Traceability Depth and COA Cadence for Buyers

Buyer’s snapshot

The current BRCGS Food Safety standard expects a certified site to complete a full forward and backward trace, raw material to finished product, within 4 hours, and to test that ability at least once a year (BRCGS clause 3.9).

EU law only obliges each operator to know one step back and one step forward (Regulation (EC) No 178/2002, Article 18). Anything deeper is a commercial choice, and it is the choice that shortens procurement sign-off.

Silk Route Ventures (SRV) issues a Certificate of Analysis on every batch and traces lots to the growing district, and to farm level on organic SKUs.

The comparison table below maps four depths of traceability to what each one actually proves. The sign-off section is the one to forward to your QA lead.

A procurement file for an imported spice or botanical usually stalls on one of two questions. Where exactly did this lot come from? And does the paperwork prove it meets the spec? The first is traceability depth. The second is COA cadence. Both are regulated only at a minimum: EU law asks each operator to know its immediate supplier and immediate customer, and US law asks the importer to verify its foreign supplier without prescribing a single format. Everything above that floor is negotiated between buyer and supplier. This piece explains the four depths of traceability a supplier can offer, what a per-batch COA adds over a per-shipment one, and how a complete paper trail turns a three-week supplier approval into a same-week sign-off.

What does traceability depth actually mean?

Traceability depth is how many links back from the finished lot a supplier can document, with records, not assertions. The legal floor in the EU is one link: Article 18 of Regulation (EC) No 178/2002 requires every food business operator to identify its immediate supplier and immediate business customer. A deeper trace, to the processing batch, the growing district, or the farm, is a supplier capability rather than a legal obligation.

That distinction matters because buyers often assume “traceable” means farm-level. It rarely does. A trader who buys a blended lot of black pepper from a Colombo aggregator can truthfully say the lot is traceable. It is traceable one step back, to the aggregator. Whether it can be traced to where the pepper vines grew is a different question, and most supplier questionnaires never ask it directly.

For dried spices and herbs, the depth that carries the most commercial weight is the growing district. District-level origin is where agronomic practice, pesticide use patterns, and soil heavy-metal profiles actually vary. A lot of cinnamon from Matale and a lot of cinnamon from the southern coastal belt can sit under the same “Sri Lanka” origin line on a certificate, and still behave differently on a residue panel.

The four depths of traceability, compared

The table below sets out the four practical depths a supplier can offer. Most qualification failures happen because a buyer’s spec assumed one depth and the supplier delivered another.

Depth	What the supplier can document	What it proves to a buyer	Where it is required or expected
One step back, one step forward	Immediate supplier and immediate customer for each lot	Legal minimum; supports a withdrawal, not a root-cause investigation	EU Regulation (EC) No 178/2002, Article 18
Processing batch	Finished lot linked to internal batch records, raw material intake lots, and packaging lots	That the finished product can be isolated and recalled at batch level	BRCGS clause 3.9 and FSSC 22000 V6 (ISO 22000:2018 clause 8.3)
Growing district	Raw material intake lots linked to named growing districts and collection points	Origin claims hold below country level; residue and contaminant risk can be read by region	Buyer specification; common in US and EU retail private label and origin-claim SKUs
Farm or grower group	Intake lots linked to registered farms or certified grower groups	Supports organic integrity, origin labelling, and supplier social compliance claims	EU Organic Regulation (EU) 2018/848 and USDA Organic for organic SKUs

Two things follow from this table. First, a GFSI-certified supplier is audited on the second row, not the third or fourth. A BRCGS or FSSC 22000 V6 certificate proves the site can trace its own batches quickly. It says nothing about how far upstream those batches can be traced. Second, organic SKUs carry the fourth row by law, because organic certification is a chain-of-custody system from the farm. For conventional SKUs, district-level tracing is the part you have to ask for in writing.

How fast should a supplier be able to trace a lot?

The working benchmark is 4 hours. The BRCGS Food Safety standard requires a certified site to trace a raw material lot through processing to dispatch, and back from finished product to inputs, within 4 hours, and to test that capability at a predetermined frequency of at least once a year, with the results retained for audit. FSSC 22000 V6 sets the requirement through ISO 22000:2018 clause 8.3 without a fixed clock, so most dual-certified sites run to the BRCGS figure.

The US will set its own clock for a defined list of foods. The FDA Food Traceability Rule (21 CFR Part 1, Subpart S) requires covered firms to produce an electronic sortable spreadsheet of traceability data within 24 hours of an FDA request, linked to traceability lot codes. Enforcement will not begin before 20 July 2028. Dried spices and dried herbs are not on the Food Traceability List (fresh herbs are), but the rule has already changed what US buyers ask for. Procurement teams building 24-hour recall readiness for their fresh lines tend to write the same expectation into every ingredient contract.

The practical test is simple. Ask the supplier for the result of its most recent mock recall: the lot traced, the time taken, and the percentage of material reconciled. A supplier that can send that record in one email is running traceability as a system. A supplier that needs a week to reconstruct it is running it as a filing cabinet.

Certification snapshot: the Matale facility

BRCGS (covers spice, herb, coconut, plant-based, and retorted product lines)

FSSC 22000 V6 (covers the full processing scope, including capsules and spray-dried powders)

USDA Organic and EU Organic (per SKU, with farm-level chain of custody)

Registered with the Sri Lanka Export Development Board; FDA-registered facility

COA cadence: per shipment, per batch, or per lot?

COA cadence is how often a supplier produces a Certificate of Analysis, and against which unit of production. A per-shipment COA covers a whole consignment with one result, often from a composite sample. A per-batch COA covers each production batch separately. A per-lot COA with third-party verification adds an independent laboratory result on the parameters the buyer names.

The difference is what the certificate can prove. A single composite result across a 12-tonne container of mixed batches can pass while one batch inside it would fail on its own. When a residue flag comes back at the border, a per-shipment COA gives the buyer no way to isolate the problem batch. The whole container is in question.

COA cadence	Sampling unit	What it lets the buyer do	Typical use
Per shipment	Composite across the consignment	Confirm the average meets spec	Low-risk commodities, long-standing supplier relationships
Per batch	Each production batch	Isolate, hold, or release individual batches	GFSI-audited supply of spices, herbs, and botanical powders
Per batch plus third-party	Each batch, with named parameters sent to an accredited external laboratory	Use the result directly as FSVP or official-control evidence	Retail private label, organic SKUs, high-scrutiny residues

For US importers, cadence feeds straight into the Foreign Supplier Verification Program. Under 21 CFR 1.506, the importer’s verification activities can include sampling and testing and a review of the supplier’s food safety records, and the importer must document its review of the results. A per-batch COA that maps one-to-one to the lots received is a record an FSVP file can use. A per-shipment composite often is not, because it cannot be tied to what was actually received.

What goes on the certificate matters as much as how often it is issued. The SRV guide on how to read a heavy metal and pesticide COA covers the methods, reporting limits, and EU and US thresholds in detail.

Why the paper trail speeds procurement sign-off

Supplier approval is slow when evidence arrives in pieces. A QA lead asks for the certificate, then the scope statement, then a sample COA, then the traceability procedure, then the mock recall record, one email at a time, over three weeks. The same approval can close in days when the supplier sends a single dossier that already answers the questions in the order they get asked.

In 2025 the EU’s Rapid Alert System for Food and Feed logged 279 notifications on herbs and spices, with lead notifications rising to 16 against a historical run rate of three to five a year (CBI, 2026). Every one of those notifications starts the same way: an importer is asked which lot, from which supplier, from where, and with what test result. The importers who answer inside a day are the ones whose supplier dossier was assembled before the container left port. For procurement teams watching that alert count climb, the dossier has stopped being paperwork and started being the difference between a hold and a release.

A complete trail for a spice or botanical lot usually contains these documents, each linked by the same lot code:

Document	What it proves	Who reads it at sign-off
Batch COA	The lot meets the agreed spec on named parameters	QA, and the FSVP file in the US
Traceability record	Lot links to intake lots, growing district, and (for organic) farm	QA and technical
Certificate of Origin	Country of origin for customs and preference	Customs broker
Phytosanitary Certificate	Plant health clearance from the Sri Lanka Department of Agriculture	Border control
Organic Transaction Certificate or EU Certificate of Inspection	Organic chain of custody to the consignment	Organic compliance lead
GFSI certificate and scope statement	The site is audited for this product category	Supplier approval

For EU organic imports, that last organic line is now electronic. Delegated Regulation (EU) 2021/2306 requires every organic consignment to travel with a certificate of inspection issued in the TRACES system before it leaves the exporting country. A missing or mismatched lot reference on that certificate holds the container regardless of what the COA says. The 2026 Ceylon export compliance checklist sets out the full document set by destination market.

Buyer’s checklist: traceability and COA terms for your next RFQ

State the traceability depth required: batch, growing district, or farm.

Require a lot code that appears identically on the COA, packing list, and traceability record.

Specify COA cadence (per batch) and the parameters that go to a third-party laboratory.

Ask for the most recent mock recall result, with time taken and reconciliation percentage.

Ask for the GFSI certificate scope statement as well as the certificate itself.

For organic SKUs, confirm the TRACES certificate of inspection or Organic Transaction Certificate is issued per consignment.

Agree retention: how long the supplier keeps batch records and retained samples.

How traceability and COA terms belong in a supply contract

Put both into the specification, not the relationship. Suppliers change staff; specifications stay. The strongest ingredient contracts name the required traceability depth, the COA cadence, the parameter list with limits and methods, the laboratory accreditation standard for third-party tests, and the response time for a trace request.

Be realistic about cost. District-level tracing and per-batch third-party testing add real expense at origin, and that expense shows up in the price. If the finished product is competing on the lowest shelf price, a per-shipment COA and a one-step trace may be all the category can carry. That is an honest trade-off, not a failure. The mistake is buying at a one-step price and then assuming farm-level assurance in the label claim.

Buyers using this primer usually fall into two groups: brand owners specifying ingredient supply against an existing co-packer, and multi-category distributors consolidating several origin suppliers into one approval file. The same terms apply to both. The only change is how many SKUs share one dossier. The FSSC 22000 V6 explainer and the note on what BRCGS signals to a retail listing buyer cover the certificate side of the same file.

How Silk Foods Ceylon runs traceability and COA cadence

The Silk Foods Ceylon (SFC) facility at Hapugasyaya, Nalanda, in Matale, issues a Certificate of Analysis on every batch. The standard panel is tested in-house, and customer-specific parameters go to third-party laboratories on request. Raw material intake lots are recorded against their growing district. For USDA Organic and EU Organic SKUs, the trace runs to farm level, as organic chain of custody requires.

Every dispatched order leaves Matale with the same documentation pack: commercial invoice, packing list, bill of lading or air waybill, certificate of origin, phytosanitary certificate, organic transaction certificate where the SKU is organic, and the batch COA. The lot code is common to all of them. That is the property that lets a buyer’s QA team read the file in one pass instead of reconciling it line by line.

SFC holds BRCGS and FSSC 22000 V6, so the batch-level trace and the annual traceability test are audited, not self-declared. The district and farm links sit on top of that audited system. For organic lines run beside conventional production, the segregation controls are covered in the SRV note on running a certified organic line beside conventional production.

Frequently asked questions

What is the difference between traceability and a COA?

Traceability proves where a lot came from and where it went, through linked records back to intake lots, district, or farm. A Certificate of Analysis proves what the lot contains against the agreed spec. Procurement sign-off needs both, tied together by one lot code, so the test result can be attached to a known origin.

How long should a supplier take to trace a lot?

The BRCGS Food Safety standard sets 4 hours for a full forward and backward trace, tested at least once a year. The FDA Food Traceability Rule will require 24-hour electronic records for listed foods from July 2028. Dried spices are not on that list, but many US buyers now write a 24-hour expectation into contracts.

Is a per-shipment COA enough for an FSVP file?

Often not. Under 21 CFR 1.506, a US importer’s verification must reflect the food actually received. A composite COA across mixed batches cannot be tied to individual lots, so it gives weak evidence and no way to isolate a problem batch. A per-batch COA matched to lot codes is the safer record for an FSVP review.

Does SRV provide per-batch COA and district-level traceability for bulk ingredient supply?

Yes. SFC issues a COA on every batch, with third-party testing on customer-named parameters, and traces intake lots to the growing district, and to farm level on organic SKUs. First-order MOQ is 50 kg per SKU, and samples ship by international courier in 3 to 5 business days.

Which documents travel with an organic spice consignment to the EU?

An EU organic consignment needs a certificate of inspection issued in TRACES before it leaves the exporting country, under Delegated Regulation (EU) 2021/2306. It also travels with the batch COA, certificate of origin, phytosanitary certificate, and commercial documents, all carrying the same lot reference so border control can match them.

How Silk Route Ventures can help

Silk Route Ventures (SRV) supplies bulk Ceylon spices, herbs, coconut products, and botanical powders against the buyer’s specification from the BRCGS and FSSC 22000 V6 audited Silk Foods Ceylon (SFC) facility in Matale. Every batch ships with its own Certificate of Analysis and a lot code that matches the traceability record, the packing list, and the origin documents, with farm-level tracing on USDA Organic and EU Organic SKUs. First-order MOQ is 50 kg per SKU, with volume-tier pricing at 500 kg, 1,000 kg, and 2,500 kg, and production lead time of 2 to 3 weeks from PO to dispatch. For distributors consolidating several origin suppliers, one dossier covers the full catalogue. Contact us to send an inquiry or request a sample COA and traceability record.

Sources

European Union, Regulation (EC) No 178/2002 (General Food Law), Article 18, Traceability. EUR-Lex. https://eur-lex.europa.eu/eli/reg/2002/178/oj/eng (retrieved 24 September 2026)
US Food and Drug Administration, FSMA Final Rule on Requirements for Additional Traceability Records for Certain Foods, and Food Traceability List. https://www.fda.gov/food/food-safety-modernization-act-fsma/fsma-final-rule-requirements-additional-traceability-records-certain-foods (retrieved 24 September 2026)
US Food and Drug Administration, 21 CFR 1.506, What foreign supplier verification and related activities must I conduct? eCFR. https://www.ecfr.gov/current/title-21/chapter-I/subchapter-A/part-1/subpart-L/section-1.506 (retrieved 24 September 2026)
European Commission, Delegated Regulation (EU) 2021/2306 on official controls of organic products imported into the Union. EUR-Lex. https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021R2306 (retrieved 24 September 2026)
BRCGS, Information Paper: FSMA Final Rule on Requirements for Additional Traceability Records for Certain Foods, 2023. https://www.brcgs.com/about-brcgs/news/2023/information-paper-fsma-final-rule-on-requirements-for-additional-traceability-records-for-certain-foods/ (retrieved 24 September 2026)
CBI, What requirements must herbs and spices meet to be allowed on the European market, 2026. https://www.cbi.eu/market-information/spices-herbs/buyer-requirements (retrieved 24 September 2026)

Written by the Silk Route Ventures Trade Team. Silk Route Ventures (E-Silk Route Ventures Ltd) is a Sri Lankan B2B supply-chain operator for the Food, Beverage, Wellness, and Nutraceuticals sectors. The Silk Foods Ceylon manufacturing arm holds BRCGS and FSSC 22000 V6 certification. Questions or to request a sample: Contact us or email info@esilkroute.com.lk.

Traceability Depth and COA Cadence: A Compliance Primer for Buyers