Allergen management is the set of controls a food plant uses to guarantee two things: every allergen in the product appears on the label, and no allergen gets into a product that doesn't declare it. In the US that means controlling nine major allergens, the original eight plus sesame, added January 1, 2023.

Undeclared allergens are the most preventable recall category there is: no pathogen to hunt, no lab delay, just a wrong label or a missed cleanup. They are also the leading cause of FDA food recalls in recent years. This post covers the US allergen list, the split between label controls and cross-contact controls, what allergen management does to your changeover scheduling, and the risk assessment that ties it together.

What are the major allergens in the US?

Nine foods are “major food allergens” under US law: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. The first eight were designated by the Food Allergen Labeling and Consumer Protection Act (FALCPA) of 2004; sesame became the ninth through the FASTER Act signed April 23, 2021 and effective January 1, 2023. All FDA labeling and manufacturing requirements that apply to the original eight apply to sesame.

Notes that trip up real plants:

Label controls vs cross-contact controls: two different failure modes

Every undeclared-allergen recall comes from one of two failure modes, and they need different controls:

Industry recall analyses consistently point at the first bucket as the bigger one, packaging and labeling errors drive most undeclared-allergen events. That is good news, operationally: label controls are cheaper than rebuilding your plant, and they are mostly discipline plus verification.

How do you run an allergen risk assessment?

Map every allergen through your site, then rate each product-line combination on two axes: how likely cross-contact is, and how severe the consequence would be. The output drives which controls each line needs, and it is a document every HACCP-based system and GFSI auditor will ask to see.

Allergen risk matrix: likelihood of cross-contact vs consequence Rate every product-line pair, then match the control GMPs + verified cleaning scheduling + validated changeover segregation + dedicated utensils validated cleaning + testing dedicated runs, allergen-last scheduling dedicated line or reformulate / declare validated cleaning, test every changeover dedicated equipment strongly indicated dedicated line / separate facility severe moderate low consequence → unlikely possible likely likelihood of cross-contact →
Control intensity should track the matrix: the dark corner justifies capital (dedicated lines); the light corner is discipline and verification. Precautionary labeling is a last resort, not a control.

Run the assessment as a numbered sequence:

  1. Build the allergen map. List every allergen entering the site, by ingredient and supplier, and mark where each one is stored, staged, run, and reworked on a floor plan.
  2. Chart products against lines. A simple matrix of SKUs and their allergens per line exposes every shared-equipment conflict.
  3. Score each conflict for likelihood of cross-contact (dust, splash, shared parts, traffic) and consequence.
  4. Assign controls to each score band from GMPs and verified cleaning up to dedicated equipment, and write them into procedures and sanitation SSOPs.
  5. Validate the cleaning. Prove your changeover clean actually removes the allergen (visual + allergen-specific test kits on worst-case locations), then verify routinely.
  6. Re-run on every change: new SKU, new supplier, reformulation, new equipment, new rework path.

What does allergen management do to scheduling and changeovers?

Allergens rewrite the production schedule. The core rule is simple, run non-allergen and allergen-light products first, allergen-heavy products last, then clean, but applying it across real SKUs, lines, and due dates is a genuine constraint-scheduling problem. Every allergen changeover costs a validated clean, so schedulers batch allergen families together to minimize cleans, and every unplanned sequence change risks either a wasted clean or a skipped one.

Allergen changeover decision flow The changeover question: what does the next run inherit? next product's declared allergens vs allergens just run? same or superset declared (e.g. peanut → peanut) lower risk path next declares fewer / different allergens cross-contact risk “free-from” claim on next product highest bar standard changeover per SSOP; document sequence justification full validated allergen clean + inspection sign-off + first-pack label check validated clean + allergen test before release (or dedicated line) every path ends in a record: what was run, what was cleaned, who verified, which label went on
Sequencing decides how many expensive cleans you buy per week. The flow only works if the schedule, the sanitation crew, and the label room all see the same plan.

This is where allergen management stops being a quality document and becomes a production-planning discipline: changeover time is downtime, so allergen sequencing interacts directly with quick-changeover work and daily scheduling. Plants that keep the allergen matrix, the schedule, and the sanitation sign-offs in disconnected systems are the plants where a rush order quietly jumps the sequence. Connecting those records, schedule, checks, and sign-offs in one live system, is exactly the kind of workflow Harmony digitizes on plant floors (production scheduling and quality reporting run on the same data).

Mapping allergens on the floor

An allergen map is a floor plan with the allergen flows drawn on it: where each allergen is received, stored, staged, run, and where its dust or drips can travel. It makes invisible risks visible, the shared conveyor crossing, the flour dust drifting to the line downwind, the rework cage next to the allergen-free staging area.

Allergen mapping: a floor sketch with zones and risk points Allergen map: zones, flows, and the two circled risks receiving allergens flagged in allergen store segregated · low rack non-allergen store Line 1 · runs peanut, milk, wheat allergen-last sequencing + validated clean Line 2 · dedicated allergen-free dedicated utensils, tools, smocks shared packaging RISK: dust drift Line 1 → Line 2 RISK: label mix point arrows, airflow, and people-paths get drawn on the real map, risks cluster at crossings
A real map is drawn on your actual floor plan with material, air, and people flows. The circled crossings are where risk assessments earn their keep.

The recall math: why this program pays

The numbers behind the urgency, from primary sources:

Every one of those recall events started as a changeover, a label roll, or a rework decision inside a plant. The controls above, mapped allergens, scored risks, validated cleans, sequenced schedules, and a recall plan you hope never to use, are what stand between a Tuesday afternoon and a press release. If the worst happens anyway, your traceability records decide whether you recall one lot or one month of production.