Food-Grade HCl Audit Pack: What FSSC 22000 and BRC Auditors Ask For

Hydrochloric acid (CAS 7647-01-0) used in food processing is not a commodity chemical. It is a specification-controlled acidulant, cation-exchange regenerant, and pH modifier whose audit exposure sits at the intersection of food additive monograph compliance, prerequisite programmes, and supplier assurance. The audit pack for this material must demonstrate identity, purity, traceability, hazard control, and absence of adulteration for every lot received. A standard commercial solution at 35–37% w/w HCl carries a density of approximately 1.18 g/cm³ at 20 °C, and its principal risks include heavy-metal residues, arsenic, sulfate carryover, oxidative impurities, and illegal substitution with technical-grade material. Auditors do not rely on the label; they reconstruct the lot history from purchase order to consumption point.

What FSSC 22000 v6 Requires When Hydrochloric Acid Is Treated as a Food Ingredient

Under FSSC 22000 v6, a site receiving food-grade HCl must include it in the food safety management system as a raw material requiring hazard analysis under ISO 22000:2018, clause 8.5.2, and must maintain it within the hazard control plan under clause 8.5.4. The audit expectation is not limited to a certificate-of-analysis file. The site must classify incoming HCl according to its intended use: direct acidification, pH correction in starch hydrolysis, demineralization of sugar syrups, or regeneration of food-contact ion-exchange resins. Each use requires a separate hazard flow path because the final risk differs. A direct acidulant application requires monograph compliance at use level; a resin-regeneration application requires rinse-water monitoring for residual chloride and pH excursion controls in the treated stream. FSSC auditors expect the HACCP team to evaluate chemical hazards such as arsenic, lead, mercury, sulfate, and oxidising substances, as well as physical hazards from packaging fragments and crystallized vent deposits. The monitoring plan must specify titration frequency, density checks, lot reconciliation, and defined upper and lower acceptance limits. If a receiving tank is shared between food-grade and technical-grade HCl, the arrangement is normally classified as unacceptable unless segregated unloading, valve interlocking records, and documented verification procedures are available.

Dosing systems in food production should use positive-displacement diaphragm pumps with PTFE wetted heads, pulse dampeners, and calibration columns. The injection point should be downstream of a static mixer and upstream of a pH sensor with automatic feedback control; a setpoint band width of ±0.1 pH units is typical. At addition rates below 1 L/h, peristaltic tubing drift is a known maintenance trigger, and tubing replacement should be scheduled. Flow verification by magnetic flow meter or gravimetric loss-in-weight on the day tank is accepted evidence of controlled addition. If dilution is performed on site, acid must be added to water rather than water to acid. For a 35–37% solution diluted to 5% w/w, the adiabatic temperature rise can exceed 20 °C under rapid unmixed addition; equipment and operating limits should be derived from partial molar enthalpy of mixing data and site-specific heat-transfer calculations.

Storage, Wetted Materials, and Vapour-Phase Control Boundaries

Hydrochloric acid is volatile at ambient temperature, and vapour-phase corrosion is a discrete audit finding in storage areas not designed with acid-resistant containment. Wetted materials for food-grade service typically include high-density polyethylene, polypropylene, PVC, PVDF, and PTFE-lined steel. Carbon steel, galvanized steel, aluminum, and copper alloys are incompatible. At 35–37% w/w, HCl gas partial pressure increases with temperature; storage above 25–30 °C without a tight closed-loop vent or scrubber can generate corrosive vapour that attacks conduit, electrical enclosures, and adjacent stainless steel. Auditors ask for the storage tank specification, capacity, vent system design, secondary containment volume, and inspection records. Secondary containment for a bulk HCl tank should be 110% of the largest vessel volume or meet the applicable environmental code; for IBC and drum storage, bund capacity should be at least 110% of the largest container. Dosing lines in food production should be labelled, odour-capped, and backflow-protected. Air-gap or double check-valve arrangements prevent cross-contamination of potable water supplies. Because HCl vapour can migrate into conductive conduits, terminals should be sealed and cable glands rated for acid vapour exposure.

Transportation classification is UN 1789, hazard class 8, packing group II or III depending on concentration and applicable national annex. The audit pack often includes the transport emergency card and the last vehicle inspection record. If outdoor storage is used, ultraviolet degradation affects HDPE over time; containers should be shaded or UV-stabilized. Concentrated grades may begin to freeze between −10 °C and −20 °C, and thawed material must be verified by assay and density before use.

When BRCGS Issue 9 Auditors Cross-Reference Supplier Risk Assessment with Food Fraud Vulnerability Data

BRCGS Food Safety Issue 9, clause 3.5.1.1, requires a documented supplier approval procedure, while clause 3.5.2 requires a risk-based approach to raw material acceptance. For hydrochloric acid, supplier risk is driven by the ease of substituting technical-grade or by-product acid into food channels. Auditors commonly request the food fraud vulnerability assessment under BRCGS clause 5.4, the TACCP study, and evidence of raw material authenticity testing. The vulnerability assessment must consider supplier country, broker involvement, certificate reliability, and the price differential between food-grade and technical-grade material. A supplier with no food-grade additive certification but with shared logistics and storage tanks is assigned a higher risk classification. The audit pack should include the supplier’s current FSSC 22000 or BRCGS certificate, an unannounced audit report if available, and a contract clause restricting substitution. BRCGS auditors also expect incoming raw material inspections to include CoA review and, where the risk assessment requires, verification analysis by a laboratory accredited to ISO/IEC 17025.

Suppliers of food-grade HCl in the EU must provide safety data sheets compliant with Regulation (EC) No 1907/2006 and classification under Regulation (EC) No 1272/2008. For food additive use, Commission Regulation (EU) No 231/2012 remains the purity reference. In the United States, 21 CFR 182.1057 lists hydrochloric acid as GRAS when used in accordance with good manufacturing practice. The audit pack should state the regulatory jurisdiction of the receiving site and the corresponding monograph; a document that references only technical-grade specifications is rejected.

Food-grade HCl must meet the food additive monograph baseline. Table 1 lists representative Food Chemicals Codex monograph parameters for a nominal 35–37% w/w solution; Commission Regulation (EU) No 231/2012 applies equivalent purity provisions for E 507 with the current consolidated text controlling.

CoA data should be traceable to the supplier batch number, tank number, date of analysis, and analyst initials. A CoA that states only “meets FCC” without numerical results is generally treated as incomplete by auditors. The lot-specific CoA must be linked to receiving records, purchase order, and internal lot code. If a distributor is used, the distributor’s repackaging certificate must demonstrate that the material was not blended after the original manufacturer’s release.

A Compliance Checklist That Collapses the Audit Pack into a Searchable Evidence Set

Food-grade HCl audit packs are commonly structured as a chain of documents rather than a single certificate. Table 2 maps the primary documents to the audit clauses typically referenced during FSSC 22000 and BRCGS assessments.

During an actual FSSC 22000 audit, the site receiving food-grade HCl should be prepared to show traceability from the delivered lot to the finished food batch. This includes the receiving line’s bill of lading, the delivery vehicle inspection record, the tank or tote cleaning log, the internal lot assignment, and the usage record tied to a production batch. If the same HCl is used in both food and non-food lines, the auditor verifies that the line designation is not susceptible to mix-up. Dedicated food-grade transfer lines, colour-coded hoses, and lockable connections are common control measures. Temporary hoses used for unloading are a frequent observation point because they may be used for other chemicals; the audit pack should include a hose management procedure and cleaning or dedication records.

Verification of food-grade HCl identity after receipt should include a density check at 20 °C using a calibrated oscillating U-tube densitometer, a chloride titration with 1 N sodium hydroxide or argentometric titration, and a visual inspection for colour and sediment. Heavy metals are usually verified at defined supplier auditing frequency rather than every lot because the cost of ICP-MS analysis is high and lot-to-lot variability for a qualified supplier is low. This testing frequency must be justified in the risk assessment. If the CoA shows a heavy-metal value close to the monograph limit—for example lead at 0.9 mg/kg against a 1 mg/kg limit—the site should trigger a root cause and increase verification testing for the next three lots.

Operational Boundaries, Incompatibility Limits, and Test Method Anchors

Hydrochloric acid is incompatible with strong oxidizers such as sodium hypochlorite and with alkaline materials such as sodium hydroxide, ammonia, and amines. Mixing can release chlorine gas or generate violent neutralization heat. Storage separation is mandatory. In food plants, HCl should not be stored in the same bundled area as hypochlorite, sodium chlorite, or ammonia-based refrigeration lines unless a physical or containment barrier is present. For plastic containers, ultraviolet degradation affects HDPE over time; outdoor storage should be under shade or in UV-stabilized containers. The vapour exposure limit for hydrogen chloride is commonly set at 5 ppm ceiling or 2 ppm TWA depending on jurisdiction; local risk assessment must define sensor alarm setpoints and ventilation interlock thresholds.

Food-grade HCl is used in starch thinning to produce acid-modified starches in glass-lined or passivated steel reactors. The addition rate must be controlled to maintain a stable pH between 1.5 and 3.0 during hydrolysis; over-addition leads to excessive dextrose equivalent development and filter pressure increase in plate-and-frame separation. In sugar syrup demineralization, HCl is diluted to 4–8% w/w for cation resin regeneration. Regeneration flow rates are set by resin manufacturer technical bulletins, typically 2–4 BV/h for countercurrent regeneration, and the spent acid fraction must be rinsed until the effluent pH rises above 5.0 and chloride returns to baseline. In potable water treatment, hydrochloric acid is used for pH adjustment in membrane desalination; dosing accuracy of ±0.2 pH units is maintained by PID-controlled metering pumps with downstream static mixers.

Audit findings in food-grade HCl management are most commonly linked to incomplete CoA numerical data, missing food fraud vulnerability assessments, or shared transfer hoses without cleaning records. The audit pack should be arranged so that each lot can be reconstructed without narrative explanation: receiving record, CoA, internal verification result, storage log, usage record, and traceability linkage to the finished batch. For sites that inject HCl into multiple food process lines, the auditor may sample one line and request the corresponding pH probe calibration certificate, the dosing pump flow verification log, and the backflow-prevention inspection record in the same transaction. If the material is handled at concentrations above 25% w/w, the audit pack should include a documented risk assessment for fuming, vapour exposure, and operator competency.