Almost every Indonesian supplier you contact will tell you they are HACCP certified. The claim is easy to make in an email and harder to substantiate, and the gap between those two things is where importers get into trouble. If you are assessing HACCP Indonesia food export claims for the first time, the useful skill is not knowing what HACCP stands for — it is knowing which four or five documents to request, and what a weak answer looks like.
This article assumes you already understand that HACCP is a hazard-based food safety system rather than a quality mark. What follows is the verification work: what to ask for, how to read it, how HACCP sits alongside BPOM registration and Halal certification, and where HACCP alone will not satisfy your own regulator or your retail customer.
What HACCP certification in Indonesia actually is
HACCP in Indonesia is not a single government stamp. A manufacturer designs a food safety plan for its own processes — hazard analysis, critical control points, limits, monitoring, corrective actions, verification, records — and a third-party certification body audits that plan and its implementation on site. Certification is therefore always tied to a specific factory address, a specific scope of products and processes, and a specific validity period.
Two consequences matter for you as a buyer. First, HACCP says nothing about how good the product tastes or how consistent the packaging is; it is about hazard control. Second, because certification is issued per site and per scope, a certificate can be entirely genuine and still not cover the product you are buying. That is the most common problem in practice — far more common than outright forgery.
The documents to request before you place a trial order
Ask for these together, in one message, at quotation stage. A supplier with a functioning system can send them within a day or two. Long delays and partial answers are informative in themselves.
- The HACCP certificate itself, as a scan or PDF — not a photo of a wall plaque. Check the certified company name, the site address, the scope wording and the expiry date.
- The BPOM registration number for each product you intend to buy. BPOM is Indonesia's food and drug authority; a registered product has a number you can check against BPOM's public database. Registration is per product, not per company.
- The Halal certificate, if Halal matters in your market, with the products or product range it covers stated.
- A product specification sheet per variant: ingredients in descending order, allergen declaration, net weight, shelf life, storage conditions, and packaging dimensions.
- A recent laboratory report. For a dry snack this usually means microbiological testing and moisture. Note the date — a certificate of analysis from three years ago tells you little.
If the product is sold as gluten free, add a gluten test result to that list. Gluten-free positioning is a claim about absence, and absence claims need evidence rather than reassurance.
Reading the certificate: five checks that take ten minutes
| Check | What you are looking for | Red flag |
|---|---|---|
| Legal entity | The name on the certificate matches the name that will appear on the invoice and bill of lading | Certificate in a trading company's name, goods produced elsewhere |
| Site address | The certified address matches the factory you are told is producing your order | Address is an office, or differs from the production site |
| Scope | Wording covers your product category and process — for example baked or fried flour-based snacks | Generic scope, or a scope covering a different product line entirely |
| Validity | Current dates, plus evidence of the most recent surveillance audit | Expired certificate presented as current |
| Certification body | A named, contactable body with accreditation stated | No issuing body named, or no way to contact it |
If the certificate names the certification body, you can usually confirm the certificate directly with that body. Suppliers who are confident in their system will not object to you doing so.
Where HACCP stops
HACCP is the floor, not the ceiling. It is a reasonable minimum for a first import, and for many distributors it is sufficient. It becomes insufficient in three situations.
Your own regulator asks for more
Importers into the United States carry obligations under FSVP — the supplier verification is legally yours, not the manufacturer's, and you must be able to show how you did it. HACCP documentation supports that file but does not complete it. EU importers remain responsible for labelling compliance, allergen declaration and contaminant limits regardless of what the supplier holds.
Your retail customer requires a GFSI scheme
Large supermarket groups typically specify a GFSI-benchmarked scheme such as BRCGS, IFS or FSSC 22000. HACCP alone will not open that door. This is a genuine trade-off when sourcing from smaller Indonesian manufacturers: many hold HACCP, BPOM and Halal but have not taken on the cost and structure of a GFSI scheme. If your end customer is a national retail chain with a GFSI requirement in its supplier standard, be direct about it early rather than discovering it after samples are approved.
You need traceability you can actually use
Ask a practical question instead of a theoretical one: given a batch code on a retail pack, how long does it take you to tell me the production date, the shift and the cheese and tapioca lots used? The answer, and how quickly it comes, tells you more about the real system than any certificate. You want to know this before a consumer complaint, not during one.
Certification and the paperwork that ships with the goods
Certification is a supplier-level check. It is separate from the consignment documents your customs broker will need, which typically include the commercial invoice, packing list, bill of lading, certificate of origin, and — depending on destination — a health or free-sale certificate and phytosanitary or veterinary documentation. Agree at the quotation stage who obtains what. A supplier that has completed export shipments will know which documents are routinely requested; one that has only sold domestically may need guidance from you, and that is worth factoring into your lead time.
Consider running your first order as a deliberate paperwork test as well as a product test. A trial container-part shipment lets you check labelling accuracy, batch coding legibility, carton marking and document consistency at low exposure. Our own trial threshold and container loading figures are set out on the export terms page, and per-variant specifications are on the product page.
Questions worth asking beyond the certificate
- Who is the named HACCP team leader, and what is their training background?
- What are your critical control points for this product, and how are they monitored?
- How is allergen segregation handled if any non-gluten-free product runs on the same line?
- What is your recall procedure, and when was it last tested?
- How are incoming raw materials — flour, cheese, seasoning — approved and verified?
You are not auditing them. You are testing whether the system exists in the people who run it or only in a binder. Answers that are specific, slightly technical and occasionally admit a limitation are the good ones.
About Elfath Averania
We make gluten-free cheese crackers on a tapioca base in Purbalingga, Central Java, in eight variants, and we are HACCP certified, BPOM registered and Halal certified. Certificate copies go out with the first quotation rather than after a request; the detail is on our certification page. We started as a home kitchen in 2017, now supply more than 100 resellers across Indonesia and have completed our first export shipments — so we are a small manufacturer, and if your buyer specification requires a GFSI-benchmarked scheme we will tell you plainly that we do not hold one. If HACCP, BPOM and Halal meet your requirement, our export desk can send documents and samples for review.
Frequently asked questions
Is HACCP certification mandatory for food exports from Indonesia?
HACCP is not universally required by law for every Indonesian food export, but most importers treat it as a minimum expectation and some destination markets or retail customers make it a condition of purchase. In practice, a supplier without HACCP will struggle to satisfy buyer due diligence. Elfath Averania is HACCP certified, BPOM registered and Halal certified, and sends certificate copies with the first quotation.
How can I check if an Indonesian supplier's HACCP certificate is genuine?
Request a PDF scan rather than a photo, then check that the legal entity name, factory address, product scope and validity dates all match the supplier you are actually buying from. The certificate should name the issuing certification body, which you can contact directly to confirm the certificate is current. A genuine certificate for the wrong scope or the wrong site is a more common problem than forgery.
Is HACCP enough, or do I need BRCGS or FSSC 22000 from my supplier?
HACCP is usually sufficient for distributors, foodservice and independent retail, but large supermarket groups often specify a GFSI-benchmarked scheme such as BRCGS, IFS or FSSC 22000 in their supplier standard. Many smaller Indonesian manufacturers hold HACCP, BPOM and Halal but not a GFSI scheme. Confirm your end customer's requirement before you invest time in sampling.