hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← HACCP hub

HACCP guide

Effivity HACCP guide: the HACCP study, CCP monitoring and hygiene records in one system

How Effivity, Sterling's ISO and GRC software, runs a HACCP system: where each Codex element sits, what Sterling configures and in which order, how a missed CCP check is recorded, what the certification auditor samples and what the software leaves to your HACCP team.

  • Updated September 2026
  • 8-minute read
  • Part of the HACCP hub

Key points

  • Effivity holds the HACCP study as controlled documents and turns each CCP, hygiene and verification check into a dated, owned record an auditor can trace back to the plan.
  • The Codex text asks for records appropriate to the seven principles, not for software. Effivity changes when the record is made: at the line, by the person who took the reading.
  • Sterling sets Effivity up in the order the twelve steps run, so monitoring forms are built only after the hazard analysis has been done and the critical limits have been validated.
  • Effivity is included with the engagement, at no additional cost. It stores the HACCP team's decisions; it does not make them, and it issues no certificate.

What does Effivity do for a HACCP system?

Effivity is Sterling's ISO and GRC software, used in 50+ countries. For HACCP it does three jobs. It keeps the HACCP study under document control: the product descriptions, the flow diagrams, the hazard analysis worksheets, the CCP decisions and the evidence behind each critical limit. It turns the daily work into records: hygiene checks, CCP readings, deviations, calibrations and verification results, each with a date, a user and an owner. And it links them, so that a missed reading or an out-of-limit result opens a corrective action that someone has to close.

None of this is required by Codex. The General Principles of Food Hygiene ask for documentation and records appropriate to the seven principles and their application, and a small bakery can meet that on paper. Software earns its place because paper logs are hard to cross-check when someone asks what happened to one batch on one night.

Effivity HACCP modules mapped to the Codex elements

The Codex elements sit in Effivity's standard modules, with forms built for your plant; the last column is what an auditor typically asks to see.

Codex elementWhere it sits in EffivityWhat the auditor asks to see
Good hygiene practices: cleaning, pest control, personal hygiene, maintenanceHygiene procedures in Documented Information; checklists set up as scheduled forms with an owner per areaA cleaning or pest-control record for a chosen day, and what was done about a failed item
Suppliers and incoming materialsSupplier approval and re-evaluation in Purchase; goods-in checks in Quality InspectionThe approval of a supplier of a high-risk ingredient, and a rejected delivery
Preliminary steps: team, product, intended use, flow diagramTeam roles and competence in HR; product descriptions and flow diagrams in Documented InformationThe flow diagram version, and the record that it was checked on the floor
Hazard analysis and CCP determinationThe hazard analysis worksheets and the CCP decision record as controlled documentsWhy a hazard was judged significant, and why a step was or was not made a CCP
Validated critical limitsEach limit in the HACCP plan with its validation study or reference attachedThe source of one limit, and that it was validated before use
Monitoring of CCPsA monitoring form per CCP, with the limit, frequency and responsible role built inThe log for a sampled batch, with the name of the operator and the time of each check
Corrective actionsNon-conformance/Deviation Management: product held, cause, disposition, closureWhat happened to the product made while control was lost, and who released or rejected it
Validation and verificationCalibration in Operations; audit programme and reports in Internal Audit; decisions in Management ReviewThe calibration of the probe behind a sampled reading, and the last internal audit of the plan
Legal and customer requirements, complaintsCompliance Obligation for the requirements that apply; Customer Life Cycle Management for complaintsA food safety complaint and whether it led to a review of the hazard analysis

The steps themselves are explained in HACCP requirements explained: the twelve steps.

What Sterling configures at the start

Effivity comes with pre-configured workflows. Sterling adapts them during the gap analysis, in the order the HACCP method imposes:

  1. Structure and users. Sites, lines and shifts are mirrored, and the people who check and sign become named users.
  2. Hygiene foundation first. The prerequisite programmes are set up as scheduled checklists before the HACCP study is loaded,. Their content is covered in Prerequisite programmes and good hygiene practices.
  3. The HACCP study. Product descriptions, intended use, flow diagrams and the hazard analysis go into Documented Information once the team has confirmed the diagrams on site.
  4. CCP monitoring forms. Only when the CCPs are decided and their limits validated does each CCP get its form.
  5. Verification calendar. Calibration due dates, record reviews, internal audits and the periodic reassessment of the plan are scheduled with reminders to their owners.

A copied plan or a form nobody completes is reworked or retired, not migrated.

Records made at the time, including the missed ones

Effivity is cloud-based and has a mobile app, so a check can be entered where it happens, subject to the device rules your hygiene zoning allows. That tackles a familiar weakness: the log written up at the end of the shift.

Worked example: a test-piece check that did not happen

A packing line has its metal detector as a CCP, verified with test pieces every hour. At 02:00 the form shows no entry. The overdue check is visible to the shift supervisor, who treats it as the plan says a missed reading must be treated: product packed since the last successful check is identified and held, and the detector is tested at once. It passes, so the authorised person releases the held product. The deviation record then asks why the check was missed; one operator covering two lines leads to a staffing change. An auditor sampling that night later sees the gap, the hold, the test and the reason, each dated and owned.

A year with no misses at all reassures no experienced auditor; misses handled properly do.

What the certification auditor sees in Effivity

The certification body audits your HACCP system, not the software. Its assessment usually starts with a readiness review of the documented system and continues with the certification audit on site, often over two visits; the full sequence is set out in HACCP certification process, step by step. On site the auditor samples a product, a CCP, a date or an operator, and your people open and explain the matching records.

What a well-run Effivity system shows the auditor is continuity. Entries are spread through each shift, limits trace to their validation, calibration is current and every deviation ends in a disposition. Internal audits have reached both the hygiene practices and the plan, as described in HACCP internal audit and verification: what to check.

How Sterling runs HACCP in Effivity

Your HACCP study and its records in one system from the first workshop.

Effivity is included with the engagement, at no additional cost, with users and access period confirmed in the proposal. Whether your team leads the work with our guidance (Design™) or we manage it for you (Drive™), our expert and experienced consultants configure it around your products and lines, and complete the internal audit and management review with you before the certification body arrives. We ensure successful certification for our clients. Sterling does not certify: the certificate is issued by the independent certification body you appoint.

Book a free discovery call

When the product, the line or the standard changes

A new recipe, supplier or oven can change the hazards while the plan on file stays as it was on certification day. In Effivity, the change is raised against the plan, the HACCP team reassesses the affected steps, and the revised plan is approved as a new version. Any altered CCP form is updated with it.

Under Sustain™, Sterling keeps the verification calendar, internal audits and reviews running between the certification body's annual surveillance audits. Some plants later move to ISO 22000 or FSSC 22000 because a customer asks for a GFSI-recognised certificate. The HACCP records already in Effivity carry over, and the management system elements are added around them; which route fits is discussed in HACCP vs ISO 22000 vs FSSC 22000: which one, and when.

What Effivity cannot do for you

Effivity does not identify hazards, decide CCPs, set critical limits or validate them. Those judgements belong to the HACCP team. It does not replace laboratory testing, validation studies or works to the premises. The benefit is lost in four familiar ways:

  • Two records for one check. A paper log kept beside the form soon disagrees with it.
  • Forms without the limit. A monitoring form that does not show the critical limit and frequency invites readings nobody compares with anything.
  • A single data-entry clerk. One office user entering everything hides who took the reading.
  • Deviations closed on the day. A corrective action closed before verification has shown that the cause is gone proves nothing.

Effivity for HACCP: questions buyers ask

Is Effivity HACCP software or general ISO software?

Both: Effivity is one platform for ISO and GRC systems, and a HACCP system runs in its standard modules with forms configured for your hazard analysis, CCPs and hygiene checks.

Does HACCP certification require software?

No. The Codex text requires documentation and records appropriate to the principles, and paper can meet that. Software earns its place by making records timely, linked and easy to retrieve when a batch is sampled.

Is Effivity worth it for a small plant with one HACCP study?

Usually yes, because it is included with the Sterling engagement at no additional cost and the set-up is scaled to the plant. A small plant may need only a handful of forms.

What happens to our HACCP records if we move to ISO 22000 or FSSC 22000?

They stay in Effivity. The HACCP study and its records remain the core, and the management system and scheme requirements are added around them.

Will the certification body accept records held in Effivity?

Nothing in the Codex text requires records to be on paper, and auditors assess what a record shows rather than where it is kept. Confirm the arrangements with your certification body; the auditor will expect you to open any sampled record promptly and show who made it and when.

HACCP implementation

HACCP requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Talk to a consultant

Run your HACCP study and its records in Effivity from the first workshop.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice