ISO 22000 by industry
ISO 22000 for retail and wholesale: supermarkets, cash-and-carry and importers
Clause by clause: ISO 22000:2018 requirements: every clause explained →
What changes when the food business is a supermarket, hypermarket, cash-and-carry or importer: who asks for certification, how to scope stores and fresh counters, where auditors sample the chilled chain, date and label control, supplier approval and recall, and how the system sits beside inspections and supplier schemes.
Key points
- In retail and wholesale, ISO 22000 is usually driven by customers and networks: a supermarket group proving control across its stores, or an importer or cash-and-carry answering its trade customers and tenders.
- The scope is built around stores, distribution centres and fresh counters: the in-store bakery, deli and butchery are food handling operations, not shelf space, and must be named.
- Auditors follow the chilled chain onto the shop floor, check dates and labels on the shelf, and test whether a supplier or private-label recall reaches every store in time.
- The prerequisite programmes for this sector now have their own part: ISO 22002-7:2025, Retail and wholesale, used with ISO 22002-100.
Why supermarkets, cash-and-carry and importers pursue ISO 22000
A retailer sells food it did not make, so its risk sits in three places: the suppliers it approves, the conditions in its stores and warehouses, and the food it prepares itself at the fresh counters. ISO 22000 gives a supermarket or hypermarket group one system for all three, and a certificate showing that every store runs it.
Wholesalers and importers meet the question from their own customers. A cash-and-carry selling to hotels and caterers, or an importer supplying supermarket chains, is asked how it controls storage temperatures, shelf life, labelling and product it cannot inspect at source. An accredited certificate answers that in supplier questionnaires and tenders. Private-label manufacturers are expected to hold a scheme of their own; the choice between schemes is covered in HACCP vs ISO 22000 vs FSSC 22000: which one, and when.
What sits inside the scope for a retailer or wholesaler
The scope names the stores, distribution centres and the activities in them. For a supermarket group that means receiving, chilled, frozen and ambient storage, the sales floor, and each fresh counter: the bakery, the deli and hot food counter, butchery and fish. For a wholesaler or importer it means the warehouses, temperature-controlled chambers, repacking or relabelling, and the vehicles that deliver to customers.
Three scope mistakes recur. Certifying the distribution centre while the stores that receive, display and prepare food stay outside. Leaving the in-store bakery or butchery out of the hazard analysis because it is small, when it is the one place the retailer makes food. And treating private label as a supplier matter only, when the retailer owns the label, the specification and the recall. The general rules are in ISO 22000 scope: sites, products and processes, and the mistakes that cost you.
Where the ISO 22000 requirements bite in retail and wholesale
| Requirement area | What it means in a store or warehouse | Evidence the auditor samples |
|---|---|---|
| 8.2 Prerequisite programmes | Receiving, cold rooms and display cabinets, stock rotation, cleaning, pest control and staff hygiene in every store, selected against ISO 22002-7:2025 and local law | Delivery temperature and date checks, rejected loads, cabinet and cold room logs, breakdown records, cleaning schedules signed at the time, pest reports |
| 8.5 Hazard control | A hazard analysis for what the store makes and handles: in-store baking, slicing at the deli, mincing at the butchery, hot food held for sale, and chilled goods on an open shelf | Flow diagrams for each fresh counter checked on the floor, cooking and hot-holding records against validated limits, cabinet temperatures during trading, allergen separation at the counters |
| 7 Support: external supply and communication | Supplier approval for branded, private-label and imported products, with specifications, certificates and label information agreed before the first delivery | Approved supplier list, supplier certificates and their validity, private-label specifications and label approvals, import documents and supplier performance reviews |
| 8.9 Nonconforming product: date and label control | Short-dated and out-of-date product removed from sale, reduced-to-clear and markdown rules, and labels that match the product on the shelf | Date checks by aisle and counter, markdown and waste records, label checks on in-store packed products, hold-and-release records for damaged stock |
| 8.3 and 8.9 Traceability, withdrawal and recall | Knowing which lots went to which store or customer and clearing shelves in every one quickly, for supplier and private-label recalls alike | Lot records from receipt to store dispatch, quantity reconciliation, withdrawal notices confirmed by each store, a timed network mock recall |
The clauses themselves are explained in the ISO 22000 requirements guide, and the store PRPs in Prerequisite programmes and ISO 22002-1: what a plant needs.
Working alongside inspections, HACCP and supplier schemes
Food hygiene law in most countries rests on the Codex General Principles of Food Hygiene, so stores with fresh counters usually already run a HACCP plan for them. ISO 22000 does not replace it; the Codex HACCP principles sit inside clause 8.5, and the counter plans join the hazard control plan once checked against what staff actually do. Food authority inspections continue, and one set of records serves both.
Manufacturers supplying the retailer often hold FSSC 22000, BRCGS, IFS or SQF, the schemes GFSI recognises. Supplier approval can use those certificates as evidence instead of auditing every factory. ISO 9001 or Halal assurance can run in the same system; see Integrating ISO 22000 with ISO 9001 and ISO 14001: one system, one audit.
What a retail or wholesale engagement looks like
Duration depends on the stores and distribution centres in scope, how many fresh counters prepare food, the condition of cold rooms and cabinets, and how far supplier approval and recall are documented today. The food safety manager, store operations, category buyers, the private-label team, logistics and facilities all need to be involved, with store managers owning their floor's records. With Design™, Sterling guides your team to build and run the system; with Drive™, Sterling carries more of the documentation, store verification and internal audit.
How Sterling works with retailers and wholesalers
Food safety that holds on every shelf, in every store.
Our expert and experienced consultants build the PRPs, supplier approval and the hazard control plan around your stores and warehouses, run the temperature, date and recall records in Effivity, included with the engagement at no additional cost, and test the system with internal audits and a network mock recall before the certification body arrives. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 22000 for supermarkets and wholesale: questions buyers ask
Can one ISO 22000 certificate cover all our supermarket stores?
Yes, if every store is named in the scope and run under the same system. The certification body audits a sample of stores, so each one must keep the same controls and records.
Do we need a hazard analysis for every product we sell?
No. Packaged products are controlled mainly through supplier approval, storage and date control; the hazard analysis concentrates on the fresh counters, chilled display and hot food.
Does ISO 22000 certification of our stores cover our private-label products?
No. The certificate covers what the retailer does: approval, specification, storage, sale and recall. The manufacturer's own processing needs its own certification, which the retailer checks as part of supplier approval.
Is there a prerequisite programme standard for retail and wholesale?
Yes. ISO 22002-7:2025 covers retail and wholesale and is used with ISO 22002-100, which sets the common requirements across the supply chain.
ISO 22000 by industry
Every guide in the ISO 22000 series is written for one question and links back to the hub for the whole picture.
- ISO 22000 for catering, hotels and food service
- ISO 22000 for feed and animal food production
- ISO 22000 for food and beverage manufacturing
- ISO 22000 for food packaging manufacturing
- ISO 22000 for ingredients, additives and supplements
- ISO 22000 nonconformities
- Prerequisite programmes and ISO 22002-1
- Requirements
- ISO 22000 for retail and wholesale
- ISO 22000 scope
- ISO 22000 certification in Singapore and South East Asia
- ISO 22000 for small food businesses
- ISO 22000 for transport, storage and distribution
Keep exploring
Explore more about ISO 22000
Watch a video on how to implement ISO 22000 here.
Watch a video on ISO 22000 requirements here.
ISO 22000 resources
Services for ISO 22000
Talk to a consultant
Plan an ISO 22000 system that runs in every store, counter and warehouse.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice