HACCP Plan for Sushi Rice: Acidification, pH Checks and Records

A HACCP plan for sushi rice is one of the most common reasons a small restaurant ends up writing its first HACCP plan. Cooked rice is a time/temperature control for safety (TCS) food. Left warm on the counter it can support Bacillus cereus and other bacteria. Sushi chefs keep rice at room temperature because cold rice loses its texture, and the vinegar seasoning is what makes that safe. Once you depend on the vinegar for safety instead of flavor, the FDA Food Code treats it as a special process.

This guide walks through when a plan is needed, the two compliant routes (acidification with a variance, or time as a public health control), how to set and check a pH critical limit, and what your records should look like. It is written for US restaurants, sushi counters in grocery stores, and caterers who make sushi on site. Whatever you write is a draft for your health department to review. They decide whether it meets the code they have adopted.

Why sushi rice falls under special process rules

The FDA Food Code is a model code. States and counties adopt it, sometimes with changes, and enforce their own version. The current edition is the FDA Food Code 2022. Two sections matter most for sushi rice.

Section 3-502.11 lists processes that need a variance from the regulatory authority. One of them is using a food additive or adding a component such as vinegar as a method of food preservation, or to make a food so that it is not a TCS food. Acidified sushi rice held at room temperature fits that description. The rice would be TCS without the vinegar, and you are using the vinegar to keep it out of temperature control.

Section 8-201.13 then says when a HACCP plan must be submitted. A variance request for a special process under 3-502.11 generally comes with a HACCP plan, and the plan becomes part of the conditions you operate under once it is approved.

In practice this means three things:

• You ask your health department for a variance to hold acidified rice without temperature control.
• You submit a HACCP plan that shows how you control the acidification step.
• You keep records that prove you followed the plan, batch by batch.

Some jurisdictions have their own sushi rice guidance with forms and a set pH target. Others review each request. If you are not sure which applies to you, call the plan review or special process contact at your county or city health department before you buy equipment.

What makes cooked rice a TCS food

Raw rice can carry spores of Bacillus cereus. Cooking does not destroy all spores. When cooked rice sits in the range between 41°F and 135°F, those spores can germinate and the bacteria can grow and, for some strains, produce toxins that reheating will not destroy. That is the reason the Food Code treats cooked rice as TCS food and why plain cooked rice must be held hot, held cold, or controlled by time.

Adding the right amount of acid lowers the pH of the rice. At a low enough pH, growth of the pathogens of concern slows or stops. The plan exists to make sure every batch reaches that pH and stays there.

Two compliant routes for sushi rice

You have two practical options. Most operators pick one and write the plan around it.

Route 1: Acidification with a variance and a HACCP plan

This is the route for kitchens that want to hold rice for a full service period at room temperature. It needs:

• An approved variance.
• A written recipe with fixed ratios of rice, water and seasoning.
• A pH critical limit approved by the health department.
• A calibrated pH meter or another approved method to test each batch.
• Logs for pH readings, calibration and corrective actions.
• Staff who know the procedure.

The upside is flexibility: rice can sit at the station as long as the variance allows. The cost is paperwork, a meter, buffer solutions, and the daily habit of testing.

Route 2: Time as a public health control

Food Code section 3-501.19 allows a TCS food to be held without temperature control for up to 4 hours if you meet its conditions. You need written procedures that are prepared in advance and available to the regulator on request. Each container is marked with the time it must be cooked, served or thrown out. Anything left at the 4-hour mark is discarded. There is also a 6-hour version for food held at 70°F or below, with stricter conditions, but the 4-hour version is the one most sushi bars use.

Time control often does not need a variance, though some jurisdictions still ask for written approval or a specific form. It is simpler, but you must make smaller batches and accept waste at the cutoff. Read our full guide to time as a public health control for the details and a sample procedure.

Which route fits your kitchen

A quick way to decide:

• If you sell sushi from open to close and make rice two or three times a day, time control with clear labels may be enough.
• If your service runs long with one big batch, or you supply rice to a self-serve case, acidification with a variance usually makes more sense.
• If you cannot commit to testing and logging every batch, choose time control. A plan you cannot keep is worse than no plan, because the records will show the gaps.

Writing the HACCP plan for sushi rice step by step

The structure follows the seven HACCP principles from the National Advisory Committee on Microbiological Criteria for Foods, which FDA publishes as its HACCP principles and application guidelines. If those principles are new to you, start with our plain explanation of the seven HACCP principles.

Preliminary tasks

Before the hazard analysis, the guidelines suggest five preliminary tasks: assemble a team, describe the food and its distribution, describe the intended use and consumers, build a flow diagram, and verify the flow diagram on the floor.

For a small sushi counter, "the team" is often the owner and the head sushi chef. Name them in the plan. Describe the product plainly: "Short-grain rice cooked in a commercial rice cooker, seasoned with a vinegar, sugar and salt mixture at a fixed ratio, cooled to room temperature and used for nigiri and rolls served on site." List who eats it: the general public, including people who may be more vulnerable to foodborne illness.

The flow diagram

A typical flow for acidified sushi rice looks like this:

Walk the line during service and fix the diagram if real life differs. If a chef sometimes adds extra plain rice to stretch a batch, that step must appear in the diagram and the plan has to deal with it. Our HACCP flow diagram examples show more layouts.

Hazard analysis

For each step, ask what could go wrong and whether the hazard is likely enough and severe enough to control. A short version for sushi rice:

| Step | Hazard | Significant? | Control | |---|---|---|---| | Receive dry rice | Pests, foreign matter | No, handled by prerequisite programs | Supplier approval, visual check | | Cook rice | Survival of vegetative bacteria | No, cooking kills vegetative cells; spores survive | Spores are controlled at the acidification step | | Acidify rice | Growth of B. cereus and other pathogens if pH is too high | Yes | Critical limit on pH | | Hold at room temp | Growth if acidification failed or rice is mixed with unacidified rice | Yes, controlled by CCP 1 and SOPs | Fixed recipe, no topping up | | Hand contact | Contamination from workers | Yes, controlled by prerequisite programs | Glove and handwashing rules |

Write the reason for each yes or no. Inspectors care more about the reasoning than the table format. For more patterns, see our hazard analysis examples.

Critical control point

For most sushi rice plans, the acidification step is the single critical control point. The pH test confirms the step worked. Some plans list them as one CCP ("acidification, verified by pH"), and others split mixing and testing. Either is fine if the monitoring and records are clear.

Holding is usually not a separate CCP when rice is acidified properly, because the low pH is what controls growth during holding. Your plan should still say how long rice may be held and what happens at the end of the day.

Setting the pH critical limit for sushi rice

A critical limit is the maximum or minimum value that must be met at a CCP to control the hazard. For acidified rice, it is a maximum pH.

The Food Code does not print one sushi rice number. Many state and local guidance documents use pH 4.6 as the dividing line for acidified foods, and some ask sushi operators to target a lower value to leave a margin for testing error. Do not pick a number from a blog, including this one. Ask your health department what limit they accept, put that number in your plan, and note the source.

What the plan should state:

• Critical limit: "Finished rice pH at or below [approved value]."
• Recipe: fixed weights or volumes of dry rice, water and seasoning, with the seasoning recipe written out.
• Sample point: a sample from the finished, mixed batch after it reaches room temperature.

Write the recipe as weights if you can. "One cup of vinegar mix per pot" drifts over time. "450 g seasoning per 3 kg cooked rice" does not.

How to measure sushi rice pH

The usual method is to blend a sample of rice with distilled water and measure the slurry with a calibrated pH meter. Your health department may specify the exact ratio. Write down the method you use and keep it the same every time.

A simple procedure to adapt:

1. Take a sample from several spots in the batch, not just the top.
2. Mix the sample with distilled water at the ratio your regulator approves.
3. Blend or mash until smooth.
4. Put the probe in the slurry, let the reading settle, and record it.
5. Rinse the probe with distilled water and store it as the manufacturer says.

pH test strips are often not accurate enough for a critical limit. If you plan to use strips, ask first.

Calibrating the pH meter

A meter that drifts makes every reading worthless. Most handheld meters use two-point calibration with buffer solutions, commonly pH 4.0 and 7.0. Calibrate at the frequency the manufacturer recommends and your plan states; many operators calibrate daily before the first test. Record the date, buffers used, readings, and initials on a calibration log. If the meter will not calibrate, use a backup or switch to time control for that day. Our thermometer calibration log post shows a log layout that works for pH meters too.

Monitoring: who checks, how and how often

Monitoring is the planned sequence of observations or measurements that shows the CCP is under control. For sushi rice the plan should spell out:

• What: pH of each finished batch.
• How: calibrated meter, slurry method as written.
• When: every batch, before the rice is used.
• Who: the sushi chef on shift, by name or job title.

Every reading goes on the log at the time it is taken. Logs filled in at the end of the day are a red flag in an inspection.

A sample sushi rice pH log

| Date | Batch time | Recipe used | pH reading | Within limit? | Corrective action | Initials | |---|---|---|---|---|---|---| | 11/01 | 10:40 | Standard 3 kg | 4.1 | Yes | None | KT | | 11/01 | 14:15 | Standard 3 kg | 4.7 | No | Re-mixed, retested 4.2 | KT |

You can print this layout from the HACCP plan template or build it with your plan in the HACCP builder.

Corrective actions when the pH is too high

Corrective actions are what you do when monitoring shows a deviation. The plan must say this before it happens. For sushi rice a sensible set is:

1. Do not use the batch.
2. Find the cause. Wrong ratio, wrong vinegar, a new staff member, meter drift?
3. If your plan and regulator allow it, add measured seasoning, mix, and retest. Record both readings.
4. If the batch cannot be brought under the limit, or if it has been out of control for an unknown time, throw it out.
5. Record what happened and what you changed to stop it happening again.

Rice that already sat at room temperature with a pH above the limit is not safe to "fix" later. If your records cannot show when the batch was made and tested, discard it. More examples are in our guide to HACCP corrective actions.

Verification and record keeping

Verification checks that the plan is being followed and that it works. For a sushi rice plan, it usually includes:

• A manager reviewing and signing the pH and calibration logs, often weekly.
• Checking that the recipe card at the station matches the plan.
• Watching a chef take a sample and test it, now and then.
• Reviewing the plan when you change rice, vinegar, equipment or recipe.

Keep records for as long as your health department requires. If the variance or local code does not set a period, keeping them at least through your next routine inspection is a sensible minimum, and many operators keep a year. See HACCP verification and record keeping for a fuller checklist.

Prerequisite programs that support the plan

A HACCP plan sits on top of basic food safety programs. For sushi, those include:

• Handwashing and glove use. Sushi is handled by hand and not cooked after shaping. The Food Code requires handwashing and limits bare-hand contact with ready-to-eat food.
• Cleaning and sanitizing of rice cookers, mixing tubs and paddles. See our sanitation SOP guide.
• Employee health. Sick workers with certain symptoms must be excluded or restricted.
• Fish safety. If you serve raw fish, parasite destruction by freezing (Food Code 3-402.11) and supplier records are part of the same operation. Our seafood HACCP plan post covers this.
• Allergen control for sesame, fish, crustacean shellfish and soy, which are all common in sushi. See the food allergen control plan.

These are not CCPs, but the plan should reference them so the reviewer sees the whole system.

Common mistakes in sushi rice HACCP plans

These are issues that come up often when plans go to review:

• No fixed recipe. "Season to taste" makes the critical limit impossible to hit consistently.
• Topping up batches. Adding fresh unacidified rice to an old batch mixes tested and untested rice. Do not do it, or write a procedure that treats the result as a new batch with a new test.
• Meter never calibrated. Calibration logs are one of the first things a reviewer asks to see.
• Testing before cooling. Hot rice and room-temperature rice can read differently. Test at the point your plan states.
• No corrective action written. The plan must say what happens when a reading fails.
• Copying a plan from another restaurant. Recipes, equipment and volumes differ. Use a template as a starting point, then make it describe your kitchen.

Putting it together in your plan

A complete sushi rice section in your HACCP plan normally contains:

1. Product description and intended use.
2. Flow diagram, checked on the floor.
3. Hazard analysis table with reasons.
4. CCP: acidification, with the approved pH limit.
5. Monitoring procedure: method, frequency, person.
6. Corrective actions.
7. Verification activities.
8. Record forms: pH log, calibration log, corrective action log, training sign-off.
9. Prerequisite program references.
10. The variance approval letter, once you have it.

If you also run other special processes, such as sous vide or reduced oxygen packaging, they each get their own section with their own CCPs. For the overall structure, see our guide to writing a HACCP plan and the complete HACCP plan example.

How long approval takes

That depends on your health department. Some review a sushi rice variance in a few weeks, some take longer, and some want an on-site visit to watch a batch being made and tested. Start early, and in the meantime run the rice under time control so you stay compliant while the request is reviewed.

Training staff on the sushi rice plan

Every chef who makes rice needs to know the recipe, the test, the limit and what to do if a batch fails. A short training record with names, dates and a sign-off line is often enough. Run a practical check: have each person calibrate the meter and test a batch while a manager watches. Repeat it when someone new starts. Our post on HACCP training for restaurant staff has a simple format.

Build your sushi rice plan

The HACCP builder includes acidified rice as a process with the hazard analysis, the CCP, monitoring steps, corrective actions and printable pH and calibration logs. You enter your recipe and the pH limit your health department approved, and it produces a draft you can edit and submit. The first process is free. The full Plan Pack covers every process in your kitchen. Either way, the result is a draft for your health department to review and approve, not a substitute for their decision.

Frequently asked questions

Does sushi rice need a HACCP plan?

Usually only when you rely on acidification to keep cooked rice out of temperature control. Food Code 3-502.11 lists acidifying a food to make it non-TCS as a process that needs a variance, and 8-201.13 says when a HACCP plan comes with it. Your local health department makes the final call.

What pH does sushi rice need to be?

The Food Code does not print one number for sushi rice. Many local guidance documents use 4.6 or below as the line for acidified foods and ask for a lower working target. Use the number your health department approves and write it into the plan as the critical limit.

Can I use time instead of pH for sushi rice?

Yes, in most jurisdictions. Time as a public health control under Food Code 3-501.19 lets you hold rice without temperature control for up to 4 hours if you have written procedures and mark the discard time. Many places accept this without a variance, but check first.

How often should I test sushi rice pH?

Every batch is the common expectation, because each batch is mixed by hand. Test a sample from the finished batch after it cools to room temperature and record the reading, the time and your initials.