What Allergen Records Should a Food Business Keep?

Allergen control can fail in very ordinary ways. A supplier changes an ingredient. A recipe is amended but the allergen sheet is not. A member of staff gives an answer from memory. A product is moved into a different container. A complaint is discussed, but the follow-up is not recorded. On the day nothing may look dramatic, but for someone with a food allergy the consequences can be serious.

TapTick helps food businesses replace paper HACCP and allergen check sheets with fast mobile checks, corrective actions, evidence and manager oversight. See the TapTick features.

Why allergen records matter

Food businesses in Ireland and the UK must provide accurate allergen information and manage allergen risks as part of day-to-day food safety. For non-prepacked food, that usually means the business must know which regulated allergens are present, keep the information clear and accessible, and make sure staff understand how to respond to customer questions.

The practical challenge is that allergen information changes. A sauce may be reformulated. A bakery item may arrive from a different supplier. A salad may be assembled from several prepared components. A prepacked-for-direct-sale item may need different labelling controls from a loose item. If those changes are not captured, the business may still look organised on paper while giving customers out-of-date information.

Recent Food Standards Agency audit findings in Wales showed why records matter. The audit found that assessments of business allergen controls were commonly poorly evidenced, that follow-up action was often weak and that unsafe food or repeat failures were not always dealt with robustly. Although that audit assessed local authority controls, the lesson for operators is simple: activity without clear, retrievable evidence is weak assurance.

What allergen records should prove

A good allergen record system should answer seven questions quickly:

• What ingredients, products and menu items are in use today?
• Which allergens are present in each item?
• Where did that information come from?
• When was it last checked or updated?
• Who is responsible for keeping it current?
• How are staff trained to use and communicate it?
• What happened when something changed, failed or was challenged?

A printed allergen matrix may be useful, but only if it matches the products and ingredients actually being used.

1. Ingredient and supplier records

Allergen information starts with ingredients. A site should be able to identify its suppliers, the products or ingredients received and the allergen information attached to them. Supplier specifications, labels, delivery paperwork and approved product lists can all form part of that evidence.

The record should also capture changes. If a supplier substitutes a product, changes a recipe, changes packaging or sends an alternative brand, the site should not assume the allergen profile is identical. Someone should check the label or specification before the product is used or sold, especially for prepared foods, sauces, bakery products, toppings, dressings and composite ingredients.

For multi-site operators, local sites need a simple way to see the current approved version and flag exceptions.

2. Recipe, menu and product information

The business should keep records linking ingredients to the foods customers actually buy. For a restaurant or café that might be a recipe file or allergen matrix. For a deli, forecourt or convenience food-to-go site, it may include product build sheets, batch sheets, display labels, menu boards, prepacked-for-direct-sale labels and back-of-house preparation instructions.

These records should be reviewed whenever an ingredient, recipe, supplier, product name, portion component or process changes. A useful review record says what changed, who checked it, when the new information became live and which staff or sites were told.

The control is only as strong as the update process. Old printouts, old labels and informal changes are where allergen records often become unreliable.

3. Staff training and responsibility

Allergen training records should show more than attendance at induction. Staff should know the regulated allergens, understand the site’s communication process, know where the current information is kept and know when they must not guess. Training should be refreshed when the business changes its menu, introduces new food preparation, starts prepacking items, changes suppliers or identifies a failure.

Responsibility also needs to be clear. Who checks supplier information? Who updates the allergen matrix? Who confirms labels are correct? Who deals with customer questions? Who signs off a correction after a mistake? If everyone is generally responsible, the real owner can disappear when service is busy.

The simplest useful training evidence is often: staff name, role, topic, date, source, confirmation of understanding and any follow-up needed.

4. Cross-contamination controls

Allergen records should not only say what is intentionally present. They should also show how accidental cross-contamination is controlled. That may include storage separation, labelled containers, cleaning schedules, utensil controls, preparation sequencing, changeover checks, handwashing expectations and rules for shared equipment.

The right level of record depends on the operation. A small café may need a simple daily check that allergen information, storage and cleaning controls are in place. A busier food-to-go site may need specific opening checks, preparation-area checks, label checks, cleaning verification and manager follow-up when something is wrong.

Where a business makes “free from” claims, staff should understand the difference between “not an ingredient” and a controlled cross-contamination claim.

5. Customer communication and updates

Customer-facing allergen information should be clear, current and easy to access. Depending on the jurisdiction and food type, this may involve written allergen information, labels, notices telling customers how to obtain information, menu references or direct staff communication supported by a reliable source.

The business should keep evidence that customer-facing information has been checked. That can include label checks, menu checks, display checks, online menu reviews and sign-off when a new product or recipe is launched. If information is updated centrally, sites should have a way to confirm they have received and applied the change.

A strong rule for staff is: do not answer from memory when allergen safety depends on accuracy. The record system should make it easy to find the current answer quickly, and it should make uncertainty visible so the business can pause sale or escalate rather than guess.

6. Incidents, complaints and corrective actions

Allergen records become most important when something goes wrong. If a customer complains, a label is wrong, an undeclared allergen is found, a supplier sends conflicting information or a staff member discovers a mismatch, the business needs a clear incident and corrective-action record.

That record should capture what was found, the affected product or dish, the ingredient or label involved, the immediate action taken, whether sale was stopped, who was informed, what customer communication was required and what was done to prevent a recurrence. Where a product withdrawal or recall is required, the record should also link to product, batch, date and site-completion evidence.

A weak record says “spoke to staff” or “issue fixed”. A stronger record says what changed, why it changed, who approved it, how affected staff were told, whether any product was removed from sale and when the manager verified that the fix was complete.

7. Review and verification records

Allergen controls should be reviewed periodically and after changes. Review records might include weekly or monthly manager checks, verification of a sample of menu items, review of supplier updates, staff-question checks, complaint trend review and confirmation that previous corrective actions stayed fixed.

For multi-site businesses, verification should show which sites are up to date, which have open actions and where a controlled update has not yet been applied.

In practice, the most valuable verification question is: if an inspector, auditor, manager or customer asked how allergen information is kept accurate, could the business show the evidence quickly?

Practical allergen records checklist

For most food businesses, a practical allergen record system should include:

• approved supplier and ingredient information;
• current product, recipe or menu allergen records;
• evidence that allergen information is reviewed when ingredients or recipes change;
• label, display or menu checks where relevant;
• staff allergen training and refresher records;
• named responsibility for updates and customer queries;
• cross-contamination controls for storage, preparation, cleaning and service;
• daily or periodic checks that controls are being followed;
• complaint, incident and near-miss records;
• corrective actions, including who completed them and who verified closure;
• records of product withdrawal or sale-stop decisions where needed;
• manager review or verification records.

The list should be adapted to the business. A small site does not need an over-complicated system, but it does need current information, trained staff and clear evidence when something changes or fails.

How digital HACCP helps

Paper allergen records can work, but they are easy to fragment. Supplier information may sit in email, training records in a folder, daily checks on a clipboard, complaints in a notebook and corrective actions in a manager’s head. That makes it hard to prove control quickly.

A digital HACCP system can bring the evidence together. Staff can complete simple checks on a phone or tablet. Managers can see open issues. Failed checks can create corrective actions. Photos, comments and timestamps can be attached to the record. Multi-site operators can see which locations are up to date and which need attention.

• make routine allergen checks fast for staff;
• keep current versions visible across sites;
• record failed checks and customer complaints clearly;
• assign corrective actions to named people;
• preserve what changed, when and why;
• show managers where follow-up is still open;
• keep inspection evidence retrievable.

Allergen management should not depend on memory, old printouts or informal conversations. The record should make the current truth easy to find and make the follow-up visible when something is wrong. That is what turns allergen control from paperwork into operational assurance.