EthicalHub

Retailer audit readiness

How to pass your Coles, Woolworths
or Aldi supplier audit

What each retailer asks for, the records auditors check first, and a plan that gets you ready without the last-minute scramble.

The short answer

To supply Australia’s major supermarkets, most food manufacturers need a GFSI-recognised certification — usually SQF, BRCGS or FSSC 22000 — plus the retailer’s own requirements on top. Coles adds its Coles Supplier Requirements, Woolworths runs its Supplier Excellence program, and fresh produce suppliers add HARPS. Passing comes down to one thing: being able to show current, complete records for every requirement, on the day.

What each retailer asks for

Retailer programs at a glance

The base is usually a GFSI certification. Each retailer then adds its own layer.

RetailerProgramHow it worksWhat it means for you
ColesColes Supplier Requirements (CSR)Food suppliers hold a GFSI-recognised certification (such as BRCGS, SQF or FSSC 22000) and are audited against the Coles addendum by an approved certifier.Your GFSI records plus Coles-specific evidence, ready for the same audit.
WoolworthsWoolworths Supplier Excellence (WSE)For own-brand and fresh food suppliers, by invitation. Suppliers are audited to GFSI or the Woolworths Base Standard, plus codes of practice and product specifications. WSE replaced the earlier WQA program.Specification compliance and product records matter as much as the food safety system.
Aldi, Costco, Metcash / IGARetailer-specific supplier requirementsGenerally expect a GFSI-recognised certification. Requirements vary by product category.Confirm the exact standard with your buyer before you choose a scheme.
Fresh produce (all of the above)HARPSA bolt-on to a GFSI-benchmarked base scheme such as Freshcare, GLOBALG.A.P., SQF or BRCGS. Used by Aldi, Coles, Woolworths, Costco and Metcash.One extra audit layer, without duplicating what your base scheme already covers.

Programs change. Always confirm current requirements with your buyer or certifier. Sources: SGS on Coles CSR, SGS on Woolworths WSE, Fresh Produce Safety Centre, Hort Innovation on HARPS.

Where audits are won or lost

The records auditors ask for first

Most findings aren’t about missing procedures. They’re about missing proof that the procedures ran.

01

CCP monitoring

Every reading against its critical limit, signed and dated, with any deviation linked to a corrective action.

02

Supplier approval

A current certificate for every approved supplier, and evidence you check them before they expire.

03

Corrective actions

Root cause, action taken, and verification that it worked — closed out, not just opened.

04

Traceability

A recent one-up, one-down trace test, completed within the time your scheme expects.

05

Allergen control

Allergen matrix, changeover validation, and label checks against current recipes.

06

Cleaning and sanitation

Schedules, sign-offs and verification such as swabs or visual checks.

07

Training

Induction and competency records for everyone on the floor, including casuals.

08

Internal audits and review

Your own internal audit schedule, findings, and management review minutes.

A calm run-up

Your audit prep plan

A planning guide, not a rule. Start earlier for a first certification.

12 weeks out

Confirm the standard and gap-check

Get the exact standard and version from your buyer or certifier. Walk the clauses and list every record you can’t produce today.

8 weeks out

Fix the records, not just the procedures

Chase expired supplier certificates, close open corrective actions, and complete overdue verification such as calibration and trace tests.

4 weeks out

Run a mock audit

Have someone who didn’t write the system audit it. Time how long each record takes to find.

Audit week

Brief the team and organise evidence

Line up who answers what, and group your evidence by clause so nobody hunts through binders mid-audit.

After the audit

Close findings on time

Respond to every non-conformance with root cause, action and evidence within the deadline your certifier sets.

Not sure where you stand?

The free assessment shows which records an auditor would question today.

Check your audit readiness
Go deeper

Retailer audit guides

Each guide goes live as it’s published.

Coles supplier audit: what to expectRead →
Woolworths Supplier Excellence: how to prepareRead →
Aldi supplier audit: what to expectRead →
Your first supermarket audit, week by weekComing soon
The 10 records auditors ask for firstComing soon
Major vs minor non-conformance: what each meansComing soon
How to close out audit findings on timeComing soon
Questions

Supermarket supplier audits: common questions

What certification do I need to supply Coles or Woolworths?
Most food manufacturers need a GFSI-recognised certification such as SQF, BRCGS or FSSC 22000, plus the retailer’s own requirements. Coles audits against its Coles Supplier Requirements; Woolworths runs its Supplier Excellence program. Confirm the exact standard with your buyer before choosing a scheme.
What is HARPS?
HARPS (Harmonised Australian Retailer Produce Scheme) is a bolt-on standard for fresh produce suppliers to Aldi, Coles, Woolworths, Costco and Metcash. It sits on top of a GFSI-benchmarked base scheme such as Freshcare, GLOBALG.A.P., SQF or BRCGS, without duplicating its requirements.
What do supermarket auditors check first?
Usually the records that prove your system runs every day: CCP monitoring, supplier certificates, corrective actions, traceability tests, allergen controls, cleaning sign-offs, training records and internal audits.
How long does it take to prepare for a supplier audit?
It depends on your starting point. Many sites plan their run-up over about three months: a gap check first, then fixing records, then a mock audit a few weeks before. A first certification usually takes longer.
What happens if I get a non-conformance?
You’ll be asked to respond with the root cause, the corrective action and evidence it’s fixed, within the deadline your certifier sets. How serious the consequences are depends on whether the finding is minor, major or critical, and on the scheme’s rules.

Walk into your next audit ready.

EthicalHub keeps every record a retailer auditor asks for in one place, and exports your audit pack in one click.

Scroll to Top