Do I need a HACCP plan to sell cakes from home?

You saw that Reddit post, didn’t you? A beginner baker proudly shares they’re starting a cake business from home, only to have a chef reply, “Don’t worry about licensing — just bake.” And then chaos erupts in the comments. Some people say you absolutely need a HACCP plan, others say cottage food laws make it optional. It’s confusing, and if you’re just starting out, that kind of conflicting advice can make you want to throw your apron in the trash. Let’s untangle this together.

What exactly is a HACCP plan anyway

HACCP stands for Hazard Analysis Critical Control Points. That sounds intimidating, but the idea is simple: it’s a written system that identifies where germs or contaminants could creep into your food, and then sets steps to prevent them. Think of it as a safety roadmap for your kitchen. Restaurants and commercial bakeries are required to have one, but home bakers? That’s where the confusion lives.

Under the FDA’s Food Code, a full HACCP plan is mandatory if you’re operating a retail food establishment — wash rinse sanitize, hot hold, cold hold, that whole rigamarole. But home baking businesses usually fall under state “cottage food laws,” which exempt you from many of those commercial requirements. However — and this is a big however — the Reddit debate highlights that “not required” doesn’t mean “not recommended.” A simple one-page HACCP plan protects your customers and your reputation. (And it can save you from nightmare lawsuits, but we’ll get to that.)

Cottage food laws — your safety net or your trap

Cottage food laws vary wildly from state to state. In Texas, you can sell cakes from home as long as they don’t require refrigeration (no dairy frostings — think buttercream made with shelf-stable ingredients). In California, you need to register with your county and undergo a food safety course, even for non-potentially hazardous items. Some states allow you to sell directly to customers but not to retailers or online. The common thread: most cottage food laws specifically exclude foods that need temperature control for safety, like cheesecakes, custards, or cakes with whipped cream fillings.

If you’re determined to sell those, you’ll likely need a commercial kitchen — and then you definitely need a HACCP plan. But if you stick with shelf-stable cakes (like pound cakes, cookies, or cakes with simple buttercream made from butter and powdered sugar), many states let you operate under a simplified set of rules. The FDA considers such baked goods “not potentially hazardous” when stored at room temperature (below 70°F/21°C). Still, you should check your local health department’s website. (Yes, it’s boring. Do it anyway.)

Why a HACCP plan is still a good idea even if not required

Here’s what the Reddit chef might have missed: without a written plan, you rely on memory and guesswork. Did you wash your hands after handling raw eggs and before piping frosting? When was that buttercream made? Two hours ago or three? A simple HACCP plan forces you to think through each step — from receiving ingredients to serving the final slice. It includes:

• Critical control points — where hazards can be prevented, like cooking eggs to 160°F (71°C) or cooling a cake core to below 40°F (4°C) within four hours.
• Critical limits — the specific numbers you must hit, such as “store buttercream at room temperature no more than 2 days.”
• Monitoring procedures — a quick checklist you tick off: “checked fridge temp at 9am — 38°F OK.”
• Corrective actions — what to do if something goes wrong, like “if buttercream left out >4 hours, discard.”
• Verification records — your logbook. Keep it in a binder near your workspace.

You don’t need to buy a fancy template. The FDA publishes a free “HACCP Principles & Application Guideline” that walks you through this. Print it, adapt it to your kitchen, and fill in the blanks. That piece of paper is your shield. (Your future self will thank you when a customer asks about your food safety practices.)

Step-by-step to start your home bakery with confidence

1. Check your state cottage food laws. Search “cottage food law [your state]” and find the exact list of allowed foods. Your local extension office (university affiliated) can help.
2. Take a food safety course. Even if your state doesn’t require it, ServSafe or a local community college class covers cross-contamination, time/temperature abuse, and allergic reaction protocol. It costs $30–150 and takes a few hours online.
3. Write a simple HACCP-style plan. Use the FDA’s “HACCP Plan for Baked Goods” as a starting point. Include: ingredient storage (flour at 50–70°F), mixing (wash bowls between batches), baking (internal temp 200°F/93°C for pound cake), cooling (to room temp within 2 hours), packaging (clean containers, labels with date), and delivery (do not leave in a hot car).
4. Set up a dedicated space. You don’t need a commercial kitchen, but your home kitchen should be clean, organized, and free of pets during baking. Designate a “baking zone” that you sanitize before each session.
5. Get liability insurance. This is often the cheapest peace of mind. A typical home bakery policy from insurers like CNA or Hiscox costs $200–400 per year. It covers you if someone claims they got sick from your cake — even if you followed all the rules.

Common mistakes that trip up new bakers

• Assuming “it’s just for friends” means no rules. If you accept money, you’re a business. Friends can still sue. (Unlikely, but possible.)
• Using dairy without temperature control. A buttercream made with fresh cream must be refrigerated within two hours. Many cottage food laws prohibit this. Stick with stabilized buttercream or use pasteurized egg whites.
• Skipping labels. Even if your state doesn’t require them, label every cake with ingredients (especially allergens: nuts, dairy, eggs, gluten, soy). Also include “Made in a home kitchen not inspected by [your state health department]” — many states require this disclaimer.
• Thinking the Reddit comment section is legal advice. Take everything you read with a grain of salt — then verify with official sources. Your local health department is the final authority, not a random chef online.

Try this tonight: create your one-page safety plan

Pull out a notebook and sketch your cake-making process. List every step: buying eggs, storing them, cracking, mixing, baking, cooling, frosting, packaging, delivering. For each step, ask “what could go wrong?” (Eggs cracked into batter? Possible shell fragments or bacteria. Baking time too short? Might not kill salmonella. Cake left out overnight? Could grow mold.) Then write down what you will do to prevent that problem. That’s your first draft of a HACCP plan. It doesn’t have to be fancy — it just has to be written.

You are not a commercial bakery. You don’t have a $10,000 walk-in cooler. But you do have control over cleanliness, temperatures, and record-keeping. Those small, consistent habits build trust — with your customers and with yourself. Start small, stay safe, and keep baking. (The kitchen is magic, and so is your ability to master it.)