Food Safety Certification

SQF Certification Software — Preparing Your Food Business for the Safe Quality Food Audit

SQF is one of the most rigorous GFSI-recognized food safety certifications in the world. Affinity QMS provides the document control, CAPA, internal audit, and supplier management infrastructure food manufacturers need to achieve and maintain SQF certification.

GFSI Recognized SQF Code Edition 9 SQF Level 1 / 2 / 3 Food Safety Quality Management

What Is SQF and Who Needs It?

The Safe Quality Food (SQF) Program is a rigorous, internationally recognized food safety and quality management system certification managed by the SQF Institute (SQFI), a division of the Food Marketing Institute (FMI). SQF is recognized by the Global Food Safety Initiative (GFSI), the benchmarking organization whose recognition means SQF is accepted by the world's leading retailers, foodservice companies, and ingredient buyers as evidence of robust food safety management.

Unlike FDA regulatory requirements, SQF certification is voluntary — but it is effectively mandatory for any food manufacturer, ingredient supplier, co-packer, or food storage and distribution company that wants to supply major retail chains (Walmart, Costco, Kroger, Target, Whole Foods), foodservice distributors, or global food brands. Major buyers require GFSI-recognized certification as a condition of their supplier approval process, making SQF a de facto market-access requirement.

SQF Code Edition 9, released in 2021 and currently the governing version, is structured as a single code with food safety and quality elements, applicable to every sector of the food supply chain. The SQF audit process involves a certification body (CB) licensed by SQFI conducting a documented site assessment — typically a one- to three-day on-site audit — followed by a certificate decision and, if successful, issuance of an SQF certificate valid for 12 months before reassessment.

SQF certificates carry a grade (A through D) based on the number and severity of non-conformances found during the audit. Grade AA (the highest tier, awarded when an unannounced audit produces an A grade) is increasingly required by premium retailers and co-manufacturing customers as a supplier qualification standard.

SQF's Three Certification Levels

SQF Code Edition 9 defines three levels of certification, each building on the previous. Most food manufacturers seeking major retail access need Level 2 at minimum; quality-focused operations targeting premium customers pursue Level 3.

SQF 1

Food Safety Fundamentals

Addresses fundamental prerequisite programs (PRPs) and Good Manufacturing Practices. Applicable to primary production operations and low-risk food businesses. SQF 1 demonstrates that a facility has foundational food safety controls in place but does not require a full HACCP-based food safety plan. Recognized for lower-risk food categories.

SQF 2

HACCP-Based Food Safety Plan

The most common certification level for food manufacturers supplying retail and foodservice customers. Requires a documented HACCP-based food safety plan in addition to all Level 1 prerequisites. SQF 2 is the minimum level accepted by most GFSI-requiring buyers. Requires annual recertification audits with the option for unannounced audits to achieve Grade A.

SQF 3

Comprehensive Quality Management

The highest SQF level, encompassing all Level 2 food safety requirements plus a comprehensive quality management system addressing product quality, specifications management, and continuous improvement. SQF 3 is sought by manufacturers supplying premium retail, private-label, or customers with strict quality specifications beyond food safety alone.

How Affinity QMS Maps to SQF Code Edition 9

SQF Requirement SQF Code Reference Affinity QMS Module What It Does
Document and Data Control 2.1.1 Document Control Controlled SOPs, records, forms, and policies with version control, approval workflows, and electronic distribution to all relevant personnel
Corrective and Preventive Action 2.5.3 CAPA Management Structured CAPA workflows from non-conformance identification through root cause analysis, corrective action assignment, verification, and close-out
Internal Audits and Mock Audits 2.5.1 Audit Management SQF-aligned internal audit templates, audit scheduling, finding tracking, corrective action linkage, and mock certification audit workflows
Worker Training and Competency 2.9 Training Management Role-based training records, training completion tracking, competency assessments, and training effectiveness verification documentation
Approved Supplier Program 2.4.2 Supplier Management Approved supplier register, supplier qualification documentation, certificates of conformance management, and periodic supplier performance reviews

Ideal Customers for SQF Certification Support

SQF Practitioner / Food Safety Manager

The designated SQF Practitioner — required by SQF Code for every certified site — needs a QMS that manages the Food Safety Plan, tracks non-conformances, and maintains audit-ready documentation without spreadsheet chaos.

Operations Director at a Food Manufacturer

Food manufacturers pursuing their first SQF certification to unlock retail distribution partnerships need to build a compliant QMS infrastructure quickly and affordably, without enterprise software complexity.

Quality Manager at a Co-Packer

Contract manufacturers and co-packers maintaining SQF Grade A or Grade AA certification need a QMS that makes internal and mock audits systematic and keeps corrective action records closure rates high before the annual recertification audit.

SQF Certification — Frequently Asked Questions

What is the difference between SQF, BRC, and FSSC 22000?

All three are GFSI-recognized food safety certifications, meaning they are accepted by the same major retail and foodservice buyers. The key differences are origin and structure. BRC (now BRCGS) originated in the UK and is widely required by British and European retailers. FSSC 22000 is built on ISO 22000 plus sector-specific prerequisite programs and is common among global manufacturers already working within an ISO management system framework. SQF is North America-dominant and is the most commonly required certification by US retail chains. Most US food manufacturers begin with SQF; manufacturers exporting to UK or European markets often pursue BRC or FSSC 22000 as an additional or alternative certification.

How often do SQF audits occur?

SQF-certified facilities must undergo a full recertification audit every 12 months. In addition, SQFI requires surveillance audits for facilities that achieved a lower grade or had critical non-conformances. Facilities achieving Grade A on their initial certification audit are eligible for an unannounced audit option — if they pass the unannounced audit with a Grade A, they earn Grade AA, which many premium buyers require. The unannounced audit window is typically a 90-day period within the certification year, during which the certification body auditor may arrive without prior notice.

How much does SQF certification cost?

SQF certification costs vary by certification body, facility size, and the number of audit days required. A typical initial SQF 2 certification for a mid-size food manufacturing facility costs $3,000–$8,000 for the audit itself, plus the SQFI annual program fee (approximately $800–$1,500 per year). Consultants to help prepare for initial certification commonly charge $5,000–$20,000 depending on the facility's starting state. Affinity QMS significantly reduces consultant dependency by providing structured templates, workflows, and gap analysis tools that prepare your team for the audit directly.

What happens if a facility fails its SQF audit?

If a critical non-conformance (a violation posing immediate risk to food safety) is identified, the facility will not receive certification and must take immediate corrective action before a re-audit can be scheduled. For major non-conformances (significant system failures), the facility typically has 30 days to submit documented corrective actions for review by the certification body before a follow-up desk review or on-site re-audit occurs. Minor non-conformances must be addressed within 30 days of the audit but do not prevent initial certification. A facility receiving more than five major non-conformances will not achieve a Grade A.

Does SQF certification satisfy FDA HARPC / FSMA requirements?

SQF certification does not replace FDA regulatory compliance. A facility can be SQF-certified and still receive an FDA warning letter if its HARPC documentation or GMP practices do not meet 21 CFR Part 117 requirements. However, the two systems are highly complementary. SQF 2's HACCP-based food safety plan largely mirrors HARPC's Food Safety Plan requirements, and a well-maintained SQF system significantly accelerates HARPC compliance. Affinity QMS manages both frameworks simultaneously, with modules that satisfy SQF Code requirements and 21 CFR Part 117 requirements from a single documentation structure.

How long does initial SQF certification take?

From the decision to pursue SQF certification to receiving the certificate, most food manufacturers spend three to nine months in preparation depending on their current food safety system maturity. A facility starting with minimal documentation and no existing HACCP plan should expect six to nine months of structured preparation. A facility with existing HARPC documentation, active GMPs, and an internal audit program can often be ready for audit within three to four months. Affinity QMS compresses the timeline by providing pre-built SQF-aligned templates, automated document workflows, and internal audit checklists mapped to SQF Code Edition 9 section by section.

Ready to Pursue SQF Certification?

See how Affinity QMS gives you the document control, audit management, and CAPA infrastructure that SQF auditors are looking for — without hiring a consultant for every audit cycle.

Book a Demo