GFSI Certification for Small Food Suppliers in South Africa — What It Means and How to Get There

What is GFSI — and why should a small supplier care?

GFSI stands for the Global Food Safety Initiative. It is not a certification you apply for directly — think of it more as a quality stamp of approval that sits above a group of food safety schemes (programmes). When a scheme is "GFSI-recognised," it means that scheme has been reviewed by an independent body and confirmed to meet a very high global standard for food safety management.

The schemes you may have already heard of — FSSC 22000, BRC Food Safety, SQF — are all GFSI-recognised schemes. So when a large retailer or food manufacturer says they want "GFSI certification," what they really mean is: get certified under one of these recognised schemes.

For a small supplier in South Africa trying to get products onto retailer shelves, this matters enormously. Retailers like Woolworths, Pick n Pay, Checkers, and SPAR increasingly require their suppliers to hold some form of GFSI-recognised certification — or at least to be working visibly towards it. Without it, your application often doesn't even make it past the procurement team.

The problem: full GFSI certification is hard to reach in one jump

Here is the honest truth that many guides skip over: full GFSI certification — for example, achieving FSSC 22000 certification — requires a mature, documented food safety management system, third-party audits by an accredited certification body, and often one to two years of preparation. For a business that is still hand-labelling jars at home or operating from a small commercial kitchen, that can feel completely out of reach.

The cost alone can be a barrier. A full FSSC 22000 audit by an accredited certification body in South Africa typically costs anywhere from R25,000 to R60,000 or more, depending on your facility size and audit duration — and that is before you have built the system to pass it.

But here is the good news: GFSI has specifically designed a pathway for smaller, earlier-stage businesses. It is called the Global Markets Programme, and it is worth understanding before you panic about the full certification route.

The GFSI Global Markets Programme — the realistic starting point

The GFSI Global Markets Programme (sometimes called "GMP" or the "stepping-stone programme") is a tiered approach designed to help small and medium-sized food businesses build their food safety systems gradually — and be recognised for doing so at each stage.

There are two levels:

• Level 1 (Foundation): You demonstrate that you have basic food safety controls in place — things like personal hygiene procedures, pest control, cleaning schedules, and a basic understanding of hazards in your product. This is similar in scope to a solid HACCP-based system built on SANS 10330 (South Africa's national food safety standard for HACCP).
• Level 2 (Intermediate): Your system is more developed. You have documented procedures, records, internal audits, and you are managing food safety proactively rather than reactively. This level is broadly aligned with the requirements of full GFSI-recognised schemes.

Importantly, retailers and buyers can choose to accept Global Markets Programme assessments as evidence that a supplier is actively working towards full GFSI certification. Not all retailers will — but many do, especially for emerging or local suppliers they want to develop. It opens the door to conversations that would otherwise never happen.

The assessment under the Global Markets Programme is typically conducted by a second-party auditor (someone sent by your buyer or retailer) or a first-party self-assessment, rather than a costly third-party certification body. This makes it significantly more affordable and accessible.

What does a GFSI-aligned food safety system actually include?

Whether you are aiming for the Global Markets Programme Level 2 or a full FSSC 22000 certification, the building blocks are similar. Here is what you need to have in place, in plain language:

1. Prerequisite Programmes (PRPs)

PRPs are the basic hygiene and operational controls that every food business must have — before you even get to the hazard analysis. Think of them as your foundation. They cover things like:

• Cleaning and sanitation schedules (written down, signed off after each clean)
• Pest control (a contract with a licensed pest control company, with records of each visit)
• Personal hygiene rules for everyone who handles food
• Supplier controls — knowing where your ingredients come from and whether those suppliers are safe
• Allergen management — preventing cross-contact between allergens (e.g. nuts, gluten, dairy) and non-allergen products
• Traceability — being able to trace any ingredient or finished product forward and backward through your supply chain

2. A HACCP Plan

HACCP stands for Hazard Analysis and Critical Control Points. It is a systematic way of identifying what could go wrong in your food production process (biological, chemical, or physical hazards) and putting specific controls in place to prevent those things from happening. Your HACCP plan is a written document — a specific set of tables and records — that shows an auditor exactly how you are managing safety at each step of your process.

3. A Food Safety Management System (FSMS)

At the GFSI level, your HACCP plan sits inside a broader management system. This includes things like:

• A food safety policy (a short written statement of your commitment to food safety)
• Defined roles — who is responsible for what
• Internal audits — regularly checking your own system to find gaps before an external auditor does
• Corrective actions — a documented process for what happens when something goes wrong
• Management reviews — scheduled meetings where you formally review your food safety performance

4. Documentation and records

In food safety, if it is not written down, it did not happen. You need controlled documents (procedures, forms, policies) and completed records (filled-in forms, logs, checklists) that prove your system is working day to day. This is often where small businesses struggle most — not because they are doing things wrong, but because they are not recording what they do.

How long does it take — and what does it cost?

For the GFSI Global Markets Programme Level 1, a well-organised small business with good hygiene practices already in place could be ready for assessment in three to six months. The main work is documenting what you already do and filling the gaps.

For Level 2, expect six to twelve months of active system-building, especially if you are starting from scratch.

For full FSSC 22000 certification, most small businesses take twelve to twenty-four months from a standing start, and the certification audit itself (paid to an accredited certification body like SGS, Bureau Veritas, or TÜV Rheinland) will cost roughly R25,000–R60,000+. Annual surveillance audits and re-certification audits are additional ongoing costs.

However, the cost of building your system — the documents, templates, procedures, and training — does not have to be that high. This is where structured system packages can reduce your preparation cost significantly compared to hiring a consultant at R1,500–R3,000 per hour.

It is also worth noting that the Global Markets Programme assessment itself (at Level 1 or 2) is often far less expensive than a full third-party audit, because it may be conducted by your retailer or buyer rather than an independent certification body.

A practical roadmap for South African small suppliers

Here is a straightforward sequence to follow if you are starting from scratch:

1. Understand what your target retailer requires. Different retailers have different minimum requirements. For example, SPAR has its own supplier documentation requirements that may or may not require full GFSI certification at the start — see our guide on what food safety documents you need to become a SPAR supplier in South Africa for a detailed breakdown of what SPAR specifically asks for.
2. Get your hygiene basics documented. Write up your cleaning schedules, pest control records, personal hygiene policy, and allergen controls. These are your PRPs and they are non-negotiable at every level.
3. Build your HACCP plan. Work through your process step by step, identify hazards, and document your controls. If you have never done this before, a structured template will save you weeks of confusion.
4. Build the management system around it. Add your food safety policy, roles and responsibilities, internal audit procedure, and corrective action process.
5. Run your system for a few months. Fill in your records consistently. An auditor wants to see that your system is real and operational — not just a set of nice documents that were written last week.
6. Request a pre-assessment or gap audit. Before you go for full certification, ask a food safety consultant or your target retailer's technical team to do a gap audit — a review of your system against the standard to find what still needs fixing.
7. Apply for certification. Once your gap audit results are positive, contact an accredited certification body (SGS, Bureau Veritas, TÜV Rheinland, Intertek, or others operating in South Africa) to schedule your Stage 1 and Stage 2 audits.

Common mistakes small suppliers make when pursuing GFSI

• Building documents but not running the system. You cannot just write a cleaning schedule — you have to follow it, record it, and show that you have been doing it consistently over time.
• Skipping the HACCP plan. Some small businesses try to jump straight to management system documentation without first nailing their HACCP analysis. The HACCP plan is the heart of everything — do not skip it.
• Choosing the wrong certification scheme. FSSC 22000, BRC, and SQF are all GFSI-recognised but have different requirements and different acceptance levels with different retailers. Check what your target retailer accepts before investing in a specific scheme.
• Underestimating the documentation load. This is the most common surprise for first-timers. A GFSI-aligned system involves a significant number of documents and records. Starting with a structured template system is far more efficient than writing everything from a blank page.
• Going it entirely alone. You do not need to hire a full-time consultant, but you do need reliable guidance. Using a pre-built, South Africa-specific food safety system as your starting framework can cut months off your preparation time.