Essential business documents for UK restaurants in 2026

TL;DR: UK restaurant owners need several layers of documentation running simultaneously: food safety records under your HACCP system, allergen information for every dish covering all 14 major allergens under the Food Information Regulations, staff training records that evidence allergen awareness and food safety competency, temperature monitoring logs, supplier statements, cleaning schedules, and the standard business paperwork any self-employed operator carries (insurance certificates, ICO registration, staff contracts, PAYE records). Most disputes can be traced to one of two failure points: either the documentation never existed, or it existed but was never maintained consistently. EHO inspections look at both the paper trail and the operational habits behind it, and an inspector who sees complete, current records reads something very different from one who sees gaps and retrospective guesses. This post sets out exactly which documents a UK restaurant needs, what they should contain, and how to keep the system manageable day to day without turning paperwork into a second job.

Running a restaurant in the UK in 2026 means operating inside a layered compliance framework: the Food Safety Act 1990, the Food Information Regulations 2014 (covering allergens), the Health and Safety at Work Act, employment law, GDPR for customer and staff data, and your local authority's environmental health function. None of these regimes are new, but the expectation from inspectors and enforcement bodies has sharpened. Documentation that looked adequate five years ago may not satisfy an Environmental Health Officer (EHO) today.

The good news is that the documentation itself is not complex. The challenge is maintaining it consistently when daily service demands are competing for your time.

Your food safety documentation starts with your HACCP system. HACCP stands for Hazard Analysis and Critical Control Points. The FSA provides simplified templates for small food businesses, and for most independent restaurants the resulting document is 10–20 pages with supporting logs.

A working HACCP system documents:

• The food safety hazards present in your operation (cross-contamination between raw and ready-to-eat food, temperature control failures, inadequate cooking, pest ingress).
• Your critical control points: the specific moments in your process where you prevent or eliminate those hazards.
• How you monitor each control point (who checks what, how often, with what tool).
• What corrective action you take if a control point fails.
• Your record-keeping approach.

The system needs to reflect your actual operation. A generic template lifted from the internet and printed off without modification tells an EHO that it was never applied. Your HACCP document should name your specific equipment, your specific menu categories, and your specific workflows.

Temperature records are the most commonly checked documentation during an EHO visit. You must maintain evidence that:

• Frozen storage runs at or below -18°C.
• Chilled storage runs below 5°C.
• Hot holding maintains food above 63°C.
• Cooking temperatures reach the required levels for each food type (poultry to 75°C at the centre, for instance).

The most practical format is a paper or digital log checked at consistent points during service: on opening, at the mid-point, and at close. Three checks a day, recorded consistently, builds a strong compliance record. Single daily checks may satisfy minimum requirements but provide less evidence of ongoing control.

Calibrate your probe thermometers. An uncalibrated probe that reads 2°C low means you may be serving food that has genuinely not reached safe temperature. Calibration records belong with your temperature logs.

Every area of the kitchen and service space should have a defined cleaning schedule with frequency, method, chemical used, and person responsible. Daily cleaning tasks (surfaces, equipment in contact with food, floors) and less frequent tasks (extraction canopy, fridge interiors, behind equipment) should both feature.

EHO inspections look at whether your cleaning schedule reflects your actual operation and whether the records show it was followed. A cleaning schedule that was clearly printed once and never filled in is worse than no schedule at all. If you do nothing else this week in terms of paperwork: create a simple cleaning log and start filling it in daily.

If you use a professional pest control contractor, maintain the service reports. If you conduct your own monitoring, record your inspection findings. Evidence of regular, documented pest monitoring tells an inspector you are actively watching for risk. The absence of any pest record, even in a premise that has never had a problem, reads as an oversight.

Allergen compliance carries the most serious legal risk for UK restaurants. The 14 major allergens that must be declared are: peanuts, tree nuts, milk, eggs, fish, shellfish, celery, mustard, sesame, soya, lupin, sulphites, molluscs, and cereals containing gluten.

Natasha's Law (formally the Food Information (Amendment) (England) Regulations 2021) extended full allergen labelling requirements to food prepared and sold on the same premises, including restaurants, cafes, and food service operations. While restaurants serving food to order have specific requirements distinct from pre-packed food, the underlying obligation is the same: customers must be able to get accurate allergen information about every dish.

You need a complete allergen matrix for your current menu: every dish, every allergen present (or potentially present), confirmed against your actual ingredients. This is not a one-time exercise. When your supplier changes a sauce recipe, switches a product line, or delivers a different brand of pasta, your allergen records must update to reflect the change.

Maintain this as a live document, not an archived one. Date it. When it changes, keep the previous version so you can show the history.

Your allergen records for finished dishes are only as accurate as the information you receive from suppliers about raw ingredients. Every supplier providing ingredients that carry allergen risk should provide a written allergen statement. Request these formally and keep them on file. When a supplier changes a product specification, ask for an updated statement.

This documentation protects you in two directions: it demonstrates due diligence in building your allergen matrix, and it provides a paper trail if a dish allergen is later disputed.

Every member of staff who handles food, takes orders, or serves customers must have evidence of allergen awareness training. This does not necessarily mean a formal qualification for everyone, but it does mean a record showing each person was trained, what they covered, and when. For kitchen staff with direct food preparation responsibility, more detailed training and evidence is appropriate.

When you take on a new team member, allergen training goes into their induction record before they work unsupervised. When your menu changes and introduces new allergen risk, a briefing record documents that the team was informed.

When customers ask about allergens, the question and your response should be recorded for anything that could be disputed later. This is less common in high-volume casual dining than in contexts where diners declare complex allergies ahead of a booking, but the discipline applies across contexts. If a customer calls ahead to query whether a dish contains sesame, note it. If a diner at the table asks for gluten-free confirmation, the table order note should reflect it.

Paperwork for paperwork's sake is the wrong framing. Allergen records exist because an undocumented allergen conversation is one that, in the event of an incident, never happened.

Every staff member needs a record showing they have received food safety training appropriate to their role. Front-of-house staff who serve food need basic food hygiene awareness. Kitchen staff should have Level 2 Food Safety in Catering (or equivalent). Line managers and supervisors responsible for others may need Level 3. Record the training provider, qualification level, and date for every person.

These records have two functions. The first is demonstrating competency to an EHO. The second is liability protection: if a food safety incident occurs and it emerges that a staff member had received no documented training, your position as the employer is significantly weaker.

Every member of staff needs a written employment contract (or written statement of employment particulars) from day one. Right to work checks must be documented before employment starts. For employees from outside the UK, the specific documentation required depends on their immigration status.

PAYE registration with HMRC, employer's liability insurance (minimum £5m, legally required), and a Employers' Liability certificate displayed at the premises are all basic legal requirements. None are complex, but they are each separately enforceable.

Even for small restaurants, disciplinary and grievance procedures should be in writing and followed consistently. If you ever face an employment tribunal, the question of whether you followed a fair procedure is answered first by what your written procedure says, and second by whether your records show you followed it.

Beyond the food-specific and employment documentation, a restaurant needs the standard layer of business records:

Public liability insurance (minimum £1m, practically minimum £5m for food service). Your certificate should be current and accessible.

Food business registration with your local authority. This is a legal requirement for all food businesses. It is free and straightforward, but operating without it is an offence.

ICO registration if you process personal data (which includes customer reservation data, loyalty databases, and staff records). Currently £40 per year for most small businesses. Non-registration is an ICO enforcement risk.

Supplier agreements for your main suppliers: written terms covering delivery schedules, quality standards, dispute resolution, and price-change notice periods. Most disputes can be traced to an assumption that was never written down.

Tax records. Under MTD ITSA from April 2026, digital income and expense records with quarterly quarterly submissions to HMRC. See Making Tax Digital for restaurant owners for the full picture on what changes and what stays the same.

The risk with documentation is that it becomes a periodic scramble rather than an operational habit. An EHO who arrives and sees temperature logs that have been filled in for the past two weeks and are blank before that has seen the same pattern many times.

The way to make it manageable:

• Build the daily logs (temperature, cleaning, opening/closing checks) into the operational routine for whoever opens and closes the kitchen. They take two to three minutes. Tie them to existing habits.
• Keep allergen records as a live document, not an archived PDF. When the menu changes, the document changes the same day.
• Train staff on allergens during induction and record it. Do not treat it as something to do eventually.
• Store all documentation in one organised location, physical or digital, so that when an inspector arrives you can produce records promptly rather than searching.

An honest counterpoint worth making: if your restaurant is genuinely simple, with a short menu, no employed staff, and low footfall, your documentation burden is correspondingly lighter. The framework above is designed for an established full-service restaurant. A market stall or pop-up with a three-item menu needs fewer documents, not this full stack. We'd say so plainly rather than overstate the baseline requirement.

LaunchKit's restaurant business documents bundle includes HACCP templates structured for independent restaurants, temperature monitoring logs, cleaning schedules, staff training record sheets, allergen matrix worksheets, supplier statement request letters, incident logs, and EHO inspection readiness checklists. £19.99 for the Premium edition, ready to adapt to your specific operation.

For allergen management in detail, including Natasha's Law requirements and supplier discipline, see allergen management for UK restaurants.

For tax record-keeping requirements under MTD, see Making Tax Digital for restaurant owners.

If you are also planning your marketing documentation or building a consistent brand voice across menus and channels, the restaurant AI copy kit (£14.99) sits alongside the operational paperwork.

This article is general guidance, not legal advice. For your specific regulatory position, including food law compliance and employment obligations, consult a solicitor or a food safety consultant with experience in the hospitality sector.