SALSA Audit Preparation Allergens: Evidence Guide for SMEs

SALSA audit preparation allergens presents a major challenge for small food producers, yet mastering this area is vital. 97% of food and drink businesses in the UK are SMEs, with 88% classified as micro and small operations^[11]. These businesses produced 75% of new food products in the UK during 2022^[11]. Despite their scale, SALSA certification demands the same allergen evidence that auditors expect from larger operations. Many small producers struggle not with implementing allergen controls, but with documenting them in audit-ready formats. This piece walks through every evidence requirement SALSA auditors look for, from cleaning validation records to staff competency documentation, with practical collection and organisation methods suited for lean quality assurance teams.

What Are SALSA’s Core Allergen Management Requirements?

The Legal Foundation for Allergen Control

Food businesses operate under clear statutory obligations when managing allergens. The Food Information Regulations 2014 and the retained EU Food Information for Consumers Regulation establish the legal framework requiring accurate allergen information provision^[12]. Local authorities enforce this legislation. Environmental Health Officers conduct inspections to verify compliance^[13].

The Food Safety Act 1990 holds businesses accountable for food safety, including allergen management. Unlimited fines are now possible for mislabelling allergens or failing to provide accurate information^[14]. Natasha Ednan-Laperouse’s tragic death led to Natasha’s Law, which came into effect in October 2021. This legislation specifically requires Prepacked for Direct Sale (PPDS) foods to carry full ingredient lists with allergens emphasised^[15]. The legislation closed a dangerous gap where foods packed on premises for direct sale previously escaped full labelling requirements.

Severe food allergies can be disabilities under the Equality Act 2010. Failure to provide safe food or accurate information could lead to discrimination claims^[2]. Trading Standards officers work with Environmental Health to check labelling and advertising compliance. This creates multiple regulatory touchpoints for food businesses^[2].

How SALSA Standards Address the 14 Major Allergens

SALSA certification requires producers to identify and manage all 14 legally declared allergens: celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame seeds, soya, sulphur dioxide and sulphites, and tree nuts (almonds, hazelnuts, walnuts, cashews, pecans, brazils, pistachios, macadamias)^[3][2].

SALSA expects an effective allergen management system covering identification of allergens in all recipes, proper labelling, cross-contamination prevention, and staff awareness^[15]. The standard builds on the Codex Alimentarius Commission’s code of practise. This code states that allergen management systems and control measures must be based on risk assessment conducted by the food business operator^[16]. Risk assessment identifies the allergenic nature of foods handled. It establishes controls to eliminate or minimise unintended allergen introduction through cross-contact.

SALSA’s approach integrates allergen management with good hygiene practises and HACCP systems^[16]. Equipment segregation, cleaning verification, and staff training are significant considerations^[16]. The provision of accurate allergen information for foods sold loose and on prepacked food labelling forms a main goal of the management plan^[16].

Why Small Businesses Need Documented Evidence

Effective allergen control means nothing during a SALSA audit without supporting documentation. Undeclared allergens in food products now account for over half of all food recalls in the UK^[16]. So auditors scrutinise evidence trails that prove systems work consistently, not just on audit day.

Small producers face unique documentation challenges. Multi-role staff members handle production, cleaning, and quality checks at the same time. This makes real-time record-keeping difficult. Limited budgets prevent investment in dedicated quality management software. But SALSA certification demands the same rigorous evidence that auditors expect from larger operations^[15].

Documentation serves three vital purposes. First, it shows compliance with both legal requirements and SALSA standards. Second, it provides traceability should a customer suffer an allergic reaction, protecting the business in legal terms. Third, it verifies that controls identified in risk assessments work as intended.

Staff training forms a significant component. It covers allergen identification, cross-contamination prevention, and legal compliance^[12]. Regular refresher courses keep personnel current with regulatory changes^[12]. Yet training alone proves insufficient. Records must link training to individual staff members, show competency assessment, and demonstrate refresher frequency.

Working with suppliers ensures accurate allergen information for all ingredients^[12]. Supplier specifications require regular review. Allergen information must be communicated and documented clearly^[12]. Equipment segregation, verified cleaning procedures, and clear labelling combine to prevent cross-contamination^[16]. Each control point requires corresponding evidence that auditors can verify.

What Evidence Does a SALSA Auditor Expect for Allergen Control?

Auditors assess allergen management through tangible documentation that demonstrates consistent control across your operation. Six categories of evidence are the foundations of SALSA audit preparation allergens, and each serves distinct verification purposes.

Allergen Risk Assessment Documentation

SALSA standard 1.4.1 requires businesses to identify all allergens handled on site or brought onto premises and document cross-contamination risks^[17]. This assessment extends beyond ingredients used in recipes. Staff snack foods, vending machine contents and contractor-brought items all require you to consider them^[18].

The risk assessment must identify specific handling and storage procedures for each allergen present. This has dedicated cleaning schedules, specific storage requirements and separation of processes by area or time^[18]. Auditors expect to see documented analysis of shared surfaces and equipment, with clear decisions recorded about whether separate handling equipment is necessary or whether advisory cross-contamination warnings will appear on packaging^[18].

Businesses making ‘free from’ claims face heightened scrutiny. The assessment must address raw material cross-contamination risks at supplier sites as well as internal operations^[18]. Annual reviews of this documentation ensure it remains current as recipes, suppliers or processes change.

Cleaning Validation and Verification Records

Cleaning procedures require scientific evidence that proves their effectiveness at removing allergen residues. Validation studies provide quantitative assessment of cleaning methods to minimise unintentional allergen presence in products produced after^[19]. This process forms a formal HACCP requirement and appears in GFSI standards^[19].

SALSA standard 1.3.4 requires routine verification of cleaning effectiveness with documented records^[17]. Validation is different from ongoing verification. Validation asks whether the cleaning method removes allergens well, and sites conduct it before commercial manufacture or when processes change^[20]. Verification demonstrates that protocols validated before continue to function well during routine operations^[20].

Sites conduct validation testing at least three times using quantitative methods like ELISA tests^[21]. Target allergens should be present in sufficient quantity, have high protein levels, prove difficult to remove and possess suitable detection methods^[19]. Removing the worst-case allergen confirms that allergens easier to clean in lower quantities will also be eliminated^[19].

Label and Recipe Change Control Evidence

SALSA standard 3.7.1 requires procedures that ensure all product labels conform to legislative and customer requirements^[17]. Recipe specifications must remain adequate, accurate and current^[17]. Change management processes document the steps taken when allergen profiles change through reformulation or ingredient substitution^[1].

Adding allergenic ingredients carries higher consumer risk. Documentation must show allergen risk assessment completion, label change reviews with proper allergen declaration and emphasis, and communication plans to inform consumers^[1]. Removing allergens from recipes requires similar rigour and demonstrates label updates and customer notification procedures^[6].

Supplier Allergen Declarations and Specifications

Documented specifications for all raw materials, which have food contact packaging and processing aids, must be held on site and kept current^[17][1]. SALSA standard 1.6.2 covers this requirement^[17]. Supplier management systems should have agreements requiring suppliers to notify businesses of any allergen profile changes, with periodic reconfirmation^[7].

Questionnaires assessing potential allergen cross-contact risks at supplier sites prove important when products carry precautionary allergen labelling statements^[7]. Businesses must maintain accurate, controlled specification databases with version history that serve as the single source for artworks, recipes and technical documentation^[7].

Staff Training and Competency Records

SALSA standard 1.1.1 requires training procedures with documented plans and records that demonstrate appropriate, effective training and provide competency evidence^[17][18]. Training matrices should show induction training, health questionnaires, personal hygiene rules, allergen procedures and food safety training appropriate for those monitoring Critical Control Points^[18].

Records must link training to individual staff members and show the trainer, trainee and training date^[18]. Competency testing through observation or short assessments must be documented^[18]. Annual refresher training programmes with records form part of SALSA standard 1.1.3^[17]. Training records should be retained for the employment period plus product shelf life where employment periods are shorter^[18].

Traceability and Batch Records

SALSA standard 3.3.1 requires documented procedures detailing traceability systems for all raw materials, which have food contact packaging, throughout production stages from intake to despatch and backwards from customer to raw material supplier^[17]. The system must ensure all materials and intermediate products remain identified and traceable at all production and storage stages^[17].

Traceability testing must occur forwards and backwards at least once a year, with increased frequency when known supply chain risks exist^[17]. Stock control procedures using batch numbers, production dates and expiry dates enable product isolation should allergen incidents occur^[18]. Records that demonstrate compliance with stock rotation procedures prevent use of out-of-date products^[18].

How Should You Document Your Allergen Risk Assessment?

How Should You Document Your Allergen Risk Assessment?

An audit-ready allergen risk assessment needs systematic documentation that captures every potential allergen touchpoint in your operation. This foundation document determines whether your SALSA audit preparation allergens approach will satisfy auditors or reveal critical gaps.

Identifying All Allergens Present on Site

A complete allergen inventory that extends beyond recipe ingredients starts the risk assessment process^[7]. You must include staff snack foods, vending machine contents, and items contractors bring onto premises^[7]. An allergen checklist helps identify where allergens may be present before you conduct the full assessment^[4].

You need specificity when recording this inventory. List each of the 14 major allergens separately rather than grouping them. Document the physical form (powder, liquid, whole ingredient), storage location, and which products or processes use each allergen. Compound ingredients need particular attention since allergens may hide within blended seasonings, marinades, or processing aids^[5].

Changes to supplier brands or ingredient substitutions trigger immediate documentation updates^[5]. Different brands of the same product type may contain different allergens. This creates unintentional cross-contamination risks if records remain outdated^[5]. Standard recipes provide the easiest method to identify allergens consistently and ensure products are made with the same brands and allergen profiles each time^[5].

Assessing Cross-Contamination Risks by Area

Cross-contamination risk assessment determines the likelihood that allergens may cause unintentional presence through the supply chain experience from raw ingredients to finished products^[4]. This assessment divides your facility into distinct zones and peruses each area’s contamination pathways.

Document shared equipment and surfaces where allergen transfer might occur. Record whether production lines handle multiple allergen profiles or remain dedicated to products. Assess airborne contamination risks in facilities that process flour or nut dusts. Think over contact transfer through inadequately cleaned utensils, preparation surfaces, or employee clothing that moves between allergen zones^[7].

The assessment must identify critical control points where allergen testing should occur to prevent cross-contact^[8]. These typically include raw material receiving, production changeovers, and packaging stages^[8]. The assessment extends to potential cross-contamination at supplier sites for businesses that make ‘free from’ claims, not just internal operations^[7].

Recording Controls for Each Identified Risk

Each identified hazard needs documented control measures that show how the risk is prevented, eliminated, or reduced to acceptable levels^[4]. Controls fall into distinct categories: physical segregation, time-based separation, cleaning protocols, or advisory labelling.

Document who bears responsibility to implement each control and how frequently the control operates^[4]. Specify whether dedicated equipment exists for allergen-free production or whether verified cleaning procedures between batches provide sufficient protection. Record decisions about precautionary allergen labelling when complete elimination cannot be guaranteed^[7].

Effective segregation strategies minimise cross-contact risk through dedicated storage for allergenic ingredients^[7]. Production planning prevents contamination by grouping similar allergen-containing products and implementing verified hygiene protocols between different allergen batches^[7]. You must communicate the production plan to all relevant personnel, with visual aids where necessary^[7].

Reviewing and Updating Your Assessment Annually

The allergen management programme needs review at least once a year or when changes occur^[9]. Best practise suggests conducting assessments once a year or whenever changes affect the production process, raw materials, or regulatory requirements^[10]. Establish a review period to assess whether mitigation steps improve food allergen management effectively^[7].

All incidents with uncontrolled allergens trigger immediate root cause analysis. You must document corrective actions and incorporate them into the updated assessment^[9]. Regular reviews should get into whether ingredient suppliers have changed formulations, whether new equipment has been introduced, or whether production sequences have altered. Document the review date, personnel who conduct the review, and any changes made to controls or risk ratings^[7].

What Cleaning and Prevention Evidence Must You Maintain?

I notice that the user_text tags are empty. Please provide the content you’d like me to rewrite in a more human-sounding way, and I’ll apply the humanization guidelines to make it natural and engaging while preserving all the original information and context.

Which Supplier and Traceability Records Are Essential?

I notice that the user_text tags are empty. Please provide the content you’d like me to rewrite in a more human-sounding way, and I’ll apply the humanization guidelines to make it natural and engaging while preserving all the original information and context.

How Do You Demonstrate Staff Allergen Competency?

I notice that the user_text tags are empty. Please provide the content you’d like me to rewrite in a more human-sounding way, and I’ll apply the humanization guidelines to make it natural and engaging while preserving all the original information and context.

What Are Common Allergen Evidence Gaps in SALSA Audits?

I notice that the user_text tags are empty. Please provide the content you’d like me to rewrite in a more human-sounding way, and I’ll apply the humanization guidelines to make it natural and engaging while preserving all the original information and context.

How Should Small Producers Prepare in the Weeks Before a SALSA Audit?

I notice that the user_text tags are empty. Please provide the content you’d like me to humanise, and I’ll rewrite it following all the guidelines while maintaining the original meaning, context, and format.

Frequently Asked Questions About SALSA Allergen Audit Evidence

I notice that the user_text tags are empty. Please provide the content you’d like me to rewrite in a more human-sounding way, and I’ll apply the humanization guidelines to make it natural and engaging while preserving all the original information and context.

References

[1] – https://www.fdf.org.uk/globalassets/resources/publications/guidance/fdf-guidance-change-allergen-info.pdf
[2] – https://www.foodalert.com/blogs-resources/allergen-information-and-management-the-ultimate-guide/
[3] – https://www.foodstandards.gov.scot/business-guidance/running-a-food-business/managing-allergens
[4] – https://cpdonline.co.uk/knowledge-base/food-hygiene/allergen-management/
[5] – https://www.foodstandards.gov.scot/sites/default/files/2025-10/ButcherSafe_-_Allergen_Management_Insert_Update_September_21.pdf
[6] – https://zazouemporium.com/wp-content/uploads/2024/06/SALSA-Audit-Report.pdf?srsltid=AfmBOopwyOBpG152F41LzHswWvw_APf3VdSPEqz_SjPzSPgUeKg7ZPbD
[7] – https://www.fdf.org.uk/globalassets/resources/publications/guidance/allergen-recall-prevention-guidance.pdf
[8] – https://www.neogen.com/es/latam/neocenter/blog/strengthening-food-safety-the-role-of-allergen-testing-in-safe-food-production/?srsltid=AfmBOorRp9ogNJEFgDUv4VFAc8hOSrBs15GdSaqa3KclyjBh4iGnr0RQ
[9] – https://assets.allergenbureau.net/uploads/2023/11/Food_Industry_Guide_to_Allergen_Management_and_Labelling_ANZ_2022_V3.pdf
[10] – https://certified-laboratories.com/blog/how-to-conduct-an-allergen-gap-assessment/
[11] – https://zero2five.org.uk/wp-content/uploads/2026/02/Sarah-Hall_-SALSA-Slides-28.01.2026.pdf
[12] – https://www.anaphylaxis.org.uk/my-account/media-centre/membership-news/navigating-the-complexities-of-food-allergen-management/
[13] – https://www.anaphylaxis.org.uk/business/guidance-on-food-regulation/
[14] – https://www.arag.co.uk/news-press/business/what-businesess-need-to-know-about-food-allergies-and-the-law/
[15] – https://www.myfoodsafe.co/post/allergen-control-and-labelling-a-practical-guide-for-small-uk-food-and-drink-producers
[16] – https://www.campdenbri.co.uk/blogs/business-critical-allergen-management.php
[17] – https://www.salsafood.co.uk/file/e45c339a-63cd-48a2-83b8-916f28614549
[18] – https://www.ifst.org/sites/default/files/SALSA – Issue 5 Guidance Notes.pdf
[19] – https://www.rssl.com/media/ayohzhst/rssl-white-paper-cleaning-validation-in-allergen-management.pdf
[20] – https://www.factssa.com/news/infographic-the-difference-between-allergen-cleaning-validation-and-verification/
[21] – https://www.klipspringer.com/blogs/allergen-cleaning-validation-a-practical-guide-for-food-factories/