HACCP for kombucha: the two control points that actually matter
A HACCP plan can balloon into a binder nobody reads. For kombucha, the food-safety story is refreshingly focused. Two things do almost all the work: how fast you get acidic, and how much alcohol ends up in the bottle.
Kombucha is an unusually safe product when it's made well, and the reason is chemistry. A finished kombucha sits well below pH 4.2, and that acidity is a genuine barrier to foodborne pathogens. The job of a food-safety plan isn't to add ceremony. It's to prove, batch after batch, that the barrier was there. Aligned with the Kombucha Brewers International (KBI) Code of Practice, here are the control points worth your attention.
Critical control point 1 (CCP 1): acidification
The primary hurdle is low pH, reached quickly. The risk window is the first day or two of fermentation, before the culture has acidified the sweet tea. If the batch drops below roughly pH 4.2 early, commonly within about 48 hours, pathogens never get a foothold.
What drives an early, reliable drop is pitching enough mature, low-pH starter liquid, and treating that as a food-safety practice, not just a flavour choice. The 10% figure you'll sometimes see quoted is too little for a dependable early drop; pitch at least 20% by volume of well-acidified starter, and more when your starter is younger or less sour. So the things worth recording are simple: the starter you pitched, the pH at set, and the pH as it falls, held low all the way to packaging.
This is the one measurement that should drive a clear pass/fail on your batch record. Everything else supports it.
Critical control point 2 (CCP 2): alcohol
Fermentation makes a little ethanol. In most markets a drink sold as non-alcoholic must finish under 0.5% ABV (parts of the EU allow up to 1.2%). This is a regulatory line more than a safety one, but it belongs in your plan because it's a real limit on a real product. Test finished batches, record the result, and know your market's threshold.
Unlike acidification, an alcohol reading shouldn't silently block a batch in your system: it's information you act on, not an automatic gate. But it should be documented every time.
Everything else is a prerequisite programme (PRP)
Two controls carry the safety case; a handful of prerequisite programmes keep the conditions right around them:
- Cool the tea before you pitch. Pitching into tea that's too hot stresses or kills the culture and slows acidification, the thing you most need to happen fast.
- Hold a sensible ferment temperature (commonly around 21 to 32 °C). Warm enough to acidify briskly, not so warm that things run away.
- Keep raw, live product cold after packaging (roughly 4 to 9 °C) so it stays stable and doesn't over-carbonate.
- Hot-steep your tea. A simple thermal step that starts you from a clean base.
These matter, but they're operational prerequisites, not the control points themselves. Keeping that distinction clear is what stops a plan from turning into noise.
What a kombucha HACCP plan has to contain
A plan is not a document you write once. For each critical control point it answers five questions, and they come straight out of the seven HACCP principles:
- Hazard analysis. What could go wrong, and which step controls it. For kombucha the list is short: pathogens surviving in sweet tea that has not acidified yet, and ethanol above the limit for a drink sold as non-alcoholic.
- Critical limit. The number that separates safe from not. Below roughly pH 4.2, reached early, is the one carrying the safety case.
- Monitoring. Who measures what, with which instrument, how often. A pH reading at set, during fermentation and at packaging is already a monitoring plan.
- Corrective action. What happens when a reading misses. Not disposal by reflex: investigate, decide, and record what you decided and why.
- Verification and records. Proof the plan actually ran. A calibrated meter, dated readings, and a batch record you can hand over without assembling it first.
Prerequisite programmes sit underneath all of that. They do not each need a critical limit, which is exactly why keeping them separate from the two CCPs keeps a plan short enough to be used.
The point of the paperwork
Documentation exists to answer one question on demand: was this batch safe, and can you show it? If a record ever conflicts with what you know happened on the floor, trust the floor and investigate: the log is there to reflect reality, not replace it. And documenting a low pH is never a substitute for a lab or a qualified assessment; it's the evidence that your process did what it should.
Frequently asked questions
Do I need a HACCP plan to sell kombucha commercially?
What are the critical control points for kombucha?
What pH does kombucha need to reach, and how fast?
Why do some guides say pH 4.6 and others 4.2?
What is the difference between a CCP and a prerequisite programme?
Does pasteurising change the plan?
This article is general information, not certified food-safety, legal or regulatory advice. Follow your local regulations and the current KBI Code of Practice, and validate your own process.
Related reading
- Keeping kombucha under 0.5% ABV
- How to register your kombucha in Argentina: RNE, RNPA and the Food Code
- Kombucha batch tracking and recall-ready records
See how BrauMo handles this: Take the product tour → · See pricing →