Industry
Compliance for Small Food Businesses
Small operations are not exempt from everything, and they are rarely exempt from what they assume. We identify what genuinely applies and build the smallest program that satisfies it.
- Risks mapped
- 5 primary risks
- Regulatory references
- 5 cited
- Structure
- Risk → Regulation → Solution
Context
Where small food businesses get caught out
The most expensive compliance mistake a small food business makes is not under-building. It is building the wrong thing — paying for a full manufacturing quality system when a qualified facility attestation and a tight set of prerequisite programs would have satisfied the requirement, or assuming a cottage food exemption covers a product or a sales channel that it does not.
We start by establishing what actually applies to your products, your volume, your sales channels and your jurisdiction. Then we build the smallest defensible program that meets it, structured so it can scale when your first national retail customer sends their supplier requirements.
01 — Risk
What actually goes wrong.
Ranked by consequence rather than by how visible or convenient the fix is. Relative exposure levels below are SURU's professional assessment of typical operations in this segment — not a regulatory classification, and not a rating of your specific business.
Assuming an exemption that does not apply
High exposureCottage food laws, retail food establishment exemptions and qualified facility status all have specific boundaries defined by product, process, volume and sales channel. Crossing one without noticing is common.
Registration and licensing gaps
High exposureFacility registration, state licensing, local permits and product-specific approvals are separate processes. Operating without one of them can halt production or a launch.
Labeling errors, especially allergens
Critical exposureAllergen and ingredient declaration errors are a leading recall cause and are disproportionately common where labels are produced in-house without a review step.
Co-packer relationships without oversight
High exposureUsing a co-manufacturer does not transfer your responsibility for your brand and your label. Many small brands have no qualification file for the facility making their product.
First retail customer requirements arriving all at once
Moderate exposureA retail listing frequently brings a supplier questionnaire, insurance requirements and a GFSI certification deadline simultaneously, on a timeline that is difficult to meet from a standing start.
02 — Regulation
What the rules typically require.
These are the frameworks that most often apply to this kind of operation. Exemptions, modified requirements and jurisdictional differences are common, so applicability has to be confirmed against your specific products and operations.
Educational summaries only. Not legal advice, and not a substitute for the regulation text, your regulatory authority's guidance, or qualified counsel.
- 21 CFR Part 117, including qualified facility provisions
- Very small businesses and qualified facilities may be subject to modified requirements rather than the full preventive controls subparts, with attestation and recordkeeping obligations attached. Eligibility must be assessed against your actual sales figures.
- 21 CFR Part 1 Subpart H
- Food facility registration and biennial renewal. Retail food establishments and certain other operations are exempt, so the determination depends on what you do and where you sell.
- State cottage food and home-processing laws
- Entirely state-specific, with different allowed product lists, sales channels, revenue caps and labeling requirements. Interstate and online sales frequently fall outside these allowances.
- 21 CFR Part 101 and FALCPA
- Ingredient declaration, nutrition labeling (with small business exemptions in some cases) and major food allergen declaration, including sesame.
- 21 CFR Part 114 for acidified foods
- Products such as pickles, hot sauces and salsas may be acidified foods requiring a process authority determination and scheduled process filing, which surprises many small producers.
03 — SURU solution
What we do about it.
Scoped to your operation, sequenced so each step earns the next, and delivered with the documentation you will need when someone asks you to prove it.
Applicability assessment first
A written determination of which rules apply to your products, volume, processes and sales channels — so you spend money on requirements rather than on assumptions.
Right-sized program build
Prerequisite programs and records proportionate to your operation, written in language your team will actually use, with the structure to grow rather than be replaced.
Registration, licensing and process authority coordination
Facility registration assistance, guidance on the state and local approvals you need, and support assembling what a process authority requires for acidified or low-acid products.
Label and allergen review
A structured review of ingredient statements, allergen declarations and claim language, with a change-control step so a recipe tweak cannot outrun the label.
Co-packer qualification and customer readiness
A qualification file for the facility making your product, and preparation for the supplier questionnaires and certification requirements a retail listing brings.
We do not promise inspection outcomes, audit scores, certification results or regulatory findings. Those decisions rest with regulators, certification bodies and auditors.
04 — Services
The practice areas this draws on.
- Service
FDA & FSMA Compliance
The FDA Food Safety Modernization Act moved the regulatory burden from reacting to contamination to proving you prevented it. We build the hazard analysis, preventive controls, supplier verification and records systems that carry that burden — and we prepare your team for the inspection that tests them.
View service area - Service
Manufacturing
Preventive controls only work when the programs beneath them do. We build and audit the prerequisite layer — sanitation, environmental monitoring, allergen segregation, food defense, supplier approval — and the CAPA discipline that keeps findings from repeating.
View service area - Service
HACCP
A HACCP plan is only worth what its critical limits can be defended with. We develop, rebuild and independently review plans across seafood, juice, retail and specialized processes — including the variance and validation documentation that regulators ask for first.
View service area
05 — Small Food Businesses
Talk to us about your small food businesses operation.
Tell us what you run, where you run it, and what is coming — a re-inspection, a customer audit, a first import, a certification deadline. We will tell you what applies and what it takes to be ready.
Direct contact
- info@surucompliance.com
- 651-329-4787
- Serving food businesses nationwide, onsite and remotely.
SURU Compliance is a regulatory consulting practice. We are not a government agency, a certification body, or a law firm, and we do not provide legal advice or guarantee regulatory outcomes.