Guide · Food safety · UK
A large share of what could go wrong in your kitchen walked in through the delivery door. Here is how to protect it upstream - one-step-back traceability, approved suppliers, delivery checks, and the records that form your due-diligence defence.
Most food safety effort points inward - the fridge, the probe, the cleaning schedule. But a large share of what could go wrong in your kitchen walked in through the delivery door. A contaminated ingredient, a mislabelled allergen, a product recalled after you have already served it: none of these are failures of your cooking, and all of them are your problem. Supplier due diligence is the discipline of protecting your kitchen upstream, so that what you buy is safe and, if it turns out not to be, you can prove where it came from and pull it fast.
You are responsible for the safety of everything you serve, including the parts you did not make. That does not mean testing every delivery in a lab; it means taking reasonable steps to buy from suppliers you can trust and keeping the records that let you act when something is wrong. The two halves of that - choosing suppliers carefully, and being able to trace what they sent you - are what turn an upstream problem from a crisis into a contained, documented incident.
The legal backbone
UK food law requires traceability through the supply chain on a simple principle: you must be able to identify who supplied your ingredients and, if you supply other businesses, who you sold them to. This is the one step back, one step forward model.
If you are a caterer or retailer selling only to the final consumer, you do not need traceability records for those sales - but you always need the supplier side. The information usually already exists on invoices and delivery notes; the discipline is keeping it organised so it can be produced quickly on demand. Defining batches matters too: in an incident, the law treats a whole batch as suspect, so good batch records mean you can isolate and withdraw a specific lot rather than everything you hold. Solid date and stock control feeds straight into this, which is where understanding use-by versus best-before dates keeps your traceability honest at the point of use.
Choosing well
Traceability tells you where something came from after the fact; supplier selection reduces the chance you need it. The practical tool is an approved supplier approach: a list of the suppliers you buy from, with their details and, for higher-risk products, evidence that they operate to a recognised food safety standard. When a supplier changes recipe, manufacturer or specification, your records - including their allergen information - need updating, because a quiet reformulation upstream can put an allergen into a dish that never had one.
The other half is what happens at goods-in. Every delivery is a checkpoint: confirm chilled and frozen items arrived at the right temperature, check dates and condition, reject anything damaged or out of temperature, and record that you did. A delivery accepted without a check is a gap in your defence, and goods-in is one of the easiest places for an inspector to see whether your system is real or notional. These incoming checks belong in your food safety management system, the same living document that carries your cooking, chilling and cleaning controls - the principle behind a HACCP plan you will actually use.
When it protects you
Supplier records are not just housekeeping - they are legal protection. Under the Food Safety Act 1990 there is a due-diligence defence: if you are prosecuted over a food safety problem, you can defend yourself by proving you took all reasonable precautions and exercised all due diligence. Where the fault genuinely lay upstream - the act or default of another person, or reliance on information a supplier gave you - that defence depends entirely on being able to show your approved supplier records, your delivery checks and your traceability. Without them, an upstream failure becomes your failure by default.
The test of a traceability system is not whether it exists but whether it works under pressure. Run a mock exercise: pick a recent dish or delivery and see how quickly you can produce the complete trail - which supplier, which batch, which deliveries, and who you supplied it to. If that takes days, or turns up gaps, you have found the weakness before an incident does. Speed is the point: a recall you can action in minutes limits harm and cost; one you cannot limits nothing. Build the drill into your routine review, keep the records credible and contemporaneous rather than reconstructed, and your upstream defences will hold when they are tested - the same evidence-first thinking that lets you pass a food hygiene inspection first time.
Questions
You must be able to identify who supplied your ingredients and products (one step back) and, if you supply other businesses, who you sold them to (one step forward). If you sell only to the final consumer, you do not need records for those sales, but you always need the supplier side. The information is usually on invoices and delivery notes.
The law requires traceability and reasonable precautions rather than a specific document, but an approved supplier approach - a list of suppliers with their details and, for higher-risk products, evidence they meet a recognised food safety standard - is the practical way to show you chose suppliers carefully and to keep allergen information current.
Confirm chilled and frozen items arrived at the correct temperature, check dates and condition, reject anything damaged or out of temperature, and record that you did. Goods-in is a checkpoint and one of the easiest places for an inspector to see whether your system is real. Accepting a delivery without a check is a gap in your defence.
Under the Food Safety Act 1990, the due-diligence defence lets you avoid conviction by proving you took all reasonable precautions and exercised all due diligence. Where a problem genuinely originated upstream, that defence depends on your approved supplier records, delivery checks and traceability. Without them, an upstream failure becomes yours by default.
Run a mock exercise: pick a recent dish or delivery and time how quickly you can produce the full trail - supplier, batch, deliveries and any business customers. If it takes days or reveals gaps, you have found the weakness before an incident does. Build the drill into your routine review and keep records contemporaneous, not reconstructed.
Phoenix Duct Clean · by the numbers
Deliveries land in goods-in and storage, where contamination can start. A documented deep clean keeps them controlled. Tell us about your kitchen for a no-obligation quote, UK-wide.