Hospitality compliance software: what it must cover
General information for UK hospitality operators, not legal advice. If something here is wrong or out of date, the editorial policy explains how to report it.
Hospitality compliance software has to produce the record an inspector asks for. Here is what UK law requires and how to test a system before buying.
Hospitality compliance software is a system that records food safety checks, staff hours and safety assessments in a form an environmental health officer or an employment tribunal will accept as evidence. A system worth paying for covers four duties at once: hazard control under food hygiene law, temperature control, working time and rest, and the written assessments that sit under health and safety law. Anything narrower leaves part of the file on paper, which is where records go missing.
The useful distinction is between a tool that helps a team remember to do a check and a tool that proves the check happened. Enforcement turns on whether the record exists, whether it was made at the time, and whether it names the person who made it.
What hospitality compliance software has to cover
The starting point for any food business is Article 5 of Regulation (EC) 852/2004, which requires food business operators to put in place, implement and maintain a permanent procedure or procedures based on HACCP principles. That is a documented duty, which is why a food business needs a written plan and a daily record showing the plan being followed. A system that produces one without the other is half a system.
| Duty | The record it has to produce | Where it usually fails |
|---|---|---|
| HACCP procedures | Written plan, critical limits, monitoring and corrective actions | Plan written once, never matched to the daily checks |
| Chilled and hot holding | Dated temperature readings with a name against each | A week of logs completed in one pen on a Friday |
| Working time and holiday | Rotas, clock-in records, rest breaks, leave balances | Planned hours in one system, worked hours in another |
| Risk assessment and COSHH | Signed assessments with review dates and named approvers | Assessments with no review date and nobody chasing them |
Four separate products can satisfy that table. The reason operators consolidate is not the licence cost, it is that an inspection or a claim asks for several of those records at once, in the same date range, for the same site.
The food safety record an inspector asks for
Safer Food, Better Business is the Food Standards Agency pack used in England, Wales and Northern Ireland; Scotland uses CookSafe instead. Either way the evidence is the same: opening and closing checks, temperature readings, cleaning records, delivery and supplier checks, and a note of what was done when something went wrong. An officer will normally ask for a defined period, commonly the last six weeks, and will look at whether the entries are plausible as a record of separate days.
Paper fails that test quietly. Nobody knows a check was missed until the folder is opened, and a run of identical handwriting across three weeks invites the question of when it was written. Moving checklists off paper matters less because the phone is faster and more because each entry carries a time and a person automatically. When comparing food safety software options, the test is whether the system can export a named date range as a document, not whether the screens look tidy.
The second thing to check is what happens when a check fails. A reading outside its limits should create an action with an owner and a closing note, because the corrective action is the part of the file that shows a business in control rather than one that only writes numbers down.
Temperature control is where most records fail
In England, Schedule 4 to the Food Safety and Hygiene (England) Regulations 2013 makes it an offence to keep food that is likely to support the growth of pathogenic micro-organisms at food premises above 8°C, and exempts food held at or above 63°C for service or display. Food may sit above 8°C for display or service for a single period of up to four hours, after which it is used or thrown away; hot food may sit below 63°C for a single period of up to two hours on the same basis. Most kitchens run fridges at 5°C or below so a door left open does not breach the limit.
Cooking and reheating figures differ by nation. Food cooked or reheated in England, Wales and Northern Ireland has to reach 75°C at the core, while reheated food in Scotland has to reach 82°C. Food Standards Agency guidance is to get cooked food into the fridge within 90 minutes, which is guidance rather than a figure written into the regulations.
A temperature field should behave like a number, not a text box. If the system cannot hold a minimum and a maximum per appliance and flag a reading outside them as it is typed, the out-of-range value is recorded and ignored, which is the failure paper already has. Staying inspection ready across the year depends on that behaviour more than on any reporting screen.
Working time and holiday are compliance records too
Rota tools are often bought as a scheduling convenience and then relied on as evidence. Regulation 4 of the Working Time Regulations 1998 caps working time at an average of 48 hours for each seven days across the applicable reference period, normally 17 weeks, unless the worker has opted out in writing. A worker whose daily working time exceeds six hours is entitled to an uninterrupted break of at least 20 minutes, and to at least 11 consecutive hours of rest between working days.
Holiday is where records most often come apart. The statutory minimum is 5.6 weeks of paid annual leave, and there is no separate right to bank holidays off or paid, so an employer may count them towards the 5.6 weeks. The 12.07 percent accrual method applies only to irregular-hours and part-year workers, for leave years beginning on or after 1 April 2024, and presenting it as the general rule understates what fixed-hours staff are owed. A holiday entitlement calculator settles a single case quickly, but a claim asks for a year of hours, and that has to come from the system.
The practical requirement is that planned hours, clocked hours and approved timesheets sit in one thread. Where they do not, the figures behind a disputed payslip are rebuilt by hand from three sources, which is the expensive form of poor rota management.
Allergens, COSHH and the rest of the file
Allergen information has been a labelling duty for food prepacked for direct sale since Natasha's Law applied on 1 October 2021, which means a full ingredient list with the allergens emphasised. Where that list is generated from the recipe rather than typed onto a laminated sheet, the kitchen chart and the dish specification cannot drift apart.
COSHH assessments are the quietest part of the file and the easiest to fail, because a register goes stale without anyone noticing: safety data sheets expire, suppliers swap products, and the assessment keeps its original approval date. A workable system dates each assessment, sets a review cycle, and shows expired and missing entries in the same list.
Ratings sit on top of this. The Food Hygiene Rating Scheme runs from 0 to 5 in England, Wales and Northern Ireland; Scotland uses the Food Hygiene Information Scheme, which gives a pass or improvement required result rather than a number. The rating reflects confidence in management, which in practice means the quality of the record.
How to test a system before committing to it
Demonstrations show the best case. A short list of requests exposes the rest.
- Ask for a PDF of six weeks of one checklist, with a completion time and a name on every line, generated live rather than prepared in advance.
- Enter an out-of-range fridge temperature and watch what the system does next without any further clicks.
- Ask how a check completed in a walk-in with no signal is stored, and whether the record keeps the time it was done separately from the time it synced.
- Ask what happens to a check that is never completed, and how a manager learns about it before the end of the month.
- Ask to see a working week costed against a labour budget, then ask where the worked hours behind it come from.
- Ask which records are exportable if the contract ends, and in what format.
A system that answers those six comfortably will hold up in an inspection. One that needs a follow-up call for any of them is a reporting tool rather than a compliance record.
Where Zynthio fits
Zynthio is a UK hospitality management platform sold per site with unlimited users, used in a browser and in free iOS and Android apps, covering food safety and compliance records, HR and rotas, training, reputation, cash and back-office trading. The food safety module replaces the paper pack with phone-completed checks, validated temperature fields that raise a corrective action on an out-of-range reading, offline capture that keeps the time of the check separate from the sync time, and a six-week PDF export naming and timing every entry.
There are two plans, both per site per month. Core is £59 per site per month and carries Checklists and Monitoring, Defect Management, Audits, HACCP, COSHH, Risk Assessments, the Refusal Book, Reporting, and Recipes with allergens. Professional is £149 per site per month and adds ZynHR, Training, Review Management, Finance, Cash-up and priority UK support. Annual billing gives two months free, and ten or more sites takes 15 percent off automatically.
Add-ons use the same per-site model on either plan. ZynBookings is £29. EPOS and Stock is £49 and is flagged as coming soon. Customer Loyalty is £39, free for the first 100 members, and is also flagged as coming soon, so neither of those two should be counted on when comparing what is available today. There is no free plan; the trial is 14 days, full-featured, with no credit card.
Frequently asked questions
Does hospitality compliance software remove the legal responsibility from the operator?
No. The duties under food hygiene law and the Working Time Regulations 1998 sit with the food business operator and the employer, not with a supplier. Software changes the quality and availability of the evidence, so a check is timestamped and attributed rather than remembered. If an inspection finds the records thin, the business answers for it.
Is a digital record accepted by an environmental health officer?
Yes. There is no requirement for records to be on paper, and an officer is concerned with whether the record is contemporaneous, attributable and complete for the period requested. A digital export usually reads better than a folder because each entry carries a time and a name. Being able to produce a defined date range on the spot matters more than the format.
How long do compliance records need to be kept?
It depends on the record. Food safety records are commonly kept for the shelf life of the product plus a margin, with many operators holding a rolling year, and an officer will usually ask for a recent period such as six weeks. Working time and pay records follow employment and tax retention periods, and VAT records must be kept for six years.
Do all modules have to be used from the start?
No. Most venues begin with whichever area causes the most pain, commonly food safety checks or rotas, and add the rest once staff are logging in daily. Rolling out everything at once tends to produce partial adoption across every module rather than solid adoption of one. Multi-site groups usually go site by site for the same reason.