Food Safety Compliance for Corporate Catering: What Australian Bakeries Need to Know in 2026

If you are thinking about supplying corporate clients, food safety compliance is one of the first things to get right. The good news is that most of the foundations are things you are probably already doing. The challenge is making sure your existing practices extend to cover catering and delivery, not just retail over the counter.

This guide walks through the key compliance areas that apply when an Australian bakery starts delivering food to workplaces. It is written with small bakery owners in mind, and covers the national framework along with the state-level variations that matter most.

Food Safety Supervisor Requirements

Under the FSANZ Food Standards Code, any business that handles potentially hazardous food must have a nominated Food Safety Supervisor (FSS). This applies to bakeries that prepare items like cream-filled pastries, savoury rolls, sandwiches, or anything that requires temperature control.

Here is the important part: the FSS requirement applies to your preparation premises, even if you only deliver and never serve customers on-site. If you are a delivery-only bakery supplying offices, you still need a current FSS.

The requirements vary slightly by state:

• NSW: The FSS must hold a certificate from a registered training organisation and be reasonably available during food handling. The NSW Food Authority oversees compliance.
• Victoria: Dairy Food Safety Victoria handles dairy-related food businesses, while local councils manage general food safety. Class 1 and 2 food premises need an FSS with appropriate qualifications.
• Queensland: Safe Food Queensland requires an FSS for businesses serving potentially hazardous food. The FSS must have completed an approved food safety supervisor course.

Across all states, the FSS certificate typically needs to be renewed every five years. Put a reminder in your calendar well before expiry, because operating without a valid FSS can lead to penalties from your local council.

Council Registration: Retail vs. Catering

Many bakeries are registered with their local council as a retail food business. When you start supplying corporate orders, you may need to update that registration to include catering or food transport.

This is not always a major change, but it is worth checking. Contact your local council's environmental health team and let them know you are expanding into corporate delivery. They will advise whether your current registration covers it or whether you need an amendment.

Safe Food Australia (4th Edition) serves as the national framework that underpins food safety regulation across all states and territories. It is the reference document that councils use when assessing your business, so it is worth familiarising yourself with it. You can find it on the FSANZ website.

Key things to clarify with your council:

• Whether your registration category needs to change from "retail" to include "catering" or "food transport"
• Whether your existing food safety plan covers off-site delivery
• Whether any additional inspections are required
• Whether your kitchen layout and equipment meet requirements for higher-volume production

Getting this sorted early saves headaches later. It also gives you confidence when corporate clients ask about your compliance status during vendor onboarding.

Temperature Control: The 2-Hour/4-Hour Rule

Temperature control is where food safety becomes very practical. Safe Food Australia outlines the 2-hour/4-hour rule for potentially hazardous food, and it applies directly to bakery deliveries.

The rule works like this:

• Under 2 hours in the temperature danger zone (5C to 60C): the food can be refrigerated for later use or served immediately.
• Between 2 and 4 hours: the food must be used immediately. It cannot be returned to refrigeration.
• Over 4 hours: the food must be thrown away.

For bakery deliveries, the clock starts ticking from the moment food leaves your temperature-controlled environment. That means your delivery setup matters enormously.

Practical steps for temperature control

• Insulated delivery bags: Invest in commercial-grade insulated bags that fit your most common order sizes. These are not expensive, but the cheap ones lose heat (or cold) quickly. Look for bags with a minimum R-value that suits your delivery radius.
• Gel packs: For items that need to stay cold, use commercial gel packs rather than loose ice. Pre-freeze them overnight and place them around (not directly on) delicate items.
• Calibrated thermometer: Keep a probe thermometer in your delivery kit and calibrate it regularly. A thermometer that reads 2 degrees off can be the difference between compliance and a food safety incident.
• Temperature logs: Record the temperature of potentially hazardous items at dispatch and delivery. This takes 30 seconds per order and creates a paper trail that protects your business. Keep logs for at least 12 months.
• Refrigerated vans: If your corporate order volume grows to the point where you are running multiple deliveries per day, a refrigerated van becomes a worthwhile investment. For bakeries just starting out, insulated bags and gel packs are usually sufficient.

Allergen Declaration Rules

Allergen management is one of the most important compliance areas for bakeries supplying corporate clients. Under FSANZ Standard 1.2.3, there are mandatory allergens that must be declared on food labels. The list includes peanuts, tree nuts, milk, eggs, fish, crustaceans, sesame, soy, wheat (and other gluten-containing cereals), lupin, and sulphites (when present at 10mg/kg or more).

Here is what catches some bakeries off guard: these declaration requirements apply to both pre-packaged and unpackaged food. When you deliver a platter of mixed pastries to an office, you are still responsible for communicating allergen information to the end consumer.

Best practice for corporate allergen management

• Allergen cards with every delivery: Include a printed card listing every item on the platter and its allergens. This does not need to be fancy. A clear, well-formatted A5 card works perfectly.
• Staff training: Every team member who handles food preparation or packing should understand your allergen protocols. This includes knowing which ingredients contain common allergens and how to prevent cross-contamination.
• Clear platter labels: If you are delivering multiple platters (for example, a sweet platter and a savoury platter), label each one individually with its allergen information.
• Ingredient records: Maintain up-to-date ingredient lists for every product you supply. When suppliers change formulations, update your records immediately. This is especially important for items like chocolate, which may change their milk or nut content without obvious packaging changes.

Corporate clients will often ask for allergen information during their vendor onboarding process. Having a clear, professional allergen management system makes this process smooth and builds trust from the very first interaction.

Delivering to Workplaces

Delivering to corporate offices is different from handing a box across your shop counter. Multi-tenant buildings, in particular, come with their own set of requirements.

Multi-tenant building protocols

Large office buildings often require delivery drivers to pre-register, sign in at reception, and use specific loading docks or service lifts. Find out these requirements before your first delivery, not during it.

• Pre-registration: Some buildings require you to register as an approved vendor before you can access the premises. Ask your client to facilitate this.
• Loading dock access: Many CBD buildings have designated delivery windows, often early morning. Check whether your delivery times align with building access hours.
• Handover and liability: Be clear about where your responsibility ends. Does the client meet you at reception, or do you deliver to their kitchen on level 12? This affects your liability and should be agreed in writing.
• "Delivered at" timestamps: Record the time each delivery is handed over. This protects you in case of disputes about timing or food quality. A simple photo with a timestamp works well.

Documentation for vendor onboarding

Corporate clients, especially larger organisations, will often require documentation as part of their vendor onboarding process. Common requests include:

• Current Food Safety Supervisor certificate
• Council registration details
• Public liability insurance certificate
• Food safety plan or HACCP summary
• Allergen management policy

Having these documents ready in a digital folder saves time and makes your bakery look professional and prepared.

Building Compliance into Your Operations

Food safety compliance is not a one-off task. It needs to be woven into how your bakery operates day to day. Here is a simple framework for keeping on top of it:

Monthly

• Allergen reviews: Check that your allergen information is current for every product. Cross-reference against supplier ingredient lists and update any cards or labels that have changed.
• Delivery equipment check: Inspect insulated bags, gel packs, and thermometers. Replace anything that is worn or damaged.

Quarterly

• Temperature log audits: Review your temperature logs for completeness and accuracy. Look for any gaps or patterns that suggest problems, like consistently high dispatch temperatures on Fridays.
• Staff refresher conversations: You do not need formal training every quarter, but a brief team discussion about allergen protocols and temperature management keeps standards front of mind.

Annually

• FSS certificate check: Confirm your Food Safety Supervisor certificate is current and will not expire before the next annual review. If renewal is approaching, book the training early.
• Council registration review: Check that your council registration still reflects what your business actually does. If you have expanded your delivery area, added new product categories, or changed your kitchen setup, your registration may need updating.

Ongoing

• Staff training for new hires: Every new team member should complete food safety induction before they handle any food. This includes casual and part-time staff.
• Supplier communication: When you onboard a new ingredient supplier, request their allergen and food safety documentation upfront.

Getting It Right from the Start

Food safety compliance can feel like a lot of paperwork, but the reality is that most of it builds on what you are already doing as a bakery owner. The difference with corporate catering is documentation and consistency. Corporate clients expect you to have systems, and those systems protect your business just as much as they protect the people eating your food.

Start with the basics: confirm your FSS is current, check your council registration, set up temperature logs, and create allergen cards for your products. From there, build the habit of regular reviews, and you will find that compliance becomes a natural part of how you run your business rather than a burden on top of it.

Sources: FSANZ Food Standards Code, Safe Food Australia (4th Edition), NSW Food Authority, Dairy Food Safety Victoria, Safe Food Queensland.