An inspector walks your floor. They ask for the CCP logs, and you have them. They ask which supplier lot went into batch 47, and you can answer. They ask for the cleaning records, and those are in the binder too.
Then they ask to see the records showing your two production employees were trained in food hygiene and food safety.
There is nothing to hand them. Not because you never trained anyone. You did. You walked both of them through handwashing, glove changes, what to do when someone comes in sick, why the allergen line gets cleaned last. You just never wrote it down, because there was no batch to write it on.
That record is required. It has been required since 2015, it applies to you even if most of the rule doesn't, and it goes missing more often than any other record in small-producer operations for a reason that has nothing to do with negligence.
01. What the rule actually says
Two sentences in 21 CFR 117.4 create the obligation.
The first is 117.4(b)(2). Every individual engaged in manufacturing, processing, packing, or holding food must "receive training in the principles of food hygiene and food safety, including the importance of employee health and personal hygiene, as appropriate to the food, the facility and the individual's assigned duties."
The second is 117.4(d), and it is one line long: "Records that document training required by paragraph (b)(2) of this section must be established and maintained."
That is the whole requirement. Not a curriculum. Not a certificate. Not an accredited course. Training appropriate to what the person actually does, and a record proving it happened.
117.4(c) adds a third piece. It requires that responsibility for compliance be "clearly assigned to supervisory personnel" who have the education, training, or experience to supervise the production of clean and safe food. In a four-person operation that assignment is almost always you, and it is almost never written down anywhere.
02. Being small does not get you out of this one
Most producers get this wrong, and the mistake makes sense.
117.3 defines a very small business as one averaging less than $1,000,000 per year, adjusted for inflation, in sales of human food plus the market value of food you make and hold without selling. Being a very small business makes you a qualified facility, and being a qualified facility exempts you from a lot.
$1,372,952 is the number that actually matters for calendar year 2026. That is FDA's published three-year average for 2023 through 2025, and it is what you compare your own three-year sales average against. The figure printed in the CFR is a 2011 baseline that inflation has moved a long way. A producer doing the math against a flat million can talk themselves out of an exemption they qualify for.
But read 117.5(a) closely. It says: "Subparts C and G of this part do not apply to a qualified facility."
Two subparts. That is the entire exemption.
Subpart C is hazard analysis and risk-based preventive controls. Subpart G is the supply-chain program. Those are the heavy ones, and yes, you are out from under them.
117.4 is in Subpart A. Subpart A is not named anywhere in 117.5. Neither is Subpart F, which governs what your records have to look like.
So the exemption that gets you out of writing a full food safety plan does not get you out of documenting that your team was trained. A producer who reads "qualified facility" as "exempt" is carrying a gap they don't know about, and it is the kind of gap that turns a routine inspection into an observation on paper.
03. This is not PCQI training, and conflating them costs you
A lot of founders hear "training requirement" and immediately think of the FSPCA course and the preventive controls qualified individual.
Different requirement. Different subpart.
The PCQI is defined in 117.180, which lives in Subpart C. A PCQI is the person who prepares the food safety plan, validates preventive controls, reviews records, and reanalyzes the plan. They need training "at least equivalent to that received under a standardized curriculum recognized as adequate by FDA," or equivalent knowledge from job experience.
If you are a qualified facility, Subpart C does not apply to you. You do not need a PCQI.
You still need 117.4(b)(2) training records for everyone who touches food.
The conflation runs both directions and both are expensive. Some producers pay for a PCQI seat they are not required to hold, then assume it satisfied their training obligation. It didn't, because a PCQI certificate documents one person's qualification, not the hygiene training of the two people actually running the line. Others know they don't need a PCQI, and skip 117.4 along with it.
04. What the record has to look like
Because 117.4(d) records are required by Part 117, they fall under Subpart F. 117.301(a) is explicit: "all records required by this part are subject to all requirements of this subpart," with the single exception that 117.310 applies only to the written food safety plan.
So the same rules that govern your CCP logs govern your training records.
Per 117.305, the record must carry the date and, when appropriate, the time of the activity documented, and the signature or initials of the person performing the activity. It must be accurate, indelible, and legible. And it must be created concurrently with the activity it documents, which is the clause that quietly rules out reconstructing a year of training from memory the night before an inspection.
Per 117.315, it stays at the plant or facility for at least two years after the date it was prepared. You can store records offsite if they can be retrieved and provided onsite within 24 hours of a request for official review.
None of that is demanding. A dated sheet listing what was covered, who attended, who delivered it, and everyone's signature satisfies it. The bar is not high. The bar is just written.
05. Why this is the record that goes missing
Every other record in your operation has a hook to hang on.
A CCP check hangs on a batch. A cleaning log hangs on a changeover. The work itself generates the moment where the record gets written, which is why those records mostly exist even in operations running on paper and good intentions.
Training has no hook. It happens on someone's first day, or the afternoon you changed a procedure, or in the thirty seconds you spent correcting how someone was handling an allergen. There is no batch number, no lot, no shift boundary that says write this down now. So it doesn't get written down, and two years later there is no evidence the training ever happened.
The pattern generalizes past training records. Records that are byproducts of production survive. Records that require someone to stop and decide to create them do not. A spreadsheet does not fix that, because the spreadsheet is the thing nobody opens.
06. What to do this week
You can close this gap in an afternoon, and it does not require software.
- Write down what you already teach. You have an onboarding practice. Put it on one page: handwashing, health reporting, personal hygiene, glove and apron changes, allergen handling, and whatever else is specific to your product. That page is your curriculum, and 117.4(b)(2) asks for nothing more elaborate.
- Document the people already on your floor. You cannot create a concurrent record for training that happened last year. You can run a refresher this week and document that one properly. Do that rather than backdating anything.
- Write down who the supervisor is. 117.4(c) wants that responsibility clearly assigned. One sentence, dated and signed.
- Attach it to a moment that already exists. Tie the training record to first day, to any procedure change, and to a fixed annual refresher. Give it a hook, the way every other record already has one.
- File it where your other Part 117 records live, and keep it for two years.
Your batch records exist because production creates them. Your training records only exist if you decide they will.
FourFoxes keeps every record that hangs off a batch complete and retrievable, so that when an inspector walks in, the only question left is the one that was never attached to a batch in the first place. Close that one this week, and there is nothing in the binder you have to apologize for.
See how FourFoxes keeps your batch records audit-ready
References
All regulatory text quoted above was retrieved from the electronic Code of Federal Regulations on 2026-08-18.
- 21 CFR 117.4: Qualifications of individuals who manufacture, process, pack, or hold food. Paragraphs (b)(2), (c), (d). https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-A/section-117.4
- 21 CFR 117.3: Definitions, "qualified facility," "very small business," "qualified individual." https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-A/section-117.3
- 21 CFR 117.5(a): Exemptions. "Subparts C and G of this part do not apply to a qualified facility." https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-A/section-117.5
- 21 CFR 117.180: Requirements applying to a preventive controls qualified individual and a qualified auditor (Subpart C). https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-C/section-117.180
- 21 CFR 117.301: Records subject to the requirements of Subpart F. https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-F/section-117.301
- 21 CFR 117.305: Requirements applying to records required by this part. https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-F
- 21 CFR 117.315: Requirements for record retention. https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-117/subpart-F
- FDA, "FSMA Inflation Adjusted Cut Offs": very small business (human food) three-year average for 2023 through 2025, $1,372,952. Page last updated 2026-05-13, retrieved 2026-08-18. https://www.fda.gov/food/food-safety-modernization-act-fsma/fsma-inflation-adjusted-cut-offs