WhatsApp contact icon for Nathan ISO Consulting
WhatsApp contact icon for Nathan ISO Consulting

ISO 22000 Certification in Portugal

Last reviewed: November 2026

ISO 22000 certification in Portugal gives food and drink businesses a recognised way to prove that hazards are controlled from raw material to finished product. Portugal's food sector includes canned fish, olive oil, wine, dairy, meat, bakery, fruit and vegetables, ready meals and a large catering and hospitality industry, and many of these businesses export to retailers that demand independent food safety evidence.

Nathan ISO Consulting implements ISO 22000:2018 food safety management systems for Portuguese producers, processors, packers, distributors and catering operators. We combine HACCP, prerequisite programmes and management system discipline, working remotely and on site across Lisbon, Porto, Braga, Aveiro, Setúbal and Sines.

Quick answer: ISO 22000 is the international standard for food safety management systems, combining HACCP principles with a management system. In Portugal, a small food business can usually be certified in four to eight months, with certification body fees of roughly €3,500 to €8,500 over three years, before consulting.

Looking for ISO 22000 Certification in Portugal?

ISO 22000 at a Glance for Portuguese Businesses

ItemTypical position in Portugal
Current editionISO 22000:2018
Certificate validityThree years, with annual surveillance audits
Typical timeline4 to 8 months for a small or medium site
Indicative certification body fees€3,500 to €8,500 (small), €8,500 to €20,000 (medium)
Legal requirementHACCP-based procedures are legally required; ISO 22000 certification is voluntary
Best fitFood and drink manufacturers, packers, distributors, caterers, packaging suppliers

What Is ISO 22000?

ISO 22000:2018 specifies requirements for a food safety management system for any organisation in the food chain. It combines the Codex HACCP principles with Annex SL management system requirements, covering interactive communication, system management, prerequisite programmes and hazard control.

It applies across the chain, from farms and feed producers to processors, transport, storage, retail, catering and packaging manufacturers.

What It Actually Covers

  • Context, interested parties and food safety management scope
  • Leadership, food safety policy and roles
  • Risk and opportunity planning
  • Prerequisite programmes for hygiene, pest control, cleaning and maintenance
  • Hazard analysis, operational prerequisite programmes and critical control points
  • Traceability, recall and withdrawal procedures
  • Emergency preparedness and response
  • Verification, internal audit and management review

Structure of the Standard

  • Clauses 4 to 10: management system requirements aligned to Annex SL
  • Operational planning: prerequisite programmes, hazard analysis and the HACCP plan
  • Traceability and recall: identification, withdrawal and communication
  • PDCA at two levels: management system and the HACCP process itself
  • Interactive communication: with suppliers, customers and authorities

Why ISO 22000 Certification in Portugal Matters

Food Exports and Retailer Requirements

Portuguese canned fish, olive oil, wine, cheese, fruit and prepared foods are sold across Europe and beyond. Importers and retailers require independent proof of food safety, and ISO 22000 certification supports supplier approval, particularly for businesses that have not adopted a retailer-specific scheme.

Regulatory Context

Food business operators in Portugal must apply HACCP-based procedures under European food hygiene law, and the food safety and economic authority ASAE carries out official inspections. ISO 22000 does not replace legal compliance, but it structures the hazard analysis, prerequisites and records that inspectors and customers expect.

Fish, Seafood and Agri-food

Portugal's fishing, canning, aquaculture and agri-food sectors face specific hazards: histamine in fish, allergens, microbiological contamination and foreign bodies. A systematic hazard analysis and verified controls reduce incidents and withdrawals.

Tourism and Catering

Hotels, restaurants, event caterers and central kitchens serve large numbers of visitors every year. Documented controls for allergens, temperatures and hygiene protect guests and reputation.

Packaging and Supply Chain

Packaging manufacturers, cold stores, hauliers and distributors influence food safety. ISO 22000 certification demonstrates that suppliers manage contamination and traceability risks.

Accreditation and Credibility

IPAC is Portugal's national accreditation body, and buyers expect certificates from certification bodies accredited for ISO 22000 under recognised arrangements. Some retailers prefer other benchmarked schemes, so confirm customer acceptance before committing.

Which Portuguese Organisations Need ISO 22000

  • Food and drink manufacturers and processors
  • Fish canneries, seafood processors and aquaculture operators
  • Olive oil, wine and spirits producers and bottlers
  • Dairy, meat, bakery and confectionery producers
  • Fruit and vegetable packers and exporters
  • Food packaging manufacturers
  • Cold stores, distributors and logistics providers
  • Central kitchens, caterers and hospitality groups
  • Food retailers and own-brand suppliers
  • Animal feed and pet food producers

The Business Benefits

  • Access to retailers, importers and food service buyers
  • Fewer incidents, complaints and product withdrawals
  • Structured hazard analysis and verified controls
  • Stronger traceability and faster recall response
  • Better inspection outcomes with authorities
  • Clear food safety responsibilities across the team
  • Integration with ISO 9001, ISO 14001 and ISO 45001

How to Get ISO 22000 Certified in Portugal: Step by Step

StepWhat Happens
Step 1: Gap AnalysisWe assess current food safety practice against ISO 22000:2018 and applicable legal and customer requirements.
Step 2: Scope and Product MappingWe define products, processes and sites in scope and map flow diagrams from intake to dispatch.
Step 3: Food Safety Team and PolicyWe establish the food safety team, policy and objectives, with clear roles for production, quality and management.
Step 4: Prerequisite ProgrammesWe implement hygiene, cleaning, pest control, maintenance, allergen management, supplier control and training programmes.
Step 5: Hazard AnalysisWe identify biological, chemical, physical and allergen hazards for each product and process step and assess significance.
Step 6: Control Measures and HACCP PlanWe establish critical control points and operational prerequisite programmes, with limits, monitoring and corrective actions.
Step 7: Traceability and RecallWe design traceability from supplier lot to customer and rehearse mock recalls.
Step 8: Validation and VerificationWe validate control measures and plan verification, including testing, calibration and internal audits.
Step 9: Internal Audit and Management ReviewWe train internal auditors, run a complete audit cycle and facilitate a management review.
Step 10: Certification Audit Support and SurveillanceWe help select an IPAC-accredited certification body, attend Stage 1 and Stage 2, close findings and support surveillance audits.

ISO 22000 Certification Cost in Portugal

The bands below are indicative certification body fees for ISO 22000 certification in Portugal across the three-year cycle, in euros, excluding consulting, laboratory testing and VAT.

  • Small food businesses, single site: roughly €3,500 to €8,500
  • Medium manufacturers or multi-line sites: roughly €8,500 to €20,000
  • Large or multi-site producers: quoted individually

Audit time depends on headcount, product categories and hazard complexity. Seasonal production may influence audit timing.

How Long Does ISO 22000 Certification Take?

Typically four to six months for a small site with existing HACCP records, and six to ten months for larger or more complex producers. Hazard analysis, validation evidence, a mock recall, an internal audit and a management review must exist before the certification audit.

Common Implementation Challenges in Portugal

  • Generic HACCP plans: copied templates that ignore actual processes
  • Weak prerequisite programmes: cleaning and pest control records incomplete
  • Allergen control: cross-contact not assessed
  • Traceability gaps: lots not linked from intake to dispatch
  • Unvalidated limits: critical limits set without evidence
  • Seasonal staff: training not repeated for temporary workers
  • Supplier control: limited approval of raw material and packaging suppliers
  • Customer scheme confusion: uncertainty over which scheme a retailer accepts

Why Choose Nathan ISO Consulting

We build food safety systems around your real lines, products and staff. Hazard analyses are specific, prerequisite programmes are practical, and records are designed so operators complete them without friction. ISO 22000 certification in Portugal should help you pass customer audits and reduce incidents. Fixed scope and fee, full audit attendance and continuing support. Nathan ISO Consulting is a consultancy, not a certification body, and does not provide legal advice.

Where We Deliver ISO 22000 in Portugal

  • Lisbon: catering, distribution and food service groups
  • Porto: wine, bakery, seafood and food manufacturers
  • Braga: dairy, meat and regional food producers
  • Aveiro: salt, seafood, ceramics packaging and agri-food firms
  • Setúbal and Sines: fish processing, canning and port-linked cold chain

Related Services

See also: ISO 9001 quality management certification Portugal, ISO 14001 environmental management Portugal, ISO 45001 occupational health and safety Portugal, ISO 28000 supply chain security Portugal and ISO 50001 energy management Portugal.

Request a Free ISO 22000 Scoping Call

For ISO 22000 certification in Portugal, tell us your products, sites and customers, and we will confirm the likely scope, timeline and certification body options within one working day.

Ready to start your ISO 22000 certification journey?

Sources and References

  • ISO 22000:2018, Food safety management systems, Requirements for any organization in the food chain (International Organization for Standardization)
  • Codex Alimentarius, General Principles of Food Hygiene and HACCP
  • Regulation (EC) 852/2004 on the hygiene of foodstuffs and ASAE, Autoridade de Segurança Alimentar e Económica
  • Global Food Safety Initiative benchmarking and FSSC 22000 scheme documentation
  • IPAC, Instituto Português de Acreditação

Frequently Asked Questions

No. HACCP-based procedures are a legal requirement for food businesses, but ISO 22000 certification is voluntary. Many exporters and retailers ask for it or an equivalent scheme as proof that hazards are systematically controlled. Check your customer contracts first.

Certification body fees typically fall around €3,500 to €8,500 over three years for small sites and €8,500 to €20,000 for medium ones, before consulting, testing and VAT. Headcount, product categories and hazard complexity determine audit time.

Typically four to six months for a small site with existing HACCP records and six to ten months for larger producers. Hazard analysis, validation, a mock recall, internal audit and management review must be evidenced first.

HACCP is a hazard control method required by food law. ISO 22000 includes HACCP principles inside a full management system with leadership, communication, internal audit and improvement, and it can be independently certified. Auditors assess both.

No. FSSC 22000 is a separate certification scheme that uses ISO 22000 plus sector prerequisite standards and additional requirements. Some retailers require it, so confirm which scheme your customers accept before choosing. Review retailer supplier manuals before deciding.

It varies. Some accept ISO 22000, others require schemes benchmarked by the Global Food Safety Initiative. Ask each key customer in writing which certifications they approve, because this decision shapes cost and implementation approach. Written confirmation avoids costly rework later.

Basic hygiene and operating conditions that keep the environment suitable for safe food, such as cleaning, pest control, maintenance, supplier approval and staff hygiene. Hazard analysis builds on these programmes, and auditors examine them closely.

A control measure identified by hazard analysis as essential to manage a significant hazard, but not a critical control point. It has monitoring and action criteria, and auditors expect evidence that it operates reliably. Allergen changeover is one example.

Yes. Allergens are a recognised hazard, so you must identify them, assess cross-contact, control labelling and changeovers, and verify cleaning effectiveness. Allergen incidents are a leading cause of recalls, so auditors examine this area carefully.

Yes. A small producer or caterer can implement a proportionate system with simple, practical records. Certification often opens retail and export opportunities, and a clear product scope keeps the effort manageable. Seasonal producers can time audits for peak production.

Evidence that hazards are identified, controls validated and monitored, and records complete. Auditors walk the production line, check hygiene and cleaning, test traceability with real lots, and interview operators about procedures and limits. Sampling is based on risk.

Certificates last three years, with annual surveillance audits and a recertification audit at the end of the cycle. Internal audits, verification and management reviews must continue throughout the cycle to keep the system credible. Timing can follow production seasons.

Yes. The standards share the Annex SL structure, so one document control system, audit programme and management review can serve several certificates. Integration reduces duplication, especially for food manufacturers already holding ISO 9001. Auditors can plan one visit.

Yes. Procedures, HACCP plans, training and records can be prepared in Portuguese, English or both. Visual instructions help operators and seasonal workers, and export customers often require English documentation, which we prepare in parallel. Bilingual sets are common.

Partly. Documentation, training and reviews run well online. Hazard analysis, line walk-throughs, hygiene checks and certification audits require physical presence in your facility, which we arrange at your Portuguese sites. Supplier approval and traceability files can be reviewed online.

Nathan ISO Consulting is headquartered in Dubai and does not maintain a Portuguese office. We deliver through remote engagement and scheduled on-site visits. Workshops and documentation run online, while verification and audits are attended in person.

CONTACT
Reach out to us for any inquiries, collaborations,
or just to say hello!

Contact information for Nathan ISO Consulting

CLIENTELE
Our Valuable Client

WHEN NUMBERS MATTER
Empowering Insights into our Business Performance