When a delivery arrives at your centre, you check the temperature. You check the packaging. You sign the docket.
What most centres don't check — at least not consistently — is whether the supplier bringing that food is actually compliant. Whether their HACCP certification is current. Whether their public liability insurance covers this year. Whether their allergen documentation reflects what's actually in the products.
That gap is one of the most common findings in food safety audits of Victorian childcare centres. And it's one of the easiest to close — if you know what to ask for.
A supplier's lapsed certificate becomes your compliance problem the moment their food enters your kitchen. Responsibility doesn't transfer back to them during an audit.
This checklist covers what you need from every supplier, how to manage expiry dates before they become a problem, and what to do when a certificate can't be produced.
Why supplier compliance is your problem, not theirs
Under your Food Safety Program obligations, you are responsible for the food entering your kitchen. That means you need to verify that every supplier meets your food safety requirements — not just assume they do.
FSANZ Standard 3.2.1 requires Victorian Class 1 food businesses to manage food safety hazards at every point in the supply chain, including receipt. A supplier delivering unsafe food, or a supplier without adequate food safety systems, is a risk that sits with you.
When an environmental health officer asks about your suppliers, they're not asking whether you trust them. They're asking whether you can prove they're compliant.
"I trust my supplier" is not a compliance record. A current certificate is."
The four certificates every supplier needs
These are not optional extras. They are the minimum documentation you should have on file for every active supplier — collected before the first delivery and updated before each renewal date.
HACCP Certification or equivalent Food Safety Program
Your supplier must have documented food safety systems based on HACCP principles. This applies to anyone who processes, packages, or prepares food before it reaches you. Ask for a current certificate or a copy of their Food Safety Program. Check the issue date and who certified it. A certificate issued five years ago with no renewal is not current evidence.
Audit risk: High if lapsed or missingPublic Liability Insurance — minimum $10 million
If a supplier's food causes harm at your centre, you need evidence that they carry adequate insurance. Most insurers and councils expect a minimum of $10 million in public liability coverage for food businesses supplying regulated environments. Ask for their current certificate of currency — not just a verbal confirmation. Check the expiry date. Check the coverage amount. File it alongside their HACCP documentation.
Audit risk: High if expired or unverifiedAllergen and ingredient documentation
Under FSANZ requirements, all food supplied to your centre must carry accurate allergen labelling. For products that may affect children with known allergies or dietary requirements, go further. Ask for written confirmation of their allergen controls, ingredient lists, and any risk of cross-contamination. This is especially important for dairy, nuts, egg, gluten, and sesame — the most common allergens in childcare settings. Verbal assurances from a supplier do not protect you if there is an incident.
Audit risk: Critical for allergy managementDelivery reliability and temperature evidence
This one is less about a single document and more about an ongoing record. You need evidence that your supplier maintains safe temperatures during transport. Ask whether they use temperature-monitored vehicles. Ask how they handle delivery delays. And make sure your own delivery log captures the temperature of every order when it arrives at your centre — that record is yours to maintain, regardless of how well the supplier performs their end.
Document at every deliveryAdditional certificates for dietary and cultural requirements
If your centre serves children with specific dietary, cultural, or religious food requirements, you need more than the standard four.
Halal-certified suppliers — ask for a current Halal certificate issued by a recognised Australian certifying body. Check the specific products covered. Not all products from a certified supplier are automatically Halal.
Gluten-free products — ask for written confirmation that products meet the FSANZ definition of gluten-free (not just "low gluten"). Cross-contamination in processing facilities is the main risk.
Vegetarian or vegan products — ask for ingredient lists and any third-party certification where applicable. Particularly relevant for products that contain gelatine, rennet, or processing aids.
Organic or sustainability claims — if you advertise these to families, you need certification from the supplier. A label is not enough. Ask for the certifying body and the certificate number.
The expiry problem most centres don't see coming
Collecting certificates is the easy part. Keeping them current is where most centres fall down.
A supplier's HACCP certificate issued 18 months ago may well have expired. Their public liability insurance renews annually — and they almost never send you the updated version unprompted. Your allergen documentation was accurate when they wrote it, but their manufacturing process may have changed since.
These gaps don't show up in your daily operations. They only show up when someone looks for them — like an environmental health officer conducting a routine inspection.
What a gap in supplier compliance can trigger
A finding against your Food Safety Program for inadequate supplier management
Maximum penalty for failing to maintain a compliant Food Safety Program — individual
No certificate = no proof of due diligence if a food safety incident involves a supplier
Uninsured or inadequately insured supplier + incident at your centre = legal exposure
Set a reminder 30 days before each certificate expires. Chase the renewal before it lapses. If a supplier cannot produce a current certificate when asked, that is a red flag — not a paperwork inconvenience.
What auditors actually find
In food safety audits of Victorian childcare centres, supplier compliance findings cluster around three things.
Certificate never collected. The supplier was vetted verbally during onboarding. No documentation was requested or filed.
Certificate expired and no one noticed. It was current when filed. Twelve months later, it lapsed. No one chased the renewal.
Wrong products covered. The supplier's HACCP certification covers their main product lines, but not the specific items they're supplying to your centre.
None of these reflect badly managed centres. They reflect centres where the documentation system hasn't kept pace with the supplier relationship.
How to manage it without drowning in admin
You don't need a complicated system. You need a consistent one.
Start by listing every active supplier — including the ones you use occasionally. For each one, collect the four core documents. Record the expiry date of each. Put a recurring reminder in your calendar 30 days before each expiry. When a supplier sends you a renewal, update the file immediately.
If you are managing more than three or four suppliers, a spreadsheet becomes unreliable. Documents get saved in the wrong folder. Expiry dates get missed. The reminder doesn't fire because someone changed the calendar entry.
A supplier vault is only useful if it's current. A folder full of expired certificates is not a compliance record — it's a liability.
Your supplier compliance self-check
Go through your active supplier list now. For each one, ask:
Can you confirm all of these — right now?
Do you have a current HACCP certificate (or equivalent) on file for every active supplier?
Is each supplier's public liability insurance current — and does it cover at least $10 million?
Do you have allergen documentation for every product that could affect a child with known allergies?
Do you know the exact expiry date of each certificate — and when you'll need to chase a renewal?
If a supplier provides Halal, gluten-free, or dietary-specific products, do you have the relevant third-party certification?
Could you produce all of this documentation in under five minutes during an unannounced inspection?
How EthicalHub helps
EthicalHub's Supplier Vault stores every certificate, insurance document, and allergen record in one place — with automatic expiry alerts before anything lapses.
When a certificate is due to expire, you get a notification. When an officer asks for supplier documentation, you can produce it immediately. When a new supplier joins your centre, there's a clear onboarding checklist so nothing gets missed.
You don't need to overhaul your supplier relationships. You just need a system that keeps the evidence current and accessible.
Check your supplier compliance gaps — free.
See exactly which suppliers are missing certificates, what's due to expire, and where your audit exposure sits right now.
Check my risk →