FDA + FSMA + HACCP compliance on a Magento storefront, what does the platform need to do?

The store itself isn’t a food-safety actor, that’s the kitchen + fulfillment center. But the store carries compliance-traceability obligations:

• Lot / batch tracking, FSMA Section 204 requires traceability for high-risk foods (soft cheese, sprouts, leafy greens, fresh fish, ready-to-eat). Each shipped unit must trace back to a lot/batch. The pattern: a custom lot_number attribute populated at pack time, written into the order line item, queryable from the admin in case of a recall. Magento + a thin lot-tracking extension or a custom module ($4k, $10k build).
• Recall-readiness, in a FSMA recall the FDA expects you to identify every shipment of the affected lot within 24 hours. Magento admin needs a saved report query: “all orders containing SKU X with lot Y between dates A and B.” Pre-built and tested annually.
• Temperature-log attachment, HACCP-graded products (raw-milk cheese, sushi-grade fish, fresh oysters) need a temperature log proving cold-chain integrity through transit. Some FedEx/UPS cold-shipping services provide this; for self-managed cold chain, IoT temp loggers (TempTale, LogTag) generate the file. Magento attaches the log to the order record as a downloadable for the customer.
• Country-of-origin labeling, FDA requires COO disclosure for most imported foods. Surfaced on PDP (origin attribute) and on packing slip.

Allergen compliance (FALCPA, FASTER Act for sesame as of 2023) is enforced at the product-content level, allergen attribute populated, PDP allergen panel surfaced, packaging label accurate. The Magento side is content discipline, not platform features.