Requirements for SQF Multi-site Certification - Edition 10

This outlines the requirements for establishing and maintaining certification of a multi-site program that is managed by a central function and related sub-sites and, through a risk-based approach, has determined it is engaged in low-risk activities.

The below is applicable to Edition 10 and posted March, 2026.
Translations are provided as a service to SQF customers and are provided "as is." No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, or correctness of any translations made from English into any other language.

1

Scope

1.1This document outlines the requirements for establishing and maintaining certification of a multi-site program that is managed by a central function and related sub-sites and, through a risk-based approach, has determined it is engaged in low-risk activities.
1.2

The following scopes are eligible to be included in the multi-site organization, based on the sampling of the sub-sites:

  • AI Farming of Animals for Meat/ Milk/ Eggs / Honey

  • AII Farming of Fish and Seafood

  • BI Farming of Plants (Other Than Grains and Pulses)

  • BII Farming of Grains and Pulses

  • BIII Pre-Process Handling of Plant Products, Nuts and Grains

2

Definitions

2.1A SQF multi-site program is comprised of a central function under which activities are planned to manage and control the food safety management systems of a network of sub-sites under a legal or contractual link.
2.2For the purpose of this Code, the definitions in the SQF Glossary of Terms and the following definitions apply.
2.3The central function has a network of primary supplier sub-sites that are eligible for certification to an appropriate SQF Food Safety Code and are all involved in similar activities as per 3.7 below. The central function and all sub-sites are all located in the one country and operate under the same food safety legislation.

3

Eligibility Criteria for the Multi-site Organization

3.1The central function is the entity responsible for the SQF multi-site program (e.g., packhouse or co-op).

3.2

Sub-sites shall be linked to the central function by a legal or contractual arrangement.

3.3The central function and all sub-sites in the multi-site program shall be audited by one certification body. The central function shall be included in the scope of the certification and contracted with the certification body. The sub-sites are not required to be contracted to the certification body.
3.4

The central function shall implement and oversee an SQF System that includes management of the internal audit.

3.5

Sub-sites are not eligible for certification to the SQF Quality Code.

3.6Sub-sites shall implement an SQF System, in its entirety (e.g., food defense, mock recalls, traceability), which is subject to surveillance, maintenance and management by the central function.
3.7

The central function shall have authoritative control of the food safety management system of all subsites.

The central function shall have authoritative control of the food safety management system for all subsites. The central function shall also issue, maintain and retain all relevant documentation associated with the sub-sites, including traceability and issue, maintain and retain all relevant documents relating to the sub-sites. These shall be included in the agreement between the central function and the sub-sites.

3.8The product(s) or service(s) provided by each of the sub-sites shall be substantially of the same kind and produced according to the same fundamental methods and procedures.
3.9

The central function shall undergo a central function audit utilizing the SQF Checklist for Multi-site Operations which includes, at a minimum:

  • Eligibility criteria for the multi-site organization

  • Management commitment to the system

  • Roles and responsibilities of management

  • Management of the internal audits and internal auditor eligibility

  • Customer complaint procedure

  • Management and technical capacity

3.10

The central function shall demonstrate that sufficient management and technical capacity is available to:

  • i. Collect and analyze data from all sites;
  • ii. Implement and maintain an internal audit program for the sub-site; and
  • iii. Authorize and initiate organizational change if required.
3.11

The central function and the sub-sites shall be subject to the central function's internal audit program and shall be audited in accordance with that program. Internal audits shall be conducted at sub-sites, prior to the central function audit, in a quantity sufficient to allow the certification body to access whether the site is in compliance and apply to sub-site sample selection (refer to 8.0 below). All sub- sites are required, within a calendar year or season, to have an internal audit as per 4.2 below.

4

Internal Audits

4.1

The central function shall document its internal audit procedure and ensure that it can be effectively implemented. It shall include:

  • i. An internal audit schedule based on sub-site risk profiling;
  • ii. Methods and responsibility for conducting audits of sub-sites; and
  • iii. A frequency that ensures all sub-site SQF system are completed annually.

4.2

An internal audit, which includes all relevant elements of a SQF Food Safety Code, and the Good Agriculture/Aquaculture Practices (GAP) or Good Manufacturing Practices (GMP) module(s) applicable to the food sector category, shall be conducted at least once per year, and during periods of peak activity at all sub-sites included in the multi-site certification.

5

Internal Audit Personnel

    5.1

    Personnel conducting internal audits shall:

    • i. Have successfully completed the Implementing SQF Systems training course;
    • ii. Have successfully completed internal auditor training;
    • iii. Demonstrate competence in the same food sector category as the internal audit through work experience (minimum 2 years);
    • iv. Education in an agricultural / crop-based discipline or, at a minimum, has successfully completed a food-related or bioscience higher education course or equivalent.
    5.2

    Personnel managing the internal audits of the multi-site organization shall:

    • i. Be separate from personnel conducting the internal audits;
    • ii. Complete internal auditing training;
    • iii. Meet the criteria of an SQF practitioner;
    • iv. Technically review and evaluate the results of internal audits, including addressing non-conformities; and
    • v. Ensure internal auditors are evaluated, calibrated, monitored and assigned to remain impartial.
    5.3

    Where the internal audits are contracted out:

    • i. The contractor shall be a registered or meet the requirements of an SQF auditor or consultant;
    • ii. The central function shall be accountable for the actions and effectiveness of the work completed by the contractor; and
    • iii. Contract arrangements shall comply with 2.3.3 of the applicable SQF Food Safety Code.

    6

    Auditing and Certifying the Multi-site Organization

    6.1

    The audits and certification of an SQF multi-site organization shall be completed by a SQF licensed and accredited certification body.

    6.2The initial certification audit and subsequent surveillance and re-certification audits of the multi-site organization shall be centered on the central function, the internal audit function and a sample of the sub-sites. Record reviews for the sub-sites activities will be completed at the sub-site site audit.

    7

    Audit Frequency

    7.1The certification audit of the central function and a sample (refer to 8.0) of sub-sites are conducted every twelve months.
    7.2Re-certification audits of the multi-site are conducted on the anniversary of the last day of the central function audit, plus or minus 30 calendar days. For seasonal operations timing for sub-sites should be guided by the harvesting dates that may be weather dependent, or crop observation rotation.
    7.3Within each certification and re-certification audit cycle, the central function shall be audited before the sample of sub-sites. It is recognized that, where necessary to accommodate seasonal operations and harvesting schedules, a limited number of sub‑site audits may be conducted prior to the audit of the central function.
    7.4Surveillance audits are conducted for any site in the multi-site program that receives a score between 70 - 79. Surveillance audits are conducted six (6) months from the last day of the last certification audit, plus or minus thirty (30) calendar days or as per Part A A2:13 for seasonal operations. Where a sub-site is subject to a surveillance audit due to its score, the internal audit of that sub-site by the central function shall also be reviewed. If the sub-site is not operational within the six (6) month time frame for the surveillance audit then it shall be audited within the first two (2) weeks of the subsequent harvest and automatically be included in the sub-site sampling calculation (refer to 9.0).
    7.5

    If any sampled sub-site receives a critical non-conformance during an audit or scores 69 or below (which is considered a failed audit), all sub-site certificates will be suspended. Certification will only be reinstated after:

    • i. The failed sub-site achieves a score of 70 or higher in a follow-up audit, and
    • ii. An additional audit is conducted on 50% more sub-sites than the original sample size.

    The sub-site(s) that failed must also be included in the next audit cycle’s selection process (see Section 8.0).

    8

    Selecting the Sub-sites

    8.1The selection of the sample is the responsibility of the certification body.
    8.2The sample is partly selective based on the factors set out below and partly non- selective, and shall result in a range of different sub-sites being selected, without excluding the random element of sampling. At least twenty-five (25) percent of the sub-sites selected shall be based on random selection.
    8.3The sample of sub-sites shall be selected so that the differences among the selected sub-sites, over the period of validity of the certificate, are as large as possible.
    8.4
    • The sub-site selection criteria are to be based off the site risk profiles as per the current version of IAF MD 1 and may include, among others the following aspects:
    • i. Results of internal audits or previous certification assessments;
    • ii. Records of complaints and other relevant aspects of correction and corrective action;
    • iii. Significant variations in the size of the sub-sites;
    • iv. Variations in the work procedures;
    • v. Modifications since the last certification assessment;
    • vi. Geographical dispersion;
    • vii. New suppliers added to the program (refer to 10.0);
    • viii. Variations in shift patterns and work procedures;
    • ix. Complexity of the management system and processes conducted at the sites;
    • x. Maturity of the management system and knowledge of the organization;
    • xi. Environmental issues and the extent of aspects and associated impacts for environmental management systems;
    • xii. Differences in culture, language and regulatory requirements; and
    • xiii. Whether the sites are permanent, temporary or virtual
    8.5The central function shall ensure that all sub-sites listed as being included in the sub-site audit selection process are registered with SQF (Part A2:1). The central function shall also ensure that the SQF assessment database is updated to reflect any sub-sites being removed from the previous year multi-site program.

    9

    Determining the Size of the Sub-sites Sample

    9.1

    The Certification Body shall have a documented procedure for determining the sample size. This shall take into account, based on IAF MD1, or the current version, and all the factors described in this section.

    The Certification Body shall have records on each application of sampling for each multi-site organization, justifying it is operating in accordance with this document.

    The certification body shall record the justification for applying a sample size outside that described in this clause.

    9.2

    The minimum number of sub-sites to be audited at a certification audit or re- certification audit is:

    • i. Where the sub-site number is less than 75 then the square root of the number of sub-sites with 1.5 as a co-efficient (y=1.5√x), rounded to the higher whole number, with a minimum number 5 for subgroups numbers less than 20; or
    • ii. Where the sub-site number is 75-100 then the square root of the number of sub-site with 2.0 as a co-efficient (y=2.0√x); or
    • iii. Where the sub-site number is greater than 100 then 20% of the number of sub-sites.

    The sub-site selection process shall ensure that all sub-sites are audited withing a 5-year period and that at least 20% of the annual sub-site sample is subjected to an unannounced audit.

    9.3Where a primary sub-site has 4 or more secondary sites (e.g. growing areas), the primary location shall be audited and 50% of the secondary sites. More than fifty (50) percent can be audited if there is evidence that there are grounds to justify the further audit time. When a primary sub-site has fewer than 4 secondary sites, all secondary sites shall be audited.
    9.4

    The size of the sample shall be increased where the certification body’s risk analysis of the activity covered by the management system subject to certification indicates special circumstances in respect of factors such as:

    The size of the sample shall be increased where the certification body’s risk analysis of the activity covered by the management system subject to certification indicates special circumstances in respect of factors such as:

    • i. Audit scope and types of activities at the sub-site;
    • ii. Major variations in processes undertaken at each sub-site;
    • iii. Records of complaints and other relevant aspects of correction and corrective action;
    • iv. Indication of an overall breakdown of food safety controls;
    • v. Inadequate internal audits or action arising from internal audit findings at the central function or sub-site;
    • vi. The internal structure, size of the sites, and number of employees;
    • vii. The complexity or risk level of the process/activity and of the management system;
    • viii. Variations in process/activities undertaken;
    • ix. Any customer requirements or multinational aspects; and
    • x. Any sites not audited within the five year requirement.

    10

    Additional Sub-sites

    10.1On the application of a new sub-site or group of sub-sites to join an already certified SQF multi-site program, each new sub-site or group of sub-sites shall be included in the audit sample for the next re-certification audit. The new sub-sites shall be added to the existing sites for determining the sample size for future re-certification audits. Sub-sites transferring from another multi-site group or from a stand-alone certification are not classified as “new” and are not included in the sub-site audit sample unless part of the random selection process or due to auditor/certification body discretion.
    10.2New sub-sites shall not be added to the sub-site list once the list has been verified and agreed to by the central function and the certification body during the annual sample site selection process, prior to the central function audit. These sites can have their SQF systems components (SQF food safety system elements) managed by the central function but will be certified as a stand- alone operation and subject to initial certification requirements.

    11

    Non-Conformities

    11.1When non-conformities are found at any individual sub-site through the central function's internal auditing, investigation by the central function shall take place to determine whether the other sub-sites may be affected. The certification body shall require evidence that the central function has taken action to rectify all non-conformities found during internal audits and that all non-conformities are reviewed to determine whether they indicate an overall system deficiency applicable to all sub-sites or not. If they are found to do so, appropriate corrective action shall be taken either at the central function or the individual sub-sites. The central function shall demonstrate to the certification body the justification for all follow-up action.
    11.2

    When non-conformities are found at the central function or at any individual sub-site through auditing by the certification body, action shall be taken by the certification body as outlined in Part A2:18.

    Where non‑conformities identified at site level do not compromise certification but raise concerns regarding consistency of conformity, the Certification Body shall expand the audit sample to achieve sufficient confidence in the organization’s conformity.

    11.3When non-conformities are identified during the central function audit, the certification body shall take the appropriate action to assess the risk of the finding and may include an increase in sampling frequency until it is satisfied that control has been re-established by the central site.
    11.4At the time of the initial certification and subsequent re-certification a certificate shall not be issued to the sub-sites until satisfactory corrective action is taken to close out all non-conformities against the central function and all audited sub-sites.
    11.5It shall not be permissible that, in order to overcome the obstacle raised by the existence of non-conformity at a single sub-site, the central site seeks to exempt from the scope of certification the “problematic” sub-site during the certification, surveillance or re-certification audit.

    12

    Certificate Issued for a Multi-site Organization

    12.1A certificate shall be issued to the sub-sites audited within the sample program of the SQF multi-site program. The certificate shall include an appendix listing all sub-sites participating in the multi-site program. The sub-site certification shall state within its scope of certification that it is part of a multi-site certification and shall list all primary and secondary sub-sites. Certification bodies shall ensure that any member of the multi-site organization maintains accurate and transparent communication with the supply chain regarding the scope and products under certification.
    12.2The certification date for the central function audit and sub-sites shall be the date of the last audit conducted in that certification cycle. The certificate expiry date shall be based on the certificate decision of the last date of the sub-site audit.
    12.3The certificate for all sites in the multi-site program shall be subjected to the same suspension and withdrawal criteria in Part A, if the central function or any of the sub-sites do not fulfill the necessary criteria for maintaining their certificate.
    12.4The list of sub-sites shall be kept updated by the central function. The central function shall inform the certification body about the closure of any of the sub-sites or the addition of new sub-sites. Failure to provide such information will be considered by the certification body as a misuse of the certificate, and the multi-site organization’s certificate shall be suspended until the matter is corrected to the satisfaction of the certification body.
    12.5

    Where certification documents for one site are issued, they shall include:

    • That it is the management system of the whole organization which is certified;

    • The activities performed for that specific site / legal entity which are covered by this certification;

    • Traceability with the main certificate, e.g. a code; and

    • A statement saying “the validity of this certificate depends on the validity of the main certificate”.