SQF is a GFSI-benchmarked certification programme administered by the SQF Institute, a division of FMI. It is widely accepted by U.S. retail and foodservice buyers, which is often the reason a supplier is asked for it in the first place.
The programme is organised into modules by sector and activity, with separate food safety and quality codes. Selecting the right module and level, and defining scope precisely, has more effect on cost and difficulty than most first-time applicants expect.
What preparation actually involves
SQF expects a documented system that has been operating, not merely written. That distinction drives the sequence of preparation: build, run, then audit.
- Module, code and level selection matched to your sector, activities and customer requirements
- Scope definition — sites, products, processes — since an unnecessarily broad scope generates avoidable non-conformances
- Clause-by-clause gap assessment against the current edition, each gap with an owner, an artefact and a date
- Management commitment, policy, document control and record control build-out
- Food safety plan and HACCP integration so one hazard analysis serves both the regulation and the code
- Prerequisite programs: sanitation, environmental monitoring where applicable, allergen control, pest management, supplier approval, traceability and recall
- Internal auditor training and a completed internal audit cycle before the certification audit
- Pre-assessment audit under audit conditions, with graded findings and a closure plan
The requirement most sites underestimate
It is not the documentation. It is the evidence that the system has been running for long enough to produce records — internal audits performed, management review held, verification activities completed, corrective actions closed with effectiveness checks, complaints handled and trended.
This is why a target audit date set before a gap assessment is usually optimistic. If the system has to demonstrate operation, then the clock starts when the system starts working, not when the manual is finished. We will tell you when a date is not achievable rather than help you fail an audit on schedule.
What a consultant can and cannot do
We can assess, build, train and pre-audit. We can help you understand how the current edition's requirements apply to your site and where auditors typically probe hardest.
We cannot certify you, influence the certification decision, or shorten the certification body's process. SURU Compliance is not a certification body and is not accredited to certify. We have no referral arrangement that pays us for placing you with a particular certification body, and we would treat any such arrangement as a conflict.
It is also worth being blunt about the downside of a certificate that outruns the system behind it. Certification creates customer expectations and contractual representations. If an incident later exposes a gap between what was claimed and what was operated, the certificate becomes evidence rather than protection.
SURU Compliance is an independent regulatory consulting practice. We are not the FDA or any other government agency, not a certification body or accredited certifying entity, and not a law firm. We do not provide FDA approval, guaranteed inspection or audit outcomes, or legal advice, and we refer legal matters to qualified counsel. Regulatory applicability depends on your specific products, processes, size and jurisdiction.