πŸŽ‰ Upgrade Your Membership β€” Free 7-Day TrialBecome a seller
Comilmart
πŸ›οΈ
Comilmart Blog
← Back to blog

Sourcing & Trade Guide

HACCP and ISO 22000 for African Food Manufacturers (2026)

C

Comilmart Team

October 13, 2026

If you make food for sale, sooner or later a distributor, supermarket buyer or large institution will ask whether you follow HACCP or hold ISO 22000. For HACCP and ISO 22000 for African food manufacturers, the confusion is usually the same: people treat them as one certificate, or assume they are only for big factories. They are neither. HACCP is a way of controlling food safety hazards step by step, and ISO 22000 is a management standard that includes HACCP. This guide explains both in plain terms, what Nigeria's food regulator says, and how a small or mid-size processor can start. Rules and editions change, so confirm current requirements with your regulator and certification body (information as of October 2026).

HACCP and ISO 22000: what each one is

HACCP stands for Hazard Analysis and Critical Control Points. In the Codex guidelines hosted by FAO, the work is described as 12 application tasks that roughly map onto the seven HACCP principles:

  1. Assemble a HACCP team with the expertise you need, using outside advice if necessary.
  2. Describe the product and identify its intended use, including any vulnerable consumers.
  3. Draw a flow diagram of every process step, then confirm it on site.
  4. List the potential hazards and the measures that control them.
  5. Decide which steps are critical control points (CCPs).
  6. Set critical limits, monitoring, corrective actions and verification for each CCP.
  7. Keep documentation and records.

The same text says the plan should be reviewed whenever the product, process or any step changes. You can read it on the FAO-hosted Codex HACCP guidelines page.

ISO 22000 is an international standard for food safety management systems. ISO says on its ISO 22000 page that any organization can use it regardless of its size or position in the food chain, and that organizations can be certified to it. On the page for ISO 22000:2018, ISO says the standard incorporates HACCP principles and application steps from the Codex Alimentarius Commission and combines interactive communication, system management and prerequisite programmes. In short, HACCP is the hazard-control method, while ISO 22000 wraps it in a management system with policies, responsibilities and communication.

Start with good hygiene before HACCP

The FAO-hosted Codex text treats basic hygiene as the foundation. It says a food sector should already follow the Codex General Principles of Food Hygiene and the relevant Codex codes before HACCP is applied, and that HACCP then focuses control on the critical points. In everyday terms, that means clean premises, cleaned equipment, pest control, safe water, staff hygiene and sound storage. If these are weak, no HACCP document will rescue the product.

The same text allows flexibility by size. It says HACCP should be applied taking into account the nature and the size of the operation, and that documentation and record keeping should be appropriate to the nature and size of the operation. A small seasoning maker in Kano does not need the paperwork of a multinational plant, but it does need a real analysis of its own hazards and records that show the controls were carried out.

Which food safety system should an African food manufacturer start with?

For most small and mid-size food businesses, a sensible order is:

  1. Fix hygiene and premises first. Keep simple cleaning, pest-control and staff-hygiene records.
  2. Write a HACCP plan for your main product. Begin with the product that sells most, such as garri, pepper powder or a packaged snack.
  3. Complete product registration and licensing with your national regulator, such as NAFDAC in Nigeria, Ghana FDA or KEBS in Kenya.
  4. Consider ISO 22000 or another certification if the buyers or export markets you want ask for it.

ISO 22000 certification is a bigger commitment than a HACCP plan because it covers the whole management system. Ask any certification body you are considering what the scope covers, how the audit works and what it costs for a business of your size, and compare more than one.

What Nigeria's regulator says about HACCP and records

NAFDAC publishes a Good Manufacturing Practice for Food and Food Products Regulations text dated 2025 on its website. The copy we read was marked as closed for comments, so check with NAFDAC whether the final version is in force. In that text, Regulation 20(1) says manufacturers should control food hazards through systems such as Hazard Analysis and Critical Control Points, identify the steps in their operations that are critical to food safety, put control procedures in place, monitor them and review them whenever operations change. Regulation 7 asks manufacturers to keep a documentation system that lets the history of each batch be traced. You can read the text on the NAFDAC website.

For step-by-step registration help, see our guide to NAFDAC registration for food products. Ghana and Kenya have their own processes; our guides to Ghana FDA registration and KEBS certification in Kenya cover them. Always confirm what each authority currently requires, because we have not assumed that a HACCP plan or an ISO certificate replaces a regulator's approval.

A practical HACCP plan for a small processor

Here is how the tasks above look in a small business. The example is illustrative: a processor of dried pepper powder, for instance, would work through these questions.

  • Team. The owner, the production supervisor and whoever handles storage and cleaning. Bring in an outside food safety adviser if nobody has trained in HACCP.
  • Product description. Ingredients, packaging, shelf life, storage conditions and who will eat it.
  • Flow diagram. Every step from receiving raw material to dispatch. Walk the floor and correct the diagram where it does not match reality.
  • Hazards. For each step, ask what could go wrong: biological, chemical or physical. Write down which control measure deals with each.
  • Critical control points. A CCP is a step where control is essential to prevent or eliminate a hazard. Keep the list short and real, because too many CCPs make the plan hard to follow.
  • Limits, monitoring, corrective action. For each CCP, decide the limit, who checks it, how often, and what happens if it is missed.
  • Verification and records. Check that the plan works, and keep dated records that a regulator or buyer can inspect.

Batch coding and traceability matter just as much. If a buyer in Lagos or Accra reports a problem, you should be able to trace which batch it came from and where else it went.

How food safety records help you win buyers

Large buyers screen suppliers. A distributor, supermarket or institution will often ask for a product specification, a registration number, test reports where relevant, and some evidence of how you control hazards. Having a documented HACCP plan, cleaning records and batch records makes those conversations short. If you later pursue ISO 22000, the same records form the base of your system.

The Comilmart supplier application does not list HACCP or ISO 22000 as required documents, but keeping your plan and any certificates ready helps when a buyer asks in chat or on a request for quotation. Our guide on becoming a verified supplier explains how verification works on Comilmart.

Frequently asked questions

Is HACCP the same as ISO 22000? No. HACCP is a hazard-control method. ISO 22000 is a food safety management system standard that, according to ISO, incorporates HACCP principles and can be certified.

Can a small food business use HACCP? Yes. The Codex text hosted by FAO says HACCP should be applied taking into account the size and nature of the operation, and records should be appropriate to that size.

Do I need ISO 22000 to sell in Nigeria, Ghana or Kenya? We have not found a general rule that makes ISO 22000 mandatory for every food business. Product registration and licensing with your national regulator are separate requirements, and some buyers may ask for certification. Confirm with the regulator and the buyer.

Where do I begin if I have no food safety training? Begin with hygiene and premises, then work through the HACCP tasks for your main product, and consider hiring or consulting a trained adviser.

Does ISO 22000 change? Yes. ISO's page for ISO 22000:2018 lists an amendment published in 2024 and says a draft revision is expected to replace the 2018 edition, so check which edition your certification body audits against.

Getting started

HACCP and ISO 22000 for African food manufacturers are tools for earning trust, whether you sell to a wholesaler in Ibadan or a buyer across the border. When your paperwork and product photos are ready, you can apply as a supplier for free at /apply-manufacturer and choose the category that fits your products. Admin review is stated on the form as taking about 24 to 48 hours, and we cannot promise that any application will be accepted.

Comments

Log in to join the conversation.

Loading comments…