Hazard analysis is where every HACCP plan starts. For gummy supplements, that means figuring out what could go wrong, then setting up controls to stop it. Gummies are a special case, so you need to pay close attention to their ingredients and how they're made.
Where HACCP Fits in Supplement Regulation
Finished gummy supplements are dietary supplements, so the binding FDA rule for making them is the cGMP regulation in 21 CFR Part 111. Part 111 requires specifications, a master manufacturing record, and quality control operations for every batch. HACCP is a separate food safety system that FDA mandates for specific foods: juice (21 CFR 120) and seafood (21 CFR 123), with USDA requiring it for meat and poultry under 9 CFR 417.
The hazard analysis method still belongs in a supplement plant. Under the Food Safety Modernization Act, the Preventive Controls for Human Food rule (21 CFR 117) requires a written food safety plan with a hazard analysis and risk-based preventive controls for human food. Finished dietary supplements are exempt from those hazard analysis and preventive control requirements when the facility complies with Part 111, but the dietary ingredients that go into a gummy are not exempt, and conventional gummy candy is a food subject to Part 117.
A contract gummy manufacturer will usually run a HACCP-style hazard analysis inside its Part 111 quality system. When you evaluate a manufacturer, ask to see the hazard analysis and the food safety plan that follows from it, whatever the document is called.
The Seven HACCP Principles
Hazard analysis is Principle 1 of the seven HACCP principles. The preliminary tasks come first: assemble the team, describe the product and its intended use, and build the process flow diagram and confirm it on the plant floor. The next section walks through those tasks before the hazard analysis itself. Here's the full list:
- Conduct a hazard analysis.
- Determine the Critical Control Points (CCPs).
- Establish critical limits for each CCP.
- Establish monitoring procedures for each CCP.
- Establish corrective actions.
- Establish verification procedures.
- Establish record-keeping and documentation procedures.
How to Conduct the Hazard Analysis for Gummy Supplements
The analysis has two parts: first, spot the hazards; then, decide which ones matter. You'll need to examine every step, from raw materials coming in to the finished product going out.
1. Gather Your HACCP Team
Get a team together with people from quality, production, safety, and maintenance. You want every angle covered.
2. Describe the Product and Its Intended Use
Write down everything about your gummy: what's in it (gelatin, pectin, sugars, acids, flavors, colors, active nutrients), how it's made (heating, mixing, depositing, drying, cooling, packaging), its shelf life, storage conditions, and who's eating it.
3. Create a Detailed Process Flow Diagram
Draw out every step. For gummies, it usually looks like:
- Receiving & Storage of Raw Materials
- Weighing & Preparation
- Cooking & Mixing (Syrup Preparation)
- Adding Active Ingredients & Colors/Flavors
- Depositing into Molds
- Setting/Cooling
- Demolding
- Drying (Starching or Non-Starching)
- Polishing/Oiling
- Inspection & Packaging
- Finished Product Storage & Distribution
Walk through the actual facility to make sure the diagram matches reality.
4. Identify Potential Hazards at Each Step
For each step, think through what could go wrong. Look at three categories:
- Biological Hazards: Pathogens like Salmonella and E. coli from raw materials (gelatin, botanicals), contaminated water, or poor environmental controls during drying and cooling.
- Chemical Hazards: Allergens from shared equipment, pesticide residues in botanicals, heavy metals, excess vitamins/minerals from incorrect fortification, or unauthorized additives.
- Physical Hazards: Metal fragments from equipment, glass from light fixtures, plastic from packaging, or hardened sugar/gelatin clumps.
One property separates gummies from most foods in a hazard analysis: the finished product is low-moisture, and its low water activity stops most pathogens from multiplying. The biological risk is raw material contamination and recontamination after cooking, not growth inside the finished gummy.
5. Evaluate and Determine Significant Hazards
Not every hazard needs its own CCP. Judge each one on how bad it could be and how likely it is. Ask: Could this happen without controls? Would it make someone sick? If yes on both counts, it's significant. For gummies, watch out for:
- Pathogen survival from insufficient thermal processing (cooking step).
- Allergen cross-contact during production runs.
- Metal contamination from equipment wear.
- Chemical overages of active nutrients during mixing.
6. Determine and Justify Preventive Controls
For every significant hazard, figure out how to prevent it. A validated thermal process, cooking at the right temperature and time, takes care of biological hazards in the syrup. Metal detectors catch physical hazards after drying. Supplier verification and certificates of analysis handle chemical risks in raw ingredients. Write down why each hazard is (or isn't) significant.
The output of your hazard analysis is a clear list of significant hazards you need to control. That list feeds straight into the next step: finding the Critical Control Points (CCPs), the spots where you prevent, eliminate, or reduce a hazard to an acceptable level. Working with a manufacturer that keeps a documented hazard analysis and the controls that go with it is how you make sure your gummies are safe.