Good Agricultural Practices: Certification, Audits, and FSMA

Good Agricultural Practices certification is a voluntary USDA audit that verifies your fruit or vegetable farm meets the food safety standards commercial buyers expect. It is not a license, not a permit, and not a substitute for federal food safety law. Farms pursue it because grocery chains, wholesalers, and food service distributors typically require it before they will buy from you. The audit is fee-based, scheduled at your request, and repeated annually.¹

What GAP Certification Actually Is

A GAP audit is a paid service the USDA Agricultural Marketing Service (or a USDA-licensed auditor) performs on your farm to confirm you follow recognized food safety practices in growing, harvesting, packing, and holding produce. You request it. You pay for it. You control when it happens. If you pass, your farm appears in a USDA public database that buyers use to verify supplier credentials.

The USDA has moved its program to a single standard called Harmonized GAP, which lines the audit checklist up with the requirements of the FDA Produce Safety Rule under the Food Safety Modernization Act. That alignment matters: preparing for the audit prepares you for the regulatory side too, though the two events remain separate.¹

How It Differs From FSMA Compliance

This is the distinction most producers get wrong, and it costs them. A FSMA Produce Safety Rule inspection is a mandatory regulatory action conducted by FDA or state inspectors. You do not request it, do not pay for it, and do not control when it happens. A GAP audit is voluntary and commercial. Passing one does not satisfy the other.¹

The regulatory inspection only checks what the law requires. The GAP audit goes further, verifying buyer specifications and industry practices that sit above the legal minimum. That is why farms in perfect standing with the FDA still need to schedule the voluntary audit if they want to sell to wholesale channels.

Whether Your Farm Needs Certification

Legally, no farm has to be GAP-certified. The question is whether your buyers require it. Direct-to-consumer operations selling at farmers’ markets rarely need it. Farms selling into grocery chains, food service, school lunch programs, and wholesale distribution almost always do. Ask your intended buyers before spending money on an audit.

Whether the underlying FSMA Produce Safety Rule applies to you is a separate question with a clearer answer. The rule covers any farm with average annual produce sales above $25,000 over the previous three years, adjusted for inflation from a 2011 baseline. The actual dollar cut-off in any given year is higher than $25,000, and the FDA publishes updated figures annually.²³

“Produce” here means fruits and vegetables, including herbs, sprouts, and mushrooms. The rule specifically excludes crops the FDA determined are rarely consumed raw: potatoes, sweet corn, sweet potatoes, pumpkins, winter squash, eggplants, cranberries, okra, peanuts, and certain beans and nuts. If your farm grows only items on that list, the Produce Safety Rule does not apply. Produce that is commercially cooked, canned, or pasteurized before reaching consumers is also excluded.⁴

The Qualified Exemption for Small Local Farms

Smaller farms that sell mostly to local consumers and businesses can qualify for a partial exemption from the Produce Safety Rule. Two conditions apply. Your average annual food sales over the previous three years must fall below an inflation-adjusted threshold, roughly $665,947 based on the most recently published values. And more than half of those sales must go to “qualified end-users.”³

A qualified end-user is either a consumer buying directly from you, or a restaurant or retail food establishment located in your state or within 275 miles of your farm. Sales to distributors, wholesalers, or out-of-state retailers do not count.⁵

The exemption is partial. Qualified exempt farms must still put the farm name and full business address on packaged produce, or on a sign at the point of purchase for bulk sales. The FDA can withdraw the exemption if the farm is linked to an outbreak or poses a material public health threat. After withdrawal, you have 120 days to reach full compliance, with 15 calendar days to appeal.⁶

A qualified exemption reduces your FSMA obligations. It has nothing to do with GAP certification, which remains available to any farm that wants it and required by any buyer that demands it.

What Auditors Check

Because Harmonized GAP mirrors the Produce Safety Rule, the audit covers the same practical territory the federal rule covers.

Water Quality

Water that directly contacts produce during or after harvest must have no detectable generic E. coli in a 100-milliliter sample. Untreated surface water cannot be used for these purposes. This covers washing, cooling, ice that touches produce, and dehydration prevention.⁷

Pre-harvest irrigation water sits under a different framework. Farms must prepare a written agricultural water assessment covering the source, distribution system, application method, crop characteristics, and environmental conditions, and implement mitigation measures when the assessment identifies hazards.⁸

Soil Amendments

Treated biological soil amendments of animal origin, like compost, must meet specific microbial standards before application. Two validated composting methods are recognized: static aerated composting held at a minimum of 131°F for three consecutive days, and turned windrow composting held at 131°F for at least 15 days with a minimum of five turnings. Both need adequate curing afterward.²

Producers often ask about the waiting period between applying raw manure and harvest. The FDA has not finalized one. The agency proposed a 9-month interval, withdrew it after public comment, and reserved the provision pending a risk assessment.⁹ The widely cited 120-day and 90-day intervals come from the National Organic Program, not FSMA.¹⁰ Most GAP audit programs and buyers adopt those organic intervals as best practice, so follow them.

Worker Hygiene and Animal Intrusion

Everyone who handles produce must be trained on handwashing and illness reporting before starting field work. Farms need clean restrooms and handwashing stations stocked with soap and single-use towels within reasonable distance of work areas. Hygiene failures are among the most common triggers for automatic audit failure.

Farms must also monitor fields for wildlife and domestic animal activity and take reasonable steps to limit access. When intrusion happens, document it, then assess whether affected produce is still safe to sell. In practice, that often means destroying the crop in the immediate area around evidence of contamination.

Records

The paperwork is where most farms stumble. You need a written food safety plan built around your actual fields, water sources, and processes. Extension programs offer templates, but the plan has to be yours. On top of the plan, keep:

Water test results and your pre-harvest water assessment.
Dated training logs showing each worker completed food safety training before starting.
Cleaning and sanitation schedules for tools, packing surfaces, and storage.
Soil amendment records: application dates, sources, and treatment verification.
Corrective actions taken in response to animal intrusion, equipment breakdown, or failed tests.

Records required under the Produce Safety Rule are exempt from the FDA’s electronic records and signatures regulation, so digital records are fine without electronic signature validation. Spreadsheets, farm software, and organized photos all work as long as they are legible, accessible during an inspection, and kept current through the season.¹¹

Scheduling and Passing the Audit

Contact the USDA Agricultural Marketing Service or a USDA-licensed auditor when you are ready. The audit has to happen during active production or packing, because the auditor needs to observe real operations. It starts with an opening conference, moves through a walkthrough of fields, packing areas, and storage, and includes a review of your food safety plan and records.

Scoring is point-based. A minimum overall score of 80 percent is generally required for certification. If you pass, the certificate typically arrives within a few weeks and your farm shows up in the USDA’s public database.

Conditions That Fail the Audit Instantly

Certain findings end the audit on the spot regardless of your overall score:

Immediate contamination risk, such as non-potable water in a wash system or a leaking sewer line near storage.
Pest evidence: rodent activity, excessive insects, or bird droppings in production or storage areas.
Dangerous hygiene practices, including workers not washing hands after using the toilet, returning partially eaten food to the product flow, or spitting on produce.
Falsified records, such as a temperature log filled in for dates that have not yet occurred.
No documented food safety plan or no designated person responsible for overseeing it.

Falsification carries special weight. Auditors consider fabricated records an egregious offense, and a farm missing a record is in better standing than a farm that forged one.¹²

Cost

Audits are billed hourly at rates published on the USDA AMS fee schedule, plus travel expenses for the auditor. Rates change annually, so check the current schedule before budgeting. Some states run cost-share programs funded through specialty crop block grants that reimburse a portion of audit costs for qualifying farms. Availability and reimbursement caps vary, so contact your state department of agriculture to see what is offered where you are.

What Happens if You Do Not Certify

Skipping certification is legal. Losing it, or never getting it in the first place, cuts you off from any buyer that requires it, and that includes most wholesale channels. The financial hit from lost contracts often exceeds anything a regulatory penalty would produce.

The FSMA side runs on its own track. If FDA inspectors find produce that is adulterated or poses a contamination risk, the agency can order administrative detention for up to 20 calendar days, extendable to 30 if a seizure or injunction is being prepared. For perishable produce, that alone can destroy the value of a crop.¹³ The FDA can also seek an injunction to stop operations, seize adulterated produce, or pursue criminal prosecution. Strict liability applies, so not knowing about the contamination or the rule is not a defense.

For most produce farms, the practical risk is not a criminal case. It is losing buyers because you lack certification, and losing a season because an inspector shut down your operation. Keeping both sides current is the reliable way to avoid either outcome.

1
United States Department of Agriculture. USDA Aligns Harmonized GAP Program with FDA Food Safety Rule
2
eCFR. 21 CFR Part 112 – Standards for the Growing, Harvesting, Packing, and Holding of Produce for Human Consumption
3
U.S. Food and Drug Administration. FSMA Inflation Adjusted Cut Offs
4
eCFR. 21 CFR 112.2 – What Produce Is Not Covered by This Part
5
U.S. Food and Drug Administration. Frequently Asked Questions on FSMA
6
eCFR. 21 CFR Part 112 Subpart R – Withdrawal of Qualified Exemption
7
Federal Register. Standards for the Growing, Harvesting, Packing, and Holding of Produce for Human Consumption Relating to Agricultural Water
8
U.S. Food and Drug Administration. FSMA Final Rule on Pre-Harvest Agricultural Water
9
U.S. Food and Drug Administration. FDA Releases Risk Assessment of Foodborne Illness
10
Agricultural Marketing Service. 5006 – Processed Animal Manures in Organic Crop Production
11
eCFR. 21 CFR Part 11 – Electronic Records and Electronic Signatures
12
United States Department of Agriculture. Good Agricultural Practices and Good Handling Practices Audit Verification Program Policy and Instructions
13
eCFR. Administrative Detention of Food for Human or Animal Consumption