We are working through the new requirements for 3rd party storage and Distribution Businesses, and I'm stuck on one part.
2.3.3.2 - "Products and Processes of co-manufacturers that are considered low-risk meet the requirements of the SQF Food Safety Code: Food Manufacturing, or other GFSI Benchmarked certification programs, and regulatory and customer requirements".
2.3.3.3 Contractural agreements with third party storage and distribution business shall inculde requirements relating to customer product requirements and compliance with clause 2.3.3.2. of the SQF Food Safety Code: Contractual agreements. The site shall verify compliance with the SQF Code and ensure that customer and regulatory requirements are being met at all times.
We have our staff at our portion of our main frozen warehouse, which we rent from the owner of the property that runs a multi-site warehouse operation. (We consider it a contracted service and up until 8.1 handled it that way with an audit required). This warehouse gets an audit that meets the requirements of ISO 9001:2015, FDA GMPs, and FDA HAACP and there's no way they are willing to get some kind of GFSI audit. Thankfully our product is low risk (we freeze for quality, it's shelf stable bakery) - so we should fall under "Requiring that they meet the requirements of the SQF food safety codes" without needing an audit. This has me scratching my head. At a high level, I can understand major programs. Pest Control, Building Maintenance. But - getting into details - for example, they aren't going to have an SQF practitioner (Why would they if they're not SQF?), etc. Any thoughts on how I can go about this? Switching warehouses is not an option - we have a mailorder operation that we run out of there as well, so it's tough finding a frozen space (especially in one that's GFSI), close enough to drive to daily, with a lot of dead room to bring our crews in. The warehouse is well run, Food Defense solid, well maintained - so I don't have a food safety concern. The code seems to basically say "They need to be SQF compliant" even if they're low risk, but we just have to verify that they meet the requirements. I'm considering having them fill out a survey hitting the main requirements at a high level. Records, Food Safety Plan, etc, and leaving out the nitty gritty (like the SQF practitioner). Maybe backing it up with a risk assessment acknowledging they aren't GFSI and otherwise hoping they look at our other places out of state that are GFSI. Thanks for anyone who made it through my wall of text!