Food Safety Audit Readiness for Indian Brands

A food safety inspection is not a conversation about intent. It is a scored walk through a physical space, and the score comes off a checklist the inspector is carrying. If you have never read that checklist, you are being graded on a rubric you have not seen.

In August 2026 the Maharashtra FDA suspended the food licence of a quick commerce dark store in Malad West. The reported findings were ordinary: stock on rusted racks and directly on the floor, an unclean cold storage area, expired and tampered packaged goods on shelf, no working FIFO or FEFO rotation, a cockroach infestation in the fruit and vegetable zone, weak waste handling, and no medical examination records for the people handling food. None of that is exotic. All of it is checklist.

What the inspector is actually scoring

FSSAI publishes inspection checklists built on the revised Schedule 4 of the Food Safety and Standards (Licensing and Registration of Food Businesses) Regulations, 2011. The checklists are split by type of business, so a manufacturing unit, a storage warehouse and a retail point are not graded on the same sheet. Pull the one that matches your licence category before you audit anything.

Most versions group requirements into five blocks: design and facilities, control of operation, maintenance and sanitation, personal hygiene, and training and complaint handling. Requirements carry marks. Ordinary lines are worth two. A subset is starred and worth four, and those starred lines are the ones that decide outcomes. Failing a starred item reads as non-compliance on its own, whatever your total score is. A swept floor does not buy back a broken cold chain.

The findings that get a licence suspended

Suspension is rarely the first move. Under Section 32 of the Food Safety and Standards Act, 2006, a Designated Officer who believes an operator has failed to comply can issue an improvement notice stating the failure and giving a corrective period, which the Act sets at not less than fourteen days. Fail the notice and suspension or cancellation follows. That is the normal path.

The fast path is different. Where an officer sees an immediate contamination risk, the licence goes down first and the argument happens afterwards. In practice the triggers are consistent:

• Live pest activity, droppings or nesting in a storage or handling zone.
• Expired, tampered or unlabelled stock sitting where sellable stock sits.
• Food in direct contact with the floor, or on corroded racking that cannot be washed.
• Cold storage running out of range with no temperature log, or a log that was visibly filled in at one sitting.
• No annual medical fitness records for food handlers.
• Waste, returns and recovered stock held next to intake with no physical separation.

Notice how many of those are documentation failures rather than physical ones. A clean facility with no records is an unprovable facility.

Records are the audit

Treat six record sets as your real defence, and keep them somewhere a stranger can find them in ten minutes.

• Pest control: the contract, a bait and trap layout, dated service reports, and a trend log that shows you acted on catches instead of filing them.
• Cold chain: calibrated probes, readings logged at a stated frequency, and a written deviation rule naming who is called and what happens to affected stock.
• Stock rotation: FIFO for shelf stable lines, FEFO for anything dated, with batch and expiry captured at intake rather than at despatch.
• People: annual medical fitness certificates and a FoSTaC certified food safety supervisor on the roster.
• Cleaning: a schedule with named owners, signed off, covering drains, racking and the areas nobody looks at.
• Traceability: the ability to move from a batch code to a supplier and forward to every despatch, in both directions, within a few hours.

A self-audit you can run before a regulator does

Book two hours, take a phone camera, and go in cold on a working day rather than a scrubbed Sunday.

• Walk the intake door to the pick face and photograph every point where food touches the floor.
• Pull ten random picks and check remaining shelf life. FSSAI has directed e-commerce operators to deliver with at least thirty percent of shelf life or forty five days remaining, whichever is less, so any pick that fails that is already a problem.
• Open the cold storage and compare the display reading against your own probe.
• Ask any handler for the date on their medical certificate. Hesitation is the finding.
• Pick one batch code and trace it backwards to a supplier and forwards to despatch, timed.
• Find the expired and damaged stock area. If there is not one, that is the finding.

Score it the way the checklist does. Starred failures first, everything else after. Close the starred items inside two weeks and write down what you did, because the corrective action record is what you will be handing over next time.

If the facility is not yours

Most D2C brands now hold stock inside a 3PL warehouse or a platform dark store. The licence belongs to the operator, the reputation belongs to you. Put a right of inspection into the contract, ask for the facility licence, the last inspection outcome and the pest control log every quarter, and treat a refusal as information. You cannot fix a facility you are not allowed to see.

Rules here move. Schedule 4 has been revised, inspection checklists get reissued, and state FDAs run their own enforcement drives with their own emphasis. Confirm the current text of any requirement against the live FSSAI notification or the FoSCoS portal before acting on it, and take legal advice on anything carrying a penalty. This is an operating guide, not a legal opinion.