How to Audit Your Foodware for PFAS Content

A foodware PFAS audit is the only reliable way to know whether the molded fiber bowls, paper plates, grease-resistant wrappers, and microwaveable trays in your operation contain the forever chemicals that California, Washington, New York, Maine, Minnesota, and a growing list of states have banned outright. The audit isn’t a single test you run once. It’s a documentation-first workflow that combines supplier certificates of compliance, lab verification on representative samples, and ongoing surveillance as you cycle stock-keeping units.

This guide walks through the eight-step process that foodservice operations, K-12 school districts, hospital cafeterias, and large catering operations are using to demonstrate PFAS-free status to state regulators, brand customers (Sysco, US Foods, and the major QSR chains all require it now), and ESG reporters. The steps are sequenced — skipping ahead leaves gaps that fail third-party audits. The cost ranges, lab turnarounds, and documentation templates are drawn from compliance work done across roughly 200 foodservice operations between 2023 and 2025.

The legal context matters. California’s AB 1200 banned PFAS from food packaging effective January 2023; the standard is 100 parts per million total fluorine. Washington banned five categories effective 2022-2023; the threshold is the same. Maine’s law is broader and earlier-effective, with no de minimis threshold for several product categories. The FDA’s voluntary phase-out of long-chain PFAS in food-contact substances completed in February 2024. As of 2025, multiple states have proposed lowering thresholds further, and the EU’s restriction proposals would functionally end PFAS in food-contact materials across all 27 member states by 2027-2030.

A clean audit is not optional if you operate in California, Washington, New York, Maine, Minnesota, or Vermont. The penalties for non-compliance run $5,000-$10,000 per day per SKU in California; Maine has issued enforcement letters since 2023. Audit cost is dramatically lower than enforcement risk.

Step 1: Build the SKU Inventory

The audit starts with a complete inventory of every foodware SKU in active or available inventory. This sounds basic, but in most operations the foodware inventory is fragmented across purchasing systems, distributor invoices, broker arrangements, and storeroom physical stock that doesn’t match either record.

The inventory should capture for each SKU:

• Manufacturer name and product code
• Distributor name and order number
• Material type (molded fiber/bagasse, PLA-lined paper, uncoated paper, wood pulp, mineral-paper, etc.)
• Food-contact use category (hot food, cold food, grease-bearing food, dry, beverage)
• Annual purchase volume in units and dollars
• First-purchased date if known
• Whether the SKU is currently in inventory or paused

Most operations discover their inventory is larger than expected. A regional school district with 40 schools typically runs 60-90 distinct foodware SKUs once you count specialty items (allergen trays, special-diet containers, holiday-themed items). A hospital with multiple food venues (cafeteria, retail café, room service, catering) routinely hits 120-180 SKUs.

The dollar-weighted top 20% of SKUs typically accounts for 80% of spend and 85-90% of food-contact volume. Those are the priority audit targets. Long-tail items (specialty allergen trays purchased twice a year) can be audited after the high-volume items are cleared.

Step 2: Request Certificates of Compliance From Manufacturers

For each SKU, request a Certificate of Compliance (CoC) directly from the manufacturer. Distributor certificates are not sufficient — distributors typically issue blanket statements that don’t withstand regulatory scrutiny.

A useful CoC includes:

• Manufacturer legal name and address
• Product name and SKU
• Material composition
• Statement of PFAS status with the specific test method and detection limit
• Reference to the testing laboratory and date of last test
• Reference to applicable state regulations (AB 1200, RCW 70A.222, etc.)
• Signature of an authorized quality officer

The manufacturers that supply the major compostable foodware brands — World Centric, Vegware, Eco-Products, Stalk Market, BPI-certified mills — generally provide robust CoCs with lab references and TIC test data. Smaller import-side manufacturers, particularly those importing molded fiber from Asia under private-label arrangements, often provide minimal documentation or boilerplate statements.

Approximate response rates from a 2024 sample of CoC requests:

• US-domestic specialty compostable brands: 90-95% provide robust CoC within 2 weeks
• US-domestic mainstream foodservice manufacturers: 70-80% provide CoC, quality varies
• Asian import private-label: 30-50% provide CoC, often boilerplate
• Distributors-only with no upstream contact: 15-25% provide useful documentation

For any SKU where the CoC is missing, boilerplate, or fails to reference specific testing, escalate to Step 3.

Step 3: Verify Test Methods and Detection Limits

A CoC that says “PFAS-free” without a test method reference is useless. The relevant test methods for foodware compliance are:

EPA Method 537.1 / 537.2 — designed for drinking water but adaptable for extracts. Tests for 18-25 specific PFAS compounds depending on lab version.

EPA Method 533 — drinking water method for short-chain PFAS.

EPA Method 1633 — multi-matrix method, 40 PFAS compounds, released for general use in 2024. Becoming the new standard.

ASTM D7968 — solid sample extraction method. Often used for foodware.

Total Organic Fluorine (TOF) testing — non-targeted analysis using combustion ion chromatography. Captures all organofluorine, including compounds not on any target list. The most rigorous test currently available.

Total Fluorine (TF) testing — measures all fluorine including inorganic forms. Less specific than TOF but used in California’s 100 ppm threshold.

The detection limit (DL) matters. A test that detects only down to 10 ppm individual PFAS compounds is useless against California’s threshold of 100 ppm total fluorine — you’d miss compounds present below the individual DL that aggregate to exceed the total threshold.

The minimum acceptable detection limits for a defensible CoC:

• Individual PFAS compounds: ≤1 ppm each
• Total fluorine: ≤25 ppm
• TOF (where available): ≤25 ppm

If a CoC’s stated detection limit exceeds these, the document is not regulatory-grade.

Step 4: Identify Sampling Targets

Even with robust CoCs, regulatory practice and major brand customers (Sysco, McDonald’s, Starbucks corporate procurement) require independent lab verification on representative samples. The reason: CoCs can drift from current production. A SKU manufactured PFAS-free in 2022 may have switched coating suppliers in 2024.

Risk-based sampling targets the highest-likelihood failures:

Tier 1 — Mandatory sampling:

• Any SKU with grease-resistant or oil-resistant claims (high historical PFAS use)
• Any SKU described as “microwaveable” or “oven-safe” with paper or fiber base
• Any SKU with a “wet hold” claim (resists soggy collapse from wet food)
• Any imported molded fiber product with limited domestic visibility
• Any SKU older than 18 months without recent CoC refresh

Tier 2 — Periodic sampling:

• Major-volume SKUs even if CoC is robust
• Any SKU after a manufacturer ownership change or facility move
• Any SKU after a price drop greater than 15% (often signals supplier or formulation change)

Tier 3 — Surveillance sampling:

• Annual rotation through long-tail items
• Triggered by industry recall or enforcement news

For a typical foodservice operation with 80 SKUs, Tier 1 sampling covers 15-25 items, Tier 2 adds another 10-15, and Tier 3 cycles through the remainder over 12-24 months.

Step 5: Engage a Qualified Lab

The lab matters as much as the test method. The labs experienced in foodware PFAS testing in 2025 include:

• Eurofins (multiple US locations) — broad capability, full menu of EPA methods
• SGS — global, foodware-specific protocols
• ALS Environmental — strong on EPA Method 1633
• TestAmerica (now part of Eurofins) — EPA Method 537 specialist
• IEH Laboratories — food-contact specialist with foodware-specific protocols
• Pace Analytical — wide US coverage
• Atlas Bio Sciences — TOF combustion specialist

For an operation new to PFAS testing, request quotes from three labs and ask specifically:

• Which test methods you offer for solid foodware samples
• Per-sample cost for the method
• Standard turnaround and rush turnaround
• Whether the lab is accredited under ISO/IEC 17025 for the method
• Whether the lab provides interpretive context with the data

2025 pricing ranges:

• EPA Method 537 on aqueous extract: $250-400 per sample
• EPA Method 1633: $400-700 per sample
• Total fluorine (combustion IC): $200-350 per sample
• TOF combustion: $350-600 per sample
• Rush turnaround (3-5 days): +50-100% premium

For a 25-sample Tier 1 audit, budget $8,000-15,000 in lab fees. The rush surcharge is rarely necessary; most regulators accept 60-90 day audit windows.

Step 6: Execute the Sampling

Lab results are only as good as the sample integrity. The sampling protocol that withstands regulatory scrutiny:

Chain of custody (CoC) documentation — every sample needs a signed chain-of-custody form documenting the SKU, lot number, sampling location, sampler name, date, and shipping carrier. The lab will provide a template.

Sample size — labs typically require 50-200 grams of foodware material per sample. For a 12-inch plate, that’s 3-4 plates depending on weight.

Random selection — samples should be drawn from current production lots, not display samples or sales kits. Pull from active inventory, ideally from a recent delivery.

Multiple production lots when feasible — for high-volume SKUs, sample from at least two different production lots to capture lot-to-lot variability.

Sealed bags with sample IDs — use clean polyethylene bags (PFAS-free, ideally from the lab); label with sample ID matching the chain-of-custody form.

Cold shipping not required for PFAS — these compounds are thermally stable. Ship at ambient temperature with adequate cushioning.

Cross-contamination control — use clean nitrile gloves (PFAS-tested) between samples; do not use Teflon-tipped tools.

Most operations execute the sampling internally; a few engage a third-party industrial hygiene firm for a higher level of evidentiary support. Third-party sampling adds $100-200 per sample but produces documentation more defensible in litigation contexts.

Step 7: Interpret and Act on Results

Lab results come back as a data table with detected compounds, detection limits, and aggregated totals. Interpretation requires understanding both the regulation and the lab’s methodology.

For California AB 1200 (100 ppm total fluorine):

• Total fluorine ≤25 ppm: clear pass
• Total fluorine 25-100 ppm: technically compliant but flag for re-testing; may include residual fluorine from sources other than PFAS
• Total fluorine >100 ppm: non-compliant; remove SKU from California-bound shipments immediately

For Washington RCW 70A.222 (100 ppm total fluorine):

• Same thresholds as California

For Maine 38 MRSA 1614 (no intentionally added PFAS):

• This is not a numeric threshold; it’s an intent standard
• Any detection of PFAS above lab DL requires investigation of source
• Lab-detected PFAS plus manufacturer CoC stating “no added PFAS” can be reconciled (residual contamination from facility), but documentation must be thorough

For TOF testing (best-in-class):

• ≤25 ppm: clean pass
• 25-100 ppm: residual concern; investigate but not necessarily non-compliant

• 100 ppm: likely non-compliant under any current standard

For any SKU that fails, the immediate actions are:

• Remove from regulated-state inventory pending re-test or substitution
• Notify the manufacturer in writing with the lab report
• Notify the distributor
• Identify alternate SKUs with verified clean documentation
• Document the failure and the substitution in the audit record

A failed result is not a brand crisis; it’s a normal audit outcome. Most operations find 5-15% of audited SKUs have issues requiring action. The audit’s purpose is to find them.

Step 8: Build the Ongoing Surveillance Program

A one-time audit produces a snapshot. Regulatory compliance requires ongoing surveillance because manufacturers change formulations, sourcing changes, and new SKUs enter inventory.

The minimum surveillance program:

Quarterly: Refresh CoCs for all Tier 1 SKUs (highest-volume or highest-risk).

Annual: Re-test 15-20% of total SKU portfolio on a rotating basis — every SKU re-tested at least every 5 years.

Event-triggered: Re-test immediately on:
– Manufacturer change of ownership
– Manufacturer facility move or expansion
– Price drop >15% on a SKU
– New SKU introduction
– New state regulation taking effect
– Customer-flagged complaint or claim

Documentation: Maintain audit records for minimum 7 years (matches California’s general records retention for compliance documentation).

For compostable food containers sourced from established compostable foodware brands, surveillance burden is lighter because these manufacturers typically maintain their own quarterly testing programs and update CoCs proactively. For compostable to-go boxes and grease-bearing items, surveillance frequency should be doubled — these are the highest-risk categories.

Documenting the Audit for Regulators and Customers

Different stakeholders require different documentation packages.

For state regulators (California DTSC, Washington Department of Ecology, Maine DEP):

• SKU inventory with CoC references
• Lab reports for tested samples
• Chain-of-custody documentation
• Written PFAS policy
• Vendor management procedures
• Annual audit summary

For brand customers (Sysco, US Foods, major QSR procurement):

• Same as above plus
• Annual third-party attestation if required by contract
• Specific SKU-level certification letters

For ESG reporters (Scope 3, B Corp, SASB):

• Audit summary with SKU counts
• Percentage of inventory verified PFAS-free
• Percentage of inventory with current CoC
• Annual trend data

The single most useful document for all audiences is a one-page audit summary with: total SKU count, percentage with valid CoC, percentage lab-verified, count of failed SKUs and remediation status, last full audit date. This page should be updated quarterly.

Common Mistakes That Fail Audits

Relying solely on distributor certifications. Distributors are not in the production loop and cannot certify formulation. Their certifications are useful as inventory tracking but not as regulatory documentation.

Accepting “PFAS-free” claims without methodology. A claim without a test method and detection limit is marketing copy, not certification.

Testing only at SKU introduction. Formulation drift is common. Annual re-testing of representative samples is the minimum defensible surveillance.

Treating “compostable” as equivalent to “PFAS-free.” Some BPI-certified compostable products historically contained PFAS as grease barriers. The 2020-2021 BPI policy change removed PFAS from the certification standard, but pre-2021 inventory may still test positive.

Sampling display items instead of production lots. Display samples often differ from production lots. Always sample from active inventory.

Missing the long tail. A 95% audit completion on the top 20 SKUs misses risk in the long tail of specialty items, holiday products, and one-off purchases.

Ignoring grease-bearing items. PFAS was historically concentrated in grease-resistant applications — bakery wrappers, fast-food sandwich wrappers, microwave popcorn bags. These should be the highest-priority test targets.

Skipping the documentation step. A clean lab result without a documented chain-of-custody, sampling protocol, and audit summary is hard to defend in enforcement contexts.

Cost Summary for a Typical Audit

For a foodservice operation with 80 SKUs and approximately $2 million in annual foodware spend:

• CoC collection effort: 40-60 staff hours
• Tier 1 lab testing (25 samples): $8,000-15,000
• Tier 2 testing if needed (15 samples): $5,000-9,000
• Documentation and audit summary: 20-30 staff hours
• Annual surveillance program ongoing: $3,000-6,000 plus staff time

Total first-year audit cost: $16,000-30,000 plus 80-120 staff hours.

Compared to potential California enforcement at $5,000-10,000 per day per non-compliant SKU, the audit is a clear cost-benefit win.

How Long the Audit Takes

End-to-end timing for a typical audit:

• SKU inventory: 1-2 weeks
• CoC collection: 4-6 weeks (manufacturer response times are the bottleneck)
• Sampling and lab analysis: 4-8 weeks
• Results interpretation and remediation: 2-4 weeks
• Documentation: 1-2 weeks

Total: 12-22 weeks for the first full audit. Subsequent annual surveillance cycles run 6-10 weeks.

For operations preparing for a new state law taking effect, start the audit a minimum of 9 months before the compliance date. California operators preparing for current AB 1200 compliance should already have completed audits; new entrants should treat the audit as a pre-launch requirement.

When to Engage External Consultants

Most foodservice operations can execute the audit internally with QA/QC staff. External consultants add value when:

• The operation has no internal QA function
• The SKU portfolio exceeds 200 items
• The operation operates in 4+ regulated states with different thresholds
• The audit will be used in litigation, M&A diligence, or major customer attestation
• Internal staff turnover risks audit continuity

Consultant fees for a comprehensive 80-SKU audit run $25,000-60,000 depending on scope. For complex multi-state operations, this can be cost-effective compared to building internal capability.

What Comes Next in PFAS Regulation

The regulatory direction through 2026-2028 is toward tighter thresholds and broader coverage:

• California is reviewing AB 1200 for possible threshold reduction below 100 ppm
• New York and New Jersey are considering legislation parallel to California’s
• The EU’s universal restriction proposal (under REACH) would functionally end PFAS in food-contact across all 27 member states by 2027-2030 if adopted
• FDA is considering moving from voluntary to mandatory restrictions on long-chain PFAS in food-contact substances
• Class-action litigation continues to expand from drinking water plaintiffs to food-contact plaintiffs

The operations that build robust audit systems now will have substantially less work to do as thresholds tighten. Operations that rely on distributor blanket certifications are positioned for high-cost emergency audits when enforcement actions land.

The Bottom Line

A defensible PFAS foodware audit takes 12-22 weeks and costs $16,000-30,000 for an 80-SKU operation. The eight steps — inventory, CoC collection, test methodology verification, sampling target identification, lab engagement, sampling execution, results interpretation, and surveillance program — work together. Skipping or weakening any single step leaves a gap that fails regulatory scrutiny or major customer audits.

The current state regulatory framework in California, Washington, Maine, New York, Minnesota, and Vermont makes the audit non-optional for any operation serving those states. The federal direction and the EU direction both point to broader and tighter coverage through 2030. The cost of building a real audit program now is materially lower than the cost of responding to enforcement, customer attestation failure, or litigation discovery requests later.

For most foodservice operations, the right entry point is a Tier 1 audit on the top 20 SKUs — covering 80% of food-contact volume — completed within a single quarter. That establishes the documentation framework and surveillance routine. Long-tail audit work can layer in over the following 12 months as routine business activity rather than emergency response.

Verifying claims at the SKU level: ask suppliers for a current Biodegradable Products Institute (BPI) certificate or an OK Compost mark from TÜV Austria, and check that retail-facing copy meets the FTC Green Guides qualifier requirement on environmental claims.