How to Write a Food Safety Plan for Your Microbakery

If you're selling baked goods out of your home kitchen, a food safety plan is the document that explains how you keep that food safe from the moment ingredients come through the door to the moment a customer picks up the box. Some states and counties require one in writing before they'll issue a permit. Plenty of places don't require it at all. Either way, it's worth having, because the plan forces you to think through the parts of your process you normally run on autopilot, and it gives you something clear to hand an inspector, a farmers market manager, or a customer who asks a pointed question about nut allergies.

The good news: this is not a document that needs to be forty pages long or written in regulatory language. A solid plan for a one-person cottage bakery usually runs three to six pages. What follows is a practical way to build yours. One important note before you start: food laws vary enormously by state, county, and country, and nothing here replaces your actual local regulations or a conversation with your health department. Use this as a framework, then fill it with the rules that apply where you live.

What a Food Safety Plan Actually Covers

At its core, a food safety plan answers three questions: what could go wrong with the food you make, what you do to prevent it, and how you prove you did it. Most plans, whether they're informal one-pagers or full HACCP documents (Hazard Analysis and Critical Control Points, the formal food-industry system), organize that information into the same handful of sections.

• A description of your products and who eats them
• A process flow, meaning a step-by-step map of how a product moves through your kitchen
• A hazard analysis identifying what could make the food unsafe at each step
• The controls you use to prevent each hazard, with specific limits where it matters
• Allergen handling and cross-contact prevention
• Cleaning and sanitizing procedures
• Labeling practices
• Records and logs that show the plan is actually being followed
• A recall or complaint procedure in case something does go wrong

Start by Reading Your Local Cottage Food Rules

Before you write a word, find your jurisdiction's cottage food law (sometimes called a home processor or homemade food law) and read it once from top to bottom. Your plan should be built to match those rules, not to a generic template you found online. Keep a copy of the regulation in the same folder as your plan so you can check details later without hunting for it again.

• Which products are you allowed to sell? Most cottage food laws cover shelf-stable items like cookies, breads, and dry mixes, and exclude anything requiring refrigeration (cheesecake, cream fillings, most buttercreams with perishable dairy).
• Do you need a permit, a registration, or a kitchen inspection?
• Is a food handler certification required, and does it need renewing?
• Are there sales venue limits, like direct-to-consumer only, or no shipping across state lines?
• Is there an annual revenue cap?
• What exactly has to appear on your labels, including any required "made in a home kitchen" disclosure?

Step One: Map Your Process Flow

A process flow is just the path a product takes through your kitchen, written as an ordered list. Do one for each category of product you sell. You don't need a separate flow for chocolate chip and oatmeal raisin, but a sourdough loaf and a jar of granola move through the kitchen differently enough to deserve their own. Writing this out is the single most useful thing in the whole exercise, because hazards hide in the steps you never consciously think about.

1. 1Purchasing ingredients and packaging from approved sources
2. 2Receiving and inspecting deliveries
3. 3Dry and cold storage
4. 4Pre-portioning and scaling
5. 5Mixing and dough handling
6. 6Proofing, resting, or chilling
7. 7Baking
8. 8Cooling
9. 9Decorating or filling, if applicable
10. 10Packaging and labeling
11. 11Finished product storage
12. 12Transport, pickup, or delivery

Step Two: Identify the Hazards

Go through your process flow one step at a time and ask what could realistically make someone sick or injure them at that step. Food safety usually sorts hazards into four buckets. For a baking operation, most of your real risk sits in allergens and physical hazards rather than the pathogen-growth problems that dominate restaurant plans, but don't skip the biological section just because you're baking.

• **Biological:** Salmonella in raw eggs and raw flour, Staphylococcus in cream fillings held too warm, mold on products packaged before they finished cooling, bacterial growth in anything sitting in the danger zone (roughly 40°F to 140°F, or 4°C to 60°C) too long.
• **Chemical:** sanitizer residue left on work surfaces, cleaning products stored above food, non-food-grade containers or paint flaking from old shelving.
• **Physical:** shell fragments, bits of parchment or plastic wrap, a chipped spatula edge, hair, a cracked piece from a bowl, metal from a worn whisk.
• **Allergen cross-contact:** the big one for most home bakeries. Tree nuts, peanuts, wheat, eggs, milk, soy, sesame, and anything else your local labeling law lists, ending up in a product that isn't supposed to contain them.

Step Three: Write Down Your Controls

For each hazard you listed, write the specific thing you do to prevent it. "Be careful" is not a control. A control is measurable, repeatable, and ideally something you could demonstrate to someone standing in your kitchen. Where a number applies, use the number.

• Buy ingredients only from retail or wholesale suppliers, never from unlicensed home sources, and never use home-canned goods or backyard eggs unless your local rules allow it.
• Check for damaged packaging and expiration dates when you unpack a delivery, and reject anything torn, dented, or wet.
• Store all food at least six inches off the floor and keep raw ingredients separate from finished product.
• Keep the fridge at or below 40°F (4°C) and verify it with an appliance thermometer, not the dial on the door.
• Bake to a documented internal temperature where it matters, such as 190°F to 210°F (88°C to 99°C) for most yeast breads, checked with an instant-read thermometer.
• Cool products completely on racks before packaging so condensation doesn't form inside the bag and invite mold.
• Wash hands for 20 seconds with soap and warm water before starting, after handling raw eggs, after touching your face or phone, and after every break.
• Keep pets fully out of the kitchen during production, and ideally out of the house's food prep area entirely on baking days. Many cottage food laws require this explicitly.
• Set a clear rule that no one bakes while sick with vomiting, diarrhea, fever, sore throat, or an open wound on the hands that can't be covered and gloved.

Allergen Management Deserves Its Own Section

Allergens are where a home kitchen is genuinely different from a commercial one. You probably can't maintain a truly nut-free facility if your family eats peanut butter, and pretending otherwise in writing is worse than being honest about it. Your plan should describe what you actually do, then your label should tell the truth about what you can and can't guarantee.

• List every allergen present anywhere in your kitchen, including ingredients your household uses but you don't bake with.
• Schedule allergen-containing bakes last in a production day, so a full clean-down follows them rather than preceding another product.
• Store allergen ingredients in sealed, clearly labeled containers on a low shelf, so nothing can spill down onto other ingredients.
• Dedicate equipment where you can. Separate sifters, piping bags, and silicone mats are cheap compared to a reaction.
• Do a full wash, rinse, and sanitize between allergen-containing and allergen-free production, including mixer attachments, the bowl, counters, and your hands and apron.
• Put a "made in a kitchen that also handles [allergens]" statement on every label, and keep that list current when you add a new product.

Customer allergen questions are worth treating as part of the plan rather than as casual conversation. Answer them in writing, keep the answer, and make sure the same question asked on Instagram, by text, and by email gets the same response. Scattered messages are how a "no almonds, please" turns into a box with almond flour in it. This is one of the quiet reasons bakers running order-heavy weeks end up on a platform like Homebaked, which pulls DMs, texts, and emails into a single thread per customer, so the allergen note someone sent you three weeks ago is still sitting right there next to their current order.

Cleaning and Sanitizing: Write the Schedule, Not Just the Intent

Cleaning removes visible soil. Sanitizing reduces bacteria on an already-clean surface. They're two steps, not one, and your plan should name both along with the products and contact times you use. Most food-safe sanitizers need to sit wet on the surface for a specified number of seconds to actually work, and that number is on the label.

• Before each production session: clear and sanitize all work surfaces, wash hands, put on clean apron.
• During production: wash and sanitize any tool that touches raw egg or raw dough before it touches finished product.
• After each session: wash all equipment, sanitize counters and sinks, sweep and mop floors, take out trash.
• Weekly: clean the inside of the fridge, wipe down shelving, run the mixer's hard-to-reach parts through a deep clean.
• Monthly: check thermometer calibration in ice water (it should read 32°F or 0°C), inspect utensils for cracks and chips, and discard anything damaged.

Labeling

Labeling is both a food safety control and usually a legal requirement, and it's the part inspectors check first because it's the easiest to verify. Build one label template you fill in per product rather than writing each from scratch, which is how ingredients get left off.

• Product name
• Full ingredient list in descending order by weight, including sub-ingredients (the "butter" in your chocolate chips counts)
• Allergen declaration in the format your jurisdiction requires
• Net weight or quantity
• Your business name and address, or whatever identifier your law specifies
• Date made, best-by date, or lot code
• Any required cottage food disclosure statement, worded exactly as the regulation words it
• Storage instructions if the product needs refrigeration or freezing

Records: The Part Everyone Skips

A plan without records is a nice intention. Records are what let you answer "what happened on March 12?" months later, and they're what turn a potential recall from a guessing game into a phone call to four specific customers. Keep them simple enough that you'll actually do them. A single notebook on the counter beats an elaborate spreadsheet you abandon in week two.

• **Production log:** date, product, batch size, lot code, and who baked it
• **Ingredient log:** supplier, lot numbers from the bags, and date received for your main ingredients, especially flour and dairy
• **Temperature log:** fridge and freezer readings, checked daily or on every production day
• **Cleaning log:** a checkbox grid for daily, weekly, and monthly tasks
• **Complaint log:** what the customer reported, what you found when you investigated, and what you changed
• **Training records:** your food handler certificate and renewal dates, plus any helper you bring in

Have a Recall Plan Before You Need One

This section can be short, but it needs to exist. Write down what you'd do if you learned a batch had a problem: stop selling the affected lot codes, contact every customer who received them, offer a refund or replacement, notify your health department if required, figure out the root cause, and write down what you changed so it doesn't repeat. The reason lot codes and a customer list matter is entirely contained in this paragraph. If you can't tell which customers got which batch, you have to contact everyone, which is slower, more expensive, and much harder on your reputation.

Assembling the Document

Once you've worked through the sections above, the writing part is mostly transcription. Here's a running order that reads well for an inspector and stays usable for you.

1. 1Cover page with your business name, address, contact information, permit or registration number, and the date of the current version.
2. 2A short description of your operation: what you make, how much you produce, where you sell, and who your customers are. Note if you serve any higher-risk groups like schools or elder care.
3. 3Product list with ingredients and allergens for each item.
4. 4Process flow diagrams or numbered flows, one per product category.
5. 5Hazard analysis table: step, hazard, control, and limit.
6. 6Standard operating procedures for handwashing, cleaning and sanitizing, allergen changeover, and temperature monitoring.
7. 7Labeling template and an example of a finished label.
8. 8Blank copies of each log you use.
9. 9Recall and complaint procedure.
10. 10Signature and review date.

Keeping the Plan Current

Set a calendar reminder to reread the whole thing once a year, and update it immediately any time something material changes: a new product, a new supplier, a new piece of equipment, a helper joining you, or a change to your local cottage food law. Date and initial each revision. A plan that still lists a product you stopped making two years ago signals that nobody's reading it, which is exactly the impression you don't want to give.

Common Mistakes to Avoid

• Downloading a restaurant HACCP template and leaving sections in that have nothing to do with baking. An unusable plan is worse than a short, honest one.
• Describing an ideal kitchen instead of your real one. Write what you actually do.
• Claiming "allergen-free" when the household isn't.
• Skipping lot codes because they feel like overkill at ten orders a week. They take five seconds and they're the difference between a targeted recall and a blanket one.
• Letting logs lapse during your busiest season, which is precisely when mistakes are most likely.
• Forgetting transport. Food safety doesn't stop at your front door, so include how products are protected and temperature-controlled on the way to a market or a customer's porch.

Writing this plan takes an afternoon, maybe two. What you get out of it is a kitchen that runs on documented habits rather than memory, which matters more every time your order volume ticks up. Most bakers find that the plan quietly pays for itself the first time a customer asks a detailed question about allergens, or a market manager asks for paperwork, and the answer is already sitting in a folder on the shelf.