ProChefDesk
← Blog
Food Safety · Catering

Cold Chain Control for Off-Site Catering

Your walk-in holds. The venue fridge holds. It's the ninety minutes in between — loaded into a van, stuck in traffic, sitting on a loading dock — where the cold chain quietly breaks. And the safety clock never stops running while you drive.

In a fixed kitchen, cold chain is easy to take for granted. The fridge is three steps away, it beeps if the door's ajar, and food goes from chiller to plate without ever leaving a controlled space. Off-site catering deletes all of that. You cook in one building and serve in another, and the road between them has no thermostat.

Cold chain catering isn't a harder version of kitchen food safety — it's a different discipline. The risk isn't in the cooking; it's in the gap. Transporting food safely means treating that gap as a stage of production with its own controls, its own temperatures, and its own paperwork. Get sloppy about it and the food that left your kitchen at 3°C can be sitting at 12°C by the time the first guest arrives, and you won't know unless you measured.

The clock you can't see is already running

The single idea that makes off-site food safety click is this: the time-out-of-temperature clock is accumulated. It does not reset when you load the van. It does not reset when you arrive. Every minute food spends in the danger zone — between 5°C and 60°C — counts, from the moment it leaves refrigeration in your kitchen to the moment it's eaten or thrown away.

Most food safety regimes let you use time instead of temperature as a control, and the numbers are worth burning into memory:

under 2 hours in the danger zone → use or refrigerate
2 to 4 hours → use immediately, cannot go back in the fridge
over 4 hours → discard

Here's the trap. A caterer thinks of that four hours as "service time" — the window the buffet sits out at the venue. It isn't. If prep took the salad out of the chiller for 30 minutes of assembly, and transport ran 50 minutes without proper cooling, you have already spent 80 minutes of your budget before a single guest walks in. You've got 2 hours and 40 minutes of usable serve time left, not four. Plan the whole day against one continuous clock or you'll blow through it without noticing.

The reset myth. There's a persistent belief that food which got warm during transport is "fine again" once you put it back on ice at the venue. It isn't. Bacteria that multiplied on the road don't die when the food re-chills — and toxins some of them produce aren't destroyed by reheating either. Cold chain is a chain because one broken link fails the whole thing.

The transport gap, controlled

The goal in transit is boring and absolute: cold food stays at or below 5°C, hot food stays at or above 60°C. Food Standards Australia New Zealand is blunt about it — on any journey longer than a short hop you keep potentially hazardous food cold or hot the entire way, or you use the time control above and account for it. Their guidance on transporting food safely is the plain-English version worth handing to anyone who drives for you. The UK Food Standards Agency says the same in different words.

Cold: insulated boxes and enough ice

An insulated box is not a fridge. It has no compressor — it only slows the rate at which the contents drift toward ambient. So two rules follow. First, pre-chill everything: the food to 3°C or below, and ideally the box itself. Loading a 6°C tray into a warm box is starting the drift already losing. Second, put in far more ice than feels necessary. On a 30°C summer day, a domestic amount of ice packs in a big box is decorative. You want the box packed — gel packs on top (cold sinks), product below, no big air gaps.

A worked example. A 60-litre insulated box, pre-chilled, loaded with product at 3°C and roughly 4 kg of frozen gel packs, will typically hold food below 5°C for around 3 to 4 hours in a shaded, air-conditioned vehicle. Put the same box in a sun-baked boot at 35°C with half the ice and you might get 90 minutes. The variables are the ice mass, the ambient temperature, and how often the lid opens — so keep the lid shut, keep the box out of the sun, and if the van is air-conditioned, cold food rides in the cab, not the boot.

Hot: hot boxes and the harder problem

Holding hot is genuinely harder than holding cold, because the target is higher above ambient and heat leaks fast. A passive hot box (insulated, no power) will hold food above 60°C for maybe 1 to 2 hours if the food went in piping hot — above 70°C — and the box is full. Half-full hot boxes fail quickest; the air space bleeds heat.

For anything longer or larger, powered holding is the honest answer: an electric hot cabinet in the van, or the acceptance that you'll finish or regenerate on site. My rule for off-site hot food: if I can't hold it above 60°C with confidence, I transport it cold and bring it up to temperature at the venue instead. Reheating to 75°C on site is a controllable step. Guessing whether a passive box held the line is not.

Probe on load, probe on arrival

This is the part most caterers skip, and it's the part that turns a claim into a record. You take a temperature reading at two mandatory points, minimum:

Two readings, two boxes checked, thirty seconds. Sanitise the probe between different foods so you're not moving contamination around with the thermometer itself. If the arrival reading is over 5°C for cold food, you now have a decision to make with a number in your hand instead of a shrug — and often the decision, under the 2/4-hour clock, is "still safe, serve now" rather than "bin it," which is exactly why you measure.

Documenting every handoff

An unmeasured cold chain is a story. A measured one is a defence. If a guest reports illness three days after a wedding, the only thing standing between you and a very bad month is a log that shows the food was cold when it left, cold when it arrived, and held at temperature through service. Verbal assurance is worth nothing to an environmental health officer.

Keep it to the handoffs — the points where custody or conditions change. For a typical event that's four or five readings, not fifty:

StageWhat you recordTarget
Out of kitchen chillerFood temp + time≤ 5°C
Loaded into vehicleFood temp + time≤ 5°C
Arrival at venueFood temp + time≤ 5°C
Hot regen / hot-hold startCore temp reached≥ 75°C then hold ≥ 60°C
Service (each check)Temp + time on line≤ 5°C or ≥ 60°C

The corrective-action column is the one auditors actually read. A reading of 7°C on arrival isn't a failure if the next cell says "moved to venue chiller, re-checked 4°C at 14:10, within 2-hour window." A reading of 7°C with a blank beside it is an open non-conformance. The number doesn't hang you; the missing response does.

In ProChefDesk

The HACCP logs hold your temperature records — receiving, holding, cook & cool — with a corrective-action field on every out-of-range reading. Log the on-load and on-arrival probe checks against the event, and when the monthly Audit Pack prints, the transport readings sit in the same document as everything else. If an officer asks what the food was doing between two kitchens, the answer is a timestamped line, not a memory.

Setting up a venue with no kitchen

Half the off-site jobs I've done had a "kitchen" that was a marquee, a garden, or a function room with two power sockets and no water. The cold chain doesn't care that the venue is bare — the food still has to stay under 5°C until it's served. So the venue setup is part of transport planning, not an afterthought once you arrive.

The first job on arrival, before you unfold a single table, is to get cold food into cold storage and hot food onto heat. FSANZ says exactly this, and it's right: unload the temperature-sensitive stuff first and stabilise it, then set up the room. A caterer who spends 40 minutes arranging linen while the salmon sits in a warming van has already spent 40 minutes of clock for nothing.

What "cold storage" means at a bare venue:

The equipment side of this — how many boxes, what capacity, the forgotten-items list — is a whole checklist of its own, and it's worth building once and reusing. Every event that goes wrong at the venue went wrong at the pack-out.

In ProChefDesk

The Events planner holds the timeline for each function — prep, load-in, service and breakdown — so you can plan backwards from the moment plates hit the pass and see where the accumulated clock is tight before the day arrives, not while you're stuck in traffic with a van full of salmon.

The distances that decide the method

Not every job needs the same rig. Match the control to the journey:

JourneyRealistic control
Under 30 min, cool dayPre-chilled insulated boxes, ice packs, probe both ends
30–90 min, warm dayHeavy ice load, boxes in cab, cold food only — reheat hot on site
Over 90 min, or hot climateRefrigerated vehicle or repeated ice top-ups; treat time budget as nearly spent on arrival
Multi-drop / all-dayRefrigerated van, non-negotiable — passive cold won't survive repeated door openings

The honest trade-off: a refrigerated van costs real money, and for a solo caterer doing one wedding a month it may not pay. Insulated boxes plus discipline cover most jobs under 90 minutes. But the moment you're running multiple drops, opening doors repeatedly, or working a Gulf-summer 40°C afternoon, passive cold is a bet you'll lose. Price the van into the quote for those jobs rather than gambling the whole event on gel packs.

What to actually do

The whole discipline reduces to five habits:

  1. Run one clock. Count danger-zone minutes from the kitchen chiller, not from when the buffet opens.
  2. Pre-chill and over-ice. Cold in, cold box, more ice than looks sensible, lid shut, out of the sun.
  3. Probe on load and on arrival. Two readings minimum, sanitise between foods, write them down.
  4. Unload cold and hot first. Stabilise temperature before you touch the linen.
  5. Log the corrective action, not just the number. An out-of-range reading with a documented response is defensible; a blank beside it is not.

None of this is glamorous, and none of it shows up on the plate. But cold chain is the one part of catering where the failure is invisible until it's a lawyer's letter. The caterer who probes the box while the client fusses over the flowers is the one who's still trading next season.

"The food was fine — it looked fine." Illness-causing bacteria are odourless, tasteless and invisible. "Looked fine" has never once been a defence.

Transporting food safely isn't extra work bolted onto catering. It is the catering — the part that happens on the road, where nobody's watching and the clock keeps ticking anyway. Measure it, write it down, and the gap between two kitchens stops being the place your reputation goes to die.