A practical, step‑by‑step workflow to verify Indonesian coffee suppliers’ FSSC 22000 and HACCP certificates in 2025. Includes registry lookups, scope/category checks, KAN accreditation tips, red flags, and a buyer checklist.
If you buy Indonesian coffee at scale, you’ve probably wasted hours chasing certificates only to find they’re outdated, out of scope, or not even real. We get it. We’ve helped global buyers validate hundreds of certificates across green coffee processing, roasting, and export logistics. Here’s the exact 2025 verification workflow we use internally and recommend to our partners.
The 3 pillars of a clean verification
-
Confirm the scheme and registry. Start with official public directories. For FSSC 22000, use the FSSC Public Directory. For HACCP in Indonesia, confirm the certification body’s KAN accreditation and then validate the certificate directly with the CB.
-
Validate scope, category, and site. Coffee is usually FSSC Category C, subcategory CIV (ambient-stable products), and storage/transport under Category G. The scope must explicitly cover what you’re buying at the exact site that will ship.
-
Cross-check the certifier. The certification body (CB) must be accredited for that scheme and category. In Indonesia, many CBs are accredited by KAN. Some use other IAF member ABs (UKAS, RVA, JAS-ANZ). Either is fine, as long as it’s legitimate and visible in the registry.
Weeks 1–2: Quick wins — verify online first
-
FSSC 22000 certificate lookup. Go to the FSSC Public Directory and search by company name and country (Indonesia). Match the legal entity and full site address exactly. Note the certificate status, expiry date, category (expect C: CIV for roasting and green coffee processing), version (v6.x in 2025), and certification body name.
-
Check the GFSI recognition. FSSC 22000 is a GFSI-recognized scheme. When you see “FSSC 22000,” you’re confirming alignment with GFSI requirements. If the supplier proposes ISO 22000 alone, that’s not recognized by GFSI.
-
HACCP certificate verification in Indonesia. There’s no single global HACCP registry. In practice, you should verify two things: that the CB is KAN-accredited for HACCP and that the CB confirms the specific certificate number and site as valid. Use the KAN website to find accredited CBs, then confirm directly with the CB’s online lookup or by email.
-
Ask for supporting documents early. We request from suppliers: the certificate and annex listing sites/categories; a one-page scope statement; the latest audit date and next audit due; and CB contact or link to their certificate database. When a supplier hesitates to share the annex or can’t point to a CB lookup, we slow down.
Takeaway: If the supplier isn’t in the FSSC directory, or the HACCP CB isn’t KAN-accredited, press pause and investigate before samples or POs.
Weeks 3–6: Deep checks — scope, categories, and outsourced steps
-
Scope language must match your product. For green coffee exports like Sumatra Lintong Green Coffee Beans or Arabica Java Ijen Grade 1 Green Coffee Beans, look for “processing, grading/sorting, packing and storage of green coffee beans” under Category C: CIV. For roasting lines, look for “roasting and grinding of coffee” also under C: CIV. If the supplier stores and dispatches from a separate warehouse or uses a 3PL, ensure Category G is covered by their own certificate or by the 3PL’s FSSC 22000 certificate.
-
Check the version and timing. FSSC v6 audits have been mandatory since 2024. In 2025, buyers should expect v6.x on all valid certificates. A v5.1 certificate lingering past cycle is a red flag. Ask when the upgrade audit occurred.
-
Verify site identity. The certificate should show the legal entity and the physical site address that will pack and ship. We cross-check against the proforma invoice and export documents. Different names between certificate and invoice can be legitimate group structures, but we require an annex showing the exact site that handles our goods.
-
Validate HACCP certificates. If a supplier offers HACCP only, confirm the CB’s KAN accreditation and that the scope covers the exact products and site. For wine/fermented style green coffees like Bali, Java, Gayo & Mandheling - Wine Green Arabica Coffee Beans, the HACCP plan should acknowledge fermentation and control hazards from that step through drying, storage, and export packing.
-
Ask for one meaningful proof point. We often request a recent traceability test summary or mock recall result. In coffee, a solid traceability exercise links a shipped lot back to farmer groups or purchase batches within 2–4 hours. If they can’t demonstrate that, the cert hasn’t translated into real control.
Need a quick read on a certificate or scope line? Share the PDF and we’ll point out the pass/fail signals we look for. If it helps, Contact us on whatsapp.
Weeks 7–12: Scale with control — audits, trials, and backups
-
Pilot shipments with QC gates. For first orders of Sumatra Mandheling Green Coffee Beans or Robusta Lampung Green Coffee Beans (ELB & Grades 2–4), set acceptance criteria tied to your hazards and specs. We include moisture, screen size, defect count, odor/taint checks, and contamination controls.
-
Review outsourced transport and storage. If the supplier uses a 3PL, either ensure the 3PL holds FSSC Category G or confirm the supplier’s certificate clearly covers control over outsourced processes per FSSC v6. We’ve seen great certificates fall apart in the last mile.
-
Keep a second source warm. In 3 out of 5 projects where we flagged certificate issues, buyers avoided delays by having an approved backup. Indonesian origins are diverse. If Mandheling is tight, consider Blue Batak Green Coffee Beans or Flores Green Coffee Beans (Grade 1) for chocolatey, medium-acidity profiles.
Takeaway: Certification is your baseline. Your pilot and post-arrival QC prove whether the controls actually work for your product and route.
The 5 mistakes that derail coffee certificate checks
- Treating ISO 22000 as equivalent to FSSC 22000. It isn’t. ISO 22000 alone is not GFSI-recognized. FSSC 22000 layers ISO 22000 with PRPs and additional requirements.
- Ignoring category and scope. Coffee should map to C: CIV. Storage/transport should map to G. If flavoring is involved, allergen and cross-contact controls must be explicit.
- Not verifying the certification body. A legitimate certificate lists the CB and the accreditation body. No AB mark or a training company logo instead of a CB is a red flag.
- Accepting a PDF without checking registries. Always confirm via the FSSC directory and, for HACCP, via CB confirmation plus KAN accreditation.
- Overlooking site address mismatches. Group certificates are common, but your shipping site must be listed on the annex.
How do I check if an Indonesian coffee supplier’s FSSC 22000 certificate is genuine?
- Use the FSSC Public Directory to find the organization by exact name and country.
- Confirm status is “valid,” check expiry, version v6.x, category C: CIV, and site address.
- Match the CB listed in the directory to the CB on the PDF. If they differ, stop and ask why.
Which category should coffee roasting fall under in FSSC 22000 v6?
Roasting and grinding of coffee, as well as green coffee processing and export packing, typically sit in Category C, subcategory CIV (processing ambient-stable products). Storage and transport are Category G. If coffee is flavored, confirm controls for allergens and cross-contact are included.
Where can I verify a HACCP certificate issued in Indonesia?
There’s no central HACCP registry. First, check that the certification body is KAN-accredited for HACCP via the KAN website. Then verify the specific certificate with the CB through their online database or by email. Ask the CB to confirm the legal entity, site address, scope, and expiry.
What if the supplier is not listed in the FSSC public registry?
Options: the certificate is suspended or expired, issued under a different legal name, or not real. Ask the supplier for the exact registry link and an annex with the site details. If they can’t provide it, treat the certificate as invalid until proven otherwise.
What scope details should appear on a valid FSSC 22000 certificate for coffee?
- Legal entity and physical site address that will ship
- Category and subcategory (expect C: CIV; plus G if they include storage/transport)
- Processes: e.g., processing, grading, roasting, grinding, packing, storage
- Product types: e.g., green coffee beans, roasted coffee
- Certification body name, accreditation body mark, certificate number, version v6.x, and validity dates
Is HACCP certification alone enough for importing coffee in 2025?
It depends on your market and customer requirements. Many international buyers, retailers, and foodservice groups now require a GFSI-recognized scheme like FSSC 22000, BRCGS, or SQF. HACCP alone is often accepted only for smaller programs or as a transitional step.
What’s the difference between ISO 22000 and FSSC 22000 for coffee buyers?
ISO 22000 is a management system standard. FSSC 22000 combines ISO 22000 with prerequisite programs (ISO/TS 22002 series) and additional FSSC requirements, and it’s recognized by GFSI. In practice, FSSC gives buyers stronger assurance around PRPs like foreign matter control, allergen control, equipment hygiene, and oversight of outsourced processes.
A buyer’s mini-checklist you can use today
- FSSC directory shows your supplier, site address, C: CIV, v6.x, valid dates
- Scope covers exactly what you buy and where it’s packed
- CB is legitimate and accredited (KAN or another IAF member AB)
- For HACCP-only suppliers, CB is KAN-accredited and confirms the certificate
- Transport and storage are covered under Category G or documented as controlled outsourced processes
- One proof point: recent traceability test summary or mock recall result
Resources and next steps
- FSSC Public Directory: search for certified organizations and confirm status, scope, and CB details.
- KAN (Indonesia’s accreditation body): use the directory to confirm the CB’s accreditation for HACCP or FSSC/ISO 22000.
- GFSI Recognised Programmes: confirm that FSSC 22000 is recognized for your customer requirements.
If you’re evaluating Indonesian lots like Blue Batak Green Coffee Beans or Flores Green Coffee Beans (Grade 1) and want a second set of eyes on scope/category fit, share the certificate and annex. We’ll tell you in minutes if it aligns with your buying plan. Prefer a quick chat? Contact us on whatsapp.
In our experience, strong certificates correlate with clean handovers, predictable lead times, and fewer surprises at destination. A 15‑minute verification upfront can save weeks later. That’s how we buy coffee in 2025.