DC Cold Brew Coffee HACCP: What DC Health and the FDA Require From Your Operation

By /

Why Cold Brew Producers in Washington DC Deal With a Single Agency That Covers Everything

Food manufacturers in most states navigate a split between a state-level food manufacturing authority and county or local health departments. Washington DC has a simpler administrative structure: DC Health’s Division of Food is the single licensing and inspection authority for every food establishment in the District, from restaurants to mobile vendors to food manufacturers packaging products for wholesale. There is no county health department to deal with, no separate state food manufacturing agency. DC Health is your one regulatory contact for establishment licensing, facility inspections, HACCP plan review, and variance approvals.

Any operation packaging cold brew coffee for sale, whether direct to consumers, to retailers, to restaurants, or to distributors, must obtain a food establishment license from DC Health and pass a pre-operational inspection before it begins production. This applies whether you are operating out of a dedicated production facility or a shared commercial kitchen. The Division of Food inspects approximately 7,500 food establishments across the District, including food manufacturers, and its inspectors have specific authority over the facility, the process, and the documentation you maintain.

DC Health performs pass-fail inspections. There is no letter grade, no point score, no posted rating. A facility either passes or it does not. When violations are found, they are categorized by urgency: Priority violations require immediate correction on-site; Priority Foundation violations, which include HACCP plan deficiencies and missing documentation, must be corrected within five calendar days; and Core violations, which relate to general sanitation and maintenance issues, must be corrected within fourteen days. Repeated or uncorrected violations can result in license suspension or facility closure, with a reinspection fee required before operations can resume.

The Licensing Structure DC Cold Brew Producers Must Navigate Before Their First Bottle Is Sealed

Cold brew packaged for sale in DC is regulated as a food manufacturer product, not as a food service item. The application process with DC Health requires a pre-operational inspection of your facility, and that inspection cannot occur until DC Health has reviewed and approved your supporting documentation. For a cold brew operation, that documentation package includes your product list with intended distribution method, recipes and food handling process descriptions for all products, label copies for any packaged product sold at retail or wholesale, and, critically for bottled cold brew, a HACCP plan.

DC Health’s food manufacturer application materials explicitly list bottling as a specialized process that requires a HACCP plan submission before the pre-operational inspection can proceed. Cold brew production, which involves brewing and then sealing the beverage in a container for sale, meets this definition. Your HACCP plan must be submitted to DC Health’s HACCP plan review team and must be approved before your pre-operational inspection appointment can be scheduled and before production begins.

In addition to the DC Health establishment process, a DC-issued Certified Food Protection Manager (CFPM) certificate is required for each person in charge at your operation. This is a two-step process that trips up many new DC food business operators: first, you must pass a nationally accredited food manager certification exam from an ANAB-approved provider. Then you take that certificate to DC Health in person to receive the DC-issued CFPM card, which costs a processing fee of $35. The national exam certificate alone does not satisfy DC’s requirement. The DC-issued card is the document inspectors look for. If the person in charge changes, the replacement must hold their own DC-issued CFPM card before taking responsibility for the operation.

On top of DC Health’s local requirements, the federal FDA’s FSMA Preventive Controls for Human Food rule applies to most cold brew manufacturers whose annual food sales exceed the very small business threshold. FSMA requires a written Food Safety Plan developed or overseen by a Preventive Controls Qualified Individual, separate from but conceptually similar to the HACCP plan DC Health requires. For most DC cold brew producers above the very small business threshold, you are maintaining two parallel documentation frameworks: a HACCP plan satisfying DC Health’s local requirements and a FSMA Food Safety Plan satisfying federal requirements. A well-structured plan can address both, but confirm with your PCQI that the plan meets FSMA’s specific structural requirements under the Preventive Controls rule.

Why Cold Brew’s Low-Acid Profile Is the Regulatory Starting Point for Every DC Producer

Cold brew’s food safety profile is defined by what it is not: it is not acidified, it undergoes no thermal kill step during production, and when sealed in a container, it creates the anaerobic conditions under which Clostridium botulinum can produce toxin if the product is not maintained under adequate refrigeration. This combination of characteristics puts sealed cold brew in the same risk category as other low-acid hermetically sealed beverages, and it is the foundation of every compliance decision you make about process controls, documentation, and distribution.

Unflavored cold brew typically has a finished pH between 4.8 and 5.1, well above the 4.6 threshold below which C. botulinum toxin production is inhibited. That means acidification is not an available control for most cold brew products, and refrigeration throughout the entire cold chain from production through to the consumer is the primary and, in most cases, the only process control for C. botulinum. DC Health inspectors reviewing your HACCP plan for a bottled cold brew operation will specifically examine how your plan addresses temperature control for the finished product and how you monitor and document cold chain compliance throughout your production and distribution operations.

If you produce flavored cold brew variants that incorporate acidic ingredients such as citrus juice, fruit concentrates, or acidic botanical extracts, you need to verify the effect on your finished product pH. A flavored cold brew that drops below pH 4.6 shifts regulatory classification from a low-acid food to an acidified food under FDA’s definitions, triggering a separate set of federal requirements under 21 CFR Part 114, including a process authority review and FDA Form 2541E filing. DC Health may also require an updated HACCP plan or a variance for the acidification process. Testing your finished pH before launching any flavored variant, and confirming the regulatory implications of the result, is not optional due diligence: it is the step that determines which compliance pathway applies to your new product.

The Critical Control Points DC Health and FDA Expect to See in a Cold Brew HACCP Plan

Your HACCP plan for bottled cold brew must conduct a hazard analysis identifying the biological, chemical, and physical hazards relevant to your production process, determine which of those hazards require a preventive control, and document the monitoring, corrective action, and verification procedures for each. For a standard cold brew operation producing a low-acid refrigerated beverage, the following critical control points are what DC Health and FDA expect your plan to address.

Refrigeration temperature throughout production and distribution: This is the primary process control for C. botulinum in sealed low-acid cold brew. Your HACCP plan must define a specific temperature critical limit, typically at or below 41 degrees Fahrenheit, and document how that temperature is monitored and verified at each stage: in your production facility’s cold storage, at the point of packaging and sealing, during distribution, and at the point of handoff to retail accounts or consumers. Temperature monitoring records must exist for every batch and must be linked to specific production lot codes so that any temperature deviation can be traced to the batches it may have affected. DC Health inspectors conducting facility inspections will check that monitoring records exist and are current.

pH verification for each product and variant: Your HACCP plan must document the pH range of your finished cold brew and explain why it does not fall below 4.6. For a standard unflavored cold brew, this involves periodic in-house or third-party testing to establish and confirm the pH range. For any flavored variant, pH testing must occur for each new formulation before commercial production begins. Your records must show the testing date, the product tested, and the result. If you use an in-house pH meter for production-level monitoring, calibration records for that instrument must be maintained alongside your pH testing logs.

Brew water quality and source documentation: Water is your primary ingredient by volume. Your HACCP plan must document that your production facility uses a potable water source compliant with DC Health and EPA standards. DC’s municipal water is supplied by DC Water and is a reliable potable source, but your HACCP plan should document this explicitly. If any treatment or filtration equipment is in the water supply chain to your brew vessel, maintenance and performance records for that equipment are part of your prerequisite program documentation.

Sanitation of brew vessels, transfer lines, and filling equipment: Mold, yeast, and environmental bacteria introduced through inadequate sanitation of equipment that contacts the product are the primary microbiological hazards under normal cold brew production conditions. Your HACCP plan must include sanitation preventive controls covering cleaning and sanitizing procedures for all contact surfaces, with documented verification that sanitation occurred before each production run. DC Health’s food manufacturer application requirements ask for your recipes and food handling processes, which includes your sanitation procedures, as part of the pre-operational review package.

Supply chain controls for incoming coffee: Your HACCP plan must document your coffee as an approved source and describe how supplier approval is maintained. For most DC cold brew producers, this involves maintaining current supplier agreements, reviewing certificates of analysis for mycotoxin or pesticide residue testing where applicable, and documenting the basis for supplier approval decisions. Incoming lot receipt records should be maintained in a format that allows any specific batch of finished cold brew to be traced back to its source coffee lot.

Maintaining DC Health Compliance Between Inspections and as Your Product Line Grows

DC Health’s Division of Food inspects food manufacturing establishments on a risk-based schedule, with more complex operations and those handling higher-risk products receiving more frequent visits. Bottled cold brew, as a product requiring refrigeration and produced using a specialized bottling process, falls in the higher-risk category, and producers should plan for inspections at least once or twice per year in addition to complaint-triggered or post-illness investigation visits.

Any change to your production process, facility layout, equipment, or product line must be disclosed to DC Health before it is implemented if the change could affect your HACCP plan’s hazard analysis or process controls. Adding a new SKU, changing your brewing equipment, moving to a new facility or shared kitchen space, or contracting production to a co-manufacturer are all changes that require DC Health notification and potentially a revised HACCP plan submission. Operating a changed process under an outdated approved plan is a Priority Foundation violation, requiring correction within five calendar days of discovery during an inspection.

For DC cold brew producers distributing into other jurisdictions, including neighboring Maryland and Virginia, the licensing requirements of those jurisdictions apply independently. DC Health licensing covers production within the District, but sales into Maryland may trigger Maryland Department of Health food processing license requirements, and sales into Virginia may trigger similar state-level licensing obligations. If your distribution crosses into either state, contact the relevant state food safety office before beginning distribution to confirm whether your DC Health licensing is sufficient or whether additional registration is required.

The Inspection Findings That Lead to DC Health Pass-Fail Failures and Facility Closures

DC Health’s pass-fail inspection system means that any Priority violation found during an inspection results in a failed inspection until that violation is corrected on-site. Priority Foundation violations, which include inadequate or missing HACCP plan documentation, must be corrected within five days. The combined effect is that documentation deficiencies, which are often treated as minor in inspection systems with gradual scoring, are treated as time-sensitive compliance failures in DC.

For cold brew producers, the documentation failures most likely to generate Priority Foundation findings are the same ones that appear across cold brew operations nationally: temperature monitoring records that exist in theory but cannot be produced for specific production lots because they were not maintained contemporaneously; sanitation records that describe a cleaning procedure but contain no verification entries showing the procedure was actually completed before specific production runs; and HACCP plans that were approved at launch but have not been updated to reflect current equipment, production volumes, or product variants.

A specific DC-relevant issue: the DC-issued CFPM card requirement. DC Health inspectors check that the person in charge holds a valid DC-issued CFPM card, not just a national exam certificate. An operation where the original CFPM cardholder has left the business and no replacement card has been obtained is in violation of DCMR Section 25-A203, which is a Priority Foundation finding. This is not a lengthy process to resolve, but it requires anticipating turnover and building the replacement certification process into your operational planning rather than discovering the gap during an inspection.

DC Health has authority to close a facility for any violation presenting an imminent health hazard. Reopening after a closure requires a reinspection, which costs $100 during normal business hours or $400 for evening and weekend reinspections. The practical consequence for a cold brew operation whose revenue depends on consistent production output is that any closure creates both a direct cost and a production interruption that affects wholesale accounts, making the ongoing maintenance of compliant documentation the financially rational approach, not just the legally required one.

The inspection you just passed? It will happen again.

DC operations are re-inspected regularly and every batch, temperature log, and corrective action needs to be documented every time. HACCPEasy Platform gives your team a digital compliance system so the next inspector visit is a non-event.

  • ✓ Operators log batches, temps, and corrective actions in real time
  • ✓ Require photo evidence of pH readings, equipment checks, or any critical step
  • ✓ If-Then logic flags deviations and locks the workflow until resolved
  • ✓ One tap exports your full 180-day audit history when an inspector walks in

Start your 30-day free trial — no credit card required

Bottom Line

DC cold brew producers packaging for sale need a DC Health food establishment license, a pre-operational inspection, a DC-issued Certified Food Protection Manager card for each person in charge, and an approved HACCP plan submitted before production begins. DC Health performs pass-fail inspections with no grade system, and HACCP documentation deficiencies are Priority Foundation violations requiring correction within five calendar days. The primary food safety risk is C. botulinum in sealed low-acid product, and refrigeration is the main control. Temperature monitoring records, sanitation logs, and pH documentation for any flavored variants must be maintained contemporaneously for every production batch. The operations that pass every DC Health inspection without disruption are the ones that treat documentation as a non-negotiable daily production step, not a response to inspection schedules.

FAQ

  • Do I need a license from DC Health to sell bottled cold brew coffee in the District? Yes. Any operation packaging and selling food products in the District of Columbia must obtain a food establishment license from DC Health’s Division of Food and pass a pre-operational inspection before beginning production. For cold brew producers, bottling is classified as a specialized process requiring a HACCP plan submission and approval before the pre-operational inspection can be scheduled. The person in charge must also hold a DC-issued Certified Food Protection Manager card, which requires passing a national CFPM exam and then presenting the certificate to DC Health in person to receive the DC-specific card.
  • What is the biggest food safety risk with cold brew coffee in DC? Clostridium botulinum is the primary concern for sealed low-acid cold brew. Cold brew is a low-acid beverage with a pH typically above 4.6 and a water activity above 0.85. When packaged in a hermetically sealed container without a thermal kill step, C. botulinum can produce toxin if the product is not kept adequately refrigerated throughout the cold chain. Maintaining temperature at or below 41 degrees Fahrenheit from production through distribution to the consumer is the primary process control, and it must be monitored and documented for every production batch.
  • Does DC Health use a grading system for food establishment inspections? No. DC Health performs pass-fail inspections and does not assign a grade, percentage, or rating. Violations are categorized by urgency: Priority violations require immediate on-site correction; Priority Foundation violations, which include HACCP plan deficiencies and missing documentation, must be corrected within five calendar days; Core violations must be corrected within fourteen days. If a violation presents an imminent health hazard, DC Health has authority to close the facility immediately. Reopening requires a paid reinspection.
  • What happens if I add citrus or fruit flavors to my DC cold brew product? You need to verify the finished pH of the flavored product before distributing it. If a flavoring addition drops your finished equilibrium pH below 4.6, your product shifts from a low-acid food to an acidified food under FDA definitions. That reclassification triggers additional federal requirements under 21 CFR Part 114, including a process authority review and FDA Form 2541E filing. Your DC Health HACCP plan may also need to be updated and resubmitted before you begin commercial production of the flavored variant. Test the finished pH of every new formulation before launch.
Scroll to Top