Skip to main content

FSMA 204 Compliance Map

When a recall costs $10M and takes 7 days, what is the price of a 2-hour trace?

Food Traceability List

FDA designated high-risk foods requiring enhanced traceability records.

FTL CategoryExamples
Leafy greensBagged spinach, romaine, butter lettuce, arugula
Fresh herbsBasil, cilantro, parsley
SproutsAlfalfa, bean, radish, clover sprouts
CucumbersWhole cucumbers (fresh)
PeppersFresh bell peppers, hot peppers
TomatoesWhole fresh tomatoes
MelonsCantaloupe, honeydew, watermelon
Tropical tree fruitsMango, papaya, guava
FinfishFresh and frozen fish (specific species unverified)
CrustaceansShrimp, crab, lobster (fresh and frozen)
MollusksOysters, clams, mussels, scallops
Shell eggsFresh shell eggs
Nut buttersPeanut butter, almond butter
Ready-to-eat deli saladsPre-made mixed salads, deli case items
Soft cheesesFresh and soft-ripened cheeses (e.g., brie, queso fresco)

Critical Tracking Events

Seven CTEs define the required record points across the supply chain.

CTEDescriptionWhere It Triggers
HarvestingFood harvested from farmFarm / growing site
CoolingPost-harvest cooling appliedPackinghouse / field
Initial PackingFood packed into a containerPackinghouse / processor
First Land-Based ReceiverFirst US receiver of imported foodPort / import facility
ShippingFood leaves a farm, facility, or warehouseShipper's dock
ReceivingFood arrives at a farm, facility, or warehouseReceiver's dock
TransformationFood changes form (e.g., cut, cooked, mixed)Processor / manufacturer

Key Data Elements × Stack Coverage

KDERequired At CTEBaxus/DeVin StackCoverage
Traceability lot code (TLC)Initial Packing, Shipping, Receiving, TransformationSolana SPL NFT (mint = TLC surrogate)Partial — lot code must map to mint address; reconciliation layer needed
TLC source referenceAll lot-coded CTEsOn-chain metadata via Metaplex DASPartial — schema exists, field population not enforced
Location description (GLN or equivalent)All CTEsRedBite RFID scan location + on-chain eventPartial — location must be submitted as GLN; off-chain mapping unverified
Commodity descriptionInitial PackingSPL NFT attributes fieldSatisfied — wine/spirits mapped; food categories require extension
Quantity and unit of measureShipping, ReceivingSPL-404 fractional + NFT quantity fieldPartial — unit standardization (cases vs. units) not enforced
Date and time of CTEAll CTEsHelium LoRaWAN timestamp + Solana block timestampSatisfied — dual timestamp (sensor + chain) exceeds requirement
Reference document type and numberShipping, ReceivingIPFS hash linked in NFT metadataPartial — IPFS CID satisfies immutability; FDA reference doc format unverified
Name of transporterShippingNot currently in stackGap — no custody-of-transport record in current architecture
Iridia DNA tag bindingInitial PackingIridia molecular tag linked to NFTSatisfied for high-value items; cost prohibitive at commodity scale

One Up, One Back

DimensionPaper-Based (Current)On-Chain Custody
VisibilitySingle-party view; shared by phone/emailAll authorized parties read same chain
Retrieval time2–7 days per FDA 2020 studyMinutes (block query + IPFS fetch)
Dispute resolutionHe-said/she-said; paper can be alteredImmutable timestamp; multi-sig custody
Audit costManual labor; $50–$200/hr compliance staffQuery cost; automated compliance export
Cold chain proofTemperature logs stored locally, often missingHelium sensor events permanently on-chain
Recall scopeOver-broad (conservative) due to poor tracePrecise lot-level recall; smaller scope

Deadline

FDA originally set FSMA 204 compliance for January 20, 2026. FDA extended the compliance date by 30 months to July 20, 2028, citing industry readiness concerns. Verified against FDA.gov FSMA 204 rule page.

The two-year extension creates a narrow adoption window: companies that implement now operate 2 years ahead of the mandate and can offer compliance-as-a-service to their supply chain partners before the deadline forces mass adoption.

Wedge Opportunities

GapOpportunityWho Buys
Traceability lot code reconciliationAPI bridge: lot code ↔ Solana mint address, auto-generated at Initial Packing CTEPackers, co-packers, cold storage operators
KDE submission APIStructured FDA-compliant record export from on-chain data; eliminates manual compliance laborAny FTL-category producer or distributor
Sensor-verified temperature logs for perishablesHelium LoRaWAN cold chain proof attached to receiving CTE; converts sensor data to FDA-admissible recordImporters of tropical fruits, seafood, dairy
Transporter custody recordMissing stack layer — name and credentials of transporter at Shipping CTELogistics providers, 3PLs, freight brokers
Transformation event trackingCut/process/mix events not currently modeled in SPL NFT architecture; burn-and-mint pattern neededFresh-cut produce processors, deli manufacturers

Context

Questions

What is the minimum viable implementation that satisfies FSMA 204 for a single FTL category without disrupting the existing supply chain?

  • Which CTE creates the most reconciliation failures in practice — Shipping or Receiving — and does on-chain custody change who bears the burden of proof?
  • If the transporter custody gap is the only missing KDE, does that block full compliance or only partial credit?
  • At what volume does the Helium sensor + Solana NFT architecture become cheaper per shipment than paper-based compliance?