Our own servers in Europe · GDPR · Support in your language
ES EN CA
Let's talk

Software for HACCP

HACCP, without folders or surprises

A living HACCP plan: identified hazards, critical control points with limits, and monitoring logged for every batch.

What it is and which edition applies

HACCP (Hazard Analysis and Critical Control Points) is a preventive system that has been mandatory in the European Union since Regulation (EC) 852/2004, whose article 5 requires every food business operator to apply procedures based on its principles. Its methodological reference is the Codex Alimentarius, revised in 2020, which organises it into seven principles deployed across twelve application steps.

Content reviewed on

EU obligation
Art. 5 of Regulation (EC) 852/2004 For every food business operator, except primary production
Methodological reference
Codex Alimentarius CXC 1-1969 2020 revision, adopted by the Codex Commission
Structure
7 principles and 12 steps The first five steps are preliminary to hazard analysis
Prerequisites
An indispensable foundation Without cleaning, traceability and pest control plans, HACCP does not hold
Official controls
Regulation (EU) 2017/625 Framework for official controls in the agri-food chain

Document control

Versions, approvals and distribution with read receipts.

Connected to your document cloud

Publish and version documents by connecting to OneDrive, Google Drive or SharePoint, without duplicating folders.

Audits

Annual program, checklists per standard, findings linked to actions.

Non-conformities

Root cause, action, owner, deadline and effectiveness check.

KPIs

Process objectives fed with real operating data.

Legal requirements

A register of legal and other requirements, with validity and compliance evaluation per standard.

Corrective actions

Root cause, action, owner, deadline and effectiveness check, all linked to the nonconformity.

Improvement actions

Improvement opportunities with an owner and tracking, beyond just fixing what already failed.

Management review

A pre-built report with indicators, audits and nonconformities, ready for the meeting.

Critical control points

Critical limits with an owner and monitoring per batch.

Upstream and downstream traceability

From the raw-material batch to the delivered product, in minutes.

Hazard analysis

Hazards identified by process and product with their risk assessment.

Corrective actions

Critical limit deviation with an immediate corrective action logged.

Requirements covered

What it solves for HACCP

  • Hazard analysis by process and product
  • CCPs with critical limits and an owner
  • Monitoring and verification logged per batch
  • Corrective actions when a critical limit is breached
  • Upstream and downstream traceability
  • Internal audits of the HACCP plan
HACCP · FROM THE DECISION TREE TO THE CCP RECORD CODEX DECISION TREE P1
Is there a control measure for the hazard identified at this step?
 YES P2
Does it eliminate the hazard or reduce it to an acceptable level?
 YES P3
Can it be monitored and corrected before the product is released?
 YES THIS IS A CCP CCP 2 · HEAT TREATMENT CRITICAL LIMIT 72 °C for 2 minutes at the core MONITORING Calibrated probe, one record per batch CORRECTIVE ACTION Batch put on hold, reworked or withdrawn VERIFICATION Monthly microbiological testing RECORD Signed by the line supervisor 7 PRINCIPLES AND 12 STEPS · CODEX CXC 1-1969 Without cleaning, pest control and traceability prerequisites, the HACCP plan cannot hold REQUIRED BY ART. 5 OF REGULATION (EC) 852/2004

Standards covered

Pick your standard and see what it solves

GMP+ Animal feed safety Food industry · animal feed IATF 16949 Automotive Automotive SQAS2022 Chemical and logistics assessment Quality · chemical and logistics ISO 19600 Compliance management systems Compliance · guidance ISO 37301 Compliance management systems Compliance ISO 22716 Cosmetics manufacturing Quality · cosmetics GDPR Data protection Legal · data protection ISO 14001 Environmental management Environment SGE 21 Ethical and responsible management Social responsibility IFS Food Food safety Food industry FSSC 22000 Food safety management system Food industry BRCGS Global food standard Food industry ISO 14064 Greenhouse gases Environment · carbon footprint HACCP Hazard analysis and critical control points Food industry ISO 27001 Information security Cybersecurity ISO 20000 IT service management Quality · IT services ISO 13485 Medical devices Healthcare ISO 15189 Medical laboratories Quality · healthcare ENS National Security Framework Security · public sector UNE 73401 Nuclear quality assurance Quality · nuclear ISO 45001 Occupational health and safety Health & safety ISO 9001 Quality management Quality · every sector ISO 26000:2010 Social responsibility Social responsibility · guidance Sustainability Sustainability management ESG UNE 19602 Tax compliance Compliance · tax ISO 17025 Testing and calibration laboratories Quality · laboratories

Frequently asked questions

What people ask us before getting started

Which edition of the standard is current?

The edition in force is Codex Alimentarius CXC 1-1969, 2020 revision. When the issuing body publishes a new one, a transition period opens; once it closes, certificates issued against the previous edition stop being valid.

Does this work if we are already certified?

Yes. Your existing system — processes, documents, records, audit history — is loaded in and kept alive from day one. Nothing needs redesigning and the certification cycle does not restart.

Will the auditor accept digital records?

Yes, provided they are traceable, controlled and able to show who did what and when. No standard requires paper; every standard requires reliable evidence, and a properly controlled electronic record provides it better than a folder.

Can it be combined with other standards?

Yes, and that is the sensible route. The common Annex SL structure lets a single integrated system share the process map, document control, internal audits, nonconformities and indicators between HACCP and the rest, leaving only the standard-specific parts separate.

How long does it take to be ready for an audit?

It depends on the starting point. An organisation already working with written procedures is usually ready in two or three months; one starting from scratch needs longer. The bottleneck is rarely the tool — it is the availability of the people who know the processes.

What happens to the documentation we already have?

It is migrated. Existing procedures, forms and records are loaded with their version and approver, so the history is not lost and the system starts with the memory the organisation already had.

Can the auditor look directly at the system?

Yes. They are given read-only access with a defined scope and an expiry date. It is more comfortable for both sides than preparing a folder of screenshots and exports.

What is the difference between a major and a minor nonconformity?

A major one compromises the system's ability to meet a requirement — a required process missing altogether, systematic failure, or a failure affecting the product — and usually blocks certification until it is closed. A minor one is a specific lapse resolved with an action plan.

Are the indicators calculated automatically?

Yes, from the data the processes themselves generate. That is the difference between a dashboard that reflects what is happening and a spreadsheet somebody fills in the week before the management review.

Does it work across several sites or legal entities?

Yes. The model is multi-company and multi-site: what makes sense to share is shared, and what belongs to each location stays separate — including the certificate scope where it differs.

Get ready for your HACCP

We'll show you the module running with data similar to yours.

Request a demo

Keep exploring

Related pages

Comparison · food safety

HACCP or FSSC 22000: obligation versus certification

HACCP is mandatory under Regulation (EC) 852/2004; FSSC 22000 is a voluntary certification built on ISO…

 Learning path

HACCP · Hazard analysis (HACCP)

A free learning path on HACCP: the seven Codex Alimentarius principles explained with examples and an audit…

 Software for IFS Food

IFS Food, without folders or surprises

A live HACCP plan, prerequisites, food defense and internal audits ready for the current version of the…

 Software for BRCGS

BRCGS, without folders or surprises

Food safety culture, supplier control and site verifications, all documented without paper.

Sources

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

  1. Regulation (EC) No 852/2004 on the hygiene of foodstuffs EUR-Lex · 29 April 2004
  2. General Principles of Food Hygiene, CXC 1-1969 Codex Alimentarius (FAO/WHO) · 2020 revision
  3. Regulation (EU) 2017/625 on official controls EUR-Lex · 15 March 2017

Software for HACCP — Hazard analysis and critical control points

Kimobox is a software for HACCP that digitizes the requirements of the standard: hazard analysis by process and product, ccps with critical limits and an owner, monitoring and verification logged per batch, corrective actions when a critical limit is breached, with full traceability and evidence ready for the auditor.

The platform lets you run an integrated management system that combines HACCP with other ISO standards and sector protocols, sharing the process map, document control, internal audits, non-conformities and KPIs.