Cold Chain Control for Off-Site Catering
Your walk-in holds. The venue fridge holds. It's the ninety minutes in between — loaded into a van, stuck in traffic, sitting on a loading dock — where the cold chain quietly breaks. And the safety clock never stops running while you drive.
In a fixed kitchen, cold chain is easy to take for granted. The fridge is three steps away, it beeps if the door's ajar, and food goes from chiller to plate without ever leaving a controlled space. Off-site catering deletes all of that. You cook in one building and serve in another, and the road between them has no thermostat.
Cold chain catering isn't a harder version of kitchen food safety — it's a different discipline. The risk isn't in the cooking; it's in the gap. Transporting food safely means treating that gap as a stage of production with its own controls, its own temperatures, and its own paperwork. Get sloppy about it and the food that left your kitchen at 3°C can be sitting at 12°C by the time the first guest arrives, and you won't know unless you measured.
The clock you can't see is already running
The single idea that makes off-site food safety click is this: the time-out-of-temperature clock is accumulated. It does not reset when you load the van. It does not reset when you arrive. Every minute food spends in the danger zone — between 5°C and 60°C — counts, from the moment it leaves refrigeration in your kitchen to the moment it's eaten or thrown away.
Most food safety regimes let you use time instead of temperature as a control, and the numbers are worth burning into memory:
2 to 4 hours → use immediately, cannot go back in the fridge
over 4 hours → discard
Here's the trap. A caterer thinks of that four hours as "service time" — the window the buffet sits out at the venue. It isn't. If prep took the salad out of the chiller for 30 minutes of assembly, and transport ran 50 minutes without proper cooling, you have already spent 80 minutes of your budget before a single guest walks in. You've got 2 hours and 40 minutes of usable serve time left, not four. Plan the whole day against one continuous clock or you'll blow through it without noticing.
The transport gap, controlled
The goal in transit is boring and absolute: cold food stays at or below 5°C, hot food stays at or above 60°C. Food Standards Australia New Zealand is blunt about it — on any journey longer than a short hop you keep potentially hazardous food cold or hot the entire way, or you use the time control above and account for it. Their guidance on transporting food safely is the plain-English version worth handing to anyone who drives for you. The UK Food Standards Agency says the same in different words.
Cold: insulated boxes and enough ice
An insulated box is not a fridge. It has no compressor — it only slows the rate at which the contents drift toward ambient. So two rules follow. First, pre-chill everything: the food to 3°C or below, and ideally the box itself. Loading a 6°C tray into a warm box is starting the drift already losing. Second, put in far more ice than feels necessary. On a 30°C summer day, a domestic amount of ice packs in a big box is decorative. You want the box packed — gel packs on top (cold sinks), product below, no big air gaps.
A worked example. A 60-litre insulated box, pre-chilled, loaded with product at 3°C and roughly 4 kg of frozen gel packs, will typically hold food below 5°C for around 3 to 4 hours in a shaded, air-conditioned vehicle. Put the same box in a sun-baked boot at 35°C with half the ice and you might get 90 minutes. The variables are the ice mass, the ambient temperature, and how often the lid opens — so keep the lid shut, keep the box out of the sun, and if the van is air-conditioned, cold food rides in the cab, not the boot.
Hot: hot boxes and the harder problem
Holding hot is genuinely harder than holding cold, because the target is higher above ambient and heat leaks fast. A passive hot box (insulated, no power) will hold food above 60°C for maybe 1 to 2 hours if the food went in piping hot — above 70°C — and the box is full. Half-full hot boxes fail quickest; the air space bleeds heat.
For anything longer or larger, powered holding is the honest answer: an electric hot cabinet in the van, or the acceptance that you'll finish or regenerate on site. My rule for off-site hot food: if I can't hold it above 60°C with confidence, I transport it cold and bring it up to temperature at the venue instead. Reheating to 75°C on site is a controllable step. Guessing whether a passive box held the line is not.
Probe on load, probe on arrival
This is the part most caterers skip, and it's the part that turns a claim into a record. You take a temperature reading at two mandatory points, minimum:
- On load — as the food goes into the box, so you have the starting number and proof it left cold.
- On arrival — the moment you open the box at the venue, before anything else, so you know what the journey did to it.
Two readings, two boxes checked, thirty seconds. Sanitise the probe between different foods so you're not moving contamination around with the thermometer itself. If the arrival reading is over 5°C for cold food, you now have a decision to make with a number in your hand instead of a shrug — and often the decision, under the 2/4-hour clock, is "still safe, serve now" rather than "bin it," which is exactly why you measure.
Documenting every handoff
An unmeasured cold chain is a story. A measured one is a defence. If a guest reports illness three days after a wedding, the only thing standing between you and a very bad month is a log that shows the food was cold when it left, cold when it arrived, and held at temperature through service. Verbal assurance is worth nothing to an environmental health officer.
Keep it to the handoffs — the points where custody or conditions change. For a typical event that's four or five readings, not fifty:
| Stage | What you record | Target |
|---|---|---|
| Out of kitchen chiller | Food temp + time | ≤ 5°C |
| Loaded into vehicle | Food temp + time | ≤ 5°C |
| Arrival at venue | Food temp + time | ≤ 5°C |
| Hot regen / hot-hold start | Core temp reached | ≥ 75°C then hold ≥ 60°C |
| Service (each check) | Temp + time on line | ≤ 5°C or ≥ 60°C |
The corrective-action column is the one auditors actually read. A reading of 7°C on arrival isn't a failure if the next cell says "moved to venue chiller, re-checked 4°C at 14:10, within 2-hour window." A reading of 7°C with a blank beside it is an open non-conformance. The number doesn't hang you; the missing response does.
In ProChefDesk
The HACCP logs hold your temperature records — receiving, holding, cook & cool — with a corrective-action field on every out-of-range reading. Log the on-load and on-arrival probe checks against the event, and when the monthly Audit Pack prints, the transport readings sit in the same document as everything else. If an officer asks what the food was doing between two kitchens, the answer is a timestamped line, not a memory.
Setting up a venue with no kitchen
Half the off-site jobs I've done had a "kitchen" that was a marquee, a garden, or a function room with two power sockets and no water. The cold chain doesn't care that the venue is bare — the food still has to stay under 5°C until it's served. So the venue setup is part of transport planning, not an afterthought once you arrive.
The first job on arrival, before you unfold a single table, is to get cold food into cold storage and hot food onto heat. FSANZ says exactly this, and it's right: unload the temperature-sensitive stuff first and stabilise it, then set up the room. A caterer who spends 40 minutes arranging linen while the salmon sits in a warming van has already spent 40 minutes of clock for nothing.
What "cold storage" means at a bare venue:
- Bring your own cold. Assume there is no usable fridge on site. The insulated boxes that transported the food are also your holding fridges until service — keep them shut, keep them shaded, top up ice if the job runs long.
- Ice baths for the line. Cold plated items and dressings sit in a gastronorm of ice, not on a table in the sun. Refresh the ice as it melts.
- Stagger the pull. Don't decant the whole event's cold food at once. Pull one tray from the box as the previous empties, so the bulk stays under 5°C in the box while only the working portion is exposed to the room.
- Power for hot. Confirm the sockets and their load before the day. A hot cabinet and an urn on one 10-amp circuit will trip it. If in doubt, plan hot-holding around gas or regenerate in waves.
The equipment side of this — how many boxes, what capacity, the forgotten-items list — is a whole checklist of its own, and it's worth building once and reusing. Every event that goes wrong at the venue went wrong at the pack-out.
In ProChefDesk
The Events planner holds the timeline for each function — prep, load-in, service and breakdown — so you can plan backwards from the moment plates hit the pass and see where the accumulated clock is tight before the day arrives, not while you're stuck in traffic with a van full of salmon.
The distances that decide the method
Not every job needs the same rig. Match the control to the journey:
| Journey | Realistic control |
|---|---|
| Under 30 min, cool day | Pre-chilled insulated boxes, ice packs, probe both ends |
| 30–90 min, warm day | Heavy ice load, boxes in cab, cold food only — reheat hot on site |
| Over 90 min, or hot climate | Refrigerated vehicle or repeated ice top-ups; treat time budget as nearly spent on arrival |
| Multi-drop / all-day | Refrigerated van, non-negotiable — passive cold won't survive repeated door openings |
The honest trade-off: a refrigerated van costs real money, and for a solo caterer doing one wedding a month it may not pay. Insulated boxes plus discipline cover most jobs under 90 minutes. But the moment you're running multiple drops, opening doors repeatedly, or working a Gulf-summer 40°C afternoon, passive cold is a bet you'll lose. Price the van into the quote for those jobs rather than gambling the whole event on gel packs.
What to actually do
The whole discipline reduces to five habits:
- Run one clock. Count danger-zone minutes from the kitchen chiller, not from when the buffet opens.
- Pre-chill and over-ice. Cold in, cold box, more ice than looks sensible, lid shut, out of the sun.
- Probe on load and on arrival. Two readings minimum, sanitise between foods, write them down.
- Unload cold and hot first. Stabilise temperature before you touch the linen.
- Log the corrective action, not just the number. An out-of-range reading with a documented response is defensible; a blank beside it is not.
None of this is glamorous, and none of it shows up on the plate. But cold chain is the one part of catering where the failure is invisible until it's a lawyer's letter. The caterer who probes the box while the client fusses over the flowers is the one who's still trading next season.
"The food was fine — it looked fine." Illness-causing bacteria are odourless, tasteless and invisible. "Looked fine" has never once been a defence.
Transporting food safely isn't extra work bolted onto catering. It is the catering — the part that happens on the road, where nobody's watching and the clock keeps ticking anyway. Measure it, write it down, and the gap between two kitchens stops being the place your reputation goes to die.