←  Back to the Hall
GFSI · Global Food Safety Initiative · Nestlé Responsible Sourcing

Every ingredient you sell carries a supplier you have to vouch for.

GFSI and the Nestlé Responsible Sourcing Standard don't just ask whether your plant is clean. They hold you responsible for every supplier, co-packer, and ingredient source that feeds your line. The Nestlé audit checks that all of your suppliers carry food safety approval. XFACTOR VERIFIED assesses each one, screens them, scores them, and closes the gaps, supplier by supplier, so your food safety holds up to any audit.

Show me my gaps
8 suppliers · 15 days · no credit card
On the audit floor
2 hours
to trace and recall 100% of a batch, or the audit fails (Nestlé NRSS)
GFSI and the Nestlé Responsible Sourcing Standard make you responsible for verifying every supplier that feeds your line. One unapproved ingredient source, one co-packer you never screened, and that is the finding an auditor acts on. XFACTOR VERIFIED closes it, supplier by supplier.
0
Doing this by hand
0
Organizations assessed
0
Assessments completed
0
Audit-ready track record
Trusted across three decades of supply chains

Has proving every ingredient source is food-safe become one more audit you never have time to prepare for?

Your line runs every day. Every lot needs an approved supplier and a clean trace behind it. One unverified source, and the recall, and the finding, land on you.

A spotless plant does not make a safe product.

Your facility can pass every inspection and still trigger a recall, because the contamination, the substitution, the fraud entered through a supplier you never saw. The Nestlé audit knows this. It checks that every supplier feeding your line is approved, not just your own floor. The danger lives upstream, where most programs never look.

Your plant
Inspected, certified, spotless. This is all most audits ever see.
Tier 1 supplier
Approved on paper, the day you onboarded them.
Tier 2 ingredient source
Rarely re-checked. A lapsed certificate, a quiet source change.
Tier 3 origin
Where food fraud and undisclosed substitution begin.

VACCP exists to force you to map ingredient origins all the way up. That is the work XFACTOR walks with you, tier by tier, before the auditor or the recall finds it first.

Food-safety and quality executive on the plant floor
The quality director whose signature clears every lot. When the recall lands on her desk, it is every supplier behind her that has to hold.
What if one assessment handled both

Nestlé holds you to it.
XFACTOR runs it.

One assessment satisfies both sides. Every Nestlé obligation on the left meets the control that handles it on the right, tied together down the seam.

What Nestlé holds you to
How XFACTOR runs it
Hold a current GFSI-recognized certificate, never expired or suspended.
A 36-cert registry tracks FSSC 22000, BRCGS, SQF and IFS with live status.
Prove every one of your suppliers is approved, not just your own plant.
Client-defined required certs, assigned to a department owner, supplier by supplier.
A lapsed certificate means immediate suspension from the preferred list.
A 90, 60 and 30-day expiry monitor flags every certificate before it lapses.
Food defence plan, VACCP and TACCP, reviewed every year.
Each requirement assessed, scored, and tracked to a finding with an owner.
Trace and recall 100% of a batch within 2 hours.
Every supplier screened and on record, so the chain holds under an unannounced audit.

Run it once. It satisfies the Nestlé program and your GFSI scheme at the same time.

Run one assessment
The other half · Regulatory certificates

Every regulatory certificate, in one registry. Thirty-six, ten groups.

GFSI is one group of many. The same platform tracks every regulatory certificate your suppliers must hold, in one place, each with its document and its expiry date on record.

GFSI food safety
BRCGS · SQF · FSSC 22000 · IFS Food
Primary production
GLOBALG.A.P. · PrimusGFS · CanadaGAP
HACCP & preventive controls
HACCP · FSMA · GMP · SFCR licence
Supply chain & traceability
Supplier approval · Bill S-211 · FSVP · country of origin
Lab & certificates of analysis
Pesticide residue · microbial · heavy metals · allergen
Social & ethical
SA8000 · SMETA · Sedex · WRAP
Organic & sustainability
Canada Organic · USDA Organic · Rainforest Alliance · Fair Trade
Religious & dietary
Halal · Kosher
Border security
C-TPAT · PIP
Insurance
Product liability
The expiry clock

Nothing lapses on your watch.

Every certificate sits on a live clock. The platform flags each one at 90, 60 and 30 days before it expires, and the moment it lapses it flips to expired and alerts the owner, supplier by supplier.

90
days out: first reminder to the certificate owner
60
days out: escalation if it is still not renewed
30
days out: final warning before it lapses
0
lapsed: auto-flagged expired, owner and client alerted

Audit-ready is not a binder.
It is every supplier's document, live.

An auditor does not want your word that your suppliers are approved. They want the certificate, current, on file, for every one. This is supplier-by-supplier document coverage at a glance, with the gaps lit before the audit finds them.

xfactor dashboard / supplier document coverageLIVE
Hover a cell to see the supplier, the certificate, and its status.
On filePartial / expiringMissing
Illustrative. Real coverage maps stay private, live in the XFACTOR dashboard.

Your brand is only as safe as the supplier you never re-checked.

An ingredient supplier whose certificate lapsed. A co-packer who quietly changed a source. A sub-tier you never mapped. The auditor does not ask who you trusted. It asks who you verified.

2 hours
to trace and recall 100% of a batch, or you fail the Nestlé mock recall
100%
of recall costs and legal liability fall on the supplier whose negligence caused the incident
A recall is the most expensive lane your brand can be in.
WHERE GFSI ACTUALLY HURTS

Five places food safety puts you on the hook.
Five parts of XFACTOR that close them.

GFSI and Nestlé make you responsible for verifying every supplier that feeds your line. Here is what that exposes, and exactly how we handle each one.

Every supplier that feeds your line is your food-safety risk.
The live assessmentEach supplier assessed, supplier by supplier, scored on how they really operate.
A recall traces back through suppliers you could not see.
Cargo Mapping and Risk IntelligenceFull traceability across your chain, so you find the risk before it reaches your line.
Retailers and Nestlé want proof, not certificates on a wall.
The 5-Step Master ReportOne validator-ready evidence package across every supplier.
A finding with no corrective action is a recall waiting to happen.
The Plan of ActionEvery finding gets an owner, a deadline, and a signature.
Audits come every year, and the standards keep rising.
Annual reassessmentYour proof refreshed year over year.

A medal on the wall is not a safe supplier.

The rating platforms hand back a medal, scored by analysts you never see.
Our intelligence system runs every supplier against the real GFSI and Nestlé criteria, finds the gap, fixes it, and gets it signed.
They charge your suppliers hundreds to thousands a year to stay on their network.
Suppliers join free, so they take part openly instead of hiding from a fee.
They were built for ESG scorecards, not food-safety criteria.
Built on the real GFSI and Nestlé criteria an auditor actually opens.
They run a separate audit for every program.
One assessment covers GFSI, the Nestlé program and your other obligations, so you run the evidence once.
A faceless platform behind a logo wall.
Run by Mandy-Lynn Aitken, who has worked inside these programs for 30 years.

This is what your partners actually walk.

Not a binder, not a survey. A guided portal each partner completes in their own language: read, upload, train, and sign, with every step on record.

portal / scenarioLIVE
Scenario 1 of 5 · Supplier approval
Morpheus
MorpheusAn ingredient arrives with a certificate. Watch the label, and tell me what this supplier never disclosed.
app.xfactorverified.com / trainingLIVE
XFACTOR VERIFIED training module grid: risk fundamentals, incoterms, red flag indicators — real course titles
Intelligence Training
Every module your team needs, built in. Launches with the platform.
A glimpse, not a blueprint. The full system is what your partners walk, not what your competitors copy.

What if one assessment closed your whole supplier base, without spending a fortune, without the manual work, and without chasing a single supplier?

From exposed to approved, before the auditor arrives.

01
Drop in your suppliers and co-packers. Morpheus maps the supplier base, no spreadsheet wrangling.INTAKE
02
Each supplier runs the assessment as cinematic scenarios, in their own language, scored against the GFSI and Nestlé criteria.PROFILE
03
Every gap becomes a finding; every finding a corrective action plan with an owner and a deadline.CORRECT
04
The whole supplier base documented and audit-ready, with every certificate monitored before it lapses.MAINTAIN
05
The same assessment also covers your Bill S-211 due diligence and feeds your other programs, so you run the evidence once.ONE PASS
Found. Corrected. Signed.
Questions you would ask on a sales call

There is no sales call. So here are the answers, straight.

Two themes: the program and your certificates first, then the 15-day free trial. Straight answers, no hedging.

About GFSI, Nestlé and your certs

GFSI and the Nestlé Responsible Sourcing Standard hold you responsible for every supplier that feeds your line, not just your own plant. You must run a documented supplier-approval program: confirm each direct supplier holds a current GFSI-recognized certificate, map your ingredient origins for vulnerability (VACCP), assess human threats like food fraud (TACCP), and keep all of it current. The Nestlé audit explicitly checks that all of your suppliers also carry food-safety approval. That supplier-by-supplier obligation is the work XFACTOR VERIFIED runs for you, end to end. We are not a certification service, we are the platform that handles what the program requires you to do with your suppliers.

GFSI does not certify anyone; it benchmarks and recognizes schemes, so once a supplier is certified to one, it is globally recognized. The recognized schemes differ by sector: FSSC 22000 for processors and manufacturers, BRCGS for retail-facing manufacturers, SQF for North American producers, IFS Food for European-market suppliers, and GLOBALG.A.P. for fresh-produce growers. Nestlé accepts any current GFSI-recognized certificate. The platform tracks which scheme each of your suppliers holds and whether it is current, so you are never guessing.

Yes. GFSI is one of ten cert groups in the registry. The platform tracks 36 regulatory certificates in total, from HACCP, FSMA and organic to Halal, Kosher, social-audit schemes like SMETA and SA8000, and border-security programs like C-TPAT and PIP. Each certificate is stored with its document and its expiry date, and the 90, 60 and 30-day monitor flags every one before it lapses, so nothing falls off your radar.

Yes. The platform assesses each supplier against the GFSI and Nestlé food-safety criteria, the same ground an audit covers: current certificates, food defence plan, VACCP and TACCP, mock-recall capability, employee screening, and ingredient traceability. Every piece is the evidence an auditor expects you to hold on your suppliers, built to stand up to an unannounced visit, not just produce a good-looking PDF. The founder has a career-long record across food safety and supply-chain programs.

That is the signal. A supplier who refuses a documented food-safety assessment is not one you want feeding your line. The platform flags non-responders, documents the outreach, and surfaces them as a high-risk gap. Your program expects you to verify or replace suppliers who cannot demonstrate approval, so documented refusal and your response plan is itself evidence that you identified the risk. Refusing to be assessed is a finding in itself.

The free trial

Yes. Your first 8 suppliers are completely free for 15 days. No credit card, no sales call, no contract required. We assess them with the same methodology a GFSI audit uses. If we do not surface a gap worth more than the ten minutes it takes to start, you have lost nothing. We run it free because once you see what the platform finds in 15 days, the conversation about the rest of your chain is easy.

Because showing beats telling. In 15 days you watch real gaps surface in 8 of your own chain, at no cost and no risk. If what you find is worth more than the ten minutes it takes to start, the decision on the rest is yours. No demo, no pitch, no pressure.

No card, no contract, no commitment. You drag your supplier list in, Morpheus maps it, and the assessments run. The 15-day trial clock starts the moment your first supplier receives their invite. If you decide to assess the rest of your chain after the trial, that is when pricing comes in, and it is published on the site. No sales call required.

Every supplier in the 15-day trial goes through the full intake: email verification, address validation, and watchlist screening against the US Consolidated Screening List (OFAC, BIS, DDTC). Then each supplier receives the cinematic scenario assessment, narrated by Morpheus, behaviourally scored. You get findings, gap analysis, and a Corrective Action Plan for every gap found. The only thing gated behind a paid plan is assessing more than 8 suppliers and accessing the full Master Risk Assessment Report for your entire chain.

For you, setup is minutes. You upload your supplier list and Morpheus handles the intake: email verification, address check, watchlist screening, and tier assignment. Suppliers typically complete their scenario assessment in 20 to 40 minutes. The trial window is 15 days, and most teams see findings well before the midpoint. You do not reformat a spreadsheet and you do not chase anything manually.

No. The platform handles outreach automatically. Once you upload your list, Morpheus sends each supplier their assessment invitation, follows up with a Day 3 nudge and a Day 7 nudge if they have not responded, and tracks completion status in your dashboard in real time. You see who has finished, who is in progress, and who has not opened it yet, without sending a single email yourself.

8 suppliers · 15 days · free

Run your highest-risk suppliers through the full GFSI and Nestlé supplier-approval assessment. Free for 15 days.

See every gap within your 15-day trial window, not the months a consultant takes.
No sales call. No credit card. No contract. Trial starts when your first supplier gets their invite.
Drag your list in. Morpheus does the mapping. You reformat nothing.

If we don't surface a gap worth more than the ten minutes it takes to start, you've lost nothing.

Show me my gaps
Founder
30 YEARS · 44,000 ORGANIZATIONS · 500,000 ASSESSMENTS · 100% AUDIT-READY TRACK RECORD.
Built by the expert who has spent a career inside these programs, for the teams who live them.
The XFACTOR family · zero to hero on GFSI / Food Safety

One program. Four products walking you there.

Every product below works on its own — or as a section inside your CommandCenter. Same service, two homes. This is the road from zero to hero on GFSI / Food Safety.

Assess

Assess your suppliers

XFACTOR VERIFIED runs the 5-Step risk assessment on every supplier you answer for under GFSI / Food Safety — regulatory certificates tracked, whole supply chains mapped, and a 300-to-600-page master report that turns supplier risk into signed, audit-ready proof. Never a per-supplier fee.

See XFACTOR VERIFIED →
Command

Command the program

Your security program doesn’t stop at one commitment. XFACTOR COMMANDCENTER commands the certification programs you answer to government for — C-TPAT, PIP, AEO, and Bill S-211 — with six department cockpits, real training, monthly self-audits, and one calendar, so the whole program stands behind what your GFSI / Food Safety work claims.

See XFACTOR COMMANDCENTER →
Be ready

Be ready for your government review

For the government programs you also carry, XFACTOR VALIDATED keeps you ready for the day an officer reviews your program: mock officer visits per department, a prep playbook, and a post-visit response engine that answers the real findings report in your own approved language. Live inside CommandCenter today, standalone in August.

See XFACTOR VALIDATED →
See further

See further

XFACTOR VANTAGE is the intelligence layer over everything the family sees — ESG recommendations, automation recommendations, and the stats flywheel. Coming soon; no promises before it’s real.

A first look at VANTAGE →
Food safety & supplier approval · Built by a 30-year expert

Your supplier base has a gap
you haven't seen yet.

8 suppliers. 15 days. No credit card. Run the real GFSI and Nestlé supplier-approval assessment on your highest-risk suppliers and see exactly what an auditor would find first.

30
Years
44,000
Organizations
300,000
Trained

Mandy-Lynn Aitken · 30 years · C-TPAT · PIP · Bill S-211 · 44,000+ organizations assessed

The XFACTOR Risk Brief

Weekly C-TPAT, Bill S-211, and ESG regulatory intelligence for importers.

Show me my gaps →