How to Audit Your Foodware Stack for PFAS, Plastics, and Compliance Risk: A 2026 B2B Operator’s Step-by-Step Guide

For B2B foodservice operators in 2026, the most consequential procurement work isn’t picking which compostable supplier to switch to — it’s auditing what you currently have. Most operations that started buying compostable foodware before 2023 have a near-certainty of PFAS exposure in some current SKUs. Most multi-state operations have compliance gaps in at least one regulated state. Most operations using fiber-based packaging without per-SKU PFAS attestation are running with regulatory risk they haven’t documented.

The cost of doing this audit work proactively is modest — typically 8-16 hours of operator time spread across phases. The cost of not doing it surfaces at the worst possible moment: a state attorney general inquiry, a major customer asking for documentation, a class-action consumer complaint, or a regulatory enforcement action. The audit framework below is what separates B2B operations with documented compliance posture from operations exposed to enforcement risk they haven’t quantified.

This guide is the working step-by-step framework for B2B foodservice operators auditing their current foodware stack for PFAS exposure, regulatory compliance gaps, and supplier risk. By the end, you should be able to walk through your operation with this framework, generate a complete documentation package, and surface any compliance gaps that need procurement attention before they become enforcement issues.

Why Audit Now

Three converging factors make 2026 the right year for systematic foodware stack audits:

State PFAS bans are now active across multiple high-population states. California, New York, Washington, Maine, Maryland, Minnesota, and others have enforceable PFAS food packaging restrictions in force. The full state landscape is in our PFAS food packaging bans state tracker.

State packaging EPR frameworks are scaling enforcement. California SB 54 is the most prominent framework but Oregon, Maine, Maryland, Minnesota, Washington, Colorado, and New Jersey all have active or imminent EPR frameworks. The full landscape is in our EPR laws beyond California state tracker.

Customer and ESG inquiry intensity is increasing. Corporate customers, institutional procurement, ESG analysts, and consumer-facing sustainability reporting all increasingly request specific documentation about packaging compliance. Operations without documented compliance posture face commercial pressure beyond pure regulatory exposure.

The audit framework below addresses all three.

The Audit Framework: Five Phases

Phase 1: SKU Inventory
Phase 2: Per-SKU Material Identification
Phase 3: PFAS Verification
Phase 4: Compliance Documentation
Phase 5: Action Plan

Each phase produces specific outputs that combine into a comprehensive audit document.

Phase 1: SKU Inventory (Days 1-2)

The foundational data-gathering work. Catalog every disposable foodware SKU currently in use across the operation.

What to Document Per SKU

Product identification:
– Supplier name
– Supplier SKU code
– Product description (what it is)
– Size/specifications
– Material(s) — what it’s made of (your understanding, may need verification in Phase 2)

Volume data:
– Monthly purchase volume
– Annual purchase volume
– Per-unit cost
– Annual cost

Operational context:
– Where in the operation is it used (which menu items, which service contexts)
– When was the supplier first established
– When was this specific SKU first purchased

Existing documentation:
– Any certifications on file (BPI, TÜV, etc.)
– Any PFAS-related documentation
– Any sustainability claims being made about the SKU
– Any regulatory documentation

How to Build the Inventory

For most operations, building this inventory requires walking the back-of-house with the operations manager or chef:

1. Open every storage shelf, supply closet, walk-in
2. Photograph every disposable item
3. Record supplier information from packaging
4. Cross-reference with procurement records for volume and cost data
5. Build a spreadsheet with one row per unique SKU

A typical full-service restaurant operation will end this exercise with 30-50 distinct disposable SKUs. Quick-service operations might have 15-25. Coffee shops might have 20-30. Bubble tea/boba shops 12-20.

The inventory typically reveals SKUs operators didn’t realize they had — niche items, occasional-use items, items inherited from previous operations. This is normal; the inventory is supposed to be comprehensive.

Phase 2: Per-SKU Material Identification (Days 3-5)

Once the inventory is built, identify the actual material composition of each SKU. This determines which compliance dimensions apply.

Material Categorization

For each SKU, identify which material category it falls into:

Conventional plastic substrates:
– PET (#1) — clear cold cups, clear bottles, some clamshells
– HDPE (#2) — opaque containers, some bottles
– PP (#5) — flexible films, some containers, straws
– PS (#6) — polystyrene foam (banned in many states)
– PVC (#3) — rare in foodware

Compostable bioplastic substrates:
– PLA — clear cold cups, clear clamshells, some bottles
– PHA — straws, some films
– CPLA — hot cup lids, some utensils

Fiber-based substrates:
– Bagasse (sugarcane fiber) — bowls, plates, clamshells, trays
– Wheat straw fiber — similar applications
– Bamboo pulp — similar applications
– Kraft paper — bags, sleeves
– Bleached paper — boxes, some packaging
– Coated paperboard — pizza boxes, sandwich containers, hot cups

Other:
– Aluminum foil
– Wood (utensils, picks)
– Other specialty materials

The full materials science framework that informs this categorization is in our PLA vs PHA vs bagasse materials guide.

Material Verification

For each SKU, verify the material categorization through:

• Supplier specification sheets
• Packaging labels (resin codes, certification logos)
• Direct supplier inquiry where uncertain

Document any uncertainty — “fiber substrate, possibly bagasse but unverified” is itself useful audit information that flags Phase 3 verification work.

Phase 3: PFAS Verification (Days 6-10)

The most consequential phase for compliance risk. Apply specifically to all fiber-based and coated paper SKUs identified in Phase 2.

Per-SKU PFAS Verification Protocol

For each fiber-based or coated paper SKU:

Step 1: Request PFAS-free attestation in writing from the supplier.

The request: “Please provide written attestation that [SKU code] does not contain intentionally added PFAS, dated and on supplier letterhead.”

Acceptable responses:
– Letter on supplier letterhead, dated within the past 12 months, explicitly stating no intentionally added PFAS
– Reference to BPI certification issued in 2020 or later (BPI certification post-2020 includes PFAS exclusion)

Unacceptable responses:
– Verbal assurance without written documentation
– “We believe…” without specific attestation
– Reference to PFOA-free or PFOS-free without broader PFAS-free statement
– “We can get this to you next week” (legitimate suppliers have this readily available)
– Refusal to provide the attestation in writing

Step 2: Verify supplier reformulation timeline.

If the attestation is dated more recently than the inventory you have on hand, verify whether the inventory is from the supplier’s pre-reformulation production. PFAS-free attestation only applies to product manufactured after the reformulation.

Step 3: Document or escalate.

For SKUs that pass verification: file the attestation with the audit documentation.

For SKUs that fail verification (no attestation provided, or supplier can’t confirm reformulation timeline): flag for replacement.

Specific High-Risk Categories

Based on historical PFAS exposure patterns, the categories most likely to need verification:

Highest historical risk:
– Fiber to-go boxes and clamshells
– Fiber bowls (especially older inventory)
– Fiber plates and trays
– Coated paper sandwich and hot food boxes
– Coated paper hot cups (some legacy products)

Lower historical risk:
– PLA-based cold cups and bottles
– Bioplastic items broadly
– Uncoated kraft paper bags

The full PFAS framework, including historical exposure patterns and regulatory landscape, is in our PFAS compostable foodware guide.

Phase 4: Compliance Documentation (Days 11-13)

For each SKU in your inventory, document the compliance posture across regulatory dimensions.

State Regulatory Mapping

For each state in your distribution footprint, identify which regulatory frameworks apply:

California: SB 54 (packaging EPR), AB 1200 (PFAS), various local foodware ordinances
New York: Packaging EPR, PFAS food packaging ban
Washington: Packaging EPR, PFAS food packaging restrictions
Maine, Maryland, Minnesota, Colorado: State EPR + PFAS bans
Other states: Various state and municipal frameworks

The detailed state landscape is in our California SB 54 compliance guide, EPR laws beyond California state tracker, and PFAS food packaging bans state tracker.

Per-SKU Compliance Status

For each SKU, document:

California SB 54 status:
– Does the SKU meet SB 54’s compostability or recyclability pathway? Yes/no/uncertain
– Is the SKU labeled appropriately under California’s compostable labeling requirements? Yes/no
– For producer-level compliance: is the brand owner (you, in many cases) registered with the PRO?

State PFAS compliance:
– For fiber-based SKUs: is PFAS-free attestation on file? Yes/no
– For products selling into states with PFAS bans: is the SKU compliant? Yes/no/uncertain

State EPR compliance:
– For producer-level compliance: registered with applicable state PROs? Yes/no
– Per-SKU certification documentation that satisfies EPR pathway requirements? Yes/no

Certification documentation:
– BPI certification number (if applicable) and current status
– TÜV certifications (if applicable) and current status
– ASTM/EN compliance documentation
– The full certification framework verification protocol is in our BPI certification deep dive

Gap Analysis

Compile a clear list of gaps:
– SKUs without PFAS-free attestation
– SKUs without current BPI certification
– SKUs that may not satisfy state regulatory requirements
– Producer registration gaps
– Documentation gaps in any dimension

Phase 5: Action Plan (Days 14-16)

Based on the gap analysis, develop a prioritized remediation plan.

Priority Levels

Priority 1 (Immediate):
– SKUs with documented PFAS contamination still in inventory or active rotation
– SKUs in clear violation of state regulations in active distribution markets
– SKUs whose certifications have lapsed and are being claimed as currently certified

Priority 2 (Near-term, 30-60 days):
– SKUs without PFAS-free attestation that may or may not have PFAS (uncertainty)
– SKUs whose certifications need renewal soon
– Documentation gaps for compliance documentation

Priority 3 (Medium-term, 60-180 days):
– Supplier qualification updates for new SKU additions
– Quarterly compliance refresh process establishment
– Multi-state supply chain optimization

Priority 4 (Ongoing):
– Annual full-stack audit refresh
– Supplier indemnification clause additions
– Customer-facing communication updates

Remediation Tactics

For each Priority 1 and 2 gap, document:

• What needs to be replaced or updated
• What supplier is the appropriate replacement
• Lead time for replacement
• Cost impact (one-time and ongoing)
• Owner (who’s responsible for executing)
• Target completion date

The remediation work typically follows the operator-rollout pattern documented in our coffee shop 90-day playbook and the cross-vertical how to switch your business to compostable packaging guide.

Documentation Output

The complete audit produces a formal documentation package:

• SKU inventory spreadsheet (Phase 1 output)
• Material categorization documentation (Phase 2 output)
• PFAS attestation files per SKU (Phase 3 output)
• Compliance status documentation per SKU (Phase 4 output)
• Action plan with priorities, owners, dates (Phase 5 output)

This documentation is your evidence file for any regulator inquiry, customer documentation request, or ESG reporting requirement.

Maintaining the Audit: Ongoing Discipline

The audit isn’t a one-time exercise. Build into operational calendar:

Quarterly:
– Verify currently-active SKU certifications are still valid
– Refresh PFAS attestations for any SKUs from suppliers who recently changed formulations
– Add new SKUs to the audit as they enter the operation

Annually:
– Full audit refresh
– Update state regulatory landscape mapping (laws and effective dates change)
– Refresh per-SKU compliance posture across all dimensions

On supplier change:
– Full per-SKU re-verification before transferring volume to new supplier
– Documentation of new supplier’s certification posture

On distribution change:
– If entering a new state, verify SKU compliance posture for that state
– Update producer registration if entering a new state EPR jurisdiction

What “Done” Looks Like

A B2B operator with a mature audit posture in 2026 has:

• Complete SKU inventory with material categorization
• PFAS-free attestation per fiber/coated SKU on file
• Per-state compliance documentation across distribution footprint
• BPI/TÜV/EN certification verification per SKU
• Producer registration for applicable state EPR frameworks
• Action plan addressing identified gaps
• Quarterly compliance refresh cadence
• Annual full audit
• Documented evidence file ready for regulator/customer/ESG inquiry

Operations doing this well have packaging compliance as routine documented discipline. Operations that haven’t done the audit are operating with regulatory exposure they haven’t quantified — and the exposure tends to surface at the worst moment.

The supply chain that supports clean compliance posture is mature in 2026. Across compostable food containers, bowls, cups and straws, paper hot cups, bags, clamshell packaging, tableware, and the broader compostable food containers range, established suppliers carry the documentation that supports audit-grade compliance.

For brands building toward sustainability claims that survive scrutiny, the audit work above is foundational. Without per-SKU compliance documentation, sustainability claims can’t be substantiated. With the documentation, claims become defensible. The communication framework that turns compliance documentation into customer-facing claims is in our how to talk sustainability without greenwashing guide.

The Strategic Bottom Line

The audit framework above is one of the highest-leverage procurement-discipline investments B2B foodservice operators can make in 2026. The cost is modest — 8-16 hours of operator time across the phases. The risk reduction is substantial — quantified compliance posture across all regulatory dimensions in your distribution footprint.

For operations that have already done the audit, the discipline is in maintaining it through quarterly refresh and annual full re-audit. For operations that haven’t done it yet, the framework above is the path.

The state regulatory landscape (PFAS bans, packaging EPR frameworks, compostability labeling requirements) will continue to expand and tighten through the rest of the decade. The B2B operators with documented compliance posture adapt to these changes incrementally as new requirements emerge. The operators without documented compliance posture face progressively steeper catch-up requirements.

The path is the one outlined above — five-phase audit, per-SKU verification, compliance documentation across all relevant dimensions, action plan for identified gaps, quarterly maintenance discipline. Build that, and packaging compliance becomes routine procurement work rather than recurring crisis management. That’s the discipline.

For procurement teams verifying compostable claims, the controlling references are BPI certification (North America), EN 13432 (EU), and the FTC Green Guides on environmental marketing claims — these are the only sources U.S. enforcement actions cite.