HACCP for Cafes and Restaurants: 7 Principles, Recipe Cards and a Rollout Plan

Every cafe, restaurant, bar, coffee shop, hotel with a kitchen and catering business in Ukraine is required to run a working HACCP system. That's a direct requirement of Law No. 771/97-VR "On Basic Principles and Requirements for Food Safety and Quality." Without it, you're looking at fines of UAH 50,000–170,000 and, in some cases, suspension of operations until violations are fixed.

In practice it looks like this: an inspector from Derzhprodspozhyvsluzhba (the Ukrainian State Service on Food Safety and Consumer Protection, DSSU) walks in on a Wednesday after lunch service, asks for the recipe cards for three menu items, the fridge temperature log for the past week, and proof of staff training. If any of that is missing, or the records look like they were filled in yesterday in one sitting, that's an automatic major violation.

Good news: HACCP in HoReCa isn't months of paperwork with five consultants in the room. A 30-seat cafe can get a working system live in 8–12 weeks, an 80–100 seat restaurant in 12–16 weeks. Below we'll walk through the 90-day roadmap, recipe cards, temperature rules for eggs and fish, the questions inspectors actually ask, and how POS systems can cut your paperwork.

The material is based on 80+ HACCP projects in Ukrainian HoReCa: family coffee shops in regional cities, restaurant chains, 4-star hotels. All numbers and examples come from there, not from foreign textbooks. If you need a turnkey external partner, see our HACCP rollout service for HoReCa, food production and school canteens.

Unlike a factory, where a batch of finished product comes off the line once per shift, in a restaurant every table is its own "batch." In a single lunch service the kitchen pushes out 80–200 plates, in a chain restaurant up to 600. That's the main quirk of HACCP in HoReCa, and it's the part chefs used to industrial logic tend to underestimate.

Four things make a HoReCa HACCP system fundamentally different:

• Turnover speed. A dish is cooked and served in 8–25 minutes. There's no time for a lab analysis, so every control is technological: temperature, time, visual check.
• Menu variety. 30–150 menu items with different cooking methods, ingredients and allergens. Each one needs its own recipe card and its own set of CCPs.
• High staff churn. A waiter or kitchen helper stays an average of 4–9 months. Your training system has to bring a new hire up to speed in 1–2 shifts without losing control.
• Direct contact with the customer. One case of food poisoning means an instant Google Maps review, a DSSU complaint, and a local reputation crisis within a single neighborhood.

For comparison: a canned-food producer puts out a uniform batch that can sit in quarantine for 5 days while the lab report comes back. A restaurant doesn't work that way. So in HoReCa, HACCP shifts the focus from end-of-line checks to continuous temperature monitoring and staff discipline.

One more nuance for Ukraine in 2026: DSSU has moved to a risk-based approach over the past few years. A cafe or restaurant that's had complaints or recorded violations moves into a higher risk category and gets inspected more often (every 1.5–2 years instead of 3–5). A working HACCP system is the cheapest way to stay off that list.

Codex Alimentarius CXC 1-1969 describes the 7 base HACCP principles, but the wording there is abstract and written for industrial production. For HoReCa it pays to translate them into kitchen language. Below each principle comes with a concrete example a chef or sous chef will understand without extra training.

If you want to dig deeper into each principle with CCP examples by industry, we have a separate piece with a detailed breakdown of the 7 HACCP principles. It also includes the Codex decision tree for identifying CCPs, which you'll need on step 7 of the rollout.

The key difference for HoReCa: a factory typically runs 12–25 CCPs, a cafe runs 4–8. Fewer points, but each one gets used many more times per shift. A single fish fridge isn't 1 log entry per day; it's 2–3 readings plus an opening/closing checklist. So monitoring has to be dead simple and built into the kitchen's normal rhythm, otherwise the logs start getting filled in "for show" by week three.

A realistic rollout window for HACCP in a cafe or mid-size restaurant is 90 days. That covers process analysis, building the team, writing documents, training staff, the first 2–4 weeks of live monitoring, and final readiness for a DSSU inspection. Below is the breakdown across four 3-week phases.

Two mistakes will stretch this plan to 5–6 months instead of 3. First: the chef or manager takes it all on "in free time, without changing the schedule." Six weeks in, 30% of the documents are written, because there's no free time between lunch and dinner service. Fix: assign a dedicated coordinator (internal or external), or take an open week with reduced operations.

Second mistake: using a generic HACCP template pack built for manufacturing on a restaurant. Documents from a meat plant grafted onto a cafe look ridiculous: 60 pages of PRPs, half of them about railway tankers and ammonia systems. The inspector spots the borrowed kit immediately and starts checking every clause individually. Worst case scenario. If you don't have time to write from scratch, take ready-made HACCP document samples adapted specifically for HoReCa.

For venues that already have some procedures in place (temperature logs, intake records) or an old HACCP system from the 2010s, the timeline shortens to 6–8 weeks. In that case it makes sense to start with a diagnostic pre-audit that shows what actually needs fixing.

Standard recipe cards are the heart of a HoReCa HACCP system. A card isn't just a recipe; it's a document where every dish has its ingredients with weights, sequence of operations, temperature regimes, cooking times and CCP points. DSSU checks these first. From a recipe card the inspector can tell whether the cook actually knows what they're controlling.

If you order a set of HACCP recipe cards, a typical 60–80 dish menu takes a technologist 3–4 weeks. DIY is realistic in a month if the chef sets aside 2 hours a day and works from a template. Here's an example card for a classic position, Ukrainian borscht.

The card structure is the same for every dish. What changes is the ingredients, the temperatures and the CCPs. A well-written recipe card doubles as the working instruction for the cook and as proof of HACCP compliance for the inspector. Print them out and post them at workstations (laminated, to survive splashes), with an electronic copy in the head chef's shared folder.

Classic mistake: recipe cards are written "for the inspection" and sit in the manager's binder, never seen in the kitchen. The inspector asks a junior cook, "What's your holding temperature on the bain-marie?" and gets back, "I don't know, chef says hot, that's it." Automatic violation, even if the card in the binder is perfect. The cards have to live in the kitchen, not in the archive.

The top 3 high-risk product categories in HoReCa account for around 70% of all restaurant food-poisoning cases: eggs, raw meat, and fish/seafood. Here are the rules for each with concrete numbers. For school and hospital kitchens the rules are even stricter, see our separate piece on HACCP for school canteens.

Egg handling under HACCP. Eggs are the main source of salmonella in HoReCa. Rules:

• Intake: only certified eggs with a date stamp on the shell. No stamp, no acceptance.
• Storage: separate container in the fridge at +0…+5 °C. Don't store next to ready-to-eat food.
• Disinfection before use: three-sink washing (water + detergent; 1–2% baking-soda solution; clean running water). Hold time in the disinfectant solution: 5 minutes. Mandatory under Ukrainian DSanPiN.
• Raw eggs in dishes (tiramisu, house-made mayonnaise, tartare): only pasteurised egg product in industrial packaging. Fresh raw eggs in dishes served without heat treatment are banned for food-service operators.
• Heat treatment: fried egg with runny yolk, core ≥65 °C; omelette, ≥72 °C; hard-boiled egg, 8–10 min.

Meat and poultry. Second most common source of incidents. Regimes:

• Intake: raw material temperature on delivery ≤+4 °C for chilled, ≤−18 °C for frozen. Above that: return to the supplier with a written act.
• Storage: separate fridge unit or a separate shelf (raw meat below, ready food above). Shelf life: mince up to 12 h, chilled meat up to 48 h, marinated up to 24 h.
• Defrosting: in the fridge only, 18–24 hours. Defrosting in hot water or at room temperature is banned.
• Heat treatment: core temperature when ready: chicken ≥75 °C, pork ≥72 °C, beef (rare/medium-rare on request, with the guest's written acknowledgement) ≥55 °C for 2 min or ≥65 °C for 1 min.
• Separate boards and knives: red coding for raw meat, no cross-contact with ready food.

Fish and seafood. The riskiest category because of parasites, histamine and fast spoilage:

• Intake: fish temperature on delivery ≤+2 °C on ice, seafood ≤+2 °C or frozen ≤−18 °C.
• Storage: a separate fridge section at 0…+2 °C. Fresh fish: no longer than 24 h from delivery. Marinated fillet: no longer than 12 h.
• Sashimi and carpaccio: pre-freezing to −20 °C for at least 24 h to kill anisakis (parasite). Without that, serving raw is banned.
• Heat treatment: fish, core ≥63 °C; shrimp and squid, ≥70 °C for 15 seconds.
• Histamine: at any suspicion of extended holding at room temperature (especially tuna, mackerel, herring), discard the batch with no discussion.

Hygiene programmes (PRPs, prerequisite programmes) make up roughly half of the full HACCP pack in HoReCa. Without working PRPs, your CCP table won't save you: the inspector spots one dirty glove on the line and starts pulling every log apart. Five PRP blocks every cafe and restaurant needs:

• Zoning. Clear separation of zones: intake and storage, raw prep, heat treatment, cooling of ready food, pass, dishwashing. "Dirty → clean" cross-flow is not allowed. In a small kitchen this is usually solved by scheduling (dishwashing after main service, not in parallel).
• Hand washing. A dedicated hand-wash sink in the kitchen (not for washing produce!) with soap dispenser, sanitiser and paper towels. Mandatory hand wash: on shift start, after toilet, between product categories (meat → vegetables), every 60 minutes of work.
• Uniforms. Clean jacket or chef coat daily, apron (changed when soiled), head covering (no loose hair), closed shoes without laces. For the meat and fish zone, a separate kit.
• Surface sanitation. Work surfaces and equipment washed after every product category. Sanitisers (chlorine-based or oxygen-based) at the concentration on the manufacturer's instructions. Once a week, a deep clean with equipment disassembled.
• Pest control. Contract with a specialist service (quarterly disinsection; monthly rodent monitoring). Visit log, work-completion acts, trap layout diagram. No contract means a guaranteed violation on inspection.

Temperature control is its own big topic. Every fridge or freezer needs at least its own thermometer (ideally a digital logger with memory) and a temperature entry in the log twice per shift. Hot lines and bain-maries get checked hourly. Hot service stations (buffet, smörgåsbord) need a check every 30 minutes with a written record.

If HACCP sits at the core of your food-safety system, hygiene programmes are its frame. We've covered the topic separately in hygiene in food production; much of it transfers directly to HoReCa.

DSSU inspects restaurants and cafes at least once every 2–3 years on the planned schedule, plus unscheduled visits triggered by customer complaints or food-poisoning reports. For new venues, the first inspection often falls in the first 12 months of operation. Duration: 1 working day for a cafe up to 30 seats, 2–3 days for an 80+ seat restaurant.

A typical visit:

1. The inspector arrives unannounced (that's their right), shows ID and the inspection order.
2. Talk with the manager or head chef (15–30 min): request for key documents (HACCP order, recipe cards, monitoring logs for the past 30 days, contractor agreements).
3. Walkthrough of the kitchen and storage: zoning, temperatures, uniforms, work-surface hygiene, product labelling.
4. Refrigeration check: chamber temperatures, thermometers in place, product shelf life, date marking.
5. Interview with 1–2 kitchen staff: do they know what a CCP is, how to measure temperature, what to do on a deviation.
6. Inspection act drafted with the list of findings. Signatures from inspector and venue manager.

Top 5 typical findings DSSU records in HoReCa, from our stats (based on 60+ inspections we've supported):

• Monitoring logs filled in retroactively or in the same handwriting for a week (38% of inspections).
• Fridge temperatures above the norm, no corrective-action log (29%).
• Missing current recipe cards for part of the menu (24%).
• Staff can't name a CCP or explain what they control (22%).
• No pest-control contract or the document has expired (18%).

If you have a planned inspection coming up and aren't confident you're ready, the smart move is to book audit support during a certification audit or inspection. The consultant is on-site during the inspector's visit, answers technical questions and helps frame the venue's position correctly. That reduces the risk of inflated fines triggered by communication mix-ups. Alternatively, if you want to hand the HACCP consultant function to an external team entirely, turnkey HACCP consulting with fixed accountability for the inspection result is available.

Most modern restaurant POS platforms (Poster, iiko, Syrve, Joinposter, R-Keeper) allow partial automation of HACCP monitoring. That doesn't replace physical logs entirely, but it cuts paper load on the kitchen by 40–60% and makes the data analysable. Three main integration points:

• FIFO stock control. The POS tracks intake dates for ingredients and flags products approaching expiry. That reduces the risk of using out-of-date ingredients and auto-generates the write-off log.
• Temperature logging via digital loggers. Wireless loggers in fridges (Testo Saveris, Comark, or Ukrainian alternatives like GreenVision) sync to the cloud and write temperature readings every 5–15 minutes. On a deviation, the manager gets a push notification. Some POS platforms have this built in as a module.
• Electronic shift open/close checklists. Instead of a paper checklist, a mobile app on a tablet by the pass. The cook marks off tasks (surface wash, fridge check, bain-marie temperature), and the system records the time, the employee ID and a photo where needed.

Worth noting: fully replacing paper logs with an electronic system only works if your POS vendor guarantees an audit trail and protection from retroactive edits. A plain Excel in a shared Google Drive folder won't do, DSSU won't accept it as a reliable source. It has to be a certified FSMS platform with full change logging and immutable records.

If you already run Poster, iiko or a similar modern POS, integrating HACCP modules costs €200–800 one-off plus €15–60/month subscription to the logger cloud. Payback is 2–4 months, mainly through cutting manual logging time (on average 30–50 minutes per shift for the head chef). That's not marketing, those are real numbers from our integration projects in 2024–2025.

These are the questions cafe owners, head chefs and restaurant managers ask most often on free consultations. If your case doesn't fit the typical mould, reach out to the Ekontrol team.