FSMA Sanitary Transportation Rule: Shipper and Carrier Duties

A reefer backs onto door 14 at 05:40 with chilled salads that should be at 34-38°F, and the receiver's probe reads 47°F. The driver says the tender only said "keep refrigerated". The shipper says the carrier knew the product. The broker says it only arranged the truck. Everyone is partly right, and nobody can produce the document that decides who owed what.

FDA's sanitary transportation rule settles most of that argument before the truck leaves, provided each party writes down the right things. This guide maps every duty in 21 CFR Part 1 Subpart O to the person who carries it, the paper or data that proves it, and how long that evidence must be kept, so a rejected load becomes a records question with a clear answer.

• What you will find here: the four regulated roles, the shipper's written specification, loader and receiver checks, conditional carrier duties, training records and the retention clock.
• India comparison: how FSSAI's Schedule 4 transport hygiene clauses place similar duties on the licensed food business instead of splitting them by role.
• Worked numbers: the cost of one rejected chilled load in dollars and rupees, and who absorbs it with and without clear written terms.

Four regulated roles and the evidence each one must produce

Subpart O assigns duties by function, not by company type, so one business can be shipper, loader and carrier on the same load. The definitions in 21 CFR 1.904 decide which paragraphs apply, and getting the role wrong is the most common reason a company holds the wrong records.

A shipper is the person who arranges transport, and the definition names a freight broker as an example. A loader physically puts food onto a motor or rail vehicle. A carrier physically moves food by rail or motor vehicle within the United States, but a parcel delivery service is excluded. A receiver is anyone who takes delivery at a US point after transport, whether or not it is the final destination.

Coverage has limits. A non-covered business has under $500,000 in average annual revenue, adjusted for inflation; FDA's inflation table shows $704,950 for 2025 and a 2023-2025 average of $686,476. The rule also excludes food transshipped through the US, food imported for future export, and food in facilities regulated exclusively by USDA under the meat, poultry and egg products acts.

Sanitary transportation coverage under 21 CFR 1.904 excludes sealed food that needs no temperature control and any business below the inflation-adjusted $500,000 revenue line, shown as $704,950 for 2025, while a chilled salad load triggers written operating temperatures, loader pre-cool checks and receiver assessment.

Writing the shipper's sanitary and temperature specification

The shipper's specification is the anchor document for every other duty, so write it as data a dispatcher and a driver can both read. Paragraph 1.908(b)(1) requires the shipper to tell the carrier, in writing, the sanitary specifications for the vehicle and equipment, including design specifications and cleaning procedures.

For food that needs temperature control for safety, 1.908(b)(2) requires a written operating temperature, including the pre-cooling phase where needed. One notification can cover repeat loads, but the shipper must notify again in writing before a shipment when the food or conditions change. A carrier hauling in a thermally insulated tank is not owed the operating temperature.

Three further written procedures sit with the shipper. Under 1.908(b)(3) it must ensure vehicles and equipment are in suitable sanitary condition. For bulk food, 1.908(b)(4) requires procedures that stop a previous cargo making the food unsafe. For temperature-controlled food, 1.908(b)(5) requires procedures equivalent to the carrier duties in (e)(1)-(3). The shipper may have another covered party carry them out, but only under a written agreement.

{
  "spec_id": "SPEC-RTE-CHILLED-07",
  "issued_by": "shipper",
  "effective_from": "2026-11-01",
  "food_class": "ready-to-eat chilled, temperature control for safety",
  "operating_temperature_f": { "min": 33, "max": 38 },
  "precool": { "required": true, "target_f": 36, "verify_by": "loader" },
  "unit_mode": "continuous",
  "vehicle_sanitary": [
    "interior free of odour, debris and pest evidence",
    "floor drains and door seals intact"
  ],
  "cleaning_procedure_ref": "SOP-WASH-REEFER-03",
  "bulk_previous_cargo_check": false,
  "temperature_evidence": "download of return-air log, 15-minute interval",
  "responsibility_assignment": "AGR-2026-114 (carrier accepts 1.908(e)(1)-(6))"
}

Hold this specification as a versioned record, not an email. Paragraph 1.912(a)(1) requires the shipper to keep proof that it supplies specifications and operating temperatures as a regular practice for 12 months beyond the end of each carrier agreement. A version number on every tender lets an auditor match the load to the exact instruction the carrier received.

Loader checks at the dock before the first pallet goes on

The loader's duties are short but physical, and they happen at the one moment when a bad trailer can still be refused. Paragraph 1.908(c) creates two checks, one for exposed food and one for temperature-controlled food, and both take the shipper's specification into account.

• Exposed food inspection: before loading food not completely enclosed by a container, the loader decides whether the vehicle is in suitable sanitary condition, for example in adequate physical condition and free of visible pests and previous cargo that could make the food unsafe.
• Pre-cool verification: before loading temperature-controlled food, the loader verifies that each mechanically refrigerated compartment is ready, including proper pre-cooling where needed.
• Any appropriate means: the rule lets the loader use any appropriate method, so a flashlight check, a probe of the return air and a photo of the unit display can all count if they are recorded.
• Refusal path: the dock needs a written instruction for what happens when a trailer fails, including who calls the carrier and how the replacement trailer is logged.

A practical record is three fields on the load sheet: trailer interior condition, unit display reading at door open, and the name of the person who checked. Many sites add the reefer's own pre-trip printout. None of this needs software, but a warehouse system that will not release the load until the fields are filled stops the check being skipped on a busy shift.

Carrier duties only bind under a written agreement

A carrier's operational duties under 1.908(e) apply when the carrier and shipper have a written agreement making the carrier responsible, in whole or in part, for sanitary conditions. Without that agreement the obligations stay with the shipper, which is why the contract wording matters more than the carrier's reputation.

Once responsibility is assigned, the carrier must supply vehicles that meet the shipper's specification and pre-cool each mechanically refrigerated compartment as specified. If the receiver asks, it must provide the operating temperature the shipper set. If the shipper or receiver asks, it must show that it held conditions consistent with that temperature, by any means the carrier and shipper agree, such as load and unload readings or time and temperature data.

• Bulk vehicle history: on request, a carrier offering a tank, hopper or other bulk vehicle must tell the shipper what the previous cargo was and describe the most recent cleaning.
• Written carrier procedures: 1.908(e)(6) requires procedures for cleaning, sanitising where needed and inspecting equipment, for temperature evidence, and for bulk vehicles.
• Onsite copy: the cleaning and inspection procedures under (e)(6)(i) must stay onsite while in use; electronic records count as onsite if they can be opened from there.
• One legal entity: where shipper, loader, carrier and receiver belong to one legal entity, 1.908(a)(5) allows common integrated written procedures instead of the separate role duties.

Training carrier staff and proving it with a dated record

Carrier training under 21 CFR 1.910 is triggered by the same written agreement that assigns sanitary responsibility. When it applies, staff engaged in transport operations need awareness training on food safety problems in transit, basic sanitary practices and the carrier's own duties, given on hiring and as needed afterwards.

The record is simple but strict. It must show the date, the type of training and the people trained, and 1.912(c) requires it to be kept for 12 months after the person stops performing the duty the training covered. FDA links a carrier training module from its rule page, which many fleets use as the baseline course before adding company-specific reefer and wash-out steps.

Carrier training records under 21 CFR 1.910(b) must carry the training date, training type and trainee names, and 21 CFR 1.912(c) keeps each record alive for 12 months after the driver stops hauling food, so a fleet with 18% annual driver turnover holds records for former drivers well past their exit.

A driver qualification file is a natural home for the training entry, since the fleet already keeps it by driver. Our carrier onboarding checklist covers the wider vetting a shipper does before tendering, and the food-specific question to add is simple: does the carrier hold dated Subpart O training records for the drivers it will assign?

Receiving a temperature-controlled load and deciding if it is safe

The receiver's duty under 1.908(d) is an assessment, not a rejection rule. On arrival of temperature-controlled food, the receiver must take steps to judge that the food was not exposed to significant temperature abuse, such as taking the product temperature, the trailer's ambient temperature and set-point, and a sensory check for off-odours.

What follows an indication of failure is set by 1.908(a)(6). If any party becomes aware of a possible material failure of temperature control, the food must not be sold or distributed unless a qualified individual decides the deviation did not make it unsafe. That decision needs a named person, a written basis and the data behind it. The trace below shows a missing pre-cool record becoming a disputed loss.

• Mon 21:10, shipper DC: load L-55190 is tendered to the carrier with rate confirmation RC-8812, which says "reefer, keep cold" and cites no specification version.
• Mon 22:35, dock door 6: the loader records the trailer as clean but leaves the pre-cool field blank; the unit display, photographed later, read 49°F at door open.
• Tue 05:40, receiver door 14: product probes read 46-48°F against a 33-38°F customer specification; the receiver holds the load under 1.908(a)(6) and asks the carrier for the operating temperature.
• Tue 07:15, carrier dispatch: the carrier sends a return-air download showing set-point 36°F but a 3-hour climb after loading; it argues it was never given a written pre-cool target.
• Controlled version: the tender cites SPEC-RTE-CHILLED-07 and agreement AGR-2026-114, the loader blocks release until the pre-cool reading is entered, and the carrier's own procedure shows who skipped the pre-cool.

India's FSSAI Schedule 4 transport hygiene clauses compared

India has no role-split equivalent of Subpart O. Transport hygiene sits in Schedule 4 of the Food Safety and Standards (Licensing and Registration of Food Businesses) Regulations, 2011, and the duty falls on the food business operator that holds the registration or licence, whatever part of the move it performs.

For petty food businesses, Part I items 18 and 19 require vehicles to be kept clean and in good repair, and packaged or containerised food in transit to be held at the required temperature. For licensed businesses, Part II clause 5.5 goes further. Clause 5.5.2 requires conveyances and containers to be designed, built and maintained so they can hold the temperature, humidity and atmosphere the food needs.

The practical difference is contractual. A US shipper can move duties to a carrier by agreement and point to that paper. An Indian brand owner using a third-party transporter is still the licensed operator for its product, so it has to build the transporter's cleaning and temperature evidence into its own records under clause 8.2 rather than rely on a role split.

FSSAI Schedule 4 Part II clause 5.5.3 requires bulk food containers and conveyances to be designated and marked for food use only, while clause 8.2 keeps distribution, cleaning and pest control records for one year or the product shelf-life, so a 15-month shelf-life ghee tanker log stays on file for 15 months.

What a rejected chilled load costs in dollars and rupees

A rejected load usually costs four to five times the freight charge, because the product write-off dominates. The figures below are illustrative, for one chilled ready-to-eat load in the US and one paneer load in India, and show where the written terms change who absorbs each line.

In the trace above, the carrier's download proved a 3-hour climb but the shipper had no written pre-cool target and the loader had no reading. That combination usually leaves most of the $47,500 with the shipper. With the versioned specification and a blank-field block at the dock, the same evidence points at the step that failed, and the claim goes to the party that skipped it.

Rules the TMS should enforce and judgments that stay with people

Software is good at refusing to move a load until a required field exists, and poor at deciding whether food is safe. Split the work so the transport and warehouse systems block missing evidence, and the qualified individual makes every release decision after a temperature deviation.

Temperature logging itself is covered in more depth in our guide to reefer pre-cooling and continuous telemetry, which deals with the sensor data model; this article is about who owes the duty and what paper proves it. Handover of that data between parties is covered in cold-chain custody handovers.

Compliance rollout for shippers, brokers and fleets

Most companies can close the gaps in about eight weeks by starting with the contract and specification, then the dock, then records. The traceability recordkeeping in FSMA section 204 is a separate rule with its own data elements, covered in our food traceability guide, so keep the two projects apart.

For more on cold-chain and food logistics controls, browse the Logistics and Supply Chain hub. If you are replacing a TMS or warehouse system and want these checks built into tendering and load release, share your lanes and requirements through our request for proposal page.