Guide

How to Prepare Training Records for a Food-Safety Audit

Audit-ready training records show, for every required course, who completed it, when, when it's next due, and the signed evidence — backed by a tamper-evident history. Preparing them is mostly about removing gaps and surprises before the auditor arrives.

Updated July 23, 20268 min read

An audit is rarely lost on the day the auditor arrives — it's won or lost in the weeks before, in the state of your records. When a food-safety auditor sits down to review training, they aren't testing whether your people are good at their jobs. They're testing whether you can provethat everyone doing a food-safety-critical task was trained to do it, that the training is still current, and that the record hasn't been tidied up after the fact. This guide walks through what SQF, BRCGS and GMP auditors actually ask for, and how to have audit-ready training records waiting before they walk in.

Key takeaways
  • An audit-ready record answers four questions per required course: who, when completed, when next due, and what evidence.
  • Most training findings are boring: a lapsed refresher, a completion with no sign-in sheet, or a new hire with no record yet.
  • Auditors trust records more when they're backed by an append-only audit trail — because dates can't be quietly changed.
  • Preparation is mostly gap-removal: run the matrix, close what's overdue, attach the missing evidence, and check nothing is a surprise.

What an auditor is really checking

Certification schemes phrase it differently, but the underlying question is the same across SQF, BRCGS, GMP and a HACCP program: can you demonstrate that the right people received the right training, and that you have a system to keep it current? In practice an auditor works from your training matrix outward, picking a few employees or a few required courses and drilling into the underlying record. For each one they expect to find:

  • Who was trained— a specific, named employee tied to a specific course or competency, not a vague “the team was briefed.”
  • When it was completed— a real completion date, not just an “assigned” date or a plan.
  • When it's next due— for anything that recurs or expires, the next due or expiry date, so it's obvious the record is current and not silently lapsed.
  • The evidence — a signed sign-in sheet, a certificate, or a competency assessment that shows the training genuinely happened.
  • A trustworthy history— assurance that the completion date wasn't back-dated or edited the week before the audit.

The specific clauses and required frequencies depend on the current version of your standard, so always check the exact edition you're certified against — but that five-part expectation is stable, and it's the yardstick to hold your records up to.

Weak record vs. audit-ready record

The gap between a record that raises a finding and one that closes the topic in thirty seconds is usually small. It's the difference between a bare completion date and a complete, evidenced, defensible entry.

CapabilityA weak record showsAn audit-ready record shows
A course name and a date in a cellNamed employee, course, completion date, and next-due date
No sign of whether it's still currentRecurrence or certificate expiry so lapses are visible
“We trained everyone”, no namesEach attendee individually marked complete
No evidence the session happenedA signed sign-in sheet or certificate attached
A date anyone could have overwrittenAn append-only audit trail of who recorded what, when
Nothing for a new hire trained last weekThe completion logged the day it happened

The common findings — and why they happen

Training findings are rarely dramatic. They cluster around a handful of predictable gaps, and every one of them is preventable with a bit of prep:

  • The lapsed refresher.A course renewed annually, last done thirteen months ago. On a spreadsheet it sits looking “done” because nobody recalculated the due date. This is the single most common training finding.
  • The undocumented completion. The training happened — but the attendance recordor sign-in sheet can't be found, so from the auditor's seat it may as well not have.
  • The uncovered new hire.Someone started three weeks ago, is already on the line, and their induction training isn't recorded yet.
  • The role-change gap.An operator moved to a food-safety-critical task but the training matrix wasn't updated, so a required course was never assigned.
Find your gaps before the auditor does
Every one of these findings is something you can catch yourself with a live training matrix. The whole point of building a training matrixis that overdue and due-soon items surface on their own — so the “audit prep” below is really just reading what the matrix already tells you and acting on it.

An audit-prep checklist

Give yourself a week or two of runway and work through this in order. Each step removes a class of surprise:

  1. 1
    Confirm the requirements are current
    Check that your list of required courses matches the current version of your standard (SQF, BRCGS or GMP), plus any customer-specific or regulatory requirements. Requirements and frequencies change between editions.
  2. 2
    Run the full matrix and read the overdue column
    Pull up every employee against every required course. Anything overdue or expiring soon is a finding waiting to happen — schedule and complete it now, while you still have time.
  3. 3
    Cover every current employee and role
    Cross-check the roster against the matrix. New hires, transfers, and anyone who changed roles must have their required training assigned and recorded. Include temporary and contract staff if your standard requires it.
  4. 4
    Attach the missing evidence
    For each completion, make sure a signed sign-in sheet, certificate, or competency assessment is attached to the record — not sitting in a binder in another building.
  5. 5
    Verify the record can be trusted
    Be able to show how completion dates are captured and that they can't be quietly edited after the fact. An append-only history is what turns “we say so” into evidence.
  6. 6
    Do a dry run on a few records
    Pick three or four employees the way an auditor would and trace each required course end-to-end: completion date, next due, signed evidence. If any step stalls, fix it before the real audit.

Why the audit trail matters as much as the record

A completion date is only as credible as your ability to show it wasn't changed. If any record could be overwritten with no trace, an auditor is right to be skeptical — a green cell proves nothing on its own. That's why an append-only audit trailis the quiet backbone of audit-ready records: it captures who recorded each completion and when, and it can't be edited after the fact. When the history is tamper-evident, the completion date stops being a claim and becomes evidence.

The same trustworthiness applies when something goes wrong. If a lapse or a nonconformance is raised, a clean history lets you show exactly when the gap appeared, when it was corrected, and who acted — which is often the difference between a minor observation and a major finding.

What to have ready on the day

When the auditor asks for training, you want to be able to produce three things in minutes, not hours:

  • The live matrix — every employee against every required course, with nothing overdue in red.
  • Individual transcripts — for any employee they name, a clean printout of their completed training, dates, and next-due dates.
  • The evidence behind any record — the signed sign-in sheet or certificate, attached to the completion and retrievable on the spot.

None of this requires heroics the night before. If you keep a live training matrix, close overdue items as they surface, and attach evidence as training happens, then “audit prep” is mostly confirmation rather than reconstruction. For the requirement-specific detail behind all of this, work through the SQF training requirements and your HACCP training recordsalongside the matrix you've already built— and remember that the exact clauses depend on the current version of the standard you're certified against.

The best audit prep is a boring audit
The goal isn't a heroic scramble that produces a perfect binder once a year. It's a record that's always current, so the auditor's training review is short and uneventful. If nothing surprises you when you run the matrix, nothing will surprise them either.

Frequently asked questions

What do auditors look for in training records?

Auditors want to see, for each required course, who was trained, the completion date, the next due or expiry date, and evidence such as a signed attendance sheet — plus assurance the records weren't edited after the fact. Gaps, undocumented completions, and lapsed refreshers are the common findings.

How long should training records be kept?

Retention depends on your certification scheme and local regulations, but food-safety programs typically expect records to be retained for at least the duration of the certification cycle and often longer. Check the current version of your standard and your internal document-control policy.

What makes a training record 'audit-ready'?

It's complete (no missing completions), current (nothing lapsed unnoticed), evidenced (signed sign-in sheets or certificates attached), and trustworthy (backed by an append-only audit trail so dates can't be quietly changed).

See it on your own training data

Import your roster in minutes and watch the compliance matrix light up. We'll walk your first file through with you.

Book a demo
Keep reading