SQF (Safe Quality Food) certification is increasingly required by major retailers, foodservice distributors, and ingredient buyers. Walmart, Costco, Kroger, and dozens of foodservice chains now mandate GFSI-recognized certification as a condition of doing business. If you are a food manufacturer without it, you are losing supplier approvals — and if you are pursuing it for the first time, the audit process can feel opaque until you understand exactly what it requires.
This guide covers everything you need to know before booking your first SQF audit: what the program is, how SQF Code Edition 9 changed the requirements, what auditors actually look for, and how to build a quality system that earns an AA grade on the first attempt.
What Is SQF Certification?
SQF is a food safety and quality certification program recognized by the Global Food Safety Initiative (GFSI). It is published and managed by the Safe Quality Food Institute (SQFI), a division of FMI — The Food Industry Association. SQF certification signals to retailers and buyers that your food safety management system has been independently audited and verified against a rigorous, internationally recognized standard.
GFSI recognition is what makes SQF valuable. GFSI benchmarks food safety schemes globally, and retailers that mandate "GFSI-recognized certification" accept SQF alongside BRC, FSSC 22000, IFS, and others. For food manufacturers working with multiple retail customers, SQF is often the single certification that satisfies multiple buyer requirements simultaneously.
For food and beverage manufacturers subject to FDA's FSMA regulations, SQF certification also provides substantial alignment with HARPC/FSMA food safety plan requirements, though it is not a legal substitute for FSMA compliance.
SQF Code Edition 9 — What Changed
SQF Code Edition 9 was released in 2023 and represents the most significant update to the SQF Code in a decade. Three changes have the most operational impact for manufacturers preparing for their first or recertification audit:
Food safety culture. Edition 9 added explicit requirements for documented food safety culture programs. Auditors now expect to see evidence of leadership commitment, communication programs, employee awareness, and ongoing culture improvement activities — not just a mission statement on the wall. This is the area where many manufacturers are most underprepared.
Traceability strengthening. Edition 9 tightened traceability requirements, bringing them closer to FSMA's HARPC expectations. Manufacturers must demonstrate they can trace a product from raw material receipt through finished goods distribution within a defined timeframe. Mock recall exercises are now expected as documented records, not just stated capabilities.
Environmental monitoring programs. For relevant food categories, environmental monitoring program (EMP) requirements were expanded. The expectation is a risk-based EMP with defined sampling plans, indicator organism testing, pathogen testing where appropriate, and documented corrective action processes for positive finds.
The Three SQF Certification Levels
Food Safety Fundamentals
Basic food safety prerequisites. Good manufacturing practices, cleaning and sanitation, pest control, personnel hygiene. No HACCP plan required.
HACCP-Based Food Safety
Full HACCP food safety plan required. This is the most common certification level. Retailers typically require Level 2 as the minimum for supplier approval.
Comprehensive Quality
Level 2 food safety plus a comprehensive quality management system. Rarely required by buyers; used by manufacturers with premium quality positioning.
Most food manufacturers pursuing SQF for retail supplier approval should target Level 2. Level 3 is appropriate if your specific buyers require it or if you are building a quality management system that you want to formally certify beyond food safety.
The SQF Audit Process: What to Expect
Pre-Audit Preparation (12–16 weeks)
Gap assessment against SQF Code Edition 9. Develop or update your food safety plan, HACCP documentation, prerequisite programs, and quality management procedures. Conduct at least one full internal audit and mock recall exercise. Establish your corrective action records for any gaps found.
Certification Body Selection and Scheduling
Select an SQFI-licensed certification body. Schedule your audit at least 4–6 weeks in advance. The auditor will typically conduct a document review before the on-site audit. Ensure your SQF manual, HACCP plan, and all supporting procedures are finalized before document submission.
On-Site Audit (1–3 days depending on facility size)
The auditor evaluates your documented system against the SQF Code and then walks your facility. Expect a detailed review of training records, CAPA records, internal audit records, supplier approval documentation, and calibration records. All documentation must be readily accessible — auditors do not wait for records to be located.
Corrective Action Window
Non-conformances identified during the audit must be corrected within a defined timeframe (typically 30 days for major non-conformances, immediate for critical). CAPAs must be submitted to and accepted by your certification body before the certificate is issued.
Grading and Certificate Issuance
SQF certificates are issued with a grade based on audit performance. Grades range from AA (excellent) to D (unacceptable). Most buyers require at minimum a B grade; premium buyers and some retailers require A or AA.
SQF Audit Grade Scale
Excellent (96–100%)
No major non-conformances. Demonstrates robust, proactive food safety culture. Required by some premium buyers.
Excellent (85–95%)
No critical or major non-conformances. Strong system with minor gaps. Accepted by all standard retail buyers.
Good (70–84%)
No critical non-conformances; some major gaps. Minimum grade accepted by most retailers. Certificate conditional on CAPA closure.
Fair (55–69%)
Significant gaps. Certificate issued conditionally; most buyers will not accept. Recertification audit required within 6 months.
What Auditors Actually Look For
SQF auditors spend the majority of their time in three areas: documentation completeness, records currency, and operational verification. Here is what they are specifically evaluating:
- Training records — Do records exist for every employee who performs a critical food safety function? Are they current? Are refresher training records present for annual requirements?
- CAPA closure rates — How quickly are corrective actions closed? Are root cause analyses complete and credible? Are effectiveness checks documented?
- Supplier approval — Is every supplier of food-contact materials on an approved supplier list? Are certificates of conformance or COAs on file? Are supplier audits or questionnaires current?
- Internal audit records — At least one full internal audit before certification. Are findings documented? Are CAPAs assigned and closed?
- HACCP plan completeness — Are all hazards identified, analyzed, and controlled? Are CCPs defined with critical limits, monitoring procedures, corrective actions, and verification records?
Common SQF Audit Failures
Training records not current. The most common finding. An employee was hired, trained once, and never received documented refresher training. Or training records exist but cannot be produced during the audit because they are in an unlabeled binder on a shelf in the break room.
CAPAs open too long. Non-conformances that have been open for 60, 90, or 120 days with no documented progress are a major red flag. Auditors interpret unclosed CAPAs as evidence that your corrective action process does not function effectively.
Supplier approval list not current. A supplier was added informally, or a key supplier's annual questionnaire lapsed. The approved supplier list and its supporting documentation must be maintained in real time, not reconstructed before audits.
No documented food safety culture program. Under Edition 9, this is a specific requirement, not an implicit expectation. If you cannot show a documented program with leadership commitment activities, employee awareness initiatives, and measurement metrics, expect a finding.
Timing note: Most food manufacturers need 12–16 weeks of preparation before they are genuinely audit-ready for SQF Level 2. If you are working toward a specific buyer deadline, work backward from your desired certificate date and begin your gap assessment immediately.
Affinity QMS Is Configured for SQF Code Edition 9
Affinity QMS is configured for SQF Code Edition 9 compliance from day one. Our document control, CAPA, supplier management, internal audit, and training record modules map directly to the SQF requirements. See how our platform keeps your food safety system audit-ready year-round — not just during audit prep. Book a demo to see how our modules map to the SQF Code requirements.
Book a Demo