The 7 HACCP principles are hazard analysis, identifying critical control points, setting critical limits, monitoring, corrective actions, verification, and recordkeeping. Here is what each one means for a food truck, cloud kitchen, or catering business, without the textbook jargon.
These seven principles form the backbone of every food safety plan in the United States. Whether you are a solo taco truck operator in Austin or running two virtual brands from a cloud kitchen in Brooklyn, the same seven principles apply. The difference is how you implement them for your specific operation.
For the full picture of how these principles fit into a complete HACCP plan, see our guide on what a HACCP plan is.
Where the 7 HACCP principles come from
The HACCP system was developed in the 1960s by the Pillsbury Company in partnership with NASA and the US Army Natick Laboratories. NASA needed a way to guarantee that food for astronauts would be safe to eat in space, where a case of food poisoning could be catastrophic. The result was a prevention-based system that identifies hazards before they happen instead of testing finished food after the fact.
The FDA adopted these principles as the foundation for food safety regulation in the United States, and the Codex Alimentarius Commission (a joint body of the World Health Organization and the Food and Agriculture Organization) adopted them as the global standard for food safety management.
Today, the 7 HACCP principles are the framework behind every food safety plan that health inspectors evaluate. Understanding them is not optional. It is the foundation of food safety compliance.
Principle 1: Analyze your hazards
The first principle asks you to walk through your entire food preparation process, step by step, and identify everything that could go wrong. Hazards fall into three categories.
Biological hazards are the most common cause of foodborne illness. These include bacteria like Salmonella, E. coli O157:H7, Listeria monocytogenes, and Campylobacter. Viruses like Norovirus and Hepatitis A also fall into this category. Raw chicken sitting in an unrefrigerated cooler during a generator failure is a textbook biological hazard.
Chemical hazards include cleaning chemical residues left on food contact surfaces, allergen cross-contact (nut proteins transferring from one prep station to another), and pesticide residues on unwashed produce. For cloud kitchens running multiple brands, allergen cross-contact is often the biggest chemical hazard. Priya, who runs Brooklyn Bowls and a nut-free salad brand from the same kitchen, must track this hazard at every shared surface and piece of equipment.
Physical hazards include metal fragments from worn grill surfaces, glass from a broken container, wood splinters, or personal items like bandages or jewelry that fall into food.
To conduct your hazard analysis, list every step from receiving ingredients to serving food. At each step, ask: what biological, chemical, or physical hazard could happen here? Then determine whether each hazard is significant enough to require a control. A hazard is significant if it is reasonably likely to occur and would cause harm if it did.
For a detailed walkthrough of conducting a hazard analysis, see our guide on how to create a HACCP plan.
Principle 2: Find your Critical Control Points
A Critical Control Point (CCP) is a step in your process where you can apply a control that is essential to preventing or eliminating a food safety hazard. The key word is "essential." Not every step where a hazard exists is a CCP. A CCP is the step where control must happen to keep the food safe.
The most common CCPs for small food businesses are:
- Cooking. Heat kills bacteria. Cooking chicken to 165°F for 15 seconds eliminates Salmonella and Campylobacter. This is almost always a CCP.
- Cold holding. Keeping food at 41°F or below prevents bacterial growth. If your refrigerator fails and food warms up, bacteria multiply rapidly.
- Hot holding. Keeping cooked food at 135°F or above prevents bacterial growth during service.
- Receiving. Checking that deliveries arrive at safe temperatures prevents contaminated ingredients from entering your operation.
- Cooling. Bringing cooked food from 135°F to 41°F within the required time prevents bacterial growth during the transition.
Use the CCP decision tree from the FDA guidelines to determine whether a step is a CCP. The basic logic: if this step is the last chance to control a specific hazard before food reaches the customer, it is a CCP.
Most food trucks, cloud kitchens, and caterers end up with 2 to 5 CCPs. If your plan has more than 7, you may be over-identifying. Review each one to confirm it is truly essential.
Principle 3: Set critical limits
A critical limit is the measurable boundary that separates safe from unsafe at each CCP. Critical limits must be specific numbers, not vague descriptions.
The USDA Food Safety and Inspection Service and the FDA Food Code provide the baseline critical limits:
| CCP | Critical Limit | |-----|----------------| | Cooking poultry | 165°F for 15 seconds | | Cooking ground meat | 155°F for 15 seconds | | Cooking whole meat cuts | 145°F for 15 seconds | | Cooking fish and seafood | 145°F for 15 seconds | | Hot holding | 135°F or above, continuous | | Cold holding | 41°F or below, continuous | | Cooling (stage 1) | 135°F to 70°F within 2 hours | | Cooling (stage 2) | 70°F to 41°F within 4 additional hours |
Your state may have additional or stricter requirements. Marcus, who operates his taco truck in Texas, follows the FDA Food Code as adopted by the Texas Department of State Health Services. Always verify your critical limits against your specific state's food code.
A bad critical limit sounds like "cook until done" or "keep it cold." A good critical limit reads "internal temperature of 165°F for 15 seconds, measured with a calibrated probe thermometer at the thickest part." The difference: the second version is measurable, verifiable, and leaves zero room for interpretation.
Principle 4: Monitor your CCPs
Monitoring means checking your CCPs at defined intervals to verify that critical limits are being met. For each CCP, you need to answer four questions.
What is being monitored? The internal temperature of grilled chicken at the thickest part.
How is it monitored? With a calibrated digital probe thermometer.
When is it monitored? Every batch before serving, and every 2 hours for items in hot holding.
Who monitors it? The cook on duty. For a solo food truck operator like Marcus, that is always you.
Monitoring must be consistent and recorded. A temperature check that is not written down might as well not have happened, because an inspector has no way to verify it occurred. Your monitoring log should include the date, time, what was measured, the reading, the initials of the person who took the measurement, and any corrective action.
For guidance on setting up effective temperature monitoring, see our temperature log guide.
Principle 5: Take corrective action when limits are not met
When monitoring reveals that a critical limit has been violated, you need a predefined response. The goal is to make decisions in advance so your team knows exactly what to do in the moment, without guessing.
Corrective actions follow a consistent pattern:
- Identify the problem and its cause.
- Control the affected food product.
- Fix the process to prevent recurrence.
- Document everything.
Example: hot holding drops below 135°F. Your hot holding unit reads 130°F at your 2-hour check. If the food has been below 135°F for less than 2 hours, reheat it to 165°F and return it to hot holding. If it has been below 135°F for more than 2 hours, discard it. Record the temperature reading, the estimated time below 135°F, and the action taken.
Example: chicken reads 155°F instead of 165°F. Continue cooking until the internal temperature reaches 165°F for 15 seconds. Record the initial reading and the final temperature. If the grill cannot reach the required temperature (equipment malfunction), discard the chicken and take the grill out of service until repaired.
Example: delivery arrives at 50°F instead of 41°F. Reject the delivery. Record the supplier, the product, the temperature reading, and the rejection. Notify the supplier.
A corrective action log with zero entries over months of operation is actually a red flag for inspectors. It suggests deviations are happening but not being recorded. Honest documentation of occasional problems and appropriate responses builds inspector confidence.
Principle 6: Verify the system works
Verification is the quality check for your entire HACCP system. While monitoring checks individual CCPs in real time, verification steps back and evaluates whether the whole system is functioning correctly.
Verification activities include:
Thermometer calibration. Calibrate your thermometers at least once per week. Use the ice-point method: fill a container with crushed ice and water, insert the thermometer probe, and confirm it reads 32°F (plus or minus 2°F). If it does not, adjust or replace the thermometer. Record each calibration.
Record review. Review your monitoring logs at least weekly. Look for patterns. Is the same cooler consistently reading close to 41°F? Is one shift's temperature readings consistently different from another's? Patterns reveal emerging problems before they become violations.
Internal audits. At least once per quarter, walk through your operation and observe whether your team is following the HACCP plan in practice. Are they checking temperatures at the required frequency? Using the correct thermometer? Recording results accurately?
Annual plan review. Review your entire HACCP plan at least once per year. Has your menu changed? Have you added equipment? Has your state updated its food code? Update the plan to reflect your current operation. For a complete guide to keeping your plan current, see the HACCP plan complete guide.
Principle 7: Keep records of everything
Records are the proof that your HACCP system works. Without documentation, everything else is just a claim. This is the principle that inspectors spend the most time evaluating.
Required records include:
- Temperature logs. Daily cooking temps, cold holding temps, and hot holding temps for every CCP.
- Cleaning and sanitizing logs. Documentation that food contact surfaces and equipment are cleaned on schedule.
- Receiving logs. Temperature and condition checks for every delivery.
- Corrective action reports. Every deviation from a critical limit, what happened, and what you did about it.
- Calibration records. Thermometer calibration dates, readings, and adjustments.
- Training records. Proof that your staff has been trained on food safety and their HACCP responsibilities.
- Plan review history. Dates when the plan was reviewed and any changes made.
Keep records for at least one year. Some states require two years. When in doubt, keep everything for two years.
Paper logs work, but they get lost, damaged, and disorganized. Digital logging keeps everything in one place, time-stamped and backed up, always ready for an inspector. For a deeper look at food safety recordkeeping, see our food safety record keeping guide.
How PassMyKitchen automates the 7 principles
The 7 HACCP principles can feel overwhelming when you look at them all together. PassMyKitchen breaks them down into manageable pieces and automates as much as possible.
Principles 1 through 3 (plan creation). PassMyKitchen's AI generates your complete HACCP plan, including hazard analysis, CCP identification, and state-specific critical limits, in about 30 seconds. You enter your business type, state, city, menu, and equipment. The AI does the rest.
Principles 4 and 5 (daily monitoring and corrective actions). The app provides digital temperature logs, cleaning checklists, and receiving inspection forms. When a reading falls outside your critical limits, the app prompts you for corrective action and records the entire event.
Principles 6 and 7 (verification and recordkeeping). All records are stored digitally, organized by date and CCP, and accessible in one tap through inspector mode. The app tracks thermometer calibration schedules and flags overdue tasks.
Simplify your compliance with PassMyKitchen
The 7 HACCP principles do not have to mean 7 layers of complexity. PassMyKitchen generates your HACCP plan, tracks your daily monitoring, and keeps your records inspection-ready. All from your phone.
Start your free trial and see all 7 principles in action in 30 seconds.
Frequently asked questions
Do all 7 HACCP principles apply to my food truck?
Yes. All 7 principles apply to every food business, regardless of size. The scope of each principle scales with your operation. A solo food truck may have 2 CCPs and a one-page monitoring log, while a large catering company may have 5 CCPs and a team of people responsible for monitoring. But the same seven principles structure both plans.
Which HACCP principle is the most important?
Principle 1 (hazard analysis) is the foundation for everything else. If you identify the wrong hazards or miss a significant one, every subsequent principle is built on a flawed foundation. That said, Principle 7 (recordkeeping) is what inspectors evaluate most directly, because records are your proof that the entire system works. In practice, you cannot skip any of the seven.
Can I skip any of the 7 HACCP principles?
No. The 7 principles are designed to work as a complete system. Skipping one creates gaps that compromise the entire plan. A plan with great monitoring but no corrective actions (skipping Principle 5) means you catch problems but do not fix them. A plan with great critical limits but no records (skipping Principle 7) means you cannot prove anything to an inspector. All seven are required.
How do I prove to an inspector that I follow all 7 principles?
Your HACCP plan document demonstrates Principles 1 through 3 (hazard analysis, CCPs, critical limits). Your daily monitoring logs demonstrate Principle 4 (monitoring). Your corrective action reports demonstrate Principle 5. Your calibration records and plan review history demonstrate Principle 6 (verification). And the records themselves demonstrate Principle 7. When an inspector asks to see your food safety system, you hand them your plan and your records. PassMyKitchen's inspector mode presents all of this in a clean, organized format.