Your supplier failed a hygiene inspection six months ago. You did not know. Your customers ate the product. That is the conversation nobody wants to have with an Environmental Health Officer.

The Food Safety Authority of Ireland has been clear: the responsibility for what enters your kitchen, your factory, or your processing line sits with you. Not your supplier. Not their certification body. You. And with food fraud operations growing more sophisticated every year, a handshake agreement and a PDF certificate from 2021 are not going to cut it.

What "Supplier Audit" Actually Means

An audit is not a form you fill in once and file. It is a live, repeatable process that tells you whether your supplier is doing what they say they are doing, consistently, over time. Most Irish food businesses have a supplier approval process on paper. Far fewer have one that works.

The gap between the two is where contaminated product gets through. It is where mislabelled allergens slip into supply chains. It is where food crime operates.

Start with risk segmentation. Not every supplier carries the same risk. A company supplying your cardboard packaging is a different conversation from one supplying raw poultry or allergen-containing ingredients. Tier your suppliers by risk level and audit accordingly. High-risk suppliers get physical site visits. Lower-risk suppliers get documentation reviews and periodic checks.

Documents You Should Be Demanding

Certificates alone prove nothing except that someone passed an audit on one specific day. Demand the full picture.

Regulatory registrations. Any food business supplying you in Ireland must be registered or approved by the FSAI under Regulation (EC) No 852/2004. Ask for their registration number. Check it. This takes five minutes.

Third-party audit reports. BRC, FSSC 22000, SQF and similar schemes all produce detailed audit reports, not just certificates. Ask for the full report including non-conformances. A supplier who hands you a certificate but refuses to share the report is telling you something.

Non-conformance and corrective action records. How a business handles failures tells you more than whether they pass. Ask what non-conformances were raised in their last audit and what they did about them. Vague answers are a red flag.

Allergen management documentation. Since Natasha's Law came into full effect, allergen control has moved from good housekeeping to a legal obligation. Your supplier should have a documented allergen management plan. Not a verbal assurance. A document.

Traceability records. Under EU food law, every food business operator must be able to identify from whom a product was received and to whom it was supplied. Ask your supplier to demonstrate this with a practical trace. Pick a product, pick a batch, and ask them to walk it back to source in under four hours. If they cannot, your own traceability is built on sand.

The Physical Site Visit

No amount of paperwork replaces walking the floor. For high-risk suppliers, a site visit before approval and at least annually thereafter is not optional. It is the only way to verify that the operation matches the documentation.

When you visit, look at the obvious things: temperature controls, pest evidence, staff hygiene practices, separation of raw and ready-to-eat products. Then look at the less obvious things.

Check whether their HACCP plan reflects what is actually happening on the line. A plan written three years ago that has never been updated after a process change is a non-conformance waiting to be found. Check whether staff can explain what the critical control points are and what the corrective action is when a limit is breached. If the documentation exists only in a folder and not in the heads of the people working the line, the system has already failed.

Look at intake procedures. How are raw materials checked on delivery? What happens when a delivery does not meet specification? A supplier who accepts everything regardless of condition is not a supplier you should be using.

Dealing with Imported Product

Illegal imports and fraudulent documentation are no longer edge cases in the Irish food market. The FSAI has seized product from suppliers presenting falsified certificates of conformity. If you are buying from outside the EU, your due diligence obligations increase significantly.

Third-country imports of animal products must enter through a Border Control Post and carry a valid Common Health Entry Document. Ask for it. Every time. Not just for the first shipment.

For products with protected designations, such as Parma ham or Parmigiano-Reggiano, verify the lot codes against the relevant producer registers. Counterfeit PDO product has appeared in the Irish market. The cost of checking is lower than the cost of a product recall.

Building a Supplier Monitoring System That Actually Works

Approval is a starting point, not a finish line. Once a supplier is approved, the monitoring begins.

Set review triggers beyond the annual calendar. If a supplier appears on an FSAI alert, an RASFF notification, or a media report involving product safety, that triggers an immediate review regardless of when the last audit was. If they change ownership, production facility, or key personnel, that also triggers a review.

Keep a centralised supplier register with expiry dates for every certificate, approval, and audit. Use a simple RAG system. Red means action required before you continue using that supplier. Amber means a review is due. Green means current. Someone owns this register. It is not a shared folder that gets updated when someone remembers.

Conduct unannounced spot audits where contracts allow. Announced visits show you the best version of an operation. Unannounced visits show you the normal version.

When a Supplier Fails

Have a written procedure for this before it happens. Suspension pending investigation, quarantine of affected stock, notification to the FSAI if there is a food safety risk. These decisions should not be made under pressure with no framework in place.

If you are waiting on an Environmental Health Officer inspection to tell you there is a problem in your supply chain, the system has already let you down.

The businesses that survive food safety crises intact are the ones who found the problem themselves. Document everything, act on what you find, and close the loop. An audit trail that shows you identified an issue and dealt with it is a very different conversation than one that shows you missed it entirely.

Your supply chain is only as safe as the weakest link you have not checked yet.