Colour coding for HACCP zones

This framing decides how the scheme is treated internally. A tidiness scheme is enforced by whoever cares most, decays over a summer, and gets restored before an audit. A control measure has a named hazard, a stated rule, training behind it, and evidence that it is monitored, which means somebody notices in week three rather than at the next audit.

It also decides how the scheme is assessed. An auditor testing a control measure asks what hazard it controls, what the rule is, who was trained on it, and how a breach would be detected. Those are four answerable questions, and a site that has never framed colour coding as a control usually cannot answer the last one.

The consequences diverge immediately. A site coding by area needs a red brush for the high-risk floor, because everything in that area is red and nothing leaves it. A site coding by surface needs a black brush for every floor in the building, because floors are floors wherever they are. Both are correct. Neither is universal.

The failure is mixing them without deciding. A scheme that carries red for high-risk and blue for food-contact has just created an undefined case: what colour is a food-contact surface inside the high-risk area? In practice the answer is decided differently by each shift, and that is the gap an auditor finds by asking two people the same question.

So the first decision is not which colours. It is which axis. Pick one, write the answer down, and handle the overlaps explicitly rather than by convention.

Allergen is the awkward one, and it is worth understanding why. It is not a risk level in the same sense as the others. It can overlay any of them: an allergen line inside low-risk production, an allergen changeover window on a shared line, a dedicated allergen room. Treating it as a tenth risk level produces a scheme that cannot express a nut line inside high-care.

Food-contact is any surface the product touches: belts, tables, hoppers, blades, utensils, tanks, crates, moulds. Non-food-contact is everything else that gets cleaned: equipment exteriors, frames, guards, walls, doors, overheads, control panels, trolleys. Floors and drains are floors, gullies, drain covers, plinths, kerbs and wheel paths, and they are always the dirtiest tag on the board.

The floor class carries the strongest single rule in colour coding, and it is the one most worth enforcing if you enforce nothing else: a floor tool never touches a food-contact surface. Every other rule in a scheme can be argued about. That one cannot.

If you already have a scheme and your crews are trained on it, keeping it is almost always the right answer. Ripping out a scheme people know is a food safety risk in itself: for a few weeks nobody is quite sure what green means, and that uncertainty is the exposure. The exception is a genuinely broken scheme, such as the same colour used in a high-risk area and on drains, which needs a migration path with dates rather than an overnight switch.

The fix is three cues rather than one. Colour, plus the zone name written on the label, plus a fixed position on a shadow board so a tool has a silhouette it belongs in. Any two of the three still work when the third fails, which means the scheme survives a colour-blind crew member, a faded handle and a new starter on their first shift.

The shadow board is doing more work here than it looks. It converts an abstract rule into a physical gap: a missing tool is visible from across the room, and a tool in the wrong outline is visible to anybody walking past, including the person who put it there.

Storage means a defined place per zone, physically in that zone, off the floor, with tools separated by colour. Hooks, brackets, shadow boards, a mobile station for large areas, a lockable cabinet where a high-risk or allergen set must not leave. The specification is boring and it is the difference between a scheme that holds for three years and one that holds for three months.

The related design detail worth copying: colour-matched couplings, so a crew member physically cannot fit a head to a handle of a different colour without noticing they are holding two colours. Making the wrong action visibly awkward beats making the right action a rule.

The second one is checked by walking. An auditor picks up a brush in high-risk and looks at where it should live, then opens the washroom store and looks at what is in it. It takes four minutes and it is the whole assessment.

The third is the one that exposes a mixed-axis scheme, because two people trained at different times will have learned different rules for the overlap case. If you cannot answer the overlap question on your own site, that is the thing to fix this week, and it is a documentation fix rather than a purchasing one.

The fourth is where monitoring records earn their place. A monthly check against the zone plan, with the exceptions written down and closed, is a small record that answers a question nothing else can.