Logistics and warehousing
Here the compliance load is set by your customers and your cargo, not by one regulator, which is why it arrives in pieces.
Transport and freight operators are licensed by the Transport General Authority. What sits on top depends on cargo: SFDA for food and pharmaceutical storage and distribution, port and bonded rules where you operate, and customer-driven certification. We have found no source making an ISO standard a TGA licence condition.
Compliance arrives cargo by cargo
A third-party logistics operator ends up holding several unrelated certifications across several sites with different renewal clocks, because each one was won by a different customer contract. Food cargo brings food safety. Pharmaceutical cargo brings distribution practice and temperature control. A multinational shipper brings supply chain security. None of it was planned as a system, and the cost is not the certificates, it is that four different people each maintain one of them and nobody owns the whole picture.
- TGA licenses operators and vehicles, with the service running through its own platform
- Food and pharmaceutical cargo brings SFDA requirements for storage and distribution, including cold chain
- Warehousing for third parties carries SFDA rules on licences, area, sub-leasing and notification that most operators have never read
- Port and bonded operations bring the rules of the specific port or zone you work in
- Customers, not regulators, are usually what require ISO certification here
What holds it together
ISO 9001
One quality system across sites, which is what stops four certifications being maintained by four people.
Read moreStandardISO 45001
Yards, forklifts, loading bays and lone working, where the real injury exposure sits.
Read moreStandardISO 22000
Food storage and distribution when the customer needs a management system rather than a checklist.
Read moreServiceSFDA licence readiness
For food warehouses and distribution centres, including storage for third parties.
Read moreServiceDocument control
Multi-site records, retention and retrieval, which is where a customer audit starts.
Read moreWho requires what, honestly
| Requirement | What it means on site |
|---|---|
| TGA licensing | The Transport General Authority licenses operators and vehicles and enforces the implementing regulations for freight transport and related activities. |
| ISO standards | Customer-driven in this sector. |
| Food cargo | SFDA requirements for food storage and distribution centres, including the licence chain and cold chain conditions. |
| Pharmaceutical cargo | Good distribution practice for time and temperature-sensitive products, with SFDA guidance covering how they are stored and transported. |
| Ports and zones | Port authority rules where you operate, bonded and zone rules where they apply, and Royal Commission rules for movements inside Jubail or Ras Al Khair. |
| Supply chain security | ISO 28000 where a customer writes it in, which happens with multinational shippers rather than with regulators. |
Operator questions
Does TGA require ISO 9001?
We found no official source saying it does, so we treat ISO in this sector as customer-driven rather than regulator-driven. If a specific TGA service you are applying for names a standard, send us the requirement and we will read it with you.
We store food for other companies. What applies?
More than most operators expect. Each lessee needs its own SFDA activity licence, the leased area has to be defined, separated and above a minimum size, sub-leasing is not allowed, and there are notification obligations on you as the lessor with a deadline attached. It is worth a review before an inspection finds it.
We hold three certificates across four sites. Can they be merged?
Usually, and it is the single biggest saving available in this sector. One management system, one document set, one audit programme, with site-specific operational documents underneath. See the integrated management system page.
What does a typical engagement look like?
A third-party logistics operator with warehouses in Riyadh and Dammam, holding ISO 9001 from one customer contract and now asked for ISO 22000 by a food customer. We scope one management system across both sites and add the food safety elements only where food is stored. One internal audit programme and one management review cover everything. The operator ends up with one document set, site-specific temperature and pest records underneath it, and one audit calendar instead of two.
A customer is auditing us next month. What do they look at?
Records, in our experience: temperature logs with gaps, training records for agency staff, calibration of the probes behind the logs, and whether a batch can be traced through your system in the time they give you. Start there rather than with the policy manual.
Is cold chain a certification or a capability?
Both, and the order matters. The capability is equipment, monitoring and calibrated instruments. The certification is evidence that the capability is controlled. Certifying an uncontrolled cold chain just documents the problem.
Part of one system
Every division keeps records to the same standard, so the second one you need works the way the first one did.
Pull the certificates into one system
Most 3PL operators are carrying duplicated management systems won contract by contract. The integration review tells you how much of it is genuinely the same work.