Keystone
by CloudVoro
Guide · Compliance

How to prepare for an FSAI inspection
, what they check, and a two-week plan.

Official food controls in Ireland arrive mostly unannounced, so 'preparation' really means keeping a small set of records permanently ready. This guide covers who actually inspects you, the documents they ask for in the first half hour, the traceability question almost every inspection includes, and a two-week readiness plan you can reuse before audits of any kind.

10 min read Updated 2026-07-08By the CloudVoro team

Who actually walks through your door

The FSAI is the central competent authority, but most inspections are performed by its official agencies under service contract: HSE Environmental Health Officers for general food businesses, the Department of Agriculture (DAFM) for approved meat, dairy and egg establishments, the SFPA for seafood, and local authorities for certain sectors. The legal framework is EU Regulation 2017/625 on official controls, and inspectors generally arrive unannounced or at short notice.

The inspection frequency is risk-based: your compliance history, the nature of the product and the scale of the operation set how often you are visited. A clean record buys you longer intervals; enforcement history buys you the opposite.

The documents requested in the first half hour

Registration / approval details
Your establishment registration or approval number and scope, and evidence the activities on site match it.
Food safety management system
Your HACCP-based procedures (or a validated national guide for simpler businesses), with evidence they are live: monitoring records, not just the manual.
Traceability records
Goods-in and dispatch registers. Expect the one-step-back / one-step-forward question in nearly every inspection.
Training records
Food hygiene training appropriate to role, with dates and refreshers.
Monitoring records
Temperature logs (intake, storage, process, dispatch), cleaning schedules with sign-offs, pest-control reports, calibration records.
Supplier controls
Approved supplier list and the checks behind it, specifications, certificates, COAs where relevant.

The traceability question, and how it is asked

A standard inspection move is to pick a product, from your chill, your dispatch bay or a customer's shelf, and ask two questions: where did the ingredients in this come from, and who did you supply this lot to? Under Article 18 of EU food safety regulations you must answer both on demand; inspectors expect the answer in minutes-to-hours, not days.

The follow-up, if your answer is slow or vague, is a request for a recall procedure walk-through under Article 19: what would you do right now if this lot were unsafe? The businesses that struggle are rarely missing records, they are missing the connections between records, so the answer requires assembling three books and a phone call to whoever was on shift.

Have one rehearsed answer
Pick your highest-volume product and rehearse its full chain, supplier lot to customer list, until anyone senior on site can produce it in under ten minutes. One confident, documented answer early in an inspection changes the tone of everything that follows.

What the walk-through covers

Structure and cleanliness
Fabric of the building, drainage, condensation, cleaning standards in production and storage areas.
Cross-contamination controls
Raw/cooked segregation, allergen segregation and labelling, personal hygiene facilities and practice.
Temperature control
Live checks against your own logs, a probe in your chill against your log for the same unit is a classic inspection cross-check.
Labelling and allergens
FIC (Reg. 1169/2011) compliance: allergen emphasis, lot marking, date coding, and, for approved establishments, the identification mark.
Pest control
Contract, bait plans, most recent reports and evidence findings were actioned.

The two-week readiness plan

  1. 1
    Days 1–2: run a self-audit against your last report
    Reread the last inspection report or audit and verify every previous finding is closed with evidence. Repeat findings are what escalate enforcement.
  2. 2
    Days 3–4: pull the first-30-minutes pack
    Registration, HACCP records, training matrix, supplier list, current monitoring logs, one folder (physical or digital) that anyone can hand over.
  3. 3
    Days 5–7: run a timed traceability exercise
    One product forward, one ingredient backward, timed and written up. Fix the gaps it exposes, it will expose some.
  4. 4
    Days 8–9: walk the floor as an inspector
    Someone senior walks the site with fresh eyes: condensation, open bins, unlabelled tubs, propped fire doors, undated cleaning sign-offs.
  5. 5
    Days 10–12: close the small stuff
    The findings from the walk, most are fixable in a day and disproportionately shape the inspector's impression.
  6. 6
    Days 13–14: brief the team
    Everyone should know who greets an inspector, where the document pack lives, and that the correct answer to an unknown question is to fetch the person who knows, never to guess.

After the inspection

Findings arrive on a spectrum: verbal advice, written reports with corrective actions, improvement notices, and, for serious risk, closure orders or prohibition orders, which the FSAI publishes monthly. Respond to every written finding in writing, with dates and evidence of closure; the response file becomes the first thing checked next visit.

Producers running Keystone keep the traceability half of inspection-readiness permanent by default, any batch's full chain in under 30 seconds, monitoring and QC records attached to the batch they belong to, which converts the two-week plan above into a walk-the-floor exercise. The floor still has to be right; software doesn't clean drains.

Key takeaways
  • Most Irish inspections are unannounced, readiness is a permanent state, not an event.
  • The first half hour is documents: registration, live HACCP records, traceability registers, training.
  • Nearly every inspection includes a live one-up/one-down traceability question, rehearse one product until it is boring.
  • Close previous findings with written evidence; repeat findings drive enforcement escalation.
  • Brief the whole team: who greets, where the pack is, and never guess an answer.
Free 5-part email course
Get audit-ready in five short emails.
The 18-point checklist PDF, the 30-second traceability test, what BRCGS auditors actually flag, and how Cashel Blue got audit-ready, one email every few days. No spam, one-click unsubscribe.
GDPR-friendly: we store your email for this course only. Unsubscribe link in every email.

Frequently asked questions

Are FSAI inspections announced in advance?
Generally no, official controls under EU Regulation 2017/625 are mostly unannounced or at short notice. Approval visits and some audit-style controls may be scheduled, but day-to-day inspections arrive when they arrive.
Who actually carries out food inspections in Ireland?
Official agencies under service contract to the FSAI: HSE Environmental Health Officers for most food businesses, DAFM for approved meat/dairy/egg establishments, the SFPA for seafood, and local authorities for certain activities.
What records will a food inspector ask for?
Registration/approval details, HACCP-based procedures with live monitoring records, traceability registers (goods-in and dispatch), training records, temperature and cleaning logs, pest-control reports and supplier controls, typically within the first half hour.
What happens if an inspection finds problems?
Depending on risk: verbal advice, written corrective actions, improvement notices, or for grave and immediate danger closure/prohibition orders, which the FSAI publishes. Written, evidenced responses to findings are what prevent escalation.
How fast must I answer a traceability question?
Article 18 of EU food safety regulations says traceability information must be available to authorities on demand. In practice inspectors expect supplier and customer answers for a nominated lot in minutes to hours; certification standards like BRCGS formalise 4 hours with mass balance.

See this done in software, on real production data.

Keystone runs the full chain, supplier delivery → batch → dispatch → customer, in under 30 seconds. 20-minute discovery call, no sales pitch.

Compliance & trust

How we keep your
data and your audits safe.

Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and immutable audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and immutable audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.