Gluten-free certification by industry: what changes for your sector

What actually changes between sectors

Very little in the standard, and almost everything in the file. The threshold a certificate records is the same whether the product is a protein powder or a face serum — it is a measurement, not a policy, and it does not soften for a difficult supply chain. What changes is which documents can prove it, who holds them, and whether they exist on paper at all.

That is why "gluten-free certification for [my sector]" is a real question rather than a marketing one. Three things move: where the gluten risk actually sits (rarely in the named ingredient), who controls the evidence (increasingly not you), and whether the risk is documentary or operational. The last one decides whether a remote review can certify you at all.

Retail grocery private brands

The hardest version of the problem, because the brand on the pack and the facility making the product are different companies. A retailer's private label may run twenty ranges across eight co-packers, none of them owned, several unwilling to share a full formulation.

Certification does not require you to own the plant, and it does not require the co-packer to hand you its recipe. It requires that someone can evidence the claim: the co-packer's own specifications, its cross-contact controls, and current test results for the finished products in scope. The certificate is issued against a defined scope of products, so a range certified this year does not silently cover a reformulation next year. Who holds the certificate — you or the manufacturer — is a decision worth making before you apply, and the private-label playbook works through it.

Supplement manufacturers

Supplements are where gluten hides furthest from the label. The active almost never carries the risk; the excipients do — starch carriers, maltodextrin of undeclared origin, tableting aids, capsule shells, and the micro-encapsulated beadlets that arrive from a broker with a specification sheet nobody has read. Shared tableting and encapsulation lines are the norm at small scale.

A review here is mostly a traceability exercise: every excipient traced through supplier specifications to a declared source, plus the cleaning and scheduling evidence for shared equipment. The supplement route sets out the document list, and the small-business guide covers what it costs you in effort rather than money.

Cosmetics and skincare

A newer demand, and a legitimate one: gluten in a lip product or a toothpaste can be ingested, and people who react want the claim checked rather than assumed. The risk sits in botanical extracts, in wheat-derived proteins used as conditioning agents, and in vitamin E of undeclared origin — ingredients whose INCI name says nothing about the crop behind them.

The file is a formulation review plus supplier declarations for every botanical and protein input, and testing on the finished product where the formulation cannot settle it. The cosmetics route is the same standard applied to a different ingredient vocabulary.

Beverage manufacturers

Drinks split cleanly. A soft drink or a juice is usually a straightforward formulation review. Anything fermented, brewed or clarified is not: the gluten question moves into the processing aids and the raw grain, and the honest answer depends on whether the product was made from gluten-containing grain and then treated, or made from something else entirely. Those are different claims in different markets, and a certificate that does not distinguish them is not much use in an export file.

Where a document review is not the right instrument

Four of the sectors people search for cannot be honestly served by a remote review of documents, and it is worth being direct about which and why.

• Hotels, restaurants and food service — the risk here is operational and it is renewed every shift: a shared fryer, a wiped board, a server who does not know what a garnish contains. What protects a diner is trained staff, a working kitchen protocol and an inspection regime — an on-site programme, not a certificate issued from a document file. A programme that never enters the kitchen cannot see the thing that creates the risk.
• Packaging materials manufacturers — a legitimate question, but it is a food-contact and materials-safety question, answered through your food-contact compliance and migration data. A finished-product gluten certificate is the wrong document for it, and asking for one usually means someone in the chain misread a specification.
• Pet food — the human gluten-free labelling regimes do not govern pet food, so a certificate written against them would imply a compliance that does not apply. Grain-free and gluten-free are also not the same claim, and they are routinely confused in this category.
• Pharmaceutical manufacturers — excipient disclosure for medicines sits inside the regulatory dossier and the applicable pharmacopoeia, under your regulator. A voluntary certificate does not substitute for that and should not be presented as though it does.

The one thing every sector shares

Whatever you make, the certificate records the threshold the products were assessed against and carries a number and a QR code, so a buyer can check it without an account and without asking you. That is the part that survives a due-diligence questionnaire, and it is identical across every sector above. What it costs in documents is what differs — and what drives the number is the same anatomy in every case: how many scopes, how many facilities, how much evidence already exists.

Frequently asked questions