HACCP Plan for Cured and Smoked Foods in Restaurants

A HACCP plan for cured and smoked foods is one of the most common reasons a restaurant ends up talking to its health department about a variance. House-made bacon, pancetta, salami, cold smoked salmon, smoked sausages and charcuterie boards are popular, and they are also processes where small mistakes can create serious hazards. This guide explains when the Food Code requires a variance and HACCP plan, the hazards involved, typical CCPs and records, and how to work with a process authority. It does not replace expert review of your specific process.

The rules here come from the FDA Food Code 2022, sections 3-502.11 and 8-201.13, and the HACCP principles in NACMCF's principles and application guidelines. For comparison, USDA inspected meat processors follow HACCP under 9 CFR part 417. Your state may differ. Any plan you build is a draft for your health department to review.

When the Food Code requires a variance

Food Code 3-502.11 lists specialized processes that require a variance from the regulatory authority. They include:

• smoking food as a method of food preservation rather than as a method of flavor enhancement
• curing food
• using food additives or adding components such as vinegar to preserve food or render it not TCS food
• packaging TCS food using reduced oxygen packaging, with some exceptions in 3-502.12
• custom processing animals for personal use
• other processes listed in the section

When a variance is requested for one of these processes, 8-201.13 expects a HACCP plan. See HACCP variance requirements.

Smoking for flavor vs smoking for preservation

This distinction matters.

Smoking for flavor. Brisket, pulled pork, smoked chicken and ribs cooked in a smoker until they reach the required cooking temperature, then held hot, served, or cooled and reheated like any other cooked food. The smoke adds flavor. The cooking temperature controls pathogens. This is generally treated as cooking, not a specialized process. You still need to follow cooking, cooling, reheating and holding rules. See food cooling rules 135 70 41.

Smoking for preservation. Products where smoke, often combined with salt, drying and time, is part of what makes the food safe to keep, such as cold smoked fish, some smoked sausages, and jerky. These rely on reduced water activity, salt, and sometimes pH rather than cooking alone. The Food Code treats these as specialized processes needing a variance.

If you are not sure which category your process is in, ask your health department before you start.

What counts as curing

Curing generally means preserving meat or fish with salt, often with nitrite or nitrate curing agents, sometimes with sugar, spices, smoking, fermentation and drying. Examples:

• Whole muscle cured meats such as bacon, pancetta, coppa, bresaola, prosciutto style hams
• Fermented and dried sausages such as salami
• Cured fish such as gravlax and lox
• Corned beef and brined meats, depending on how they are treated afterward

Some of these are cooked after curing, such as bacon that is fried before serving. Others are eaten without cooking, such as salami or gravlax. Products eaten without cooking carry more risk and need tighter control.

The hazards in curing and smoking

| Hazard | Where it matters | How it is usually controlled | |---|---|---| | Clostridium botulinum | Cured meats, cold smoked and vacuum packed fish | Curing agents, salt, pH, water activity, temperature | | Listeria monocytogenes | Ready-to-eat cured and smoked products, especially cold smoked fish | Sanitation, temperature, formulation, shelf life limits | | Salmonella and Shiga toxin-producing E. coli | Fermented sausages, raw meat | Fermentation to a target pH, drying, sometimes heat | | Staphylococcus aureus | Fermentation at warm temperatures | Fast acidification; time and temperature limits | | Trichinella and other parasites | Some pork and wild game products | Approved treatments, sourcing, cooking | | Parasites in fish | Cold smoked and cured fish served raw | Freezing for parasite destruction under the Food Code | | Nitrite and nitrate levels | Curing agents | Weigh accurately; follow recipe limits | | Allergens | Spices, milk powders, wine | Allergen matrix and labeling |

The specific hazards and controls depend on the product. That is why most health departments ask for a process authority review for curing and cold smoking.

HACCP plan for cured and smoked foods: typical CCPs

Your plan's CCPs depend on the product and the process authority's review. Common examples:

Weighing curing agents

Curing salts containing sodium nitrite are effective in small amounts and harmful in large ones. Weigh curing agents on a calibrated gram scale, based on the weight of the meat, using a recipe reviewed by your process authority. Record the meat weight, the curing agent weight and who weighed them.

Critical limit example: curing agent weight within the recipe's specified range for the batch weight.

Curing temperature and time

Whole muscle cures are usually kept refrigerated for a set number of days based on thickness and recipe.

Critical limit example: product held at 41°F or below for the full cure time in the approved recipe.

Fermentation

Fermented sausages must reach a target pH within a set time at a set temperature, so that harmful bacteria do not grow before the acid builds up.

Critical limit example: pH at or below the target set by your process authority within the time set in the approved process. Measure with a calibrated pH meter.

Drying

Dry cured products must lose enough moisture to reach a target, measured as weight loss or water activity.

Critical limit example: final weight loss or water activity at or below the target in the approved process, measured before release.

Cooking after smoking

For hot smoked products, the cooking step remains a CCP.

Critical limit example: internal temperature that meets the Food Code or the approved process.

Cold storage

Many cured and smoked products must stay refrigerated.

Critical limit example: 41°F or below, with a shelf life set by the plan.

A sample flow for whole muscle bacon

Bacon that is cooked before serving is lower risk than products eaten without cooking, but most health departments still treat curing as a specialized process needing a variance.

A sample flow for cold smoked salmon

Cold smoked fish is one of the higher risk processes a restaurant can take on. FDA's seafood guidance treats it carefully because of Listeria and Clostridium botulinum risks. If you vacuum pack it, reduced oxygen packaging rules also apply. Work with a process authority and your health department. See the seafood HACCP plan and the reduced oxygen packaging HACCP plan.

Working with a process authority

A process authority is someone with expert knowledge of a process who can judge whether it is safe. For curing and smoking, this is often a university meat science or food science extension specialist, or a private consultant with relevant expertise.

What they usually review:

• your recipe, including curing agent and salt amounts
• your process steps, temperatures, times and targets
• the equipment you will use
• your critical limits
• how you will measure them

What you usually get: a letter or report stating that the process, as described, controls the hazards, sometimes with conditions. Your health department may require this letter with your variance application. Keep it with your HACCP plan, and do not change the process without checking with them.

Equipment you may need

| Equipment | Use | |---|---| | Calibrated gram scale | Weigh curing agents | | Calibrated pH meter | Fermentation targets | | Water activity meter or lab testing | Drying targets | | Curing chamber with temperature and humidity control | Drying | | Data logger | Records chamber conditions | | Smoker with temperature control | Smoking | | Probe thermometer | Internal temperatures | | Vacuum sealer | If packaging, with ROP rules |

Calibrate each instrument on a schedule and record it. See the thermometer calibration log.

Records

Typical records in a curing and smoking HACCP plan:

• batch record: product, date, meat weight, curing agent weight, who made it
• cure log: start date, temperature, end date
• fermentation log: time, temperature, pH readings
• drying log: weight or water activity, chamber conditions
• smoking and cooking log: temperatures and times
• cooling and cold storage logs
• calibration log for scale, pH meter and thermometers
• corrective action log
• verification records
• supplier records and parasite destruction records for fish

Records are kept for the period your plan and health department set. See HACCP verification and record keeping.

Corrective actions

| Problem | Corrective action | |---|---| | Curing agent weight outside range | Do not proceed; discard or reformulate per process authority guidance; record | | Cure temperature above limit | Evaluate with the plan's rules; may require discard; fix refrigeration | | pH target not reached in time | Hold, do not sell; evaluate with process authority; often discard | | Drying target not reached | Continue drying and retest; do not release | | Cold smoke temperature exceeded | Evaluate; may need to cook fully or discard | | Cold storage above 41°F | Evaluate time and temperature; may require discard |

See HACCP corrective actions examples.

Why these processes are high risk

Cured and smoked products often rely on several hurdles at once instead of one kill step. Salt reduces water available to bacteria. Nitrite inhibits Clostridium botulinum. Acid from fermentation slows pathogens. Drying lowers water activity further. Smoke adds some antimicrobial compounds. Cold storage slows growth. Each hurdle alone is not enough, but together they make the product safe.

The risk is that if one hurdle fails, for example the fermentation is too slow or the drying chamber runs warm, the others may not be enough. A restaurant kitchen is also a busy environment with many other tasks competing for attention. That is why the plan, the measurements and the records matter so much for these products.

Steps to getting a variance

1. Talk to your health department early. Ask what they require.
2. Write down your recipe and process in detail.
3. Get a process authority review if required.
4. Build your HACCP plan: hazard analysis, CCPs, critical limits, monitoring, corrective actions, verification, records.
5. Buy and calibrate the equipment you need.
6. Train the staff who will run the process.
7. Submit the variance application with the HACCP plan and supporting documents.
8. Run the process exactly as approved, and keep records.
9. Change nothing without telling the health department.

Training

Only trained staff should run curing or smoking. Keep a list of who is approved, and train them on the recipe, the CCPs, the measurements and the corrective actions. See HACCP training for restaurant staff.

Common mistakes

• Starting without a variance, then being told to stop at inspection.
• Measuring curing agents by volume instead of weight.
• Changing the recipe after approval.
• No pH meter or not calibrating it.
• Assuming the smoker cooked the food without a thermometer reading.
• Cold smoking fish without parasite destruction or controls for Listeria and botulism.
• Vacuum packing without following ROP rules.
• No records of drying or fermentation.

Charcuterie boards made from purchased products

Many restaurants serve charcuterie without curing anything themselves. They buy salami, prosciutto and other products from inspected producers, slice them and plate them. That is not curing, and it usually does not need a variance. It still has hazards. Sliced ready-to-eat meats can support Listeria growth, so they are held at 41°F or below, date marked once opened or sliced if they are TCS, and handled with clean hands or gloves and clean slicers. Keep the original product labels for allergen information, and clean the slicer between raw and ready-to-eat products. Follow the manufacturer's storage instructions for each product after opening.

Hot smoked barbecue: what still needs control

Barbecue restaurants often smoke large cuts for many hours, then hold them hot or cool them for the next day. Even without a variance, the critical points are the same as any cooked food: reach the cooking temperature, hold at 135°F or above, cool through 135 to 70 within 2 hours and to 41 within 6 total, and reheat to 165°F for hot holding. Large briskets and pork shoulders are hard to cool quickly, so slice or portion them and use shallow pans or a blast chiller. See reheating food to 165.

Starting small

Many restaurants start with lower risk products while they build experience: bacon or pancetta that is cooked before serving, or hot smoked meats cooked to temperature. Products eaten without cooking, such as dry salami or cold smoked salmon, are a bigger step. Some restaurants choose to buy those from inspected producers instead. That is a valid choice, and it moves much of the risk and paperwork to a business set up for it.

When you sell to other businesses

If you make cured or smoked meat products and sell them to stores or other restaurants, USDA inspection may apply rather than your local health department, and the product would need to be produced under a USDA HACCP plan under 9 CFR 417 in an inspected establishment. Ask USDA FSIS or your state meat inspection program before selling wholesale. See the meat and poultry HACCP plan and HACCP vs FSMA.

Questions your health department may ask

Inspectors and plan reviewers tend to ask practical questions about curing and smoking. Prepare clear answers before you apply:

• Which products will you make, and will any be eaten without cooking?
• What are the exact recipes, including the weight of curing agent per weight of meat?
• What controls Clostridium botulinum in each product, and what controls Listeria after processing?
• What are your critical limits and how will you measure them?
• Who has reviewed the process, and do you have that review in writing?
• What equipment will you use, and how is it calibrated?
• Who will run the process, and how were they trained?
• What will you do if a batch fails a limit?
• How long will products be kept, and how are they labeled and date marked?
• Will any product be vacuum packed?

If you can answer each of these in writing, you have most of a HACCP plan already.

Keeping the process consistent

The biggest threat to a cured or smoked product after approval is drift. A cook decides to cut the cure time because the walk-in is full. Someone switches to a different brand of curing salt with a different nitrite concentration. A new smoker runs hotter or cooler than the old one. Each change can undo part of the safety margin.

Write the approved recipe and process on a single batch sheet that travels with each batch, with the limits printed on it. Require a manager sign-off before any change, and check with your process authority and health department before changing anything that affects a CCP. Review the batch sheets weekly as part of your verification.

Labeling and shelf life

House-made cured and smoked products held in the restaurant still need labels and date marks. Ready-to-eat TCS products held more than 24 hours follow date marking rules unless your approved plan sets a different shelf life. Label each container or piece with the product name, batch number and date. If you package products for sale, labeling rules for packaged food apply, including allergens. See food code date marking.

Build the plan

The HACCP builder creates HACCP plans for specialized processes, including curing and smoking, with a hazard analysis, CCPs, critical limits, monitoring, corrective actions and logs for your variance application. Try one process free or get every process in the Plan Pack. The plan is a draft for your health department to review, and specialized processes may also need a process authority review.

Frequently asked questions

Does smoking meat in a restaurant need a variance?

Under the Food Code, smoking food as a method of preservation needs a variance. Smoking for flavor, followed by cooking to the required temperature and normal holding, generally does not. Ask your health department how they treat your process.

Does curing need a HACCP plan?

Under Food Code 3-502.11, curing food requires a variance, and the health department will usually ask for a HACCP plan under 3-502.11 and 8-201.13 to support it.

What is a process authority?

A person or organization with expert knowledge of a food process who can evaluate whether it is safe, for example a university food science extension specialist. Many health departments ask for a process authority letter for curing or cold smoking.

Is cold smoked fish riskier than hot smoked?

Generally yes. Cold smoking does not cook the fish, so it relies on salt, smoke, temperature and time to control hazards such as Listeria and Clostridium botulinum. Many health departments treat it as a high-risk process.