Passing a GFSI audit and satisfying a specific retailer aren't always the same thing. We map exactly which certification, grade, and supplier requirements your target retailers expect, so you're not guessing what "compliant" means to the business that decides whether you get listed.
Government food safety regulation sets a legal floor that applies to every business. Retailers operate above that floor, and what counts as "meeting the standard" depends on who you're selling to.
A GFSI-benchmarked certification, SQF, BRCGS, FSSC 22000, IFS, or PrimusGFS, gives a retailer documented, third-party assurance about a supplier's food safety management system in a consistent, auditable format. That's why most major retailers require one. But "GFSI certified" isn't a single checkbox: retailers differ in which schemes they recognise, what grade or score they expect within that scheme, what additional supplier programmes sit on top of it, and how broad they expect traceability documentation to be.
This matters commercially because certification, grade, and documentation scope can be the difference between a listing decision and a rejection, independent of whether your food safety practices are sound. A facility with excellent food safety outcomes but the wrong certification scheme, or a certification at a grade below a retailer's informal threshold, can lose out to a competitor whose paperwork simply lines up better with what that specific retailer's buying team is looking for.
The practical question for most food businesses isn't "are we food safe", it's "does our certification, grade, and documentation match what this retailer's supplier requirements say", and increasingly, "does it match what their traceability programme requires, which may be broader than the law currently demands."
Retailer requirements typically span more ground than a single food safety certificate. Each of these can be a separate point of friction even when the others are in good shape.
Which GFSI-benchmarked scheme, or schemes, the retailer recognises for your product category and region.
The grade or score within that scheme the retailer expects for preferred supplier status, often informal but commercially real.
Whether announced, unannounced, or a mix is required, and how often, beyond the scheme's own minimum.
Whether traceability requirements cover only Food Traceability List items, or all products supplied to that retailer.
Packaging, labelling, barcode, and delivery accuracy programmes that operate separately from food safety certification.
Additional requirements for specific categories, such as private label, high-risk produce, or chilled and frozen goods.
For private label and own-brand products specifically, retailers tend to apply their most rigorous requirements, since the retailer's own brand reputation sits directly behind the product. Aldi, for example, requires all private label food production facilities to hold GFSI certification, with warehouse facilities held to GMP certification, a clear illustration of how private label work can carry stricter baseline requirements than branded supply even at the same retailer.
The federal traceability deadline moved. Retailer traceability programmes mostly didn't, and several have expanded beyond what the law currently requires.
FDA's Food Traceability Rule (FSMA 204) enforcement was extended from January 2026 to July 2028. Despite that, major US retailers and wholesalers, including Walmart, Kroger, Albertsons, Sam's Club, Target, and KeHE, have continued building supplier traceability programmes largely on the original timeline. Industry reporting from February 2026 indicates that close to half of the 70-plus retailers and wholesalers with announced traceability programmes are now requiring traceability data for all foods supplied, not only the items on the FDA's Food Traceability List, treating the federal rule as a starting point and not the ceiling.
The federal enforcement date moved back 30 months following industry feedback on readiness.
Several major retailers and wholesalers continued building toward the original timeline regardless of the federal extension.
Nearly half of announced retailer programmes now cover all foods, not only Food Traceability List items.
For a supplier, this means two separate questions need separate answers: what does the law require, and what does each retailer you supply require. These can be different by both scope, all products versus FTL-listed products, and timeline, a retailer's internal deadline versus the federal enforcement date. A traceability programme built only to the federal scope and timeline may already be behind what your retail customers expect today.
This sits alongside, but is distinct from, retailer programmes focused on packaging, labelling, and shipping accuracy, sometimes described as "floor-ready" requirements. These aren't food safety certification requirements in the GFSI sense, but they're commercially significant: non-compliance can trigger chargebacks or delivery delays regardless of how strong a supplier's underlying food safety certification is. Addressing certification, traceability, and these operational supplier programmes together, not as separate projects, avoids one area undermining the commercial benefit of work done on another.
Retailer requirements are relevant to any business supplying, or seeking to supply, retail grocery, whether for the first time or trying to resolve a recurring listing or grading issue.
Suppliers approaching a new retailer who need to know exactly which certification, grade, and documentation that retailer expects before commercial discussions progress.
Operations holding valid GFSI certification but at a grade or score below the informal threshold their target retailers expect.
Suppliers managing different certification, grading, and documentation expectations across several retail customers at once.
Operations moving into private label production, where retailer requirements are typically stricter than for branded supply.
Suppliers whose traceability documentation covers only Food Traceability List items, while their retail customers require traceability for all products.
Operations expanding from one region's retail landscape, such as the US, into another, such as the UK or EU, with different dominant certification schemes.
The process follows a defined sequence. Our part of the process typically takes 2 to 3 days for the mapping itself.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Target retailer identification | The specific retailers you supply, or want to supply, are identified, including product categories and regions. | We confirm the scope of retailers and categories with your team. | 1 day |
| 2. Requirements research | Each retailer's published and informal supplier requirements are researched: certification schemes, grades, traceability scope, and programmes. | We research and compile retailer-specific requirements. | 1 to 2 days |
| 3. Current position assessment | Your current certification, grade, and documentation are assessed against the compiled requirements. | We assess your current position against each retailer's requirements. | 1 day |
| 4. Gap identification | Specific gaps are identified: scheme mismatch, grade shortfall, traceability scope, or programme requirements. | We produce a written gap analysis per retailer. | 1 day |
| 5. Multi-retailer reconciliation | Where multiple retailers are in scope, overlapping and conflicting requirements are reconciled into one approach where possible. | We identify where one certification or documentation set can satisfy multiple retailers. | 1 to 2 days |
| 6. Certification/grade improvement scoping | Where new certification or a grade improvement is needed, that work is scoped as a follow-on project. | We scope the follow-on certification or improvement work. | 1 to 2 days |
| 7. Traceability scope alignment | Traceability documentation scope is aligned with the broadest retailer requirement identified, not only the federal minimum. | We align traceability documentation scope with retailer requirements. | 1 to 2 days |
| 8. Implementation support | Certification, grading, and documentation improvements are implemented, run alongside operations. | We support implementation of the identified improvements. | Timeline depends on the specific certification or improvement scope identified. |
We cover the full scope of retailer requirements work, from first mapping through to certification and traceability alignment.
Research and compilation of a specific retailer's, or set of retailers', certification, grading, and supplier requirements.
Assessment of your current certification, grade, and documentation against compiled retailer requirements.
Selection of the GFSI-benchmarked scheme, or combination of schemes, that best matches your target retailers and regions.
Gap assessment and improvement plan targeting a higher audit grade, such as moving toward BRCGS Grade A or AA.
Identification of where a single certification and documentation approach can satisfy multiple retailers efficiently.
Alignment of traceability documentation scope with retailer requirements that go beyond the federal Food Traceability List.
Readiness work for businesses entering private label or own-brand supply, where requirements are typically stricter.
Support for businesses expanding into a new region's retail landscape with different dominant certification expectations.
Periodic review as retailer requirements change, since these are updated more frequently and less formally than regulations.
Meeting a retailer's grading expectations isn't only about documentation, it's also about how the team performs during an unannounced audit, which is becoming more common across major UK and US retail standards. Training that builds genuine, day-to-day familiarity with what an auditor will ask and look for, beyond a procedure read once before certification, is one of the most direct ways to protect a hard-won audit grade between cycles. We recommend pairing this consulting programme with relevant training delivered through Confi Food, and can advise on the right approach during the initial consultation.
Our gap assessment checks your position against what your actual retail customers require, beyond the general GFSI baseline.
The assessment reviews your current certification scheme, audit grade or score, and traceability and documentation scope against the specific, published and informal requirements of the retailers you supply or want to supply. It identifies where your current position falls short, whether that's the certification scheme itself, the grade level, traceability scope, or a retailer-specific supplier programme.
Where you supply or intend to supply multiple retailers with different requirements, the assessment also identifies where a single certification and documentation approach can satisfy more than one retailer efficiently, instead of building separate, potentially conflicting documentation for each.
We compile the specific requirements of your target retailers.
We assess your current certification, grade, and documentation against those requirements.
We identify specific gaps by retailer, scheme, grade, traceability, or programme requirements.
We produce a written gap assessment with a prioritised action plan.
If the assessment identifies a need for new certification or significant grade improvement, we can scope that follow-on work alongside this assessment.
The same gaps appear across retailer requirements reviews regardless of sector. Knowing where these gaps cluster is the most effective preparation.
A valid GFSI certification is held, but it isn't the scheme the target retailer recognises or prefers for that product category or region.
Certification is held at a grade or score below the retailer's informal preferred-supplier threshold, such as below Grade A under BRCGS.
Traceability documentation covers only Food Traceability List items, while the target retailer requires traceability data for all products.
Certification and documentation built around a single retailer's expectations don't map cleanly onto a second retailer's different requirements.
Entering private label or own-brand supply without recognising that requirements are typically stricter than for branded products at the same retailer.
Retailer-specific packaging, labelling, and delivery accuracy programmes are managed entirely separately from food safety certification work, despite both affecting the same supplier relationship.
An illustration of how the dominant certification landscape differs by region. Exact requirements vary by individual retailer and product category.
| US retail | UK/EU retail | |
|---|---|---|
| Dominant scheme | SQF, also BRCGS, FSSC 22000, PrimusGFS | BRCGS (IFS in continental EU) |
| Grading emphasis | Scheme-dependent, varies by retailer | Grade A/AA informally preferred |
| Traceability driver | FSMA 204 baseline, retailer programmes broader | Scheme-driven traceability, EU regulation |
| Our consulting | Retailer Food Safety Standards Consulting: requirements mapped to your actual markets | |
What drives the timeline and cost of a retailer standards consulting project. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
Research and gap assessment for one target retailer. Typically 2 to 3 days.
Research, gap assessment, and reconciliation across multiple retailers. Typically 1 to 2 weeks depending on number of retailers.
Implementation support for moving toward a higher audit grade, run alongside operations.
Where a scheme mismatch requires new certification, scoped per the relevant certification's own timeline.
Additional scope where traceability documentation needs expanding beyond Food Traceability List items.
Additional scope for businesses entering private label or own-brand supply for the first time.
Additional scope for businesses expanding into a region with a different dominant certification landscape.
A requirements mapping only, a full readiness build, or ongoing monitoring each carry different fees. All scopes are defined in writing before work begins.
Answers to the questions we hear most often from businesses navigating retailer food safety and supplier requirements.
Government food safety regulations set a legal floor that applies to everyone. Retailers operate above that floor for commercial and liability reasons: a GFSI-benchmarked certification gives a retailer documented, third-party assurance about every supplier in its supply chain, in a consistent format it can audit and compare. It also shifts due diligence responsibility onto a recognised external framework and not the retailer's own judgement of each individual supplier. For suppliers, this means certification, and often a specific grade or score within that certification, has become a condition of doing business with a given retailer, separate from and in addition to legal compliance.
Most major US retailers require a GFSI-recognised certification, such as SQF, BRCGS, FSSC 22000, or PrimusGFS, with the specific accepted schemes varying by retailer and product category. Walmart generally does not accept local, state, or federal inspections in place of GFSI certification, with limited exceptions for smaller fresh produce suppliers. Aldi requires all private label food production facilities to be GFSI certified. Amazon accepts several GFSI-recognised audits for chilled, frozen, and high-risk raw produce categories. SQF has particularly strong recognition in the US grocery sector, while BRCGS and FSSC 22000 are more commonly required for suppliers also trading internationally.
BRCGS Food Safety is the dominant standard across UK retail, with Tesco, Sainsbury's, Asda, Morrisons, Waitrose, Co-op, Aldi UK, and Lidl UK all building supplier requirements around it, particularly for own-brand and private label products. Beyond holding certification, many UK retailers expect a high audit grade, with Grade A or AA effectively functioning as the informal benchmark for preferred supplier status, and unannounced audits becoming more common as retailers focus on day-to-day operational consistency and not audit-day preparation. For suppliers trading more heavily across continental Europe, IFS Food carries more commercial weight in addition to or instead of BRCGS.
A GFSI-benchmarked certification, such as SQF, BRCGS, FSSC 22000, or IFS, is a third-party audited food safety management system certification recognised across the industry and accepted by many retailers as a baseline. A retailer-specific supplier programme is an additional layer that individual retailers operate on top of that baseline, covering things like packaging and labelling compliance, on-time and in-full delivery performance, traceability data formats, and chargeback systems for non-compliance. A supplier can hold a strong GFSI certification and still face retailer-specific compliance issues if these additional programme requirements aren't addressed separately.
FDA's Food Traceability Rule (FSMA 204) enforcement was extended from January 2026 to July 2028, but major US retailers and wholesalers, including Walmart, Kroger, Albertsons, Sam's Club, Target, and KeHE, have continued building their own supplier traceability programmes on the original timeline. Industry reporting from early 2026 indicates that nearly half of retailers and wholesalers with announced traceability programmes are now requiring traceability data for all foods, not only the items on the FDA's Food Traceability List, treating FSMA 204 as a baseline and not the full requirement. For suppliers, this means retailer traceability deadlines and scope can be ahead of, and broader than, the federal requirement.
Floor-ready generally refers to a retailer's packaging, labelling, and shipping accuracy requirements, distinct from food safety certification itself, but commercially significant because non-compliance can result in chargebacks, delayed inventory, or supplier scorecard penalties. These requirements typically cover barcode placement and standards, carton marking, pallet configuration, and purchase order accuracy. While not a food safety certification requirement in the GFSI sense, these programmes are often where suppliers with otherwise strong food safety certification still face friction with a specific retailer, and they're worth addressing alongside certification work instead of treating as a separate, unrelated problem.
A retailer requirements gap assessment reviews your current certification status, audit grade or score, and traceability and documentation practices against the specific requirements of the retailers you supply or want to supply, identifying where your current position falls short of what a given retailer requires, whether that's the certification scheme itself, the grade level, traceability data scope, or retailer-specific supplier programme compliance. Where you supply or intend to supply multiple retailers with different requirements, the assessment also identifies where a single certification and documentation approach can satisfy more than one retailer's expectations efficiently.
The most common gaps are: holding a GFSI certification that isn't the specific scheme a target retailer recognises or prefers. Certification held but at a grade or score below the retailer's informal preferred-supplier threshold. Traceability documentation scoped to the federal Food Traceability List when the target retailer requires traceability data for all products. Certification and documentation built around a single retailer's requirements that don't map cleanly onto a second retailer's different expectations. Retailer-specific programme requirements, packaging, labelling, delivery performance, treated as separate from food safety certification work and not planned for together.
Retailer requirements sit on top of your own food safety management system and supplier approval programme, and do not replace them. Where your business is itself a supplier needing to meet a retailer's requirements, retailer standards consulting addresses what that retailer expects from you. Where your business also sources from suppliers and needs to demonstrate that to a retailer, the same supplier approval and certificate verification work, including Chain of Custody for seafood, supports that demonstration. The two areas are closely linked but address different directions of the supply chain relationship.
Our consulting work moves fast. Mapping which certifications, grades, and traceability requirements apply to your target retailers typically takes 2 to 3 days. Where this identifies a need for new GFSI certification or a significant grade improvement, that work follows the timeline for the relevant certification, which we can scope alongside this assessment. For businesses already certified and needing to address a specific gap, such as traceability scope or a single retailer's additional programme requirements, targeted readiness work typically takes 1 to 2 weeks.
Yes. Requirements mapping, certification scheme selection, grade improvement gap assessments, and traceability scope reviews are all available remotely, since they primarily involve reviewing your current certification, audit history, and documentation against publicly available and retailer-published supplier requirements. Where the outcome is new certification or significant system changes, that follow-on work is scoped separately. We work with clients worldwide, supplying retailers across North America, the UK, and Europe.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
To establish the real size of the project before an audit date is booked.
Read about A gap assessment →To check a label against the information law of each market.
Read about A food label compliance review →Where a material carries enough risk to justify seeing the site.
Read about A supplier audit →Where the specification behind the label is the weak point.
Read about A product specification review →Tell us which retailers you supply or want to supply, your current certification and grade, and which categories and regions are involved. We will tell you exactly where you stand against what they require.