Skip to content
Close

Live instructor-led training is 20% off through December 31, 2026 Live training is 20% off through Dec 31 Code: sweaterweather20 View courses

cGMP Certification: Food Processing, Packaging & Distribution Audits

cGMP (current Good Manufacturing Practice) certification shows that a food facility meets Kiwa ASI's cGMP Audit Program 2.0, a set of HACCP-based standards founded on FDA's 21 CFR Part 117. Kiwa ASI audits food and beverage manufacturers, food packaging makers and storage and distribution sites to their own 2.0 standard, and dietary supplement makers against 21 CFR Part 111. Sites that score 70% or higher on a 2.0 audit are certified, with an audit every year.

  • HACCP-Based
  • Founded on 21 CFR Part 117
  • Program 2.0 Since Jan 2026
  • 3 Audit Standards

Last updated September 28, 2026

Get a cGMP Audit Quote

A cGMP specialist will reach out to discuss your site, the right standard, scheduling and pricing.

What Is cGMP Certification?

cGMP certification confirms that a food facility follows current Good Manufacturing Practices (cGMP): the conditions and practices for manufacturing, processing, packing and holding food safely. For human food, FDA's cGMP requirements are in 21 CFR Part 117, Subpart B, which covers personnel, plant and grounds, sanitary operations and facilities, equipment, processes and controls, and warehousing and distribution.

Kiwa ASI audits sites against its cGMP Audit Program 2.0: three HACCP-based standards founded on 21 CFR Part 117 that go beyond the regulation with industry best practices. Certification is voluntary. FDA requires compliance with its cGMP rules, not a certificate, but retailers, brand owners and manufacturers often ask suppliers for a third-party audit, and a cGMP certificate gives them one.

cGMP 2.0 took effect January 1, 2026.

Kiwa ASI published version 2.0 of its cGMP and cGDP audit standards on October 1, 2025, replacing the version 1.1 program from 2018. Audits from January 1, 2026 use version 2.0, and certificates issued before then stay valid until they expire. Scoring didn't change. See what's new in 2.0 or read the 2.0 change summary (PDF, 0.2 MB).

  • Founded on 21 CFR Part 117

    The criteria build on FDA's cGMP and preventive controls rule for human food and add best practices from Codex, ISO and GFSI-benchmarked programs.

  • Three Modules and a Mock Recall

    Every 2.0 standard audits the Food Safety Management System, 15 sections of good manufacturing or distribution practice and HACCP, plus a mock recall completed in under two hours.

  • Scored Out of 100%

    Minor, major and critical nonconformities deduct 1%, 5% and 100%. A score of 70% or higher earns a certificate, rated Complies, Good or Excellent.

  • A Kiwa ASI Standard

    Kiwa ASI's cGMP standards are its own audit programs. They aren't GFSI-benchmarked or accredited. If a customer requires GFSI-recognized certification, Kiwa ASI also offers SQF, BRCGS and FSSC 22000 audits.

Which cGMP Audit Is Right for You?

Kiwa ASI offers three 2.0 audit standards, matched to what your site does, plus a separate audit for dietary supplements. Sites that both process food and make packaging can combine the Food Processing and Food Packaging standards in one certification scope.

  • cGMP Food Processing 2.0

    Food and beverage makers

    Food and beverage manufacturers, including co-manufacturers, across full processing operations.

  • cGMP Food Packaging 2.0

    Packaging makers

    Manufacturers of food packaging, both direct food-contact and non-contact packaging.

  • cGDP Storage & Distribution 2.0

    Warehouses and 3PLs

    Warehouses and distribution operations that store and ship fully packaged products.

  • cGMP for Dietary Supplements

    21 CFR Part 111

    Supplement manufacturers, packagers, labelers and holders, audited against FDA's 21 CFR Part 111.

Note: Kiwa ASI confirms the right standard and your scope during the application. Every 2.0 audit is site-specific, so each facility is certified at its own address.

What's New in cGMP Program 2.0?

Version 2.0 doesn't change the intent or scope of the audits, but it rewrites and reorganizes the requirements and adds a few new ones. All requirements are now clearly mandatory; one that doesn't fit your operation is recorded as not applicable, and exemptions need Kiwa ASI's written approval.

  • Structure

    Clearer, Measurable Requirements

    Requirements were reorganized, consolidated and restated in direct, measurable terms, from management system elements through operational controls, verification and corrective action.

  • Added

    New Requirements

    Elements added or strengthened across all three standards.

    • 1.1 Management commitment and food safety culture
    • 1.5 Business licenses and registrations
    • 1.6 Certification integrity
    • 3.13 FSMA Food Safety Plan where preventive controls apply
  • Expanded

    Expanded Coverage

    More detail, definitions and examples in high-risk areas.

    • Allergen management, including packaging and distribution
    • Risk-based hygienic zoning and environmental monitoring
    • Electronic records and document control
    • Complaint handling and one-forward, one-back traceability exercises
    • Scope of certification and reporting changes
  • Reports

    Reporting and Scoring

    Audit reports now include unscored section summaries alongside compliant and non-compliant evidence for every element. Scoring and ratings didn't change.

What Are the Benefits of cGMP Certification?

cGMP certification gives customers independent evidence that your food safety practices work, and gives your team a clear, scored standard to manage to.

  • Customer Assurance

    A third-party audit report and certificate that buyers, brand owners and retailers can review when approving you as a supplier.

  • Built on FDA Requirements

    The criteria are founded on 21 CFR Part 117, so the audit reinforces the cGMP rules you already have to follow. It doesn't replace FDA or USDA compliance.

  • Plant-Floor Risks Covered

    Allergen changeovers and labeling, foreign matter detection, rework, pre-operational inspections and environmental monitoring are all audited.

  • Proven Recall Readiness

    A two-hour mock recall with the auditor present traces a raw material back to its supplier and finished product forward to customers.

  • A Clear Score to Improve On

    Findings are scored out of 100% with Excellent, Good and Complies ratings, and two Excellent audits in a row earn a Superior rating.

  • A Foundation for GFSI

    The HACCP plan, prerequisite programs, supplier approval and internal audits it requires are the same building blocks GFSI schemes such as SQF expect.

What Does a cGMP Audit Cover?

A cGMP audit is an on-site assessment of your facility, production practices and records against the three modules of your 2.0 standard, plus the mock recall. A certification audit takes at least one day (about 8 hours) and is planned in half-day increments; the length depends on facility size, the number of employees, product types and HACCP plans, and the scope. Your facility must be in production on the audit day; if schedules change, you can run a small batch instead by telling Kiwa ASI in writing before the audit starts.

cGMP 2.0 Audit Criteria (Food Processing and Food Packaging)

ElementWhat the auditor checks
1.1–1.3 Management, complaints and recordsPosted food safety policy, management involvement and culture, complaint root cause analysis, document control and electronic records with audit trails
1.4–1.6 Training, licensing and integrityTraining for all staff with a training matrix and annual refreshers, valid business licenses, correct use of certificates and marks
2.1 Processing controlsProcess flow and segregation, compliant raw materials and packaging, correct labels, allergen controls and changeovers, environmental monitoring with trending
2.2 Foreign matterDetection equipment such as metal detectors verified routinely and calibrated at least annually; control of glass, brittle plastic, wood and cutting tools
2.3 Non-conforming goodsHold and release; rework, recoup and repacking; one-back and one-forward traceability; a recall program tested at least annually
2.4 Food defenseFood defense plan and threat assessment with a trained Food Defense Qualified Individual, employee screening, access control, visitor rules
2.5 Internal audits and inspectionsAn annual internal audit of the whole system and documented pre-operational inspections before production starts
2.6 Supplier approvalApproved suppliers of raw materials and packaging, emergency suppliers and an annual supplier review
2.7 Good hygiene practicesIllness reporting, handwashing, clean protective clothing, hair and beard nets, no jewelry beyond a plain band or medical bracelet
2.8–2.10 Sanitation, chemicals and pestsMaster cleaning schedule and verification, approved and labeled chemicals, sanitizer test kits, licensed pest control with a signed bait station map
2.11–2.12 Water, air and wasteAnnual water tests by an accredited lab, backflow testing, compressed air testing where it contacts product, closed waste containers
2.13 Storage and distributionRaw materials, work in progress and finished products stored off the floor and apart, temperature monitoring where needed, trailer inspections
2.14–2.15 Facility, maintenance and calibrationSanitary design and repair, 18-inch vegetation-free perimeter, preventive maintenance, controlled temporary repairs, calibrated equipment
3.1–3.12 HACCP planHACCP team with IHA-certified leader and backup, product descriptions, flow diagram, hazard analysis, CCPs, validation and annual verification
3.13 Food Safety PlanWhere FSMA applies: a plan overseen by a PCQI with process, allergen, sanitation and supply-chain controls, verified annually
Mock recall exerciseTrace a raw material one step back to its supplier and a finished product one step forward to customers, in under 2 hours

How cGMP Audits Are Scored

Every 2.0 audit starts at 100%, and each nonconformity deducts points. The final score sets the rating:

RatingScoreResult
Excellent90–100%Certificate issued
Good80–89%Certificate issued
Complies70–79%Certificate issued
Fails0–69%No certificate

Two Excellent ratings in a row earn a Superior rating on the certificate. Some customers require a higher score than 70%. The same scoring applies to the cGDP Storage & Distribution audit.

Nonconformity Categories

  • Critical−100%

    A clear deficiency that could cause serious illness or death, or any falsification of food safety records. Examples include active contamination, live rodents, allergen mislabeling or cross-contact, and equipment out of calibration that could lead to unsafe food.

  • Major−5%

    A deficiency in the food safety management system that carries a product safety risk or is likely to lead to one.

  • Minor−1%

    A deficiency in the food safety management system that may lead to a risk to product safety.

After the audit: findings shared at the closing meeting are drafts until Kiwa ASI's technical review, which can revise findings or the score. Corrective actions aren't required to receive a certificate, but Kiwa ASI strongly recommends root cause analysis and corrective and preventive action, and auditors can upgrade repeat nonconformities (for example, minor to major) at recertification.

cGMP 2.0 Standards and Audit Checklists

Free PDFs of each 2.0 standard and Excel audit checklists that list every requirement. Use them for gap assessments and internal audits before your certification audit.

What changed from version 1.1? Read the cGMP & cGDP 2.0 structure and change summary (PDF, 0.2 MB).

How Much Does cGMP Certification Cost?

cGMP certification cost depends mainly on audit time. A certification audit is at least one day and is quoted in half-day increments during the application, based on facility size and any satellite sites, the number of employees, product types and HACCP plans, and the scope. Budget across five areas:

  • Min. 1 day

    Certification Audit

    Annual on-site audit of all three modules plus the mock recall, quoted per site from the audit time needed.

  • Optional

    Mock Audit (Optional)

    An unscored pre-assessment that highlights gaps. It can't be converted into a scored certification audit once it starts.

  • Min. ½ day

    Scope Extensions

    A new building, product type or equipment after certification may need a remote or on-site scope extension audit.

  • $299 – $899 per seat

    Training

    cGMP 2.0, HACCP, PCQI, food defense, allergen and internal auditing courses for your team (Kiwa ASI course prices).

  • Varies

    Facility Improvements

    Repairs, sanitary design, foreign matter detection, pest proofing or other upgrades needed to meet the criteria.

The certification audit recurs every year, and scope and duration are reviewed each time. Request a quote for audit pricing for your site.

How Do You Get cGMP Certified?

Getting cGMP certified takes 10 steps in three phases: preparation (steps 1–5, which include the four preparation steps in Appendix B of each standard), the certification audit (6–9) and keeping your certificate current (10).

  1. Step 1: Choose Your Standard and Review It

    Pick Food Processing, Food Packaging or Storage and Distribution (or combine Processing and Packaging), then download the standard and checklist and build all three modules into your food safety management system.

  2. Step 2: Build Your Programs and HACCP Plan

    Document the programs the auditor reviews, from allergen control, traceability, rework and recall to sanitation, pest control and food defense, plus a HACCP plan covering your products and processes.

  3. Step 3: Train Your Team

    Train all staff, including temporary workers, on cGMP, HACCP, food defense, allergens and illness reporting, and certify your HACCP team leader and backup through an IHA-approved course.

  4. Step 4: Keep 60 Days of Production Records

    Have at least 60 days of production records before the certification audit. Without them, Kiwa ASI may stop the audit.

  5. Step 5: Run an Internal or Mock Audit

    Audit your site against the checklist, including a practice mock recall, or book an optional, unscored mock audit with Kiwa ASI.

  6. Step 6: Apply for Certification

    Kiwa ASI reviews your needs, sends a proposal and service agreement, and confirms your facility, personnel and scope, including any exclusions or exemptions.

  7. Step 7: Schedule the Audit

    Kiwa ASI's planning team confirms dates in writing and assigns a qualified, impartial auditor. Your facility must be in production on the audit day.

  8. Step 8: Complete the Audit and Mock Recall

    The auditor walks the facility, interviews staff, reviews documents and records, and runs a mock recall you must complete in under two hours.

  9. Step 9: Pass Technical Review and Get Certified

    Kiwa ASI's technical team reviews the report. A score of 70% or higher earns a certificate and the final audit report.

  10. Step 10: Recertify Every Year

    Schedule your next audit well before the certificate expires, 30 days after the one-year anniversary of the audit, and tell Kiwa ASI about significant changes.

Prepare for Your cGMP Audit with Kiwa ASI Training

Live virtual Kiwa ASI courses, taught by experienced food safety trainers, for the qualifications and programs the cGMP 2.0 standards ask for.

cGMP 2.0

cGMP V2.0 Training

Kiwa ASI's cGMP V2.0 requirements in practice: quality systems, documentation, CAPA, data integrity and audit readiness.

8 contact hours · Live via Zoom · 8:30 AM–4:30 PM CT

Upcoming dates$299 per seat
HACCP

HACCP Certification Training

IHA-accredited HACCP certification for the HACCP team leader and backup that requirement 3.1 of each 2.0 standard calls for.

16 contact hours · 4 half-days · Live via Zoom · 8:30 AM–12:30 PM CT

Upcoming dates$695 per seat
PCQI

PCQI Certification Training

The FSPCA Preventive Controls for Human Food course for the PCQI who oversees your Food Safety Plan, where requirement 3.13 applies.

FSPCA V2.0 · 5 half-days · Live via Zoom · 8:30 AM–12:30 PM CT

Upcoming dates$899 per seat

Need to train 6+ people? Ask about on-site private training.

Why Choose Kiwa ASI for cGMP Certification?

The team that publishes the cGMP 2.0 standards audits and certifies to them, backed by Kiwa's global network.

  • Standard Owner

    We Publish the Standards

    Kiwa ASI publishes and maintains the cGMP and cGDP 2.0 standards, so interpretations come straight from the source.

  • Expertise

    Qualified, Impartial Auditors

    Each audit is assigned to an auditor with the qualifications, experience and impartiality for your scope.

  • Integrity

    Independent Technical Review

    Qualified Kiwa ASI reviewers, independent of the auditor, check every report before a certificate is issued.

  • Preparation

    Mock Audits for Preparation

    Optional, unscored mock audits show where you stand before your scored certification audit.

  • Planning

    Clear Planning

    Our planning team confirms audit dates and logistics in writing and plans around your production schedule.

  • Partnership

    Global Kiwa Network

    Part of Kiwa, a testing, inspection and certification group operating in more than 30 countries, with SQF, BRCGS and FSSC 22000 options when customers require GFSI certification.

Frequently Asked Questions About cGMP Certification

What is cGMP certification?

cGMP certification confirms that a food facility meets Kiwa ASI's cGMP Audit Program 2.0: HACCP-based standards founded on FDA's 21 CFR Part 117 for food processing, food packaging, and storage and distribution sites. Each audit covers the food safety management system, 15 sections of good manufacturing or distribution practice and the HACCP plan, plus a mock recall completed in under two hours. Sites that score 70% or higher are certified, with an audit every year.

What does cGMP stand for?

Current Good Manufacturing Practice. "Current" means applying the most up-to-date practices. For human food, FDA's cGMP requirements are in 21 CFR Part 117, Subpart B, which covers personnel, plant and grounds, sanitary operations, sanitary facilities, equipment, processes and controls, warehousing and distribution, and defect action levels. Read more in cGMP vs. GMP.

What is the cGMP Audit Program 2.0?

It's the current version of Kiwa ASI's cGMP and cGDP audit standards, published on October 1, 2025 and in effect since January 1, 2026. It replaced the version 1.1 program from 2018, and certificates issued before 2026 stay valid until they expire. The program has three standards: cGMP Food Processing 2.0, cGMP Food Packaging 2.0 and cGDP Storage and Distribution 2.0. See the 2.0 change summary.

Which cGMP audit standard does our facility need?

It depends on what your site does. Food and beverage manufacturers use cGMP Food Processing, packaging manufacturers use cGMP Food Packaging, and warehouses that store and ship packaged products use cGDP Storage and Distribution. Sites that do both processing and packaging manufacturing can combine the two cGMP standards. Dietary supplement makers have a separate 21 CFR Part 111 audit.

Is cGMP certification required by law?

No. FDA requires food facilities to comply with its cGMP rules and enforces them through inspections, but it doesn't require a certificate. cGMP certification is a voluntary third-party audit, often requested by customers. The standards themselves say they can't be used in place of FDA or USDA requirements.

Is Kiwa ASI's cGMP certification GFSI-recognized or accredited?

No. Kiwa ASI's cGMP standards are its own audit programs. They aren't GFSI-benchmarked or accredited, although they draw on best practices from FSMA, Codex Alimentarius, ISO standards and GFSI-benchmarked schemes. If a customer requires GFSI-recognized certification, Kiwa ASI also offers SQF, BRCGS and FSSC 22000 audits.

Who must follow FDA cGMP regulations?

FDA's cGMP rules depend on the product: 21 CFR Part 117 for human food, Part 111 for dietary supplements, Part 507 for animal food, and Parts 210 and 211 for drugs. Kiwa ASI's cGMP audits cover human food, food packaging, storage and distribution, and dietary supplements.

How long does a cGMP audit take?

A certification audit takes at least one full day (about 8 hours), and a scope extension audit at least half a day. Audits are planned in half-day increments and quoted during the application, based on facility size and any satellite sites, the number of employees, product types and HACCP plans, and the scope. Duration is reviewed every year.

How is a cGMP audit scored?

Every 2.0 audit starts at 100%. Each minor nonconformity deducts 1%, each major 5% and a critical 100%, so any critical fails the audit. Ratings are Excellent (90–100%), Good (80–89%), Complies (70–79%) and Fails (0–69%). A certificate is issued at 70% or higher, and two Excellent ratings in a row earn a Superior rating.

What is a critical nonconformity?

A clear deficiency that could cause serious illness or death, or any falsification of food safety records. Examples in the standards include active or likely contamination, live rodents in the facility, allergen mislabeling or cross-contact, non-potable water in production or for cleaning product contact surfaces, equipment out of calibration that could lead to unsafe food, failure to correct a critical limit deviation, and anything that would make the site start a recall or withdrawal.

Do we have to close nonconformities to get certified?

No. Corrective actions aren't required to receive a certificate, but Kiwa ASI strongly recommends root cause analysis and corrective and preventive action. Findings that aren't corrected can be cited as repeat nonconformities, and auditors can upgrade them, for example from minor to major, at recertification.

How long is a cGMP certificate valid?

cGMP audits are annual. The certificate expires 30 days after the one-year anniversary of the last certification audit. Because technical review can run past that date, schedule your audit early enough to avoid a lapse in certification.

What records do we need before the audit?

At least 60 days of production records; if you can't provide them, Kiwa ASI can decide whether to continue or stop the audit. Your documented programs, training records, corrective action records and HACCP or Food Safety Plan should also be current and available when the auditor arrives.

Does our facility have to be running during the audit?

Yes. Your facility must be in production on the audit day, or Kiwa ASI can abort the audit. If the production schedule changes after the audit is confirmed, you can demonstrate a small batch instead, as long as you tell Kiwa ASI in writing before the audit starts. For products that aren't running during the audit, the auditor samples historical production records.

What is the cGMP mock recall exercise?

During the audit, you trace a raw material one step back to its supplier and a finished product one step forward to your customers, accounting for 100% of the affected product, in under two hours with the auditor present. It doesn't count as your own annual mock recall, which the standards also require.

Does cGMP certification cover the FSMA Food Safety Plan?

Yes, where FDA's preventive controls requirements apply: requirement 3.13 calls for a Food Safety Plan overseen by a Preventive Controls Qualified Individual (PCQI), and a HACCP certificate alone doesn't qualify someone as a PCQI. Every site also needs a HACCP plan under Module 3, with a HACCP team leader and backup certified through an International HACCP Alliance-approved course.

Can we display our cGMP certification?

Yes, with Kiwa ASI's written approval. Certified sites can use the ASI Certification Mark on marketing materials, websites, brochures and displays while they're certified, but not on finished product labels or packaging. You can also order a cGMP banner for your facility.

How much does a cGMP audit cost?

Cost depends mainly on audit time: at least one day, quoted in half-day increments from your facility size, employees, product types and HACCP plans, and scope. Budget as well for any mock audit, training and facility improvements. Call 1 (800) 477-0778 or request a quote for your site.

Ready to get cGMP certified?

Tell us about your facility, products and processes, and we'll confirm the right standard, quote your audit and schedule around your production.

Standards & Trust

Kiwa ASI publishes the cGMP and cGDP 2.0 standards and certifies sites to them; the standards aren't GFSI-benchmarked or accredited. For GFSI-recognized certification, ASI Food Safety, LLC is accredited by ANAB to ISO/IEC 17065 for the SQF Food Safety Codes. Kiwa ASI training is delivered separately from certification.