GFSI (Global Food Safety Initiative) and its recognised schemes
A GFSI recognised scheme is a food safety certification programme, such as BRCGS Food Safety, SQF or FSSC 22000, that the Global Food Safety Initiative has assessed against its benchmarking requirements and accepted as meeting them. GFSI does not audit plants or issue certificates itself, so what you hold on file is always a certificate to a named scheme, never a certificate from GFSI.
What a GFSI recognised scheme is
A GFSI recognised scheme is a food safety certification programme that the Global Food Safety Initiative has benchmarked against its published requirements and accepted as meeting them. The Global Food Safety Initiative is an industry coalition hosted by the Consumer Goods Forum, and its stated aim is that a plant audited once against a recognised scheme should be accepted by buyers who require any of the others, rather than facing a separate customer audit for each one.
Two details matter when you read the words on a certificate.
- Recognition sits with the scheme, not with your plant. Your certificate is issued by a certification body against a specific scheme and version, for a specific scope and category. The scheme is what GFSI has recognised.
- Recognition is not permanent or universal. The list of recognised schemes changes as versions are rebenchmarked, and recognition can be granted for some scopes and not others. The scheme owner and GFSI publish the current position, which is the only place to check it.
So when a customer specification says "certification to a GFSI recognised scheme", it is asking for a current certificate against one of the programmes on that list, in a scope that covers what you make for them.
Where the phrase actually lands in your week
For a QA manager at a mid-market plant, the phrase shows up in two directions at once.
Looking outward, your own certificate is the thing your customers ask for, and it has an expiry date they will check. Looking inward, your supplier approval programme is where the phrase does the real work: each recognised scheme sets its own expectations for how you approve and monitor the suppliers you buy from, and in each case the evidence is documentary. An auditor opens your approved supplier list and asks to see the current audit certificate behind a named supplier, with the scheme and the expiry date legible on it.
A worked example
A bakery buys cocoa powder from an ingredient supplier whose BRCGS certificate expired on 14 March. The purchase specification required certification to a GFSI recognised scheme, and the supplier was recertified on 2 April, but nobody asked for the new PDF. At the recertification audit in June, the file still holds the March certificate. The supplier is certified. The plant's evidence is not current, and that gap is what gets written up, not the supplier's actual status.
That is the ordinary failure mode, and it is a chasing problem rather than a food safety problem. The dated document in the file is the only thing the auditor can read.
Schemes a mid-market QA team meets most often
| Scheme | Scheme owner | Commonly seen in |
|---|---|---|
| BRCGS Food Safety | BRCGS | UK and European retail supply chains |
| SQF Food Safety Code | SQFI, a division of FMI | North American retail and foodservice supply chains |
| FSSC 22000 | Foundation FSSC | Manufacturers working to an ISO 22000 management system |
| IFS Food | IFS Management GmbH | German, French and wider European retail supply chains |
Related terms
- Approved supplier list. The register of suppliers you have assessed and accepted, with the evidence that supported each decision. The audit certificate and its scheme usually sit here.
- Document control. The discipline of knowing which version of a document is current, who holds it and when it is reviewed. Supplier certificates are documents under control like any other.
- Audit-ready evidence pack. The set of dated records you hand an auditor, assembled before the audit rather than during it.
- Non-conformance, major and minor. What gets raised when evidence is absent or out of date, and the reason an expired certificate on file is a paperwork finding with a real cost.
- Corrective action, or CAPA. How a raised finding is closed out, with the dated evidence that closed it.
- Unannounced audit. An audit with no scheduled date, which removes the window in which missing certificates are normally collected.
- Scheme supplier management requirements. Each recognised scheme states its own expectations. The BRCGS, SQF and FSSC 22000 v6 pages in this pillar go through them clause by clause.
Questions
Does GFSI issue certificates?
No. GFSI benchmarks and recognises schemes. Your certificate is issued by an accredited certification body against a named scheme, such as BRCGS Food Safety or SQF, so there is no such thing as a GFSI certificate to put on file.
Which schemes are GFSI recognised right now?
The list changes as scheme versions are rebenchmarked, so treat the GFSI site and the scheme owner's own site as the source of truth rather than a copy in a spreadsheet. The programmes most often asked for in mid-market food manufacturing are BRCGS Food Safety, SQF, FSSC 22000 and IFS Food.
If my supplier is certified to a GFSI recognised scheme, do I still need their other documents?
Yes, if your specification asks for them. An audit certificate says the supplier was certified against a scheme on a date; it is not an allergen declaration and it is not a certificate of analysis for the batch you received. Most supplier files carry all three certificate types because the specification and the scheme each ask for different evidence.
How long is a recognised scheme certificate valid?
The issue and expiry dates printed on the certificate are what you track, because the scheme and the certification body set them and they vary by scheme, grade and audit outcome. In practice the useful habit is to read the expiry date off the document and diary a chase well before it, not to assume a fixed term.
Should I verify that a supplier's certificate is genuine?
Checking the certificate against the scheme owner's public directory is the normal step, and it stays a human judgement. Certly tracks expiry dates and chases the contact for a renewal; it does not verify authenticity or confirm compliance on your behalf.
What does GFSI recognition mean for an unannounced audit?
Several recognised schemes offer or require unannounced audit options, which means the certificate file has to be current on any ordinary Tuesday rather than in the fortnight before a booked date. The unannounced audit page in this pillar covers how that changes the chasing rhythm.