CFIA Food Traceability for Canadian Grocers — One-Up, One-Down Done Right

What "one-up, one-down" actually requires

The Safe Food for Canadians Regulations (SFCR), administered by the Canadian Food Inspection Agency, requires food businesses to maintain "one-up, one-down" traceability records — for every food received and shipped, the immediate supplier (one-up) and the immediate customer (one-down) must be documented and retrievable. Records must be retained for two years and produced within 24 hours of CFIA request.

Sounds simple. The execution is where most Canadian grocers, distributors, and foodservice operators fall short. This post is the operational walkthrough.

The 7 SFCR record fields per shipment

For every incoming food shipment, retailers and licence-holders must capture:

• The name of the food
• The lot code or other unique identifier
• The date received
• The name and address of the supplier (one-up)
• The quantity received
• Any reference document (invoice, BOL)
• (For licence-holders) any additional fields specified in their licence conditions

For every outgoing food shipment (B2B sales — retailer to wholesaler, distributor to retailer, etc.):

• The name of the food
• The lot code or unique identifier
• The date shipped
• The name and address of the customer (one-down)
• The quantity shipped
• The reference document

For consumer sales (retail to end consumer), one-down isn't required (consumers aren't tracked individually), but one-up still is.

Where Canadian grocer traceability actually breaks

Lot code lost at receiving. Supplier passes the lot on the BOL or invoice, receiving clerk records the invoice number in inventory but not the lot. When CFIA asks "show me the lot of romaine you received from supplier X on March 14," staff can't answer.

One-down doesn't apply to retail consumer, but the SKU ↔ lot link is lost anyway. Retail grocer doesn't legally need to track which consumer got which lot. But if a recall hits, the grocer needs to know which units of which lot are still on shelf vs sold. Without a lot-aware POS or inventory link, the recall response is "pull the entire SKU."

Foodservice / B2B sales miss the one-down. A grocer that wholesales to a restaurant needs to track that B2B sale with one-down records. Many small grocers selling to local cafés / restaurants don't realise they're subject to the wholesale one-down requirement.

Records don't retrieve in 24 hours. The records exist (in invoices, in PMR systems, in email) but assembly into a CFIA-format response takes 2-3 days. The CFIA request gives 24 hours.

What CFIA-ready actually looks like

A grocer or distributor that's SFCR-traceability-ready can produce, on demand:

• Lot codes for every food received in the last 24 months, by date and supplier
• One-up records (supplier name + address) for every lot
• One-down records (customer name + address) for every B2B shipment
• Reference documents (invoice / BOL numbers) tied to each lot
• Quantities received and shipped per lot

In a single retrievable format, within 24 hours.

The bilingual labelling overlay

Canadian compliance overlay: most pre-packaged food in Canada must be labelled in both English and French, with allergens declared bilingually. For traceability records, this typically isn't a bilingual issue (records are kept in the operating language of the business), but for product recalls, the recall notification to consumers must be bilingual where the product was sold in bilingual markets.

The discipline: when generating recall notifications, pre-translated templates in French and English ready to deploy.

The CFIA inspection reality

CFIA inspections can be:

• Routine — based on the licence-holder's risk rating; typical frequency 6-24 months
• Targeted — investigating a specific complaint, recall, or sampling result
• Foreign — for export licence-holders, additional foreign-market inspections

Inspectors check records, sample-test product, and audit traceability. The traceability test is usually: pick a random lot received in the last 12 months, ask the operator to produce the complete one-up and one-down chain. If the operator can produce it in 60-90 minutes, traceability is generally considered adequate. Beyond 24 hours = formal finding.

The Safe Food for Canadians Act licence

Most food businesses in Canada that import, manufacture, prepare for export, or send food across provincial / territorial borders need an SFCR licence. The licence carries traceability obligations beyond the basic one-up / one-down — depending on the class of licence, additional record-keeping (preventive control plan, hazard analysis, traceability records by lot) may apply.

Retailers selling within their own province generally don't need the SFCR licence but are still subject to the general SFCR traceability requirements where applicable.

Where ShelfLifePro fits for Canadian grocers

ShelfLifePro captures the 7 SFCR fields at receiving (manual or via Invoice OCR), maintains the lot-aware inventory through storage and outbound, supports lot-aware POS for grocery / foodservice, and produces the CFIA-format traceability report on demand. Bilingual recall notification templates included.

Free 14-day trial.

Related reading

• FSMA 204 KDE explained (US analog)
• FDA food traceability FSMA 204 compliance
• Wholesale distributor lot traceability
• Product recall first 24 hours