A HACCP plan is your roadmap to food safety compliance. This guide covers everything a food truck owner, cloud kitchen operator, or caterer needs to know about creating, implementing, and maintaining a HACCP plan that satisfies health inspectors and protects your customers.
If you are new to HACCP, start with our overview of what a HACCP plan is. This guide goes deeper into every aspect of building and using one.
Why every food business needs a HACCP plan
A HACCP plan is not just a regulatory checkbox. It is the system that prevents foodborne illness in your operation and protects your business if something goes wrong.
The cost of not having one. A failed health inspection can cost your food business $3,500 to $12,000 when you factor in fines, mandatory closure days, reinspection fees, and lost revenue. In severe cases, a foodborne illness outbreak linked to your business can result in lawsuits exceeding $100,000.
Inspector expectations. Health inspectors are trained to look for HACCP-based food safety systems. When an inspector asks "What is your plan for controlling cross-contamination?" or "How do you verify cooking temperatures?", they are asking about your HACCP plan. Having a documented answer builds confidence and speeds up the inspection.
Customer trust. According to the CDC, roughly 48 million Americans get sick from foodborne illness every year. Your customers trust that you are taking food safety seriously. A HACCP plan is how you deliver on that trust.
Legal protection. If a customer files a complaint or lawsuit, a documented HACCP plan with monitoring records demonstrates that you exercised due diligence. Without it, you have no defense.
The 7 principles of HACCP
The HACCP system rests on seven principles defined by the FDA. Here is each principle with practical examples for small food businesses. For a dedicated deep dive, see the 7 HACCP principles explained simply.
Principle 1: Conduct a hazard analysis
List every step in your food preparation process, from the moment ingredients arrive at your door to the moment food reaches a customer. At each step, ask: what biological, chemical, or physical hazard could occur here?
Food truck example. Marcus runs a taco truck in Austin. His process steps include: receiving ingredients at his commissary kitchen, storing in walk-in cooler, prepping proteins and vegetables, loading the truck, driving to the location, cooking on the truck, holding food hot, and serving customers. At the "loading the truck" step, the hazard is temperature abuse. Raw chicken sitting in an unrefrigerated truck for 30 minutes could enter the danger zone (41°F to 135°F).
Cloud kitchen example. Priya operates two virtual brands from one kitchen in Brooklyn. Her hazard analysis must include cross-contamination between her two menus. Shared cutting boards, shared fryers, and shared storage shelves all create opportunities for allergen cross-contact and bacterial transfer.
Principle 2: Determine Critical Control Points
A Critical Control Point (CCP) is a step where you can apply a control to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Not every step is a CCP. Only the steps where control is essential.
Common CCPs for small food businesses:
- Cooking. Heat kills bacteria. This is almost always a CCP.
- Cold holding. Keeping food at 41°F or below prevents bacterial growth.
- Hot holding. Keeping food at 135°F or above prevents bacterial growth.
- Receiving. Checking that deliveries arrive at safe temperatures.
- Cooling. Bringing cooked food from 135°F to 41°F within the required time.
Principle 3: Establish critical limits
Critical limits are the measurable boundaries that separate safe from unsafe at each CCP. These come directly from the FDA Food Code:
| Food | Minimum Internal Temperature | Hold Time | |------|------------------------------|-----------| | Poultry (chicken, turkey) | 165°F | 15 seconds | | Ground meat (beef, pork) | 155°F | 15 seconds | | Whole meat (steaks, chops) | 145°F | 15 seconds | | Fish and seafood | 145°F | 15 seconds | | Hot holding | 135°F | Continuous | | Cold holding | 41°F or below | Continuous |
Your state may have additional or stricter requirements. Texas, for example, follows the FDA Food Code closely, while some states have adopted more specific rules for certain food types.
Principle 4: Establish monitoring procedures
For each CCP, define exactly how you will check that critical limits are being met:
- What is being monitored? (Internal temperature of grilled chicken)
- How is it monitored? (Calibrated digital probe thermometer)
- When is it monitored? (Every batch, before serving)
- Who monitors it? (The cook on duty)
Monitoring must be consistent and documented. A temperature check that is not recorded might as well not have happened, as far as an inspector is concerned.
Principle 5: Establish corrective actions
When monitoring reveals that a critical limit has been violated, you need a predefined response:
- Cooking CCP violation. Chicken measures 155°F instead of 165°F. Corrective action: continue cooking until 165°F is reached. Document the deviation and the action taken.
- Cold holding CCP violation. Prep fridge reads 47°F. Corrective action: check if food has been above 41°F for less than 2 hours (if so, move to a working unit). If over 2 hours, discard the food. Document everything.
- Receiving CCP violation. Delivery of raw shrimp arrives at 50°F instead of 41°F. Corrective action: reject the delivery. Document the rejection and notify the supplier.
Principle 6: Establish verification procedures
Verification confirms that your entire HACCP system is working correctly. This includes:
- Calibrating thermometers weekly (ice water method: should read 32°F in ice slurry)
- Reviewing monitoring records weekly to catch patterns
- Conducting an internal audit of your HACCP plan quarterly
- Reviewing and updating the entire plan annually
Principle 7: Establish recordkeeping
Records are your proof that the system works. Required records include:
- Daily temperature logs (cooking, holding, receiving)
- Cleaning and sanitizing schedules
- Corrective action reports
- Equipment calibration logs
- HACCP plan review history
- Employee food safety training records
PassMyKitchen digitizes all of this recordkeeping, so your team logs temperatures and cleaning tasks from their phones, and your records are always inspection-ready.
HACCP plan sections explained
A complete HACCP plan document includes these sections:
Product description. What food products you prepare, the ingredients used, the preparation method, the packaging (if any), and the intended consumer.
Intended use statement. How the food will be consumed. Is it served immediately? Held hot for service? Packaged for later consumption? This affects your hazard analysis.
Process flow diagram. A visual map of every step from receiving to service. This is what you use to conduct your hazard analysis.
Hazard analysis table. The detailed worksheet listing each step, identified hazards, their significance, and the preventive measures.
CCP summary table. A reference table with one row per CCP showing the hazard, critical limit, monitoring method, corrective action, verification, and records.
Monitoring schedule. When and how often each CCP is checked.
Standard Operating Procedures (SOPs). Written procedures for handwashing, cleaning and sanitizing, receiving inspections, and employee health policies.
See our HACCP plan template for a fill-in-the-blank version of each section, or browse HACCP plan examples to see completed plans for different business types.
HACCP plans by business type
HACCP for food trucks
Food trucks face unique hazards that fixed kitchens do not:
- Limited refrigeration. Most trucks have a single small cooler. Temperature monitoring is critical because a power interruption or a busy day with frequent door openings can push temperatures into the danger zone.
- Water supply constraints. Trucks carry limited fresh water, which affects handwashing compliance and sanitizing capacity.
- Transport hazards. Food prepared at a commissary kitchen and loaded onto the truck must maintain safe temperatures during transit.
- Generator dependence. If the generator fails, refrigeration and cooking equipment stop working. Your HACCP plan needs a corrective action for power failures.
For a dedicated guide, see HACCP plans for food trucks.
HACCP for cloud kitchens
Cloud kitchens introduce multi-brand complexity:
- Cross-contamination between brands. If you run a seafood brand and a nut-free brand from the same kitchen, your HACCP plan must address allergen separation protocols.
- Shared equipment scheduling. When multiple brands share grills, fryers, and prep surfaces, cleaning between brand switches becomes a CCP.
- Delivery packaging. Food packed for delivery must maintain safe temperatures during the delivery window, which can be 30 to 60 minutes.
HACCP for caterers
Catering adds transport and off-site variables:
- Temperature during transit. Food must leave your kitchen at safe temperatures and arrive at the venue still within safe limits. Your plan should define maximum transport times and required insulated containers.
- Venue setup. Not every event venue has adequate heating or cooling equipment. Your plan needs protocols for when the venue setup is inadequate.
- Holding times. Buffet service can extend for hours. Your plan must define maximum hold times and procedures for replenishing food safely.
For a dedicated guide, see catering HACCP plans.
How to keep your HACCP plan current
A HACCP plan is a living document. It needs regular attention:
Annual review. At least once per year, review the entire plan. Are all menu items covered? Have any regulations changed? Are your critical limits still correct?
Menu changes. Every time you add a menu item, you need to update your hazard analysis and flow diagram. A new raw protein introduces new biological hazards. A new allergen-containing ingredient changes your chemical hazard profile.
Equipment changes. New cooking equipment, new refrigeration, or a kitchen remodel all require updating your process flow and potentially your CCPs.
After a failed inspection. If an inspector identifies a food safety violation, review your HACCP plan for gaps. The violation may reveal a hazard your plan did not adequately address.
After a foodborne illness complaint. Any report of a customer illness should trigger an immediate HACCP plan review.
HACCP plan costs
| Method | Cost | Timeline | Customization | |--------|------|----------|---------------| | Food safety consultant | $800 to $2,000 | 2 to 4 weeks | High | | Template (self-service) | Free to $200 | 1 to 2 weeks of work | Low to medium | | PassMyKitchen software | $29 to $49/month | 30 seconds | High (AI-generated for your state, type, and menu) |
The consultant route makes sense for large, complex operations. For food trucks, cloud kitchens, and small catering businesses, software provides the best combination of customization, speed, and affordability.
Simplify your compliance with PassMyKitchen
PassMyKitchen generates a HACCP plan customized to your business type, state, and menu in about 30 seconds. Then it helps you stay compliant every day with digital temperature logs, cleaning checklists, and inspection-ready records.
See plans and pricing or start your free 7-day trial.
Frequently asked questions
What is the difference between HACCP and HARPC?
HACCP (Hazard Analysis Critical Control Points) and HARPC (Hazard Analysis and Risk-Based Preventive Controls) are both food safety systems, but they apply to different contexts. HACCP is the standard for food service establishments (restaurants, food trucks, caterers). HARPC was introduced by the Food Safety Modernization Act (FSMA) and applies to food manufacturing and processing facilities. If you run a food truck, cloud kitchen, or catering business, HACCP is the system you need.
Do I need a new HACCP plan for each location?
Yes. Each location has its own equipment, layout, water source, and potentially different state or county regulations. If you operate two food trucks, you need a HACCP plan for each truck. If you cater events in multiple states, your plan should account for the different food code requirements in each state.
What happens if I do not have a HACCP plan during an inspection?
The consequences depend on your jurisdiction. At minimum, you will likely receive a violation that requires correction before your next inspection. In stricter jurisdictions, operating without a food safety plan can result in an immediate suspension of your food permit until you produce a compliant plan. In Texas food safety regulations, a missing food safety plan is a priority violation.
How long does it take to create a HACCP plan?
From scratch using templates, expect 1 to 2 weeks of work including research, writing, and review. With a food safety consultant, the process takes 2 to 4 weeks including the site visit. With PassMyKitchen, you get a customized plan in about 30 seconds after completing your business profile.