FSSC 22000 Certification in the USA
Quick answer
- FSSC 22000 is the GFSI-benchmarked food safety scheme many large US retailers and co-packer contracts now require, in place of or alongside older audit programs.
- Version 7 replaced Version 6 in May 2026. Existing V6 certificate holders have until April 30, 2028 to complete the upgrade. V6 audits remain valid through April 30, 2027.
- IAS (Integrated Assessment Services) certifies FSSC 22000 in the US under accreditation from UQAS (Universal Quality Accreditation Service), not JAS-ANZ.
- EAS, IAS’s technical training partner, handles auditor training on a separate track. CQI-IRCA approval belongs to the Lead Auditor course specifically; the Internal Auditor program runs on EAS’s own curriculum instead.
US food retail has consolidated around a small number of very large buyers. Most of them now specify a GFSI-recognized food safety certification as a condition of listing, not as a nice-to-have. FSSC 22000 is one of the schemes accepted for that purpose. It combines ISO 22000 with a sector-specific ISO 22002-x prerequisite program and FSSC’s own additional clauses covering food fraud, food defense, and allergen management. IAS certifies US facilities to the current FSSC 22000 V7 requirements from its San Francisco office. It also manages the mandatory transition for sites still holding a V6 certificate. This page walks through what the scheme actually requires and what changed between V6 and V7. It also covers which segments of the US food industry IAS certifies most and how the audit itself is structured. Finally, it explains how IAS’s certification role stays separate from EAS’s auditor-training business.
What Does FSSC 22000 Certification Actually Cover?
FSSC 22000 (Food Safety System Certification 22000) is a scheme built in layers, not a single stand-alone standard. The foundation is ISO 22000, the international food safety management system standard. Layered on top is a prerequisite program from the ISO 22002-x family, matched to your specific food-chain category. It sets the operational hygiene and process controls a plant runs every shift. FSSC then adds its own clauses that ISO 22000 doesn’t fully spell out on its own: food fraud vulnerability assessments, food defense plans, allergen cross-contact controls, label verification, and environmental monitoring for pathogens in higher-risk categories. GFSI has benchmarked the scheme, which the Foundation for Food Safety Certification owns and administers. A buyer’s supplier-quality team will accept an FSSC 22000 certificate on that strength, without independently re-verifying every clause behind it.
FSSC 22000 V6 vs V7: What Changed
FSSC published Version 7 in May 2026, and IAS now certifies new applicants directly against it. Existing certificate holders move over on a scheduled timeline, not a hard cutover.
| Area | FSSC 22000 V6 | FSSC 22000 V7 |
|---|---|---|
| Prerequisite programs | ISO/TS 22002-x series | New ISO 22002-x:2025 series |
| GFSI benchmarking | Aligned to GFSI Benchmarking Requirements v2020 | Realigned to GFSI Benchmarking Requirements v2024 |
| Food-chain categories | Broader category groupings | More granular category & subcategory structure |
| Culture requirements | Food safety & quality culture required | Strengthened — clearer evidence of senior-management involvement expected |
| Sustainability | Limited, indirect coverage | Formal SDG-aligned requirements: food loss & waste, resource efficiency, packaging design |
| Additional Requirements | Baseline coverage | Strengthened supplier approval, allergen management, food defense, food fraud, equipment management |
Source: FSSC 22000 Version 7 update, published by the Foundation for Food Safety Certification (fssc.com), May 2026.
For a facility that’s already certified, the V7 upgrade is largely a documentation and evidence exercise: mapping what you already do onto the new clause numbers and category structure. It’s not a ground-up redesign of the food safety management system.
Who in the US Food Industry Should Certify
US food manufacturing spans everything from national dairy and protein processors to regional co-packers running private-label lines for grocery chains. FSSC 22000 shows up across most of that spectrum. IAS certifies organizations including:
- Dairy processors, meat and poultry plants, and bakery operations supplying national and regional grocery chains.
- Beverage bottlers and co-packers, including private-label and contract manufacturing operations serving multiple retail brands from a single facility.
- Ready-to-eat and prepared-food producers, a category where retailers apply particularly tight scrutiny given the higher recall risk.
- Cold-storage, warehousing, and distribution operators moving product between processors and big-box or grocery distribution centers.
- Ingredient, feed, and food-contact packaging manufacturers supplying into certified food-chain operations.
Transitioning from V6 to V7: Key Dates
| Milestone | Date |
|---|---|
| FSSC 22000 V7 published | May 2026 |
| Last date V6 audits are permitted | April 30, 2027 |
| V7 upgrade audit window | May 1, 2027 – April 30, 2028 |
| Deadline: every certificate must be on V7 | April 30, 2028 |
An existing V6 certificate doesn’t expire the moment V7 became current. It stays valid until you complete the upgrade, as long as that happens inside the window above. IAS generally recommends folding the V7 gap review into whichever surveillance audit falls next on your calendar, rather than scheduling it as a separate visit. That keeps travel and audit-day costs down, and gives the auditor one natural checkpoint to review the new sustainability and culture evidence alongside routine surveillance items.
The IAS Certification Process in the USA, Start to Finish

- Pricing starts with a scoping call. Facility footprint, line count, and product category determine the quote, so a single-line bakery and a multi-line protein plant land on different numbers.
- A gap analysis, if you want one, runs before Stage 1 and gives you a private read on where the FSMS falls short of V7 while there’s still runway to fix it.
- Stage 1 is the readiness check: can the documentation and the site, on paper, support a Stage 2 visit at all.
- Stage 2 puts the system to the test on the plant floor — HACCP verification, prerequisite program evidence, a traceability and mock-recall exercise, and the FSSC Additional Requirements.
- Anything flagged as a nonconformity needs objective evidence of correction — not a promise to fix it — before the certificate is released.
- A three-year certificate follows, kept active through the surveillance cadence described later in this article.
“In US plants running multiple SKUs off shared lines for different retail customers, the allergen changeover records are where I usually spend the most time during Stage 2. It’s not that the controls are missing — the paperwork just doesn’t always keep pace with how fast the line actually changes over,” says Dr. C.D. Mohana Priya, ISO 22000:2018 Lead Auditor. “A facility that logs changeover verification in real time, rather than reconstructing it before the audit, moves through that section noticeably faster.”
A facility with an established food safety management system and clean records typically completes the process within a few months. One still building its FSMS from a thinner base should plan for a longer runway. IAS gives a realistic estimate once the gap analysis or Stage 1 findings are in. It doesn’t quote a generic industry-wide figure before any review has happened.
Documentation You’ll Need
- A food safety policy that carries genuine top-management sign-off, not a delegated signature.
- HACCP records and prerequisite programs cross-referenced to the specific ISO 22002-x:2025 clauses your category falls under.
- Separate vulnerability assessments for food fraud and food defense, each tied to a documented mitigation step rather than a risk-rating spreadsheet alone.
- An allergen management plan built specifically around your shared-line changeover risk, not a generic allergen policy template.
- A traceability procedure with a completed mock recall behind it — auditors want the test record, not just the written steps.
- Standard verification evidence: monitoring logs, internal audit findings, and management review minutes.
- A documented food safety and quality culture plan showing leadership engagement, an area V7 scrutinizes harder than V6 did.
- Sustainability and food-loss records for whichever categories V7’s clauses now cover.
Benefits of FSSC 22000 Certification
- Retail listing access: a GFSI-benchmarked certificate satisfies the supplier-quality requirement that many large US grocery and big-box retailers now build into their vendor contracts.
- Fewer duplicate audits: one accredited certification scheme can replace several separate retailer-specific audits, cutting the total number of site visits a facility has to host each year.
- Recall preparedness: rehearsed traceability and mock-recall testing reduce both the scope and the cost of an actual recall event, should one occur.
- Co-packer credibility: for contract manufacturers running multiple client brands, a single site-wide FSSC 22000 certificate is often easier for retail customers to accept than brand-by-brand audits.
- Sustainability documentation: V7’s food loss, waste, and packaging-design clauses give retail buyers evidence they can cite directly in their own ESG reporting.
Accreditation and Training at a Glance
Certification and auditor training are kept as two separate functions on purpose. The organization training your team is never also the one deciding your certification outcome. See the FSSC 22000 Lead Auditor and Internal Auditor training pages for course schedules.
| Activity | Delivered by | Accredited / Approved by |
|---|---|---|
| FSSC 22000 certification audit | IAS (Integrated Assessment Services) | UQAS (Universal Quality Accreditation Service) |
| FSSC 22000 Lead Auditor training | EAS (Empowering Assurance Systems) — IAS’s technical training partner | CQI-IRCA (Approved Training Partner) |
| FSSC 22000 Internal Auditor training | EAS — IAS’s technical training partner | EAS’s own in-house program (CQI-IRCA approval applies only to the Lead Auditor course) |
Confirmed against the accreditation pages IAS and EAS each publish, current as of August 2026.
After Certification: Surveillance, Recertification & Scope Changes
A certificate in hand isn’t the finish line. FSSC 22000 keeps the facility under an active three-year schedule, rather than leaving it alone until renewal comes around. IAS returns annually to check that the food safety management system still performs the way it did at Stage 2. FSSC’s unannounced-visit rule applies as a matter of course, not as a special condition reserved for certain facilities.
- A second facility, a new line, or any change big enough to shift your food safety risk profile should reach IAS before it goes live. Some changes call for an extension audit instead of waiting for the regularly scheduled visit.
- Recertification is timed to land before the three-year clock runs out, audited with the same rigor as the original Stage 2 so coverage never actually lapses.
- Suspension is what happens when a major nonconformity goes unresolved or a surveillance date is missed entirely. Facilities that track IAS’s surveillance calendar alongside their own internal audit schedule rarely end up there.
Why Certify with IAS in the USA

IAS auditors working across the US are used to the scale of American food manufacturing. Multi-line facilities run dozens of SKUs, co-packing arrangements serve several retail brands at once, and retailer-specific paperwork piles up alongside the core food safety records. A facility certified to ISO 22000 or ISO 9001 can usually line up that audit date with FSSC 22000 and cut the total number of site visits per year. On the training side, EAS holds the CQI-IRCA approval for the Lead Auditor course, and stays a distinct organization from the one making the actual certification call.
About the reviewer
Before auditing became part of her work, Dr. C.D. Mohana Priya spent 15-plus years in a genetics lab. She held an Associate Professor (Research) post while her research ran through microbiology and molecular-diagnostics testing, alongside day-to-day clinical-laboratory duties. Management-system auditing followed later. She now carries ISO 22000:2018, ISO 9001:2015, and ISO 15189:2022 qualifications, plus hands-on ISO/IEC 17025 implementation work. Reviewing a US facility’s audit file, she reads monitoring and testing data the way a lab accreditation assessor would, not as ordinary paperwork. She still teaches ISO coursework on management systems, in person as well as by live video.
Explore More
- IAS FSSC 22000 Lead Auditor Training (USA) — CQI-IRCA approved, delivered with EAS
- IAS FSSC 22000 Internal Auditor Training (USA) — for your own internal audit program
- IAS ISO 22000 Certification — the base food safety management standard
- IAS ISO 9001 Certification — for a combined audit with FSSC 22000
- IAS Accreditation — IAS’s full UQAS accreditation scope
- IAS Canada — FSSC 22000 Certification — the equivalent certification page for Canadian facilities
- IAS Latin America — regional coverage across the Americas
- EAS — Empowering Assurance Systems — trains auditors for IAS-certified sites
Get Started with FSSC 22000 Certification in the USA
Whether you’re applying fresh or upgrading an existing V6 certificate ahead of the April 30, 2028 deadline, IAS can put together a scoped quotation once it understands your facility. Need auditor training as well? Ask about pairing certification with EAS, IAS’s training partner.
Phone: +1 (888) 493-0916 / +1 (415) 570-3826
Contact page: ias-certification.com/contact-us/
Frequently Asked Questions
Do US retailers actually require FSSC 22000, or is it optional?
It isn’t a legal requirement. But many large grocery and big-box retailers now build a GFSI-recognized certification into their supplier-quality contracts, which makes it a practical requirement for facilities that want to supply them.
Is IAS’s FSSC 22000 program in the US accredited by JAS-ANZ?
It isn’t. UQAS (Universal Quality Accreditation Service) is the accreditation body behind IAS’s US FSSC 22000 program. JAS-ANZ accredits a different certification body entirely, so it’s worth reading the accreditation line on any certificate rather than assuming.
My facility holds a V6 certificate already — does moving to V7 mean starting the application over?
It doesn’t. The V7 move is an upgrade audit layered on your existing certification, not a fresh application from zero. IAS builds the V7 requirements into whichever surveillance or recertification visit comes next.
If we co-pack for several retail brands out of one facility, does one certificate cover all of them?
It can — FSSC 22000 certifies the site and its processes, not a specific brand name, so every product made there falls under the same certificate as long as it’s within the certified scope.
What should we budget for FSSC 22000 certification at a US facility?
There isn’t a published flat fee — IAS builds the quote around your line count, facility footprint, and category risk. Expect a tailored number once the initial scoping review is done.
Does the auditor certifying our facility also run the Lead Auditor training sessions?
No — those two roles sit with different organizations by design. EAS handles the Lead Auditor and Internal Auditor courses; IAS auditors handle the certification audit itself, and that separation is what protects audit impartiality.
Does CQI-IRCA accreditation extend to the Internal Auditor course as well?
It doesn’t — that accreditation applies to the Lead Auditor course alone. The Internal Auditor course runs on EAS’s own in-house curriculum, which builds real audit skill but doesn’t carry a CQI-IRCA credential.
Do surveillance visits in the US actually show up unannounced, or is that just written policy?
They do show up unannounced. FSSC’s rule requires at least one no-notice visit per three-year cycle, and IAS applies it to every US-certified site — not a clause that just stays on paper.
Is it possible to combine an FSSC 22000 audit with an ISO 9001 or ISO 22000 audit?
It is — request aligned dates from IAS and one site visit can cover FSSC 22000 plus ISO 9001 or ISO 22000, rather than running each on a separate calendar.
What’s a realistic timeline from first contact to certificate?
That depends heavily on how far along your FSMS already is. Facilities with mature, well-organized records often wrap up within a few months. Those starting from a thinner base should plan for a longer stretch, which IAS confirms after reviewing your gap analysis.
