A guest asks whether the sauce contains celery. It is Friday, 19:40, the kitchen is three tickets deep, and the person who takes that question is a student in her second week who was shown the allergen folder once, in Dutch, by a shift leader who was also busy.
Whatever your quality manual says, that exchange is the moment your compliance either happens or does not. Everything below is about closing the distance between the manual and that counter, across every site you run.
This guide is written for restaurants, canteens, catering operations and food retail. Production sites work differently, with a fixed line, a written HACCP plan built around measured critical control points and a certification audit on top; that is covered separately.
The law asks for a result, not a course
Two obligations sit underneath everything. Regulation (EC) 852/2004 art. 5 requires food business operators to put in place, implement and maintain procedures based on HACCP principles. Annex II, Chapter XII adds the training duty: food handlers are supervised and instructed or trained in food hygiene in line with their occupational activity, and those responsible for developing and maintaining the HACCP procedure have received adequate training in the application of HACCP principles.
Read the second part carefully, because chains routinely buy the wrong thing here. The HACCP-principles training is aimed at the people who build and maintain the procedure, usually a quality manager and perhaps your area managers. The obligation on the rest of the team is instruction in hygiene commensurate with what they actually do.
And the regulation names no course, no certificate, no minimum duration, no refresher interval. That is not a loophole. It is a heavier obligation than a certificate would be, because the standard is fitness for the job rather than attendance at a session. It also means nobody can tell you that a two hour classroom module is required, and nobody can tell you it is sufficient.
Chapter XIa makes this a management item, not a quality department item
Annex II, Chapter XIa on food safety culture, inserted by Regulation (EU) 2021/382, is the part of the regulation most operators have not read. It requires commitment from management, including ensuring that there is appropriate training and supervision for staff. It requires awareness among all employees of the food safety hazards and of the importance of hygiene. It requires open communication across the team.
For a multi-site business that changes who owns the problem. Awareness among all employees is not something a head office quality manager can create with a document. It is created or destroyed by what happens on a shift at site 23, which makes it an operations obligation carried by the same line managers who own labour cost and service speed.
Belgium: the system is compulsory, the validation is not
Every operator in Belgium must establish, apply and maintain an autocontrolesysteem (self-checking system) under the KB of 14 November 2003, art. 3, paragraph 1. Under art. 9 an operator may use an autocontrolegids (sector guide) approved by the FAVV rather than writing everything from scratch, and under art. 10 the FAVV can delegate validation to approved certification and inspection bodies.
The distinction people miss: having the system is mandatory, having it validated is voluntary. Validation buys two concrete things, a reduced annual levy and a lower inspection frequency, and it comes with conditions worth checking before you count on it. Validation has to cover all the activities of the establishment, and it has to cover the full preceding calendar year.
Both of those conditions are training conditions in disguise. A site that opened a new activity mid-year, or a site whose hygiene instruction quietly lapsed for a quarter while a manager position was vacant, is the site that breaks the pattern for the whole establishment.
The Netherlands: a hygienecode is a route, not a requirement
Dutch operators carry the same HACCP duty from 852/2004, given national effect through the Warenwetbesluit hygiene van levensmiddelen. A hygienecode is a sector plan drawn up by a trade organisation and approved by the NVWA.
Two things about it are widely misunderstood. Using one is not obligatory: a business must have a HACCP-based system, and it may write its own or follow an approved code. And there is no national compulsory hygiene diploma for ordinary food handlers. If a supplier is selling your chain a mandatory certificate for every employee, ask them which provision requires it.
The practical consequence for a Belgian group with Dutch sites, or the reverse, is that the documentation architecture differs while the floor-level instruction is nearly identical. Build the instruction once, per role, and let the paperwork above it differ by country.
Non-prepacked food puts the rule in the hands of whoever is standing there
This is the sharpest point in foodservice, and it deserves the most attention.
Almost everything you sell is non-prepacked. Regulation (EU) 1169/2011 art. 44(1)(a) makes allergen information mandatory for non-prepacked food, with the detail left to national law. Both countries then permit the oral route, and both attach a condition to it that is really a staffing and training condition.
In Belgium, the KB of 17 July 2014 allows the information to be given in writing (visibly displayed, or held in a register at the point of sale with a clear reference to it) or orally. Oral is permitted only if a member of staff is present who can give correct and complete information.
In the Netherlands, the Warenwetregeling allergeneninformatie niet-voorverpakte levensmiddelen art. 3 permits oral information provided it is given immediately and correctly, provided the written information is available to staff and to the inspection, and provided a visible notice points the customer to a member of staff. Note that middle condition: the written source has to be there for the inspector as well as for your team, which is why "the chef knows" is not a system.
The rule is written about the person nobody trains properly
Put those two provisions side by side and you get an unusual legal structure. The obligation is not discharged by a policy, a matrix or a folder. It is discharged, order by order, by whoever happens to be at the counter, on the floor or at the serving line at that moment.
In practice that person is the newest, most part-time, most likely to be agency-supplied member of your team, working the shift that management does not. They are also the person your training programme reaches last, because the standard onboarding session runs on a weekday afternoon and they started on a Saturday.
That mismatch is the whole problem, and it is not solved by making the allergen training longer. It is solved by making it reach that person before their first shift, in the language they read, in a form that fits between covers, and by being able to see, per site, who actually has it.
Building it from what your sites already hold
The material exists: the allergen matrix, the recipe specification, the cleaning and temperature checklists, the autocontrole procedures, the opening and closing routine. Aristotl converts those documents into courses of three to five minutes that a server, a cook or a counter assistant completes on their own phone, without a laptop and without installing an app, each with a knowledge check so what you hold afterwards is a result rather than a signature.
Content is translated per employee, which is what makes instruction commensurate with the job for a team that reads Dutch, French, Polish and Portuguese. Completion is recorded per site, per role and per version, and exports, so when a menu changes on Monday you can see which kitchens and which counters are actually running the new information by Tuesday, rather than finding out from a customer.
Start with the question your staff get wrong
Take the dish or the counter product that generates the most allergen questions, and the site where you would least like an inspection to land. In a demo we build that into the courses your shifts would receive, and show you what the record for that site looks like the next morning.