Getting onto retail shelves: private-label food audits

A food manufacturer can run a clean factory, hold a loyal customer base and make a product that outsells the branded competition, and still hear the same first question from a retail buyer who likes it. Not 'what is your price', but 'send me your certificate and your last two audit reports'. Selling your own brand into a shop is one relationship. Making a product that carries the retailer's name on the front of the pack is a very different one, and the audit expectations that come with it catch a lot of capable suppliers off guard.

Private label, or own brand, means a retailer is putting its reputation on a product you make. If something goes wrong, the recall notice carries their logo, not yours. That single fact shapes everything about how they assess you, and it is why an own-brand programme is built on audits rather than promises.

Why an own-brand listing raises the bar

Under food law in most markets, the name on the label is the legally responsible food business. When a supermarket sells your branded sauce, you are the brand owner and the first line of legal responsibility. When that same sauce ships as the supermarket's own label, the supermarket becomes the brand owner and has to show it took every reasonable precaution to keep the product safe and legal. Retail technical teams call this due diligence, and the only way they can stand behind it is to audit, and keep auditing, the sites that make their products.

A private-label supplier is therefore treated as an extension of the retailer's own operation. The questions go deeper than they would for a branded line, the document requests are heavier, and the patience for repeat findings is thinner. None of this is hostility. It is a retailer protecting a brand that sits across thousands of stores, and the supplier who understands that early tends to have a much smoother approval.

The food-safety certificate is the ticket, not the finish line

Almost every serious grocery retailer expects a food-safety certificate that the Global Food Safety Initiative recognises before a conversation about own-brand supply even begins. In practice that means one of three schemes: BRCGS Food Safety, IFS Food, or FSSC 22000. It is no accident that the first two came straight from retailers. BRCGS began as a British Retail Consortium standard so that UK retailers could hold own-brand suppliers to one shared benchmark, and IFS was created by German and later French retail groups for the same reason. These schemes exist precisely because retailers needed a defensible way to audit the factories behind their own labels.

The certificate gets you taken seriously. It rarely wins the listing on its own. Buyers read the grade and the detail, not just the logo. BRCGS issues grades from AA downward, IFS reports a percentage score against its higher and foundation levels, and a technical team will often set a minimum grade and look at whether you took an announced or an unannounced audit. A pass at the bottom of the scale, or a long tail of minor nonconformities, tells a buyer as much as the certificate does. Beyond that certificate sits a layered set of checks, and it helps to see them as distinct layers rather than one tall wall.

The retailer's own technical audit

A GFSI certificate proves your food-safety management system meets a recognised benchmark. It does not tell a retailer whether your site can make their specific product, to their specific specification, week after week. That gap is why many retailers run their own technical audit on top of the certification audit, or require extra modules added to it. Their technical managers walk the line, challenge the HACCP study for the product in question, review the finished-product specification, check shelf-life validation, taste and inspect against the agreed standard, and read the label artwork closely. Several large retailers keep detailed codes of practice that a supplier is measured against before a single pallet ships.

Ethical and social compliance now sits next to food safety

A clean food-safety report no longer stands on its own. Most major grocery chains require a current social-compliance audit before they approve a supplier, and they treat a serious labour or safety failure as a listing risk in the same way they treat a hygiene failure. The two audit families that dominate are SMETA, run through the Sedex platform, and amfori BSCI. Both examine working hours, wages, health and safety, freedom of association, and business ethics across your site. A food-safety certificate with no social audit behind it will stall an own-brand application at a great many retailers.

Product, label and packaging conformity

Own-brand work usually means you produce the pack and the printed label as well as the food inside it. That hands you legal detail a branded supplier often keeps in-house: allergen declarations, the ingredient list and quantitative ingredient declaration, the nutrition panel, origin statements, and any claim printed on the front of the pack. Retail legal and technical teams sign off artwork before it goes to print, and they expect you to hold the evidence behind every claim. Where the food touches its packaging, food-contact compliance and migration testing come into scope, so the packaging specification becomes part of the audit trail rather than an afterthought.

Traceability, recall and the right to audit

Retailers test the parts of your system they would have to rely on in a crisis. Expect a traceability challenge during the audit: an auditor picks a finished batch, traces it back to raw materials and forward to dispatch, and runs a mass-balance check inside a set time limit. Expect a review of your mock-recall records and your crisis contacts. Almost every own-brand contract also carries a right-to-audit clause and the option of an unannounced visit, because a site that performs only when it knows the date is exactly what these programmes are designed to expose.

What separates an approved supplier from a rejected one

After enough of these audits, the deciding factor is rarely the certificate on the wall. It is whether the system on paper matches the site on the floor. Auditors and retail technologists read the same signals: a cluster of minor nonconformities around one theme, which points to a root cause nobody fixed; corrective actions that close the symptom but not the cause; records signed in advance; a quality manual that describes a factory no one would recognise. The suppliers who turn an audit into a listing share a few habits. They run a real food-safety culture rather than a paperwork exercise, they treat every nonconformity as a root-cause investigation, and they answer a retailer's technical questions in hours rather than weeks.

Building the stack in a sensible order

If a private-label contract is the goal, the order of work matters. Earn a GFSI-recognised certificate first, at a grade and audit option that retailers respect, and use the surveillance cycle to keep it strong instead of scrambling before each visit. Put a current social-compliance audit in place alongside it. Build the product and label dossiers so a buyer's legal sign-off is quick. Rehearse traceability and recall until the team can run them cold. Do that, and the buyer's opening request for your certificate and last report becomes the start of a conversation, not the end of one.

If you are deciding which certificate to pursue first, or want a second read on whether your current BRCGS or IFS Food position is where a retailer expects it to be, Eurocert audits and certifies against the schemes retailers ask for and can talk you through the route for your product category.