Kombucha HACCP Compliance: The Complete US Producer Guide

Kombucha sits in an unusual regulatory position. It is fermented, which means it automatically qualifies as a specialized process under the FDA Food Code. It produces alcohol as a natural byproduct, which means a second federal agency, the Alcohol and Tobacco Tax and Trade Bureau (TTB), may also have jurisdiction over your operation depending on what happens inside your bottles. And because the FDA Food Code is adopted and enforced at the state level, the specific permits, variance requirements, and inspection procedures vary significantly depending on where you brew.

This guide covers the federal framework every US kombucha producer operates under, the critical control points your food safety plan must address, and links to state-specific compliance guides for all 50 states. If you are setting up a new kombucha operation or preparing for an inspection, start here.

The Federal Framework: FDA, TTB, and FSMA

Three federal frameworks touch commercial kombucha production in the US, and understanding which ones apply to you is the first step in building a defensible compliance program.

The FDA governs kombucha as a food product under 21 CFR and the FDA Food Code. Under Food Code section 3-502.11, fermentation is classified as a specialized process, meaning it carries inherent food safety risks that require documented controls beyond standard food handling practices. The FDA Food Code requires all retail or food service operators planning to sell kombucha to obtain a variance from their regulatory authority and to submit a food safety plan before commencing operations. That food safety plan does not have to follow a rigid HACCP table format in every jurisdiction, but it must document your hazard analysis, your critical control points, your monitoring procedures, and your corrective actions.

The Food Safety Modernization Act (FSMA) adds another layer. FSMA requires that all food production businesses, regardless of size, have a safety plan in place. For small kombucha producers who previously operated informally, FSMA closed the loophole. If you are selling commercially, a documented food safety plan is not optional.

The TTB enters the picture the moment alcohol becomes relevant to your process. Under federal law, if the alcohol content of kombucha is 0.5% or more alcohol by volume at any time during production, when bottled, or at any time after bottling, the kombucha is an alcohol beverage subject to TTB regulations. This is the regulation that caught many producers off guard in 2010 when bottles that tested below 0.5% at packaging continued fermenting on store shelves and crossed the threshold. Even though a kombucha beverage may have less than 0.5% alcohol by volume at the time of bottling, fermentation may continue in the bottle after it leaves the production facility, and if the alcohol content increases to 0.5% or more, the product is an alcohol beverage subject to TTB laws and regulations.

If your kombucha crosses the 0.5% threshold at any point, you need to qualify your premises with the TTB, obtain a brewer’s permit, and comply with labeling requirements that include a government health warning statement. Most producers working to stay below 0.5% use pasteurization at 180°F for 30 seconds, refrigeration throughout the supply chain, or both to control continued fermentation after packaging.

Why Kombucha Triggers a Specialized Process Variance

The variance requirement is not bureaucratic friction. It exists because kombucha starts at a pH around 5, which puts it in potentially hazardous food territory, and relies on a biological process to bring that pH down to a safe level. Since kombucha starts at a potentially hazardous pH of approximately 5 and finishes below 4.2, this process requires food safety monitoring to ensure safety, as confirmed in the Food Code under section 3-502.11, which requires a food safety plan for any process that uses acidification to make a potentially hazardous food into a non-potentially hazardous food.

In practice, the variance application process varies by state. Some states have a centralized HACCP team that reviews and approves plans before you begin operations. Others handle it at the county health department level. A few states have published kombucha-specific guidance documents that spell out exactly what your food safety plan must include. The state guides linked at the bottom of this page cover each jurisdiction’s specific requirements.

What every state requires, in some form, is documentation that you understand the hazard, you are monitoring the critical control point, and you have a corrective action ready if something goes wrong. That documentation is your audit trail, and it is what an inspector will ask to see on day one.

Critical Control Points for Commercial Kombucha Production

A kombucha HACCP plan typically identifies one primary Critical Control Point, with several supporting prerequisite programs that control lesser hazards. Here is what your plan needs to address.

CCP 1: Fermentation pH

This is the load-bearing CCP in every kombucha food safety plan. Of all the steps in kombucha production, only one is critical to prevent the potential for acid-resistant pathogens: the fermentation step where pH drops from approximately 5 to 4.2 or below. The critical limit is pH 4.2, and pH should be monitored using a calibrated digital pH meter. Paper strips are not acceptable for compliance purposes because they lack the precision needed to document a defensible measurement.

Your critical limit is pH 4.2 or below before bottling. Your operational target is typically pH 2.5 to 3.5 for finished kombucha. Acidity should not reach a pH lower than 2.5, and this lower pH limit should also be included as a critical limit in food safety plans. Kombucha that drops below pH 2.5 is over-fermented and should not be offered to consumers. The corrective action is to dilute with fresh brewed tea until the pH returns to the acceptable range, then retest and document.

Every batch needs a pH log that records the start date, starting pH, and successive pH measurements until the target is reached. Your pH meter calibration log is equally important. Inspectors check both.

CCP 2: Alcohol Content Monitoring

If you are producing kombucha intended to stay below 0.5% ABV, alcohol content monitoring is a de facto CCP even if it is not always labeled as such in guidance documents. Ethanol testing is recommended for every batch using a KBI-approved ethanol testing method. Third-party lab testing of finished product provides the most defensible documentation, particularly for producers who distribute beyond their immediate production location.

Temperature control after packaging is the operational control that keeps alcohol in check. Unpasteurized kombucha must be kept refrigerated at 41°F or below throughout the distribution chain.

Prerequisite Programs

Beyond the CCPs, your food safety plan must address SCOBY health and sourcing, equipment sanitation procedures, cooling rate for the tea wort (from 60°C to 20°C within two to six hours before adding the culture), and employee hygiene. Standard Operating Procedures must include a detailed plan for cleaning and sanitizing equipment, a detailed process instruction sheet describing how employees measure and record pH, and detailed instructions for calibrating the pH meter.

Free Resources

The following resources are available to help you build your kombucha compliance program.

• Kombucha Production Process Flow Diagram

A step-by-step visual of the full production process from tea infusion through packaging, with CCPs marked at each relevant stage and critical limits noted inline.

• Sample Kombucha HACCP Plan Template

A pre-built sample HACCP plan covering hazard analysis, CCP identification, critical limits, monitoring procedures, corrective actions, verification steps, and record-keeping requirements.

haccpeasy

Sample kombucha HACCP plan
Interactive demo

1

2

3

4

5

6

Step 1 of 6: Batch details

Fill in your batch details below. Every run in HACCPEasy starts with a batch record that ties all logs, photos, and sign-offs to a single traceable ID.

Batch ID

Required

Production date

Required

Batch size (litres)

Required

Operator name

Required

Tea variety used

Next: SCOBY inspection

Photo evidence required

HACCPEasy can require photo evidence at any step. Inspectors love this — it proves the check was done, not just logged. Photograph your SCOBY before inoculation.

SCOBY inspection photo

Inspect for mould, unusual colour, or contamination. Photo is required to proceed.

Tap to take or upload photo SCOBY must show no signs of mould

Photo is required before proceeding

Inspection notes

Back Next: pH monitoring

CCP 1: Fermentation pH

This is your Critical Control Point. HACCPEasy's If-Then logic monitors this value in real time. If pH is above the critical limit, the workflow locks and flags a corrective action before the operator can continue.

Enter current pH reading

Use a calibrated digital pH meter. Critical limit: pH must reach 4.2 or below before bottling.

Enter a reading

Workflow locked — corrective action required

pH is above the critical limit of 4.2. Continue fermentation and retest before proceeding. Do not bottle.

Corrective action taken

pH within critical limit

Fermentation is complete. You may proceed to bottling. Log this reading for your audit trail.

Meter calibration date

Back Next: Temperature log

Fermentation temperature must stay between 70-90F (21-32C). Log the reading. HACCPEasy flags out-of-range values automatically.

Fermentation temp (F)

Storage temp F (post-bottle)

ABV test result (%)

Must be below 0.5% for non-alcoholic classification. TTB regulations apply if above.

Additional batch notes

Back Next: Buddy sign-off

Buddy System - dual verification

Before this batch is approved for bottling, a second authorised person must verify the records and sign off. This is the HACCPEasy Buddy System — a digital version of the dual-sign requirement used in food manufacturing.

Buddy verification Second authorised person required

Verifier name

Verifier role

Owner

Admin

Senior operator

QA manager

Verifier signature

Sign in the box below using mouse or finger

Clear Sign above to verify this batch

Verification statement

I confirm that I have reviewed this batch record, verified the pH and temperature logs, inspected the SCOBY documentation, and am satisfied that this batch meets all critical control point requirements and is approved for bottling.

Buddy name, role, and signature are all required

Back Complete batch record

Batch record complete

All steps logged and buddy verification captured. Your audit trail is ready for inspection.

Batch details

Batch ID

Date

Size

Operator

Tea variety

CCP readings

Fermentation pH

Fermentation temp

Storage temp

ABV result

Buddy verification

Verified by

Role

Signature

SCOBY inspection photo

Export batch record as PDF

This is a sample. In HACCPEasy, every batch generates a tamper-evident PDF automatically, stored in your 180-day audit trail and exportable with one tap when an inspector walks in.

Start your 30-day free trial

HACCPEasy - haccpeasy.pro - Sample plan, illustrative use only Start free trial

• pH Log Template

A printable batch-by-batch pH monitoring log with fields for start date, starting pH, successive measurements, meter calibration date, and corrective action notes.

• Alcohol Content Monitoring Log

A batch-level record template for documenting ABV testing results, testing method, lab name if applicable, and pass/fail determination.

Compliance Monitoring: What Happens After Your Variance is Approved

Getting your variance approved is the beginning, not the end. The ongoing compliance burden for kombucha producers is documentation-heavy by design, because the safety of the product depends entirely on a biological process that must be monitored batch by batch.

Every production batch needs a pH log. Every pH meter needs a calibration log. Every corrective action, whether a batch was diluted to bring pH back into range or a SCOBY was discarded due to mold, needs to be documented with the date, the issue, the action taken, and the outcome. If you distribute outside your production location, your refrigeration chain documentation becomes part of your compliance record as well.

Re-inspection frequency varies by state and by your local health department’s risk classification. High-volume producers and those distributing into retail channels typically face annual or more frequent inspections. What inspectors want to see is not perfection. They want to see that your monitoring system is real, that your records are current, and that when something went wrong, you caught it and handled it correctly.

Every inspection you pass is followed by another one.

Kombucha operations are re-inspected regularly, and every batch pH log, calibration record, and corrective action note needs to be there when an inspector walks in. HACCPEasy gives your team a digital compliance system so the next inspection is a non-event.

• Operators log batch data, pH readings, and corrective actions in real time
• Require photo evidence of pH meter readings, SCOBY checks, or any critical step
• If-Then logic flags deviations and locks the workflow until resolved
• One tap exports your full 180-day audit history the moment an inspector asks for it

Start your 30-day free trial — no credit card required

Kombucha Compliance by State

Each state adopts and enforces the FDA Food Code differently. The variance application process, the agency responsible for review, and the specific documentation required vary. Select your state below for jurisdiction-specific guidance.

FAQ

• Do I need a HACCP plan to sell kombucha commercially in the US?
  Yes, in practice. The FDA Food Code classifies fermentation as a specialized process under section 3-502.11, which requires a food safety plan and typically a variance from your state or local regulatory authority before you begin operations. FSMA reinforces this by requiring all commercial food producers, regardless of size, to have a documented food safety plan. The exact format and approval process varies by state, but operating without one puts your license and your ability to sell at risk.
• What happens if my kombucha tests above 0.5% alcohol after bottling?
  Your product is legally an alcohol beverage at that point, subject to TTB regulations regardless of what the label says. This means you need a TTB-qualified premises, a brewer’s permit, and compliant alcohol beverage labeling including a government health warning statement. The practical solution most producers use is pasteurization at 180°F for 30 seconds and consistent cold chain management to stop fermentation after packaging. If you are distributing into retail, periodic third-party ABV testing of finished product provides the most defensible paper trail.
• My kombucha is below 0.5% alcohol. Do I still need to worry about the TTB?
  Yes, if your product has any potential to continue fermenting after packaging. The TTB rule applies not just at bottling but at any time afterward, including on store shelves. Producers who use refrigeration as their sole control for alcohol content need to be confident that their cold chain is intact throughout distribution. Any break in refrigeration that allows continued fermentation could push your product into alcohol beverage territory.
• How often will my kombucha operation be inspected?
  It depends on your state, your local health department, and your risk classification. Most commercial kombucha producers operating under a variance can expect at least an annual inspection, with higher frequency possible if you are distributing into retail or operating at significant volume. The more important question is whether your records are inspection-ready at any time, not just on scheduled inspection dates. Inspectors can and do make unannounced visits, and your pH logs, calibration records, and corrective action documentation need to be current and accessible when they do.