Allergen control is mandatory law: declaring the major allergens (9 in the US, 14 in the EU) and managing cross-contact is a legal duty for every food business, claim or no claim. Gluten-free certification verifies a voluntary claim — once you print "gluten-free", regulators hold you to a threshold (below 20 ppm in the US and EU), and certification is independent proof you meet it. One system is the floor; the other is a claim built on top of it.
Allergen control: the mandatory layer under every product
Allergen law applies to you whether or not you make any claim at all. In the United States, the Food Allergen Labeling and Consumer Protection Act of 2004 requires plain-name declaration of the major allergens, and the FASTER Act added sesame as the ninth from January 2023. The Food Safety Modernization Act goes further than labeling: allergen cross-contact is a hazard your preventive-controls plan must address, with scheduling, cleaning validation and label verification as standard controls. In the European Union, Regulation 1169/2011 Annex II lists fourteen substances requiring emphasized declaration — a list that includes cereals containing gluten, but also lupin, celery, mustard and molluscs, none of which US law names. This layer is not optional, not voluntary and not what certification is for: no certificate replaces your legal allergen-labeling duties.
Gluten is not simply an allergen line
Here is where the two systems visibly diverge. In US allergen law, wheat is a major allergen — but barley and rye, both gluten-containing, are not on the list of nine. A product can be fully compliant with FALCPA, declare no wheat, and still be hazardous to someone with celiac disease because of barley malt extract. "Wheat-free" and "gluten-free" are different statements. Gluten instead gets its own regime, triggered only when you choose to make the claim: under the FDA's gluten-free rule (21 CFR 101.91, finalized 2013), a food labeled gluten-free must contain less than 20 ppm of gluten, with a 2020 companion rule covering fermented and hydrolyzed foods. The EU sets the same number by a different route: Regulation (EU) No 828/2014 permits "gluten-free" at no more than 20 mg/kg and "very low gluten" — a claim that exists only in the EU — at no more than 100 mg/kg. In both jurisdictions the claim is voluntary, but once printed, the threshold is law.
What certification adds on top of the legal threshold
Regulators publish the threshold but do not pre-approve your claim — in the US and EU, nobody checks a gluten-free label before it ships. You print it, and you carry the proof burden if a regulator samples your product or a buyer asks questions. Third-party certification moves that verification before the claim: an independent reviewer examines your formulation for gluten-containing ingredients and their derivatives, supplier documentation for every at-risk input (starches, flavor carriers, oat sourcing, shared upstream milling), your cross-contact controls on shared lines, and your testing plan — which assays you run, at what frequency, against which limit. A V-Cert Gluten-Free certificate states the exact ppm threshold the product was verified against — below 20 ppm, the figure shared by the FDA rule, EU 828/2014 and Codex 118-1979 — so the number is on the certificate itself, not implied. The certificate then carries a number any buyer can check.
The two systems, side by side
| Allergen control | Gluten-free certification | |
|---|---|---|
| Legal status | Mandatory for every food business | Voluntary claim; threshold binding once made |
| Governing rules | FALCPA + FASTER Act (US, 9 allergens); Reg 1169/2011 Annex II (EU, 14) | 21 CFR 101.91 (US, <20 ppm); Reg 828/2014 (EU, ≤20 mg/kg) |
| Who checks before market | No one — you self-comply; regulators inspect and sample after | The certifier, by document review and testing-plan verification |
| Covers barley and rye | Not as US major allergens (wheat only); EU lists gluten cereals | Yes — gluten from any cereal source is in scope |
| Cross-contact | A hazard your food-safety plan must control | Reviewed and documented against the claim threshold |
| Output | Compliant label and safety plan | Certificate stating the ppm threshold, checkable by its number |
Where manufacturers get the relationship wrong
- Treating the allergen plan as gluten coverage. An allergen plan built on the US list of nine controls wheat but can miss barley malt, rye flour in a rework stream, or oats grown in rotation with wheat. Gluten-free review looks specifically for these.
- Treating certification as allergen compliance. The reverse error. A gluten-free certificate verifies one claim about one substance family; your legal duty to declare and control all major allergens is untouched by it.
- Assuming "wheat-free" can substitute. It is a weaker and differently-shaped statement — wheat-free products can exceed 20 ppm of gluten from other cereals, and gluten-free products can (rarely) contain gluten-free wheat starch, which EU rules explicitly permit with disclosure.
- Dropping precautionary labels to look cleaner. A justified "may contain" statement about a true allergen risk should never be deleted to flatter a claim. Certification reviews controls; it does not reward hiding risk.
Who typically needs which
Every manufacturer needs allergen control — that question answers itself. Gluten-free certification earns its cost when the claim carries commercial weight: supplement brands whose customers read labels clinically, small-business food producers selling into retailers that require substantiated claims, and cosmetics brands answering ingredient-anxiety questions. Because the review is documentary, it pairs naturally with a vegan review over the same document set — formulations, supplier declarations, shared-line controls — which is why many applicants bundle marks in one multi-mark review rather than running parallel processes. The quote for any combination is scoped to the products you list.
Frequently asked questions
Is gluten-free certification legally required to make the claim?
No. In the US and EU the claim is voluntary and self-declared: any product genuinely below the threshold — 20 ppm in the US, 20 mg/kg in the EU — may carry it without certification. Certification is independent verification that you meet the threshold, which is what retailers and label-conscious consumers increasingly ask to see. Once you print the claim, the threshold binds you either way.
Does a gluten-free certificate cover my allergen labeling obligations?
No. Allergen declaration and cross-contact control are mandatory legal duties covering all major allergens — nine in the US, fourteen in the EU — and no voluntary certificate alters them. A gluten-free certificate verifies one claim about gluten specifically. The two systems share machinery on your floor, like cleaning validation and supplier documentation, but they answer to different rules.
Why isn't gluten just treated as an allergen?
Because the legal categories grew separately. US allergen law lists wheat but not barley or rye, since it addresses IgE-mediated food allergy, while celiac disease — the main population the gluten-free claim protects — reacts to gluten from all three cereals. Regulators therefore built a dedicated threshold rule for the gluten-free claim rather than stretching the allergen list. The EU lists all gluten-containing cereals as declarable allergens and still keeps a separate threshold regulation for the claim.
Can oats be in a gluten-free product?
Yes, with care. Oats contain no gluten in the regulatory sense, but conventional oats are routinely cross-contaminated with wheat, barley or rye during growing, transport and milling. Both US practice and EU rules accept oats in gluten-free products only where the finished food stays below the threshold, which in practice means purity-protocol or mechanically sorted oats with supplier documentation and testing. Oat sourcing is one of the first things a gluten-free review examines.
Do I need testing, or is a paper review enough?
The claim needs both, in proportion to risk. Documentation establishes that no gluten-containing ingredient enters the formulation and that shared-line risks are controlled; testing verifies the outcome, with frequency scaled to how much cross-contact risk the process carries. A dedicated facility running naturally gluten-free ingredients tests less often than a shared line running wheat products on alternate days. The review verifies that your testing plan matches your actual risk, not that a fixed number of tests were run.