FDA 21 CFR Compliance for Food-Contact Surface Sanitisers

What 21 CFR 178.1010 Is and Why It Exists

Food-contact sanitisers sit at an unusual regulatory intersection because they are simultaneously a pesticide, since they are applied to kill or reduce microorganisms, and an indirect food additive, since residue can transfer from the treated surface into food. Regulators had to address both risks separately, which is why no single rule governs the whole product.

FDA's 21 CFR 178.1010, titled "Sanitizing solutions," sits within Part 178 of Title 21 — the subchapter covering indirect food additives, adjuvants, and production aids. It lists the specific antimicrobial substances that may be used in a sanitising solution applied to food-contact surfaces in public eating places and in food-processing equipment and utensils, at defined maximum concentrations, without requiring a subsequent rinse with potable water before the surface touches food again. Separately, the U.S. Environmental Protection Agency registers the sanitiser product itself under the Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA), because any claim that a product kills or reduces bacteria is legally a pesticidal claim requiring federal registration before sale.

Scope: Who It Applies To and Which Products Are Covered

The scope question trips up more manufacturers than any other part of this framework, because "food-contact sanitiser" spans several distinct regulatory tracks depending on where and how the product is used. A hard-surface sanitiser sold for a commercial kitchen, a food processing plant, and a USDA-inspected meat plant can face three different sets of expectations even though the underlying chemistry looks similar.

Any manufacturer or formulator falls into scope the moment a product label states or implies that it sanitises, disinfects, or reduces microorganisms on a surface that contacts food, food packaging, or food-processing equipment. This includes conveyor and filling-line sanitisers, CIP (clean-in-place) sanitising solutions, utensil and tote sanitisers, and hard-surface sanitisers marketed for retail foodservice warewashing. The table below summarises which framework governs which part of the compliance picture.

Key Requirements: What FDA and EPA Compliance Demands

Compliance for a food-contact sanitiser rests on two obligations that must both be satisfied at once: the product must carry an active EPA registration supporting every claim on the label, and if it is marketed for no-rinse use, its formulation must be built entirely from substances and concentrations permitted under 178.1010. Missing either one leaves the product non-compliant even if the other is handled correctly.

• EPA product registration — an active FIFRA Section 3 registration covering the specific formulation, active ingredient concentration, and every antimicrobial claim on the label
• Establishment registration — the manufacturing site must hold its own EPA establishment number under FIFRA Section 7, distinct from the product registration
• Permitted active substances — for no-rinse applications, only substances specifically listed in 178.1010 (chlorine-releasing compounds, iodophors, qualifying quaternary ammonium compounds, acid-anionic systems, and peroxide-based actives) may be used
• Concentration limits — 178.1010 sets a maximum permitted concentration for each listed substance in no-rinse applications, which the finished formulation must not exceed
• Label accuracy — the EPA registration number, establishment number, and directions for use must match exactly what EPA approved for that specific product
• State-level registration — most states require the product to be separately registered or notified before it can be legally sold within that state

A formulator who builds a technically effective sanitiser from an unregistered active, or exceeds a 178.1010 concentration limit to boost kill claims, ends up with a product that cannot legally reach a food-contact surface no matter how well it performs in the lab. The same active-ingredient screening discipline applies to our hospital-grade disinfectant formulation work, where EPA and FDA jurisdiction overlap in a similar way.

Testing and Documentation Requirements

The documentation burden for a food-contact sanitiser is heavier than most adjacent product categories because EPA reviews both safety and performance before a product can carry a claim. A manufacturer who underestimates this data package is the single most common reason a registration submission stalls in review.

EPA efficacy review typically requires data generated under EPA-accepted antimicrobial test protocols demonstrating the claimed log-reduction against the named organisms, along with toxicology data scaled to the product's expected exposure category. Alongside the EPA data package, the formulator must document that every active substance and its concentration in a no-rinse formulation matches a specific listing in 178.1010, since EPA registration alone does not confirm 178.1010 conformance.

• Efficacy data — antimicrobial performance data against the specific organisms named in the label claims, generated under EPA-accepted test methods
• Toxicology package — safety data scaled to the product's use pattern and likely exposure route
• Formulation disclosure — complete confidential statement of formula submitted to EPA identifying every active and inert ingredient
• 178.1010 cross-reference — documentation confirming each active substance and its concentration matches a permitted listing for no-rinse food-contact use
• Safety data sheets — current SDS for the finished product and all raw materials
• State registration records — proof of registration or notification in every state where the product is distributed

Keeping this documentation current matters after launch too — an audit that cannot quickly produce a matching EPA registration, establishment number, and 178.1010 cross-reference is treated the same as a missing registration.

Step-by-Step Compliance Pathway

Bringing a food-contact sanitiser to market follows a defined sequence, and the order matters — formulators who lock in a formulation before checking 178.1010 eligibility routinely discover mid-registration that an active they chose for performance reasons disqualifies the product from no-rinse use.

1. Select actives already listed in 21 CFR 178.1010 if no-rinse use is intended. Screen candidate active substances against the specific chemical identities and concentration limits in the regulation before finalising the formulation.
2. Assemble the EPA efficacy and toxicology data package. Generate or licence antimicrobial efficacy data against every organism named in the intended label claims, along with toxicology data appropriate to the exposure category.
3. Submit the FIFRA Section 3 product registration application. File the confidential statement of formula, proposed label, and supporting data with EPA for review under the antimicrobial pesticide registration process.
4. Register or establish the manufacturing site. Obtain an EPA establishment number under FIFRA Section 7 for the facility that will produce the registered formulation.
5. File state-level registrations. Submit registration or notification filings in each state where the product will be sold, since federal EPA registration alone does not authorise state-by-state sale.
6. Maintain label accuracy and report formulation changes. Any change to the active ingredient, concentration, or claims requires an amended EPA registration before the updated product can be sold.

Realistic Timeline and Cost Expectations

For a manufacturer building a first EPA-registered food-contact sanitiser, the timeline depends almost entirely on whether the active ingredient already carries an EPA-reviewed toxicology and efficacy profile. Understanding this driver early prevents the common mistake of committing to a novel active before checking what data already exists to support it.

A formulation built on an already-registered active, submitted as a new product registration referencing existing EPA-reviewed data, can often move through review in several months from a complete submission. A formulation using a genuinely new active ingredient, or seeking a novel efficacy claim, commonly takes a year or longer, since EPA must independently review the full toxicology and efficacy package. The main cost categories are EPA registration and establishment fees, state registration fees in every state of sale, efficacy and toxicology testing where new data is required, and any regulatory consultancy engaged to manage the submission and cross-reference the formulation against 178.1010.

Manufacturers working alongside our broader household and industrial cleaner formulation work typically find that confirming 178.1010 eligibility for their chosen actives before committing to an EPA submission is the single most effective way to avoid a costly reformulation late in the process.

Common Mistakes Manufacturers Make — and How to Avoid Them

Most compliance failures in this category trace back to a small set of recurring misunderstandings about how FDA and EPA jurisdiction fit together, not to obscure technical edge cases. Recognising these patterns early lets a formulator design around them instead of discovering them during a customer audit.

• Assuming EPA registration alone covers food-contact use — an active EPA registration confirms the product can legally make its labelled claims, but says nothing about whether the formulation is eligible for no-rinse application under 178.1010
• Marketing "food-safe" claims without EPA registration — any statement that a product sanitises or reduces microorganisms is a pesticidal claim requiring registration, regardless of how the ingredients are otherwise described
• Skipping state-level registration — assuming federal EPA registration authorises nationwide sale, when most states require a separate registration or notification step
• Silent formulation changes after registration — substituting an active ingredient supplier or adjusting concentration without amending the EPA registration, which invalidates the existing label
• Confusing a rinse-required sanitiser with a no-rinse product — specifying a formulation and concentration only cleared for rinse-required use, then marketing it for no-rinse application where 178.1010 limits are lower

A disciplined check of 178.1010 eligibility at the formulation stage, paired with a documented change-control process tied to the EPA registration, resolves nearly all of these failure patterns before they reach a customer's audit or a regulator's desk.