A HACCP plan is a written food safety document that identifies the biological, chemical, and physical hazards in your food preparation process and defines the controls to prevent them. Required by most US health departments, it is the single most important compliance document for food truck operators, cloud kitchen operators, and catering businesses.
If you have ever wondered what that acronym means, whether you actually need one, or how to get a plan without spending thousands on a consultant, this guide covers all of it.
What HACCP stands for
HACCP stands for Hazard Analysis Critical Control Points. It is a systematic approach to food safety that focuses on prevention rather than end-product testing.
The concept was developed in the 1960s by the Pillsbury Company in partnership with NASA and the US Army Natick Laboratories. NASA needed a way to guarantee that food sent to space would not make astronauts sick. The result was a prevention-based system that identifies where things could go wrong and puts controls in place before problems happen.
The FDA adopted HACCP principles as the foundation for food safety regulation in the United States. Today, HACCP-based food safety plans are the standard for food businesses of all sizes.
The three types of hazards
Every HACCP plan addresses three categories of hazards:
- Biological hazards. Bacteria like Salmonella, E. coli, and Listeria. Viruses like Norovirus. Parasites in undercooked seafood or meat.
- Chemical hazards. Cleaning chemicals stored near food, allergens from cross-contact, pesticide residues on produce.
- Physical hazards. Metal fragments from worn equipment, glass from broken containers, hair, bandages, or other foreign objects.
Your HACCP plan must identify which of these hazards exist at each step of your food preparation process and describe how you control them.
Who needs a HACCP plan
The short answer: every food business that prepares or serves food to the public. The FDA Food Code requires all food establishments to have a food safety plan based on HACCP principles.
In practice, enforcement varies by state and by the type of food establishment. Here is how it breaks down:
Food trucks. Most states and counties require food trucks to have a written food safety plan. In Texas, for example, the Department of State Health Services requires a food safety management plan for all mobile food units. Marcus, a taco truck owner in Austin, discovered this when a health inspector asked to see his plan during a routine inspection.
Cloud kitchens. Because cloud kitchens operate as commercial food establishments, they are subject to the same HACCP requirements as restaurants. The added complexity is that many cloud kitchens run multiple brands from a single kitchen, which creates cross-contamination risks that must be addressed in the plan.
Caterers. Catering businesses face unique hazards related to food transport and off-site service. Your HACCP plan must address temperature control during transit, setup at the event venue, and holding times during service.
Restaurants. All full-service and limited-service restaurants need a HACCP-based food safety plan.
Even if your local health department does not explicitly require a written HACCP plan, having one demonstrates due diligence. If a customer gets sick and you face a lawsuit, a documented HACCP plan is your strongest defense.
The 7 HACCP principles at a glance
The HACCP system is built on seven principles defined by the USDA Food Safety and Inspection Service. Here is a quick overview (for a detailed walkthrough, see our guide to the 7 HACCP principles explained):
-
Conduct a hazard analysis. List every step in your process from receiving ingredients to serving food. At each step, identify what biological, chemical, or physical hazards could occur.
-
Determine Critical Control Points (CCPs). A CCP is a step where you can apply a control to prevent, eliminate, or reduce a hazard to an acceptable level. Cooking is the most common CCP because heat kills harmful bacteria.
-
Establish critical limits. Set measurable boundaries for each CCP. For example: chicken must reach an internal temperature of 165°F for at least 15 seconds.
-
Establish monitoring procedures. Define how you will check that critical limits are being met. Who checks? How often? With what equipment?
-
Establish corrective actions. Define what happens when a critical limit is not met. Reheat? Discard? Recalibrate equipment?
-
Establish verification procedures. Confirm that the entire system is working. Calibrate thermometers, review monitoring records, conduct periodic audits.
-
Establish recordkeeping. Document everything. Temperature logs, cleaning schedules, corrective actions, equipment calibration records. These records prove to inspectors that your system works.
What a HACCP plan includes
A complete HACCP plan is a written document that contains the following sections:
Cover page and business information
Your business name, address, type of operation, permit numbers, and the date the plan was created or last updated.
HACCP team
The names and roles of everyone responsible for food safety in your operation. For a solo food truck operator, this is just you. For a larger operation, it includes your chef, kitchen manager, and anyone who handles food.
Product description
A description of the food products you prepare, including the types of ingredients, the intended consumer (general public, specific age groups, immunocompromised populations), and the method of distribution (on-site service, delivery, catering).
Process flow diagram
A step-by-step diagram showing how food moves through your operation, from receiving raw ingredients to serving the finished product. This is the backbone of your hazard analysis.
Hazard analysis worksheet
A table that lists every step in your flow diagram, the potential hazards at each step, whether each hazard is significant, and the preventive measures for each significant hazard. This is the most important part of your HACCP plan.
CCP summary table
For each Critical Control Point, this table lists the hazard being controlled, the critical limit, the monitoring procedure, the corrective action, the verification method, and the records to be kept.
Monitoring forms
The actual forms your team uses daily: temperature logs, cleaning checklists, receiving inspection forms, and corrective action reports.
Supporting documentation
Equipment calibration records, supplier certifications, employee food safety training records, and your plan review history.
For a detailed look at each section with fill-in guidance, see our HACCP plan template. For annotated real-world plans, see our HACCP plan examples.
How to get a HACCP plan
You have three main options for getting a HACCP plan:
Option 1: Hire a food safety consultant
A consultant will visit your operation, observe your processes, and write a custom HACCP plan. This is the most thorough option but also the most expensive.
Cost: $800 to $2,000 or more, depending on your operation's complexity and location.
Pros: Highly customized, written by an expert, often includes staff training.
Cons: Expensive, takes 2 to 4 weeks, you still need to understand the plan to implement it.
Option 2: Use a template
Generic HACCP plan templates are available from state health departments and industry organizations. You download the template and fill in the details for your specific operation.
Cost: Free to $200.
Pros: Affordable, gives you a starting structure.
Cons: Generic templates are not customized to your state's specific food code requirements, your menu, or your equipment. Many inspectors can tell when a plan is a generic template that has not been properly customized. For help customizing a template, see our step-by-step guide to creating a HACCP plan.
Option 3: Use HACCP plan software
Modern HACCP plan software generates a customized plan based on your business type, state, menu, and equipment. PassMyKitchen, for example, generates a complete HACCP plan in about 30 seconds using AI that understands your state's specific food code requirements.
Cost: $29 to $49 per month (includes daily compliance tracking, temperature logs, cleaning schedules, and more).
Pros: Customized to your operation, generated in seconds, automatically updated when regulations change, includes daily compliance tracking tools.
Cons: Monthly subscription cost (though far less than a consultant).
Common mistakes with HACCP plans
After working with hundreds of food business owners, here are the most common HACCP plan mistakes we see:
Using a generic plan. A HACCP plan for a manufacturing plant is not the same as one for a food truck. Your plan must reflect your specific operation, your specific menu, and your specific state's food code.
Not updating the plan. Your HACCP plan is a living document. When you add a new menu item, change a supplier, buy new equipment, or move to a new location, your plan needs to be updated. At minimum, review your plan annually.
Not training your staff. A HACCP plan sitting in a binder is useless if your team does not understand it. Every employee who handles food should know the CCPs relevant to their role and what to do when something goes wrong.
Skipping the monitoring records. The plan itself is only half the equation. Inspectors want to see that you are actually following it. That means daily temperature logs, cleaning records, and corrective action documentation. PassMyKitchen automates this recordkeeping so you never miss a log.
Ignoring corrective actions. When a critical limit is not met (cold holding temp is 45°F instead of 41°F), you need to take action and document it. Simply ignoring the deviation is a critical violation.
Simplify your compliance with PassMyKitchen
Building and maintaining a HACCP plan does not have to be complicated or expensive. PassMyKitchen generates a customized HACCP plan for your business in about 30 seconds, then helps you stay compliant every day with automated temperature logs, cleaning schedules, and inspection-ready records.
See our plans and start your free trial.
Frequently asked questions
Is a HACCP plan legally required?
In most US jurisdictions, yes. The FDA Food Code, which most states adopt in some form, requires food establishments to have a food safety plan based on HACCP principles. Some states require a formal written plan; others require demonstrated knowledge of HACCP principles. Either way, having a written plan is the safest approach.
How much does a HACCP plan cost?
It depends on how you create it. Hiring a consultant costs $800 to $2,000. Using a template is free to $200 but requires significant customization. Using software like PassMyKitchen costs $29 to $49 per month and includes a customized plan plus daily compliance tracking tools.
How often should I update my HACCP plan?
Review your HACCP plan at least once per year. Update it immediately when you make significant changes: new menu items, new equipment, new suppliers, a change in your process flow, a failed inspection, or a move to a new location or state.
Can I write my own HACCP plan?
Yes, but it requires understanding of HACCP principles and your state's food code. Many food business owners successfully write their own plans using templates or software. If you are not confident in your food safety knowledge, consider taking a food safety manager certification course first, or use a tool like PassMyKitchen that builds the plan for you based on proven food safety science.