The 2026 Guide to SQF Code Edition 9 Supplier Approval (Section 2.3.4)

## Introduction: SQF 2.3.4 Mandatory Elements Under the SQF Food Safety Code (Edition 9), Section 2.3.4 mandates that all food manufacturing sites establish and maintain a documented Approved Supplier Program. ### Key Mandatory Requirements: 1. **Risk Assessment**: Raw materials, ingredients, packaging, and co-manufacturing services must be risk-assessed based on food safety hazards (microbiological, chemical, physical, and allergen risks). 2. **Approved Supplier Register (ASL)**: A current register of approved suppliers must be maintained, including the supplier name, manufacturing facility (site address), materials supplied, and current approval status. 3. **Continuous Performance Verification**: Facilities must not simply approve a supplier once. There must be ongoing monitoring of certificate expirations, certificate of analysis (COA) matching, and annual review cycles. ### The Most Common SQF Audit Findings Auditors frequently issue non-conformances for: - Lapsed GFSI certificates (e.g., audit performed against a cert expired 3 weeks prior). - Incomplete site addresses for multi-facility supplier corporate entities. - Missing allergen profile updates following supplier formulation changes. ### Automated Evidence vs Manual Excel Modern food QA teams replace spreadsheets with automated evidence loops: - Automated 30/14/7-day countdown reminders dispatched directly to supplier contacts. - Scoped requirement checklists tailored to ingredient risk tiers. - Single-use, zero-login upload portals that eliminate supplier portal password friction.