Skip to main content

Back to blog

Compliance July 28, 2026 By FourFoxes Team

Trace a Flagged Lot Forward: all the way to the buyers who got it

You can trace a flagged lot back to the batch. The half that decides how big a recall gets is tracing it forward, to the buyers who got it. Here is the minimum trail that makes that a lookup, not a lost weekend.

Trace a Flagged Lot Forward: all the way to the buyers who got it

Your sauce ships in a jar. That jar is the end of a chain that started with a pepper delivery, ran through a fermentation vessel, became a batch, and left your door on a pallet or in a box headed somewhere. Most small makers can now walk that chain backward. A supplier calls, you find the ingredient, you find the batch. Good. That is the trace our last piece was about.

This is the other direction, and it is the one that decides how big your bad week gets. A supplier sends a Certificate of Analysis flagging one lot of peppers. You can name the batch it went into. Can you name every account that received a jar of that batch, how many, and when? That answer is the difference between pulling three wholesale orders and calling back your whole route.

TL;DR

When a supplier flags an ingredient lot, tracing backward tells you which of your batches used it. Tracing forward tells you where those batches went, which is what you need to contain a recall. For a small food business, the minimum lot-tracking trail is four linked records: the supplier lot at receiving, the batch that consumed it, the finished lot code you assigned, and the shipment record naming which buyer got how much and when. Keep those four connected and a forward trace is a lookup, not a lost weekend. The federal rules ask for the same thing in plain terms: acidified-foods makers must keep records of initial distribution so a lot can be segregated if it goes bad (21 CFR 114.100(d)), and facilities under the preventive controls rule must have a recall plan that can directly notify the buyers who received the food (21 CFR 117.139). Both stop at your direct buyers, not the end consumer. FourFoxes carries the chain from ingredient to finished lot. The buyer record is the one leg you keep yourself, and it does not have to be complicated.

Forward and backward tracing, in plain terms

Traceability runs two directions from any point in your process. Backward starts at a finished jar and walks back to every ingredient lot and supplier in it. Forward starts at an ingredient lot and walks out to every finished product it became and, past that, to everyone who received one. A recall almost always starts with a forward question, because the alarm comes from upstream: a supplier, a lab, an FDA notice about an ingredient. You already know the ingredient. What you need to know fast is who has it now.

The federal shorthand for the people you need to reach is your direct consignees: the first buyers in your distribution chain. For most small producers that means your wholesale accounts, your distributor, and any store or restaurant you sold to directly. It does not mean the person who bought a jar off a shelf.

01The half of the trace most makers are missing: and why it is the expensive half

If you read our piece on tracing a lot back to its supplier, you have the upstream leg handled: capture the purchase at receiving, tag the container, scan it into the batch. That builds the chain from the door to the kettle.

The forward leg picks up where that one ends. It runs from the finished lot to the buyer. And it is the half that tends to live somewhere other than your production records: in your invoices, your shipping app, a sales spreadsheet, or your memory of who usually orders the mango habanero. When the supplier calls, you can often say which batch is affected within minutes. Then you lose the afternoon reconstructing where that batch went, cross-referencing pack dates against order history, hoping the two line up.

That gap is not a discipline problem. It is a design problem. The batch record and the sales record were built at different times, for different reasons, and nobody connected them. Closing the gap is mostly about deciding, in advance, on the one field that ties a finished lot to the orders that shipped it.

02What the rule actually asks you to know downstream: straight from the record requirements

You do not have to trace to the end consumer. The rules that cover most small producers ask you to know your direct buyers, and to be able to act on that fast.

If you make acidified foods, Part 114 is specific about the downstream leg. You must maintain records identifying the initial distribution of the finished product, so that specific lots can be segregated if they turn out to be contaminated or otherwise unfit (21 CFR 114.100(d)). "Initial distribution" is the key phrase: the rule wants to know where the lot first went from you, not where it ended up three hands later. To make that segregation possible, your production records also have to carry enough detail, including product code and date, to permit a hazard evaluation of each lot or batch (21 CFR 114.100(b)). Those records are kept for three years from the date of manufacture (21 CFR 114.100(e)).

If you fall under the preventive controls rule instead, the same idea shows up in your recall plan. For any food with a hazard that needs a preventive control, you must have a written recall plan, and that plan has to include procedures to directly notify the direct consignees of the recalled food, including how to return or dispose of it (21 CFR 117.139). You cannot notify buyers you cannot name. Records under this rule are retained at least two years and have to be retrievable onsite within 24 hours of an official request, with electronic records counting as onsite when you can pull them up there (21 CFR 117.315).

Read those together and the downstream duty is not vague. Know your finished lots. Know who you shipped each one to. Be able to produce that fast. The open question is never whether you owe the record. It is whether your method holds up on the day you need it.

03The minimum trail, one line per hop: small enough to keep

The mistake is building a distribution system. You do not need one. You need four records that share a key, so a query can walk from one to the next.

  • Supplier lot, at receiving. The incoming ingredient with its supplier and lot number. This is the upstream leg from the last piece.
  • Batch, at production. The batch that consumed that supplier lot, with its own batch identifier.
  • Finished lot code, at packaging. The code you stamp on the jars from that batch. This is the number a customer or an inspector will read back to you, so it has to exist and it has to tie to exactly one batch.
  • Shipment, at the sale. Which finished lot code went to which buyer, how many units, and on what date. One line per shipment.

That is the whole trail. Notice that only the last record is new to most makers, and it is one line: lot, buyer, quantity, date, and a pointer to the invoice or packing slip. If your finished lot code is the same field on the jar, in your production record, and on the invoice, the forward trace is a single thread you can pull. If the jar says one thing and the invoice says another, you have a translation problem in the middle of a recall, which is the worst possible time to do translation.

04A worked example: from a pepper CoA to three wholesale accounts

Here is the whole thing on one flagged lot. Numbers are illustrative.

A pepper supplier sends a Certificate of Analysis flagging their lot PPR-0425. You received it on April 8.

Backward, to confirm exposure. You search the supplier lot and find it was pulled into one batch, LOT-2607-A, run on June 24. Nothing else used PPR-0425. Your exposure is one batch, not your whole June production.

Forward, to contain it. That batch was packaged into finished lot code 2607A, stamped on 240 jars. Your shipment records for lot 2607A show three lines:

  • Prairie Provisions (regional grocer). 96 jars. Shipped June 27. Invoice 3311.
  • North Loop Restaurant Group. 48 jars. Shipped June 28. Invoice 3314.
  • Your own market stock. 96 jars. Held, not yet sold.

Now you can act. Two wholesale calls, one internal hold, exact quantities in hand. You know the 48 jars at the restaurant group and the 96 at Prairie Provisions are the outer edge of this, and the 96 in your own stock never left. That is a contained event. Without the shipment line tying 2607A to those two accounts, you are calling every account you have had this summer and asking them to check their shelves, which is how a one-batch problem turns into a reputation problem.

The trace took the length of a phone call because the finished lot code was the same on the jar, in the batch record, and on the invoice. Every hard part happened months earlier, quietly, when nothing was wrong.

05Where FourFoxes carries it, and where you carry it: the honest seam

FourFoxes builds the chain from the ingredient to the finished lot. Scan the invoice at receiving, tag the ingredient, scan it into the batch, and the link from supplier lot to batch is written as you work. Your batch history is searchable by date, product, and status, and packaged inventory ties finished goods back to the batch that made them. When an inspector or a buyer asks, the HACCP and production records export to PDF or CSV. That is the upstream and middle of the trail, held in one place.

The last leg, which buyer got which finished lot, lives where your sales already live: your invoices, your wholesale orders, your packing slips. We are not going to tell you FourFoxes runs your distribution, because it does not. What matters is that the two records meet at one field. Use your FourFoxes finished lot code as the lot reference on the invoice or packing slip, and the export from your batch records sits directly beside your sales records with a shared key between them. That is the whole trick: one number, shared across the tools you already run. Keep the batch side for the retention your rule requires, two years under Part 117 or three under Part 114, and keep the invoices the same span, and the forward trace is always one lookup away.

06What you do not have to build: the discipline is knowing where to stop

You are not tracking jars to end consumers. Neither rule above asks for that, and chasing it will bury the record that matters under records that do not. Your job stops at the direct buyer you sold to. They carry their own duty to go one step further if they need to.

You also do not need new software to hold the shipment line if your invoicing already captures buyer, quantity, and date. You need the lot code added to it. The point of a minimum trail is that it is minimum. A trail you actually keep beats a system you meant to set up, every single time a supplier calls.

Frequently Asked Questions

How do I trace a food recall forward to my customers?

Start from the flagged ingredient lot, find the batch that used it, find the finished lot code that batch was packaged into, then pull the shipment records for that finished lot code to see which buyers received it, how many units, and when. The trace is only as fast as the weakest link, so the finished lot code has to be the same on the jar, in your batch record, and on the invoice. Under the acidified-foods rule, keeping records of initial distribution for exactly this purpose is required (21 CFR 114.100(d)).

What is the minimum lot tracking a small food business needs?

Four linked records that share a key: the supplier lot at receiving, the batch that consumed it, the finished lot code assigned at packaging, and a shipment line naming the buyer, quantity, and date for that finished lot. Most small makers already keep the first three in some form. The shipment line is often the only piece missing, and it is one line per order.

Do I have to trace my product to the end consumer?

No. The recall plan rule asks you to be able to directly notify your direct consignees, meaning the first buyers in your chain such as wholesale accounts and distributors (21 CFR 117.139). The acidified-foods rule asks for records of initial distribution (21 CFR 114.100(d)). Both stop at your direct buyers. Your buyers carry the duty to extend a recall to their own accounts if it comes to that.

How long do I have to keep distribution records?

Under the preventive controls rule, records must be kept at least two years after they are made and be retrievable onsite within 24 hours of an FDA request, with electronic records counting as onsite (21 CFR 117.315). Acidified-foods makers keep production, deviation, and distribution records for three years from the date of manufacture (21 CFR 114.100(e)). Keep your invoices for the same span so both halves of the trace cover the same window.

What if I sell direct at farmers markets, with no account to notify?

Direct-to-consumer sales are a real gap, because there is no account name to call. You cannot trace an anonymous market sale to a buyer, and the rules do not expect you to. What you can do is keep the finished lot codes you brought to each market and date, so if a lot is flagged you can say which markets and which days it was sold, and post a point-of-sale or public notice accordingly. Wholesale and restaurant accounts are where the named, callable trail lives.

Build the trail before the call comes

A flagged lot does not schedule itself for a slow week. The forward trace either exists when the phone rings or it does not, and by then it is too late to build. The whole trail is four records and one shared number, most of which you already keep. FourFoxes holds the ingredient-to-finished-lot chain and exports it clean. Add your lot code to your invoices, and the buyer leg falls into place beside it.

See how FourFoxes works Built for the batch. Ready for the audit.

Sources

  • 21 CFR 114.3 — definitions (acidified foods; lot): ecfr.gov
  • 21 CFR 114.100 — records; initial distribution (d), 3-year retention (e): law.cornell.edu
  • 21 CFR 117.139 — written recall plan; notify direct consignees: ecfr.gov
  • 21 CFR 117.315 — record retention; 24-hour onsite retrieval: ecfr.gov