Here’s how food safety usually comes up in a catering sales meeting. The caterer mentions they’re SFDA compliant and HACCP certified. The procurement manager writes it down. Both sides nod. Then everyone moves on to menu tastings and pricing discussions, because that’s the part people actually enjoy talking about.
The problem is that “SFDA compliant” has become a phrase that means everything and nothing. Every caterer says it. Very few are asked to prove it beyond showing a certificate. And the gap between having a food safety certificate on the wall and actually running a food safety system every single day? That gap is where health incidents happen.
We’ve been operating under Leylaty Hospitality Group since 1948 — 77 years of food service in Saudi Arabia. We’ve seen what happens when food safety is treated as a marketing checkbox instead of an operational discipline. This guide is for the procurement managers and quality officers who want to evaluate a caterer’s food safety practices with more rigour than just asking for the certificate.
What SFDA actually requires (the real version)
The Saudi Food and Drug Authority sets the regulatory framework for all food service operations in the Kingdom. For contract catering companies preparing and delivering meals to corporate and government clients, the requirements cover the full chain from raw ingredient to plate.
At the baseline level, here’s what SFDA mandates:
Facility licensing and registration. Your production kitchen needs to be registered with SFDA and meet structural standards — ventilation, sanitation, pest control systems, waste management infrastructure. Not every kitchen qualifies. Plenty of rented commercial spaces were built for restaurant-scale cooking, not industrial-volume catering, and the structural requirements are different.
Staff health documentation. Every food handler holds a valid health certificate and completes food safety training. Not once. Certificates expire. Training needs refreshing. The caterer you’re evaluating should be able to show you a current roster of certified staff — not certificates from 2022 that nobody’s renewed.
Temperature control. Cold foods below 5°C. Hot foods above 63°C. The zone between those numbers is where bacteria multiply rapidly, and in Saudi Arabia — where summer ambient temperatures hover around 45°C for months — meals spend more time at risk during transport than in almost any other operating environment globally. This isn’t a theoretical concern. It’s a daily operational challenge that requires specific equipment and discipline to manage.
Traceability. If a food safety incident occurs, the caterer needs to trace backwards from the affected meal to the specific supplier, batch, and production run. That requires records. Real, maintained, accessible records. Not a filing cabinet that someone will get around to organizing.
HACCP — what the acronym actually means in a kitchen
HACCP stands for Hazard Analysis and Critical Control Points. It was developed for NASA in the 1960s because giving an astronaut food poisoning in zero gravity would be, well, a uniquely terrible situation. The system later migrated to commercial food service, and it works.
In practice, HACCP means the caterer has identified every point in their operation where food safety could fail and has put controls in place at each one. That sounds obvious. It’s not. Because most kitchens think about food safety at the cooking stage, maybe the storage stage, and then forget about everything that happens between the kitchen and the client’s mouth.
Here’s where the critical control points actually sit in a catering operation:
Receiving — when ingredients arrive
Raw materials show up at the loading dock. Temperature gets checked. Packaging integrity gets checked. Expiration dates verified. Visible damage, unusual odors, anything that looks off — rejected, documented, returned. Simple? Yes. But it only works if someone’s actually doing it for every delivery. We’ve heard stories from procurement officers about caterers whose receiving process is a guy waving trucks through while he’s on his phone. That’s not a control point. That’s a gap.
Cold storage — where things sit quietly going wrong
Refrigerators and freezers need continuous temperature monitoring. Not a wall thermometer that someone glances at during their shift and thinks “looks about right.” Automated logging systems that record readings at set intervals and alert when something drifts out of range.
Our facility — the 8,000 sqm Central Production Unit — was designed with integrated monitoring throughout the cold chain. When you build a production facility from scratch for high-volume catering, you can wire temperature sensors into the infrastructure. When you’re renting a commercial kitchen, you’re often relying on manual checks and hoping nobody forgets.
Cooking — the obvious one, except when it isn’t
Chicken to 74°C internal. Ground meat to 71°C. These aren’t guidelines. They’re minimums, and a HACCP-compliant kitchen uses calibrated probe thermometers and logs the reading for every batch. Not “we cook everything thoroughly.” A number. Written down. For every single production run.
The reason this matters beyond the obvious is traceability. If someone gets sick and the investigation traces back to a specific meal, the caterer needs to produce the temperature log for that batch. If the log doesn’t exist, the assumption is that the cooking wasn’t done properly. Whether it was or wasn’t.
Cooling and portioning — the overlooked danger zone
Cooked food that needs cooling for later service has to pass through the temperature danger zone quickly. Below 5°C within four hours. Blast chillers. Ice baths. Controlled processes with documented timeframes. This step trips up caterers who cook food hours before delivery and let it cool slowly on the counter because the blast chiller is full or broken or both.
Portioning into individual containers — like boxed meal packaging — happens in controlled areas with staff in gloves, hairnets, and clean equipment. The portioning stage is where cross-contamination risk peaks if the caterer doesn’t segregate allergens and manage the workspace properly.
Transport — where most caterers lose the chain
And here’s where it falls apart for a lot of companies. The meal leaves a temperature-controlled kitchen and gets loaded into a delivery vehicle. If that vehicle doesn’t have active refrigeration or insulation, it becomes an oven. In Riyadh summers, the inside of an unrefrigerated van hits 55°C in under 20 minutes. Your carefully prepared meal is now sitting in perfect bacterial growth conditions.
We use refrigerated delivery vehicles with temperature logging that creates a documented record from kitchen to client. Because if the temperature log has a gap — from when the food left our facility to when it arrived at yours — then all the kitchen-side food safety in the world doesn’t matter. The chain broke.
Questions that separate real compliance from brochure compliance
Here’s what we’d suggest asking any catering provider you’re evaluating. These questions work because they’re hard to bluff.
Show me your HACCP plan. Not the certificate. The plan itself. It’s a working document — hazard analysis, control points, monitoring procedures, corrective actions, verification schedules. If the provider looks confused by this request or produces a generic template they clearly downloaded, that tells you everything you need to know.
What happens during delivery when temperatures go wrong? The answer should involve specific equipment — data loggers, insulated containers, refrigerated vehicles — and a documented corrective action procedure. “We use really good containers” is not a food safety answer.
Tell me about your last SFDA inspection. A provider with nothing to hide will talk about it. Maybe they got a minor non-conformance and corrected it. That’s normal. Happens to everyone. A provider who acts like they’ve never had a single finding in ten years of inspections is probably not being straight with you.
How do you manage allergens at scale? In a production facility preparing hundreds of different meals with varied menu items, cross-contamination between allergens is a real operational risk. You need to hear about segregated prep areas, dedicated equipment for allergen-free meals, labelling systems, and specific staff training. “We’re careful about allergies” is not a system.
Can I visit your production facility? Ask this one last. The answer — and the body language that comes with it — is the most revealing data point in the entire evaluation. Any caterer running a clean operation will say yes immediately. Hesitation or excuses? Walk away.
Food safety looks different depending on how meals arrive
The format of catering service changes the risk profile, and it’s worth understanding how.
Boxed meals carry lower contamination risk at the point of consumption because each meal is sealed individually. The primary concern is temperature during transport and the window between production and eating. This is actually one of the main reasons the boxed format has gained popularity with government entities and healthcare-adjacent operations — the hygiene profile is simpler to control. We covered the broader operational case for boxed meals in our earlier piece on boxed meal catering for Saudi corporates.
Buffet service introduces shared serving equipment, extended holding times, and more touchpoints where contamination can happen. It requires active food safety management during service — temperature checks on chafing dishes, regular utensil replacement, time limits on how long each dish stays on the line. More labour-intensive, more things to monitor, more that can go wrong.
Event catering at scale is the highest-complexity scenario. Outdoor venues with no climate control. Long transport distances. Temporary serving setups with improvised infrastructure. Thousands of simultaneous servings. We’ve written separately about food safety at mega-events in Riyadh because it genuinely deserves its own conversation. If your organisation runs large-scale events, the food safety requirements go well beyond what works in a daily corporate catering context.
Why we think food safety investment tells you about everything else
This is something procurement teams don’t always consider, but we think it matters. A caterer’s investment in food safety infrastructure — purpose-built facilities, integrated monitoring, refrigerated fleets, documented systems — tells you something about how they run the rest of their operation too.
These things cost real money. Companies that invest in them are building for long-term reliability, not cutting costs for short-term margins. Companies that cut corners on food safety are almost always cutting corners on staffing, menu quality, and service consistency as well. The food safety question is a proxy for overall operational seriousness.
Avala operates from an 8,000 sqm HACCP-aligned Central Production Unit under Leylaty Hospitality Group. The food safety infrastructure was designed into the facility from the beginning — it’s not something we added later when a client asked about it.
If you want to evaluate a caterer’s compliance credentials or see how a food-safety-first operation actually runs, request our compliance documentation or book a facility walkthrough.