Sous vide, vacuum packing and curing: when you need a HACCP plan

The pattern: a new technique arrives before the paperwork

Sous vide circulators and chamber vacuum sealers are cheap enough now that a kitchen can start using them the week someone has an idea. In a KitchenConfidential thread titled Is this normal?, a commenter doubted that the health department had approved sous vide for the facility being discussed. The source is only a short search excerpt, so it shows the question exists, not what the facility actually did. In a separate thread, Hiding the B grade from the health department., a commenter describing themselves as a former inspector turned food safety consultant said scrutiny of food safety plans for sous vide, ROP, curing and acidification varies widely by state. They claimed one state had never requested a change to their plans and doubted the plans were read. That is one unverified person's experience.

Lax review in one place doesn't make the process safe there, and it says nothing about your jurisdiction. The reason these processes get special treatment is technical, not bureaucratic. Kitchens adopt them because they work well for texture, yield and holding. The same features that make them useful are what make them hazardous when they are uncontrolled.

Why vacuum packing and sous vide are treated differently

Normal kitchen controls assume food is exposed to air and either cooked hot enough, held hot or cold, or used within its date-marking window. Reduced oxygen packaging (ROP) changes the first assumption. Removing air suppresses many spoilage organisms that would normally warn you food is going off, while creating conditions where certain pathogens that grow without oxygen can survive or multiply if temperature and time aren't tightly controlled. Sous vide adds long, low-temperature cooking inside that sealed package, and often cooling and extended refrigerated holding afterward. Curing, smoking for preservation and acidification rely on chemistry, such as salt, nitrite or pH, rather than heat or cold alone.

Because the safety of the food depends on controls a cook can't see or smell, regulators ask for a written, validated plan with defined limits and records. The FDA publishes a model Food Code (FDA lists a 2026 edition) that includes provisions on specialized processing methods, HACCP plans and variances. It is a model, not federal law for restaurants. States and localities adopt it, often an older edition and with amendments, so the rules that bind you are your jurisdiction's adopted code.

The DC example: what the District asks for, in its own words

In the District of Columbia, DC Health's HACCP plan page states that any food establishment that conducts a specialized process as defined in 25-A DCMR (Food and Food Operations) is required to submit a HACCP plan to obtain approval before the process can be conducted. Submissions go through DC Health's online HACCP and variance application. The page points to its guidance document for content requirements and offers a food technologist contact. It does not list the processes itself. The definition lives in the regulation.

DC Health's Plan Review Guidance Packet (Dec 2019, ver. 8) is more concrete. Its required-documents list includes a 'HACCP Plan for specialized processing (if applicable).' Its preparation section asks whether specialized processing, such as Reduced Oxygen Packaging (described as sometimes referred to as 'vacuum packaging') or sous vide, will be used. If yes, the applicant must provide a HACCP plan for each specialized processing method and/or food item prepared onsite, or as requested by DOH. DC Health's inspection guidance page places retail-level smoking, curing and ROP for extended shelf life in its highest risk category. It lists HACCP inspections as their own type and treats conformance with a HACCP plan as a Priority or Priority Foundation item.

HACCP plan versus variance: not the same request

A HACCP plan describes how you will control the hazards of a process. A variance is permission to depart from a provision of the code that would otherwise apply. DC Health's variance page says only that there may be an occasion when an establishment will need to submit a variance request along with a HACCP plan submission. It points to its 2023 variance guidance and renewal guidance and advises consulting the food technologist. It does not say every sous vide or ROP process needs a variance, and neither should you assume it.

Under the FDA model code, some ROP methods may be done under a HACCP plan with specified controls, while other specialized processes generally call for a variance. Your adopted code decides which is which, and DC's own definitions are in 25-A DCMR. The practical path is to describe the exact process in writing (product, packaging, cook, cool, hold time, storage temperature, reheat and service) and ask DC Health's food technologist, or your own authority, whether it needs a HACCP plan only or a variance as well, before you buy equipment on the assumption it can be used right away.

What a HACCP plan contains

HACCP plans follow a recognized structure. A hazard analysis identifies the biological, chemical and physical hazards at each step of the process. Critical control points (CCPs) are the steps where a hazard can be prevented, eliminated or reduced to an acceptable level. Each CCP has a critical limit, a measurable value such as a time, temperature or pH that separates safe from unsafe. Monitoring procedures state who measures what, how and how often. Corrective actions say what happens to the product and the process when a limit is missed. Verification confirms the plan works, through activities such as thermometer calibration and manager record review. Recordkeeping documents all of it.

Critical limits must come from a validated source, such as your adopted code, published scientific references or a process authority, and be approved by the regulator. Don't copy them from a forum, a recipe blog or a circulator manufacturer's marketing. This article intentionally gives no time-temperature recipe, because the right limits depend on the product, the thickness, the package, the hold time and the code you operate under. DC Health's HACCP page directs applicants to its guidance document for required content, so use that document's structure for a DC submission.

• Product description and intended use, including who eats it and how it is served.
• Process flow diagram from receiving to service.
• Hazard analysis for each step.
• CCPs with critical limits drawn from a validated, cited source.
• Monitoring method, frequency and responsible person for each CCP.
• Corrective actions, including product disposition when a limit is missed.
• Verification activities (calibration, record review) and record forms.
• Staff training plan and standard operating procedures for the process.

Hypothetical worked example: one dish, three different processes

This is a hypothetical with no real establishment implied. A DC restaurant plans a short-rib entree. The chef wants to vacuum-seal raw portions, cook them sous vide overnight, chill them in the bags, hold them refrigerated for several days, then reheat to order. The first diagnosis is that this isn't one technique. It combines ROP of raw meat, sous vide cooking, cooling inside a sealed package, extended refrigerated holding of a ROP product, and reheating. Each step carries its own hazards, and the DC packet asks for a HACCP plan for each specialized processing method and/or food item.

The owner writes the process flow and identifies candidate CCPs: cook, cool, cold hold and reheat. The limits for each are left to be drawn from the guidance and validated sources, not guessed. The owner then estimates the record burden, which is part of deciding whether the process is workable. Suppose 3 batches are made per day and each batch needs 4 monitoring entries (cook, cooling checkpoint, final chill and labeled hold date). That is 3 x 4 = 12 entries per day, or 12 x 7 = 84 per week, each needing initials and manager review. If the kitchen can't sustain 84 accurate entries a week, the honest choice is to simplify the process. For example, it could cook to order without extended ROP holding, after confirming that version's requirements with DC Health.

The owner submits the plan and process description through DC Health's online HACCP and variance application. They ask the food technologist whether the planned hold time requires a variance, and they don't put the dish on the menu until approval is in hand. The circulator gets used for staff meals and testing only after confirming with the agency that this is acceptable.

If the process is already running without approval

Some operators reading this will realize their kitchen is already vacuum-packing or holding sous vide product without an approved plan. The right response is to stop the unapproved process and evaluate the product on hand. Any product whose safety depends on controls nobody monitored can't be shown to be safe, so dispose of it under your procedures. Then document what was being done and prepare a proper submission. Continuing quietly, or removing equipment and records before an inspection, turns a compliance gap into concealment and leaves the actual hazard uncontrolled.

Owners should also watch for signs that a specialized process has crept in informally. Signs include vacuum-sealed bags with handwritten dates in the walk-in, a circulator living on the prep table, or a cook 'aging' or curing product as a side project. Ask what each item is and how it was made. Treat the answer as a scope question for your HACCP and variance status, not as a disciplinary trap. The cook who brought the technique in is often the best person to help write the plan.

Ongoing records after approval

Approval is the start. DC Health lists HACCP inspections as a distinct type, focused on whether the critical limits at critical control points are being met. It also states that when a HACCP plan is in place, monitoring will be conducted to ensure the procedures are followed and corrective actions are carried out when necessary. Keep monitoring logs with the process, review and initial them daily, calibrate thermometers on the schedule your plan states, and record every corrective action with the product disposition.

Changes need review too. A new product, a different bag, a longer hold or a new supplier can change the hazard analysis. The DC packet's signed statement warns that any deviation from the submitted information without prior permission from the Food Safety and Hygiene Inspection Services Division will nullify final approval. Treat your approved plan as a controlled document. When the menu changes, check whether the plan still covers what the kitchen is actually doing.