“We have a spreadsheet. It doesn’t happen very well.”
A QA manager at a refrigerated snack company was describing how they track supplier certification expirations. The system: a spreadsheet with columns for each cert type, manually updated when someone remembers to check, with expiration dates that trigger… nothing. No alerts. No reminders. Just a column of dates that someone is supposed to look at.
“It’s pretty manual what we have right now,” she said. She was not describing the exception. She was describing the industry.
The spreadsheet works until someone goes on vacation
At most mid-market food, beverage, and supplement companies, certification tracking depends on one person. That person maintains a spreadsheet that contains every GFSI audit certificate, Kosher cert, insurance document, and organic certification across the full supplier base.
Each cert type expires on its own timeline. GFSI: annual. Kosher: annual. Insurance: annual. Organic: 12–18 months. Non-GMO: annual. Multiply by dozens of suppliers and the tracking surface is enormous.
When that one person is available and diligent, the system works. When they’re sick, on vacation, or quit — the system breaks. And when an expired cert is discovered during a production run, the consequences cascade: production stops, ingredients get quarantined, the team scrambles to get updated documents from the supplier.
The most critical system at many food companies is a spreadsheet maintained by one person who hasn’t taken a vacation in three years. That’s not a process. That’s a risk.
What a documentation failure actually costs
We’ve talked to companies that scrapped over $1M in finished product because of a single missing certificate. We’ve heard about production lines running for 24 hours before someone discovered a cert had lapsed — all product from that run had to be quarantined.
These aren’t manufacturing defects. The ingredients were fine. The products were safe. The documentation just wasn’t in order. The most expensive document is the one you can’t find when the auditor — or the production line — asks for it.
Proactive beats reactive
The fix isn’t a better spreadsheet. It’s a system that extracts cert data from supplier emails automatically, flags expirations 60–90 days in advance, and sends follow-up requests without anyone remembering to check a column.