ISO 22000 by industry
ISO 22000 for food ingredients, additives and supplements: what your customers' supplier audits look for
Clause by clause: ISO 22000:2018 requirements: every clause explained →
What changes when the organisation makes or trades flavours, colours, starches, enzymes, vitamin premixes or food supplements: why food manufacturers ask, what belongs in the scope, where auditors sample specifications, certificates of analysis, allergen carry-over and traceability, and how the system meets FSSC 22000, food fraud and Halal or Kosher demand.
Key points
- Food manufacturers approve ingredient suppliers through questionnaires, specifications, certificates of analysis and site audits; ISO 22000 puts one system behind those answers.
- The scope is written in materials and processes: flavours, colours, starches, enzymes, premixes or supplements, and the blending, drying and packing behind them.
- Auditors concentrate on raw material approval and the evidence behind each certificate of analysis, allergen cross-contact on shared blenders, carry-over between batches and lot-level traceability.
- Where a customer asks for GFSI recognition, FSSC 22000 builds on the same system and adds a structured food fraud vulnerability assessment; Halal and Kosher sit beside it as separate certifications.
Why ingredient and supplement producers are asked for ISO 22000
An ingredient is sold to a manufacturer whose own certificate depends on what it buys, so its supplier approval team treats every flavour house, starch mill or premix blender as part of its hazard analysis. The request arrives as a supplier questionnaire, a product specification to sign, a demand for certificates of analysis with every delivery and, for higher-risk materials, a supplier audit by the customer's technical team.
A certified system answers most of that once, not customer by customer. Where the customer's supplier programme specifies "GFSI-recognised certification", ISO 22000 alone does not meet it; FSSC 22000, which uses ISO 22000 as its management system, does. The route choice is covered in HACCP vs ISO 22000 vs FSSC 22000: which one, and when.
Supplement producers meet a second question first: is the product regulated as a food or as a medicine in the market where it is sold? Where it is a food, ISO 22000 fits. Where a regulator treats it as a medicine, pharmaceutical GMP applies and a food safety certificate does not replace it.
Scope for an ingredient, additive or supplement business
A buyer reads the scope line before anything else, so it should name the materials and the processes in the customer's words: liquid and powdered flavours by compounding and spray drying; natural colours by extraction and standardisation; modified starches; enzyme preparations; vitamin and mineral premixes; tablets, capsules and powders for food supplements. Intake, the quality control laboratory, blending, milling, packing and dispatch sit inside.
A trader that buys an additive in bulk, repacks and relabels it still controls storage, repacking, labelling and the supplier evidence it passes on. Toll blending stays in the system too: the specification owner verifies the controls over work done for it.
Three scope mistakes recur: leaving out a shared blender that also runs technical or feed grades; omitting toll-made products shipped under your name; and describing the range so broadly that the food chain category no longer fits. The general rules are in ISO 22000 scope: sites, products and processes, and the mistakes that cost you.
Where the requirements bite in an ingredient plant
| Requirement area | What it means for ingredients and supplements | Evidence the auditor samples |
|---|---|---|
| Purchased materials and specifications | Botanicals, carriers, solvents, processing aids and packaging approved against a specification; certificates of analysis verified, not filed | Approved supplier list, signed raw material specifications, certificates of analysis checked against them, periodic independent testing |
| Hazard analysis, including adulteration and contaminants | Chemical hazards such as residues, heavy metals and solvent residues, microbial hazards in dry powders, and adulteration that could introduce an undeclared or unsafe substance | Hazard analysis by material and process step, the reasoning behind each testing frequency, supplier risk ratings |
| Allergen cross-contact and carry-over | Shared blenders, dryers and packing heads that run allergenic carriers or ingredients, with cleaning and production sequencing that stop carry-over into the next batch | Allergen matrix by equipment, validated cleaning at changeover, sequencing plans, label and specification checks |
| Release against specification | Each lot tested and released against the customer specification before the certificate of analysis is issued | Laboratory results, retained samples, hold and release records, certificates of analysis traceable to raw data |
| Traceability, withdrawal and recall | One raw material lot can end up in many customer batches, so mass balance must work forward and backward through blends and rework | A timed mock recall across a blend, lot coding from intake to dispatch, rework records |
The method for the analysis itself is in Hazard analysis, OPRPs and CCPs: the hazard control plan, and the hygiene baseline in Prerequisite programmes and ISO 22002-1: what a plant needs.
Food fraud, customer audits and Halal or Kosher demand
Authenticity is the question ingredient buyers ask most after safety. ISO 22000 captures adulteration where it creates a food safety hazard, through the hazard analysis and supplier controls. FSSC 22000 goes further: food fraud mitigation is one of its additional requirements, asking for a vulnerability assessment by competent people and a mitigation plan with owners and review dates.
Customer audits continue after certification; keeping specifications, change notifications and complaint responses as live registers makes them routine.
Many ingredient customers also ask for Halal certification, and some for Kosher. Both are separate certifications with their own certifiers and rules; the ISO 22000 materials register, supplier evidence and segregation controls supply much of what a Halal assurance system needs. See Halal certification for ingredients, flavours and additives.
What an ingredient engagement looks like
Duration depends on the number of materials and flows, the state of supplier approval, outstanding testing and validation, and how long the plant must run to build records. Purchasing, the laboratory, production, regulatory affairs, warehouse and the food safety team leader take part. With Design™, Sterling guides your food safety team to build and own the system; with Drive™, Sterling carries more of the documentation, internal audit and readiness work so production and the laboratory keep their pace.
How Sterling works with ingredient and supplement producers
A food safety system your customers' supplier audits can rely on.
Our expert and experienced consultants build the system around your specifications, supplier evidence, shared equipment and lot traceability, then test it with a mock recall and internal audit before the certification body arrives. Records live in Effivity, included with the engagement, at no additional cost. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 22000 for food ingredients: questions buyers ask
Can a food supplement manufacturer get ISO 22000 certification?
Yes, where the supplement is regulated as a food in the markets you sell to. If a regulator classifies the product as a medicine, pharmaceutical GMP applies instead and ISO 22000 does not replace it.
Are suppliers' certificates of analysis enough to accept raw materials?
Not on their own. Auditors expect each certificate checked against an agreed specification and confirmed by periodic independent testing, at a frequency set by supplier risk.
Does ISO 22000 require a food fraud vulnerability assessment?
Not as a separate requirement; adulteration is covered where it creates a food safety hazard. FSSC 22000 does require a food fraud vulnerability assessment and mitigation plan, so build one early if a customer asks for GFSI recognition.
Can a trader or repacker of food additives be certified to ISO 22000?
Yes, for the activities it performs: purchasing, storage, repacking, labelling and dispatch. The scope must say so.
ISO 22000 by industry
Every guide in the ISO 22000 series is written for one question and links back to the hub for the whole picture.
- ISO 22000 for catering, hotels and food service
- ISO 22000 for feed and animal food production
- ISO 22000 for food and beverage manufacturing
- ISO 22000 for food packaging manufacturing
- Hazard analysis, OPRPs and CCPs
- ISO 22000 implementation plan
- ISO 22000 certification in India
- ISO 22000 for ingredients, additives and supplements
- Integrating ISO 22000 with ISO 9001 and ISO 14001
- ISO 22000 internal audit
- ISO 22000 management review
- ISO 22000 for retail and wholesale
- ISO 22000 for transport, storage and distribution
Keep exploring
Explore more about ISO 22000
Watch a video on how to implement ISO 22000 here.
Watch a video on ISO 22000 requirements here.
ISO 22000 resources
Services for ISO 22000
Talk to a consultant
Plan an ISO 22000 system that answers your customers' supplier audits.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice