to the number so an auditor never has to ask where it came from.
- STEP 8
Design the monitoring system
Who measures, with what instrument, how often, and where the record lands. Continuous logging plus a signed manual check at each handover point is the defensible pattern.
- STEP 9
Pre-approve corrective actions
Write the excursion playbook before it happens: quarantine location, cumulative time-temperature assessment, disposition authority, client notification and engineering root cause.
- STEP 10
Define verification activities
Calibration schedule, annual plan review, internal audit programme, temperature mapping per chamber, environmental monitoring and mock recall with a stated time target.
- STEP 11
Build the record set
One document register listing every form, its owner, retention period and storage location. Digital records need an audit trail and controlled access to be accepted.
- STEP 12
Validate, train and issue
Validate that the controls actually work (mapping study, blast cycle trial), train every shift against the final plan, then issue it under version control with a review date.
For the seven underlying HACCP principles, the CCP critical limits table and the regulatory map (FSMA, EU 852/2004, Codex, BRCGS), see the companion HACCP requirements guide for cold storage.
The monitoring specification that survives an audit
| Element | What to specify |
|---|---|
| Chamber sensors | Minimum two calibrated sensors per chamber, positioned at the warmest and coldest points identified by the mapping study — not next to the evaporator. |
| Logging interval | 15 minutes or better for frozen and chilled rooms; 1–5 minutes during blast cycles and for GDP pharma chambers. |
| Alarming | Two-tier alarm (warning and critical) with 24/7 escalation to a named on-call responder, and a documented acknowledgement time. |
| Calibration | Annual calibration traceable to a national standard, plus a quarterly ice-point or comparison check on handheld probes. |
| Mapping | Full temperature mapping at commissioning, after any layout or refrigeration change, and re-verified periodically — empty and loaded. |
| Data integrity | Records must be tamper-evident, time-synchronised, backed up off-site and retrievable for the full retention period without vendor assistance. |
Monitoring failures rarely come from missing sensors — they come from sensors placed where the mapping study says the air is coldest, alarms with no named responder, and data that cannot be exported for the audited period.
Cross-contamination control when one site stores many clients
| Risk | Control to write into the plan |
|---|---|
| Raw and ready-to-eat stored in one chamber | Dedicated chambers where volume allows; otherwise physical separation with RTE stored above raw, sealed secondary packaging and a written zoning rule in the client agreement. |
| Allergen carry-over between client accounts | Allergen declaration on every inbound account, pallet-level labelling, damaged-stock quarantine bay and cleaning validation after a spill. |
| Shared MHE and pallet movement | Colour-coded or zone-restricted forklifts and pallet trucks, documented cleaning between raw and RTE zones, and hygienic pallet policy at receiving. |
| Dock cross-flow at peak | Scheduled dock slots by product class, air-curtained or dock-sealed bays, and a maximum ambient staging time enforced by the WMS. |
| Damaged, recalled or on-hold stock | Physically segregated and signposted quarantine location with WMS lock, released only by the quality manager against a written disposition. |
| Chemical and refrigerant contamination | Cleaning chemicals stored outside food chambers, ammonia leak detection with evacuation procedure, and food-grade lubricants on all overhead equipment. |
| Personnel and visitor movement | Zone-based PPE and access control, contractor induction records, and a route that prevents crossing from raw to RTE zones without a hygiene break. |
In a shared-user site the segregation matrix is contractual as well as technical: each client storage agreement should reference the zoning rules, the allergen declaration duty and the quarantine procedure, so a single non-compliant account cannot compromise the whole facility.
The document pack to have ready before the auditor arrives
- Signed and version-controlled HACCP plan with team competency records
- Hazard analysis worksheets and CCP decision-tree rationale
- Critical limit justification with regulatory or specification source
- Continuous monitoring data for the audited period, exportable
- Receiving and dispatch temperature checks with operator signatures
- Excursion and corrective-action records with root-cause closure
- Sensor calibration certificates and probe verification logs
- Chamber temperature-mapping reports (commissioning and latest)
- Prerequisite programme records: cleaning, pest, maintenance, glass/hard plastic
- Allergen and client segregation matrix for multi-client storage
- Training matrix by role and shift, with refresher dates
- Internal audit schedule, findings and mock-recall results
Keep the pack in one indexed location with a document register listing owner, version and retention period. Most non-conformances at storage-and-distribution audits are evidence failures, not control failures.
A senior cold-chain specialist stays with your project from first brief to commissioning.
HACCP plan questions from warehouse operators
What is a HACCP plan for a cold storage warehouse?
It is a documented food-safety system that identifies the hazards in receiving, storing, freezing, picking and dispatching temperature-controlled goods, sets critical control points and limits for them (mostly temperature), and defines how each one is monitored, corrected, verified and recorded. Unlike a restaurant plan it is built around handling and holding third-party product rather than cooking or preparation.
How is a warehouse HACCP plan different from a food-processing plan?
A processing plan controls kill steps such as cooking or pasteurising. A cold store rarely has a kill step, so the plan is dominated by time-temperature integrity, segregation and traceability. The number of CCPs is small, but the volume of monitoring records and the traceability burden across many clients is far higher.
Do 3PL cold stores need HACCP if they never open the product?
Yes. Storage and distribution operators handling food are within scope of food-hygiene regulations in most jurisdictions and must operate HACCP-based procedures. Clients and certification schemes such as BRCGS Storage & Distribution will require a documented plan regardless of whether packaging is opened.
How many CCPs should a refrigerated warehouse have?
Typically three to five. Adding a CCP for every hazard weakens the plan — anything a prerequisite programme reliably controls should stay a prerequisite. Auditors look for a defensible decision-tree rationale, not a long list.
How do multi-client facilities prevent cross-contamination?
Through zoning and written rules rather than goodwill: raw and ready-to-eat separated by chamber or by height and sealed packaging, an allergen declaration for every account, restricted MHE between zones, scheduled dock slots by product class, and a locked quarantine bay for damaged or on-hold stock. The segregation matrix belongs in both the HACCP plan and the client storage agreement.
How long must HACCP records be kept?
Common practice is two years, or product shelf life plus six months where that is longer. Certification schemes and client contracts frequently specify longer, so set the retention period per record type in your document register and confirm the digital system can retrieve them for that period.
What should be specified at project stage to make HACCP achievable?
Sensor count and placement, logging interval and data retention, two-tier alarm escalation, standby refrigeration or redundancy, zoning and door strategy, dock sealing, hygienic finishes and drainage, and a commissioning package that includes temperature mapping and calibration certificates. Put all of it in the RFQ so every supplier quotes the same compliance scope.
Turn the plan into an equipment specification
ISO 22000 for cold stores running a HACCP plan
ISO 22000 certifies the food safety management system behind a temperature-controlled facility: scope by chamber and temperature class, prerequisite programmes, validated temperature control, traceability and recall. Full clause-by-clause detail, costs and audit evidence live on the ISO 22000 cold storage guide.
Certification process
- 1. Define scopeList every site, chamber and temperature class (ambient, +2/+8 °C, 0 °C, −18 °C, −25 °C) and the product categories held.
- 2. Appoint the food safety teamNamed team leader with authority, plus operations, engineering, quality and transport representation.
- 3. Build the prerequisite programmesFabric and hygiene, drainage, pest control, cleaning, maintenance, waste, personal hygiene and dock control per ISO/TS 22002-1 adapted to warehousing.
- 4. Run the hazard analysisCodex-based analysis for a holding-and-moving facility; most cold stores end with chamber temperature and dispatch loading as the genuine CCPs.
- 5. Validate temperature controlChamber mapping empty and loaded, justified sensor placement, continuous logging, two-tier alarms and traceable calibration.
- 6. Prove traceability and recallForward and backward traceability across multi-client stock inside the declared window, evidenced by a mock recall.
- 7. Stage 1 and Stage 2 auditsDocumentation review, then the on-site implementation audit, followed by non-conformity closure and certificate issue.
Procurement checklist
- •Certificate scope statement lists the exact chambers and temperature classes you will use
- •Temperature mapping study for each chamber, empty and loaded, less than 12 months old
- •Continuous data logging with export, audit trail and defined retention period
- •Two-tier alarming with a named 24/7 escalation route and response-time evidence
- •Calibration certificates traceable to a national standard for every monitoring sensor
- •Documented HACCP plan with CCP limits, monitoring frequency and corrective actions
- •Mock recall completed within the declared traceability window, with records retained
- •Supplier scope confirmation for hygienic panel design, finishes and drainage detailing
- •Standby or redundant refrigeration capacity defined for the temperature class held
- •Last audit report and non-conformity closure evidence supplied before contract award
ISO 22000 questions buyers ask
What is ISO 22000 for cold storage?+
ISO 22000 is the international food safety management system standard. For a cold store it certifies the management system that controls temperature holding, prerequisite programmes, traceability and recall across defined chambers and temperature classes — not the building itself. The certificate is scope-specific: chambers left out of the scope statement are not certified.
How long does ISO 22000 certification take for a cold store?+
Typically 4–9 months from kick-off for a single site: 6–12 weeks to build the food safety management system and prerequisite programmes, 4–8 weeks of records before the Stage 1 audit, then Stage 1 and Stage 2 audits roughly 4–8 weeks apart, plus non-conformity closure.
How much does ISO 22000 certification cost?+
For a single cold store, certification body fees usually run about USD 6,000–18,000 for the three-year cycle depending on headcount, chamber count and shifts, plus consultancy of roughly USD 5,000–20,000 and internal cost for temperature mapping, calibration and logging upgrades. Multi-site groups get lower per-site fees.
ISO 22000 vs BRCGS Storage & Distribution — which do buyers ask for?+
ISO 22000 is a management-system standard accepted worldwide and easy to integrate with ISO 9001. BRCGS Storage & Distribution is a GFSI-benchmarked, more prescriptive scheme that UK and EU retailers usually specify by name. If your customers are retail supply chains, BRCGS (or FSSC 22000) is normally required; ISO 22000 alone may not satisfy the contract.
What evidence does an ISO 22000 cold storage audit require?+
Temperature mapping per chamber empty and loaded, sensor placement justified by that mapping, continuous logging with two-tier alarms and named 24/7 escalation, calibration certificates traceable to a national standard, the HACCP plan and hazard analysis, prerequisite programme records, a completed mock recall inside the declared traceability window, internal audit coverage of every clause and a management review.
Does new refrigeration equipment need to be ISO 22000 compliant?+
Equipment is not certified against ISO 22000, but the specification decides whether you can pass. Ask suppliers for hygienic-design panels and finishes, calibrated sensors with certificates, data logging with export and audit trail, alarm contacts for remote escalation, and documented redundancy or standby capacity for the temperature class you hold.