How V5 Ultimate runs a pet food plant, end to end.

Pet food sits under FDA CVM, not CFSAN: 21 CFR 507 (the FSMA Preventive Controls rule for Animal Food) is the operating regulation. Where the product contains meat or poultry processed under federal inspection, USDA FSIS jurisdiction overlaps. The hazards that drive recalls are familiar — Salmonella in kibble and treats, Listeria in raw frozen diets, aflatoxin in corn-heavy formulas, vitamin D over-fortification, pentobarbital from rendered material.

21 CFR 589 — the BSE feed rule — adds a hard segregation requirement: prohibited cattle materials cannot enter ruminant feed, and any facility handling both must demonstrate physical and procedural separation that FDA can verify on inspection.

V5 Ultimate treats every CCP reading, every supplier lot, every Salmonella result and every BSE-segregation gate as part of the same immutable ledger. Recall is a query. AAFCO label claims (e.g. 'Complete & Balanced') are tied to a nutrient analysis on a specific formula revision — they cannot drift.

Every node carries forward supplier lot, work order, operator, equipment, BSE-segregation state and allergen / species context from the node before it. Nothing is re-keyed.

21 CFR 507 Subpart E (Supply-Chain Program) requires that the facility's preventive controls cover hazards controlled before the ingredient arrives. V5 holds every supplier as a structured object: scope by ingredient × grade × site, species declaration (critical for rendered proteins and the BSE rule), aflatoxin / mycotoxin test history for grain-based ingredients, pentobarbital test history for rendered material, vitamin-premix CoAs, FSVP files for imports.

Re-qualification is calendar-driven and portal-led; an expired cert blocks goods-in automatically. Supplier risk scoring drives the depth of incoming inspection — a high-risk rendered-protein supplier gets every lot pentobarbital-tested; a long-trusted vitamin-premix supplier ships against a reduced sampling plan.

The receiver scans the ASN, weighs against PO, records temperature where applicable, captures the supplier lot and best-before, and photographs condition. V5 mints a goods-receipt lot ID at that moment.

Identity verification — visual inspection, near-infrared (NIR) for grain identity, ELISA for species in rendered proteins, aflatoxin rapid test for corn-heavy ingredients, pentobarbital screening where required — runs on the same kiosk. Results link to the receipt lot, instrument, analyst e-signature and supplier CoA.

V5 maintains bin attributes: BSE-status (prohibited / non-prohibited), species profile, allergen profile, temperature band, organic segregation. The pick list shown to the picker only includes bins compatible with the work order — prohibited material cannot be picked into a ruminant formula. FEFO is enforced; overrides require reason + dual e-sig.

Each formula holds: BOM with species and BSE-status per ingredient, routing with step-by-step instructions, in-process control plan (extruder kill-step temperature/time, kibble water activity, fat coating coverage, micro panel), packaging routing, AAFCO nutrient-profile calculation (Adult Maintenance / Growth-Reproduction / All Life Stages), feeding-directions calculation, and the locked label artwork version. The 'Complete & Balanced' claim is tied to the calculated nutrient profile and the supporting analysis — they cannot drift.

Effectivity is two-signature: a formulator signs the change, a PCQI signs the validation impact. New work orders pick up the new revision; in-flight work orders keep the snapshot they were released against.

If the formula is revised mid-shift, the work order keeps the snapshot it was released against. The auditor sees exactly the formulation this batch was built to, with the sha256 of the snapshot recorded against release.

Dispense is verified against scale stream. The extruder step shows the kill-step target (e.g. minimum die temperature, minimum residence time) and the live readings; under-target trips an in-process deviation. The fat-coat step records coverage and post-extrusion handling time — a known re-contamination risk for Salmonella.

Allergen / species changeovers are explicit, signed gates. Ruminant-feed line changeovers from a prohibited-material run require BSE-segregation verification and a dual e-signature before the next run releases.

Water activity, kibble bulk density, fat coating percentage, micro panel (Salmonella by composite, indicator organisms), aflatoxin on grain-heavy formulas, vitamin assays for high-fortification claims, calcium / phosphorus where the label commits — all scheduled by the work order. OOS auto-opens a deviation, holds the lot, and notifies QA.

A single register categorises by hazard type. Root-cause uses the structured fields the auditor expects. CAPAs link to the deviation, affected lots, operators, equipment, complaints, and FDA CVM Reportable Food Registry equivalent where required.

AAFCO Model Regulations govern the product name, guaranteed analysis, ingredient list (descending by weight), nutritional adequacy statement (the 'Complete & Balanced' claim), feeding directions, calorie content (kcal/kg and kcal per common measure), manufacturer / distributor statement, and net weight. V5 carries those fields from the formula through to the printed label — no manual artwork edits at packaging.

Where the product contains FTL components (e.g. eggs in raw frozen diets), the FSMA 204 TLC is propagated on the case.

Review-by-exception is only safe if the record is complete and immutable. V5's batch record is built from the ledger as the line runs. The QA reviewer's queue surfaces only items the system can't auto-clear. Release requires two qualified e-signatures, both identity-verified, both bound to the snapshot. Released batches are disposition-locked.

Every case is shipped against an ASN that carries the lot code. When a recall trigger fires — internal QA disposition, supplier withdrawal, retailer complaint, FDA CVM Class I — V5 walks the ledger in both directions in seconds: every case made from this supplier lot, every customer DC it shipped to, every adjacent batch that shared the extruder or coater.

The CVM Reportable Food Registry submission (where applicable), the recall press release draft, and the mock-recall test for the next GFSI audit all assemble from the same ledger.

Hazards link to preventive controls, monitoring, corrective actions, verification, and the PCQI who owns each. Re-analysis is calendar-driven (every three years or on significant change per 507.51), and prior monitoring data assemble into the re-analysis workspace automatically.

Draft → Review → Approved → Effective → Periodic Review → Superseded / Retired. Two qualified signatures effect every release. Operators see only the effective revision; superseded revisions are retained per 21 CFR 507.215 plus any GFSI overlay.

V5 maintains a training matrix per role × line × hazard. PCQI training (21 CFR 507.4) is bounded; an expired course locks the operator out of the relevant kiosk action.

Every batch's quality signals, every CAPA, every supplier scorecard, every internal-audit finding, every customer complaint, every EMP swab — all stream into the management-review workspace as they happen.

V5's audit module schedules internal audits and external audits (SQF Animal Food, FSSC 22000, customer 2nd-party, AAFCO state inspections). When FDA CVM arrives, the inspector's request list — the Food Safety Plan, the last three months of monitoring, the corrective-action log, supplier verification — is a query, assembled and printable in minutes.

Hazards are identified by category (biological, chemical, physical, radiological) and source. Each gets a severity × likelihood score, a documented decision on whether a preventive control is required, the monitoring procedure and frequency, the corrective action, and verification. The kiosk enforces critical control monitoring as a hard gate.

The kill-step (extrusion / baking) validation, the post-kill handling controls (sealed product zones, dedicated fat coater, restricted personnel flow), the EMP schedule, the finished-product micro plan, the supplier-control side, the response-on-positive plan (hold, vector-swabbing, intensified cleaning, re-test, disposition) — all assembled into one programme with a calendar and an audit trail.

V5 holds sanitation procedures per zone × equipment × allergen state, with frequency, agent, concentration, contact time and verification (visual + ATP + microbiological swab on a defined cadence). Sanitation events are kiosk-led; results bind to the equipment record.

Extruder die temperatures, oven probes, dispense scales, metal detectors, X-ray rejectors, aw meters — each is a tracked asset with calibration interval, certificate, tolerance, and an out-of-tolerance impact-assessment that triggers a back-look across every batch since the last passing calibration.

Sample sites, frequency, indicator and pathogen testing, and corrective actions on a positive (vector swabbing, intensified cleaning, re-test) are all scheduled and tracked. A Zone 1 Salmonella positive auto-holds product and opens a CAPA with a defined effectiveness check.

Intake captures lot, best-before, place of purchase, species and weight of pet, clinical signs, severity. V5 binds the complaint to the batch, surfaces adjacent batches that share equipment, and trips a deviation if pattern crosses a threshold. The CVM RFR clock starts at intake where applicable.

Every signed event carries the actor's verified identity, signature meaning, time, and a sha256 of the record. The signature row is append-only. PDF renders are deterministic from the snapshot.

CoAs per lot, AAFCO nutritional adequacy statements, Guaranteed Analysis confirmation, calorie content, country-of-origin documentation — all on the portal. Audit-trail of who downloaded what is automatic.

A typical plant onboards in 4–8 weeks: master data import, formula migration with AAFCO nutrient profile mapping, kiosk training, parallel-run validation, cutover. The validation pack (URS → IQ → OQ → PQ) is built in.

Abbreviated mapping. Each link opens the full readiness guide.