A food plant can keep every worker card current and still fail an FDA preventive-controls inspection if the facility Food Safety Plan is outdated, unsigned, or missing monitoring and verification records. The plan belongs to the facility; food-handler cards and manager certificates belong to people on the roster.
This page owns the FSMA preventive-controls Food Safety Plan document set and its clocks: reanalysis (at least every three years, plus event triggers), PCQI oversight, and dated monitoring and verification work. Keep worker cards on food handler certification, manager cover on food protection manager certification, plant quality systems on GMP certification, and retail operating permission on health permit tracking. (General information only - not regulatory advice. See Sources.)
Remindax tracks Food Safety Plan, reanalysis, PCQI, and monitoring/verification dates you log. It does not write hazard analyses, validate preventive controls, run recalls, determine whether your facility is covered by 21 CFR Part 117, or provide legal or regulatory advice. Your organization and qualified advisors own the plan content.
1. What is an FSMA Food Safety Plan (preventive controls)?
Under the FDA Food Safety Modernization Act (FSMA) Preventive Controls for Human Food rule (21 CFR Part 117), covered facilities that manufacture, process, pack, or hold human food generally must prepare and implement a written Food Safety Plan. At minimum that includes a written hazard analysis. When hazards requiring a preventive control are identified, the facility must also have written preventive controls (process, allergen, sanitation, supply-chain, and others as applicable), a recall plan, and the monitoring, corrective-action, and verification procedures and records that prove the system works.
Food Safety Plan tracking, in the Remindax sense, means holding each facility's plan version, signature date, reanalysis due date, PCQI cover, and monitoring or verification review dates you log - then reminding owners before those dates matter. It is not a worker food-handler card, not a food protection manager credential, and not a third-party GMP certificate.
1.1 Six pieces on one facility record
Hazard analysis
Written evaluation of known or reasonably foreseeable hazards for each food type - required even when no preventive control is needed.
Preventive controls
Written process, allergen, sanitation, supply-chain, and other controls that significantly minimize or prevent hazards.
Recall plan
Written procedures for recalling product with a hazard requiring a preventive control - readiness that must stay current.
Monitoring & verification records
Dated evidence that controls ran as written, plus verification and records review - often what investigators ask for first.
PCQI (qualified individual)
A PCQI must develop or oversee the plan and reanalysis - via training equivalent to FDA's recognized curriculum or equivalent job experience.
People, retail & GMP clocks
Food handler cards, food protection manager certs, health permits, and GMP certification sit on their own pages.
That facility-plan shape is what compliance tracking software is built to hold across plants: one written system per site, dated reanalysis, named PCQI cover, and records clocks that do not line up with worker credentials. The owner, operator, or agent in charge must also sign and date the plan when it is first completed and whenever it is modified - another dated event worth logging next to the three-year reanalysis clock. Keep a customer or export HACCP reassessment on its own page - related food-safety docs, different job.
2. How often must a Food Safety Plan be reanalyzed - and what about the PCQI?
Under 21 CFR 117.170, the Food Safety Plan as a whole must be reanalyzed at least once every three years, performed or overseen by a PCQI.
Also required after significant process changes that create new or increased hazards, new hazard information, an unanticipated food-safety problem, finding that a control or the plan is ineffective, or when FDA requires it.
The owner, operator, or agent in charge must sign and date the plan when first completed and whenever it is modified. A PCQI develops or oversees the plan via FDA-recognized curriculum-equivalent training (commonly FSPCA) or equivalent job experience - not a national "license expiry" from FDA.
Treat the three-year reanalysis date as a hard facility clock, and log separate dates for plan revisions, PCQI cover changes, and any monitoring or verification reviews your procedures require. See Sources.
Three years sounds long until you map a multi-plant group. One site last reanalyzed in 2023, another after a line change in 2024, a third still carrying a 2022 signature while the PCQI who wrote it left last spring - every quarter has someone approaching a clock. That staggered pattern is why a single spreadsheet column labeled "FSMA: done" fails the first time two plants reanalyze in the same month.
Hitting the three-year date is necessary but not sufficient. A new allergen, process change, supplier failure, or ineffective control can force reanalysis well before the anniversary. Track those event dates as hard deadlines. Remindax holds the dates you record; it does not decide when reanalysis is legally required.
3. Why tracking FSMA Food Safety Plans matters
Preventive-controls documentation fails differently from worker cards: fewer printed expiry stickers, but each gap can put a facility's written system out of date for an FDA inspection or customer audit:
Staggered reanalysis across plants
Every facility renews its three-year clock on a different date - plus mid-cycle revisions after process or supplier changes.
Thin PCQI cover when someone leaves
If one PCQI oversees several sites, a resignation can open an oversight gap before a qualified replacement is ready.
Inspection finds the records gap
Investigators commonly ask for the written plan, signature page, reanalysis documentation, and monitoring and verification records - not a worker food card.
Lead time for real reanalysis
Hazard re-evaluation, validation work, and signature routing are not a same-week errand. Reminders need to fire early enough for real scheduling.
A plant whose reanalysis is due in September needs a reminder in the spring - not an alert the week of. Across a portfolio, early staged alerts keep plan updates orderly instead of last-minute. Teams that already use health and safety workflows usually fold Food Safety Plan dates into the same register as other facility documents.
4. Who needs to track FSMA Food Safety Plans
Anyone keeping covered food facilities inspection-ready feels this:
Multi-plant food processors
Staggered reanalysis and PCQI cover across plants, plus mid-cycle revisions after line changes.
Contract manufacturers
Customers ask for current plan status and recall readiness while you juggle many SKUs on shared lines.
Packers & holders
Covered packing and holding sites still need a written plan shape and dated oversight when Part 117 applies.
Compliance & quality leads
Portfolio view of upcoming reanalysis, open verification reviews, and PCQI cover changes.
Learn MoreFood safety & QA teams
Own the written system day to day - need reminders before the calendar and event clocks collide.
Learn MoreOwners & plant managers
Must sign and date the plan when completed or modified - the signature date is itself a trackable facility event.
5. What happens when Food Safety Plan dates slip
When a reanalysis is overdue, a signature page still carries a departed manager's name, or monitoring and verification records stop matching the written procedures, production may continue for a while - but the failure mode is not soft. An FDA inspection can find the gap, and customers or insurers can demand proof the written system is current. For a multi-plant group, one stale plan becomes a brand problem: the PCQI who owned it left months ago, and the reanalysis folder is empty for the line that just changed ingredients.
Significant activity changes, new hazard information, or an ineffective control can require reanalysis well before the three-year anniversary. Track those dates as hard deadlines, not footnotes on the old signature page.
6. How Remindax tracks FSMA Food Safety Plans
Remindax is date-and-status tracking with multi-channel reminders - not an FDA portal, Food Safety Plan Builder replacement, or inspection service. Record each facility's plan clocks, attach them to a site, and Remindax watches the dates:
Every facility's plan in one dashboard
Plan version, signature, reanalysis, PCQI, and verification review dates held per site - a second plant gets its own row.
Staged Email, SMS & WhatsApp reminders
Alerts before each reanalysis and dated verification or PCQI cover change - to the people who own the written system.
Multi-facility view
See which plants reanalyze next quarter without opening twelve shared drives.
Audit-ready exports
Pull current statuses when a customer, auditor, or insurer asks - dates and status only.
Remindax does not write Food Safety Plans, perform hazard analyses, validate preventive controls, run recalls, or decide Part 117 coverage. Your organization and qualified advisors handle that. Remindax makes sure reanalysis, PCQI, and verification dates do not arrive unnoticed.
7. Why spreadsheets fail for Food Safety Plan tracking
A spreadsheet can list eight plants and eight "last reanalysis" months. What it cannot do is stay honest when a line change triggers mid-cycle reanalysis, two sites share a PCQI, or verification reviews sit on a different clock from the three-year anniversary. Rows labeled "food safety: yes" blur a facility plan with worker cards or a GMP certificate - and investigators ask for the signed plan, not a food-handler tab.
- xThree-year reanalysis buried in columns nobody sorts quarterly
- xPCQI name outdated after a resignation
- xEvent-triggered revisions mixed into worker-card tabs
- xNever reminds the QA lead who must run reanalysis
- xGap surfaces when FDA or a customer asks for the plan
- ✓Every facility plan, reanalysis, and PCQI date in one register
- ✓Staged reminders before each staggered reanalysis
- ✓Event and verification clocks tracked separately when dated
- ✓Facility plan kept distinct from worker and GMP credentials
- ✓Email, SMS, and WhatsApp to the people who can update the plan
8. Key takeaways
- ✓An FSMA Food Safety Plan is the facility-level written system under preventive controls - hazard analysis, preventive controls, recall plan, and monitoring/verification records.
- ✓Track reanalysis (at least every three years under 21 CFR 117.170, plus event triggers), PCQI cover, signature dates, and verification reviews - apart from food-handler cards and GMP certificates.
- ✓A PCQI must develop or oversee the plan and reanalysis; qualification is training equivalent to FDA's recognized curriculum or equivalent job experience.
- ✓Worker food credentials, retail health permits, GMP certificates, and HACCP programs are different jobs - keep them on their own tracking pages.
- ✓Remindax tracks dates and reminds by Email, SMS, and WhatsApp - it does not author Food Safety Plans or provide regulatory advice.
9. Frequently Asked Questions
It is the written facility food-safety system under FSMA preventive controls (21 CFR Part 117) - typically a hazard analysis, preventive controls when needed, a recall plan, and monitoring, corrective-action, and verification records. Facility-level documentation - not a worker food-handler card.
Under 21 CFR 117.170, at least every three years for the plan as a whole - and sooner after significant changes, new hazard information, certain food-safety problems, finding a control or the plan ineffective, or when FDA requires it. Confirm wording in Sources.
A PCQI develops or oversees the Food Safety Plan and reanalysis. Qualification comes from training equivalent to FDA's recognized curriculum (commonly FSPCA) or equivalent job experience. The PCQI need not be a facility employee.
No. The Food Safety Plan is facility-level preventive-controls documentation. Food handler cards are the per-worker layer; food protection manager certification is the manager-level credential. Track those on their own Remindax pages.
No. GMP certificates and HACCP reassessments are related documents with their own clocks. This page owns the FSMA Food Safety Plan set and reanalysis/PCQI dates - use the GMP and HACCP tracking pages for those jobs.
No. Remindax tracks the dates you log and sends Email, SMS, and WhatsApp reminders. Plan content, hazard analysis, validation, recalls, and coverage determinations stay with your organization and qualified advisors.
Yes - hold reanalysis, signature, PCQI, and verification-review dates for every covered facility by site, each with its own reminders.
Yes - a forever-free plan, no credit card required.
Sources & References
This page summarizes public educational materials about FSMA preventive controls and Food Safety Plans; it is not regulatory advice. Confirm current requirements, exemptions, and guidance directly with FDA and the sources below.
- *21 CFR Part 117 - Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food (eCFR)
- *21 CFR 117.126 - Food safety plan (eCFR)
- *21 CFR 117.170 - Reanalysis (eCFR)
- *FDA - FSMA Final Rule on Preventive Controls for Human Food
- *FDA - Food Safety Plan Builder (educational tool)
- *FDA - Draft Guidance for Industry: Hazard Analysis and Risk-Based Preventive Controls for Human Food - Chapter 1 (The Food Safety Plan)
Never miss a Food Safety Plan reanalysis
Track every facility plan, PCQI, and verification clock - automatically.
GDPR-ready | AWS secure cloud | Encrypted storage | Setup in under 5 minutes