SQF certification is a GFSI-recognized food safety certification owned by the Safe Quality Food Institute (SQFI). A licensed certification body audits your site against the SQF Code; if you pass, you hold a certificate that most major retailers and food-service buyers accept as proof your food safety system works.
Most plants don't chase SQF for fun. A buyer says "we need a GFSI cert to keep the PO," and suddenly the quality manager owns a six-month project. This guide covers what SQF actually is, the three program levels, what certification really costs, and a step-by-step checklist for passing your first audit without burning out your team.
What Is SQF Certification?
SQF (Safe Quality Food) certification is a third-party audit program that verifies a food site's safety system against the SQF Code, published by SQFI, a division of FMI (the Food Industry Association). The certificate belongs to the site, not the company, and it must be renewed through a recertification audit every year.
Three things make SQF different from a basic HACCP program:
- It's benchmarked by GFSI. The SQF Food Safety Code is recognized by the Global Food Safety Initiative, which is why customers who ask for "a GFSI certification" accept SQF. See our guide to GFSI certification for how the benchmark works.
- It's audited by a licensed third party. You pick an SQFI-licensed certification body; their auditor spends one or more days in your plant checking documents, records, and the floor itself.
- It never ends. Recertification audits happen annually, and sites certified to a GFSI-benchmarked SQF code should expect at least one of those audits in each three-year cycle to be unannounced.
One timing note: audits currently run against SQF Code Edition 9. SQFI released Edition 10 in March 2026, and audits against the new edition are not expected to begin before January 2, 2027. If you're starting now, build to Edition 9 and track the transition on SQFI's site.
What Are the SQF Levels?
The SQF program has three levels: SQF Fundamentals, the SQF Food Safety Code, and the SQF Food Safety Code paired with the SQF Quality Code. Each step up adds documentation, rigor, and audit depth. (Older references to "Level 1, 2, 3" describe pre-2020 editions of the code; the structure below replaced them.)
SQF Fundamentals (Basic and Intermediate)
An entry program for small or developing suppliers that aren't ready for a full GFSI audit. The Basic tier focuses on implementing good practices with minimal documentation; the Intermediate tier layers in more documented procedures. Fundamentals is not GFSI-benchmarked, so it won't satisfy a customer who demands a GFSI cert, but it's a sane on-ramp.
SQF Food Safety Code
The GFSI-benchmarked core of the program and what most people mean by "SQF certified." It requires a working, documented HACCP-based food safety plan, full prerequisite programs (GMPs, sanitation, pest control, training), and a site audit. If a retailer told you to "get SQF," this is the level they mean.
SQF Quality Code
An add-on for sites that already hold (or are earning) Food Safety Code certification. It applies the same HACCP method to quality defects, not just safety hazards: things like fill weights, appearance, and customer-spec compliance. Sites certified to both are the closest thing to the old "Level 3."
SQF vs HACCP vs GFSI vs BRCGS: What's the Difference?
The short version: HACCP is a method, GFSI is a benchmark, and SQF and BRCGS are certification schemes built on HACCP that GFSI recognizes. Buyers who ask for "GFSI certification" will generally accept any benchmarked scheme.
| What it is | Who owns it | GFSI-recognized? | What you end up with | |
|---|---|---|---|---|
| HACCP | A hazard-analysis method from the Codex Alimentarius; the foundation every scheme builds on | No one — it's a methodology, codified in regulation for some U.S. sectors | Not a scheme, so no | A HACCP plan and trained people; no site certificate by itself |
| SQF | A certification scheme: codes, licensed auditors, site audits | SQFI, a division of FMI | Yes (Food Safety Code) | A site certificate renewed by annual audit |
| BRCGS | A certification scheme with its own food safety standard and audit grades | BRCGS (part of LGC Group) | Yes | A site certificate with a letter grade |
| GFSI | A benchmarking organization that recognizes schemes meeting its requirements | The Consumer Goods Forum | It IS the benchmark | Nothing to certify to — you certify to a recognized scheme |
So "SQF vs HACCP" isn't really a choice. You can't earn the SQF Food Safety Code without a functioning HACCP plan — SQF wraps management systems, prerequisite programs, and third-party auditing around it. If you're starting from zero, build the HACCP plan first; our HACCP certification guide walks through it. "SQF vs BRCGS" usually comes down to what your customers ask for and what auditors are available in your region — SQF has deep coverage in North America.
How Much Does SQF Certification Cost?
Plan on roughly $7,500 to $15,000 in out-of-pocket costs for a first certification year at a small-to-mid-size facility, before consulting fees — and it recurs annually. The exact number depends on facility size, number of HACCP plans, and how far your current system is from the code.
| Cost item | Typical range | Notes |
|---|---|---|
| SQFI registration fee | $100–$1,200 per year | Set by SQFI, scaled to the site's gross annual sales; paid to register in the SQFI assessment database |
| Certification audit fees | $1,500–$3,500 per audit day | Most facility audits run 2+ days; add auditor travel expenses |
| Consultant / gap assessment (optional) | $5,000–$25,000+ | Varies with scope; many plants do it in-house with a trained SQF practitioner |
| Training | A few hundred dollars per person | HACCP training for the SQF practitioner is required; implementing-SQF courses are common |
| Facility and equipment fixes | $0 to well into five figures | The wild card: pest proofing, hand-wash stations, storage segregation, calibration |
Two budgeting notes from the field. First, the audit invoice is rarely the biggest line — staff time spent writing procedures and chasing records usually costs more than the auditor does. Second, don't skip the re-audit math: registration plus an annual recertification audit means SQF is an operating expense, not a one-time project.
How Do You Pass Your First SQF Audit?
You pass by running the system long enough to generate real records, then proving it on the floor. Here is the sequence that works, start to finish. (A printable version is available as our SQF Audit-Prep Checklist.)
- Pick your code and scope. Choose Fundamentals vs Food Safety Code (ask your customers which they require), and define exactly which products and processes the certificate covers.
- Register with SQFI. Create the site's account in the SQFI assessment database and pay the registration fee before the audit can be scheduled.
- Appoint and train an SQF practitioner. The code requires a designated, HACCP-trained practitioner on site who owns the program day to day. Pick someone with floor credibility, not just a title.
- Build the HACCP plan and prerequisite programs. Hazard analysis, CCPs, monitoring, and the supporting programs: sanitation, pest control, supplier approval, training, and GMP compliance.
- Gap-assess against the code, clause by clause. Read the actual code for your industry sector and mark each clause: have it, partially have it, don't have it. This list is your project plan.
- Run the system for 2–3 months minimum. Auditors certify evidence, not intentions. You need weeks of completed monitoring logs, sanitation checks, and training records before anyone shows up.
- Do a full internal audit and a management review. Both are code requirements and both generate findings you'd rather fix yourself than have written up.
- Fix your records problem now. Missing signatures, skipped checks, and illegible logs are among the most common findings. If paper isn't getting filled out reliably, digitize the capture before the audit, not after.
- Schedule the certification audit. Choose a licensed certification body, book the document review and the site audit, and brief every shift on what auditors will ask them.
- Close corrective actions fast. Nonconformities don't fail you by default — unresolved ones do. Your certification body sets response deadlines (commonly 30 days for evidence); treat them as hard dates.
What Happens on SQF Audit Day?
A certification audit has two parts: a document review (often remote) that checks your written system against the code, and a site audit where the auditor walks your floor and samples your records. Knowing the rhythm takes the fear out of it.
Expect the site audit to follow a pattern. An opening meeting sets scope and schedule. Then the auditor walks the plant early — before it's had time to be cleaned up for show — watching GMPs in practice: hand washing, allergen handling, chemical storage, pest control, equipment condition. The bulk of the day is traceability and records: the auditor picks a finished lot and asks you to trace it back to raw materials and forward to shipment, pulling monitoring logs, corrective actions, and training records along the way. A closing meeting lists the findings before anything hits paper.
Findings come in three weights, and they aren't equal:
- Minor nonconformities — isolated lapses that don't compromise safety. Common and survivable; you close them with corrective-action evidence on your certification body's deadline.
- Major nonconformities — a systemic gap in a code requirement. You can still certify, but the response bar is higher and the follow-up scrutiny is real.
- Critical nonconformities — a direct food safety failure or falsified records. A critical fails the audit outright.
Two patterns show up in first audits over and over. Records that were "always done" but not consistently signed, timed, or completed — auditors treat an undocumented check as a check that didn't happen. And operators who freeze when asked "what do you do if this reading is out of spec?" Train the answer, not a script: know the limit, know the action, know who to call.
How Does Digitizing Paperwork Ease Audit Prep?
An SQF audit is mostly a records exercise. The auditor picks a date and a product and says: show me the pre-op inspection, the CCP monitoring log, the corrective action, and the training record for the operator who signed it. If those live in binders across three offices, retrieval is slow and gaps surface at the worst possible moment.
Digitizing capture at the station changes the math. Checks get time-stamped as they happen, incomplete entries are visible the same shift instead of at month-end, and any record can be pulled up by asking for it instead of digging for it. That's the model Harmony uses with manufacturers: paper logs, checklists, and forms become live, searchable data, and operational documents become answerable in plain English. One specialty manufacturer we work with replaced paper-based production logging entirely and now generates its daily reports straight from shift data — the same mechanics that make audit-week record pulls a non-event. No rip-and-replace required.
You don't need software to pass SQF. Plants pass with paper every week. But every hour your practitioner spends reconstructing records is an hour not spent fixing the findings that actually matter.
Where Should You Start?
Start with the customer requirement (which code, what deadline), then the HACCP plan, then the gap assessment. If you're earlier in the journey, read our HACCP certification guide first — it's the core of everything SQF audits. If you're weighing schemes, the GFSI certification overview compares the recognized options. And grab the printable audit-prep checklist to run the countdown.