Food Safety for Bean-to-Bar Chocolate Makers

Plain chocolate can keep well, but shelf stability is not the same as freedom from pathogens. Raw cacao may carry Salmonella, and contaminated chocolate has caused outbreaks. Low moisture and high fat do not make chocolate inherently safe.

This guide explains the main hazards for home and small-batch makers. If you sell chocolate, establish the food-safety controls and regulatory requirements that apply to your operation with qualified local advice.

Microbial Hazards: Salmonella Is the Real Concern

Treat unroasted beans as a raw agricultural ingredient, not as ready-to-eat food. Fermentation develops flavor precursors; its heat and acidity are not a validated substitute for pathogen reduction.

Roasting can be a kill step when its effectiveness has been validated for the process. A roaster setting, an end-of-roast reading, or a good flavor does not establish the treatment received by every bean. Equipment, load, bean characteristics, moisture and the complete time-temperature history matter. A controlled cocoa-roasting study demonstrates how strongly Salmonella inactivation depends on treatment conditions. Its experimental results are not a universal home-roasting schedule.

Do not use the former rule of “250–270°F for 20–40 minutes” as a safety guarantee. For home work without a validated raw-bean process, a practical option is to buy nibs explicitly sold as ready to eat from a supplier with documented pathogen controls. “Roasted” on its own is not equivalent to that assurance.

Prevent contamination after treatment. Keep raw beans, bags and dust away from treated nibs and finished chocolate; use clean equipment and effective hand hygiene. Follow equipment-compatible cleaning and sanitizing procedures and dry food-contact equipment thoroughly. Roasted beans are not sterile. FDA’s draft guidance for low-moisture ready-to-eat foods emphasizes sanitation and contamination prevention; it is draft guidance, not a chocolate recipe.

Heavy Metals: Cadmium and Lead

Cadmium and lead require sourcing controls. Cadmium can enter cacao from growing soils; lead can also enter through environmental and post-harvest contamination. Country of origin alone does not establish the concentration in a lot.

Ask suppliers for representative testing and traceable lot information. Home roasting does not reliably remove these metals. Rotating origins does not guarantee lower exposure: that depends on the concentrations and quantities eaten.

There is no sound basis for declaring one or two servings daily low risk for every person and product. FDA assesses cadmium exposure using concentration, consumption and population vulnerability. Use tested ingredients and consider chocolate within the whole diet. Applicable legal limits differ by market and product.

Mycotoxins: Aflatoxin and Ochratoxin

Some molds produce toxins. Proper fermentation, drying and storage reduce the opportunity for contamination; appearance or smell cannot prove a lot is toxin-free. Do not try to rescue moldy or musty beans by roasting.

The Codex cocoa ochratoxin code emphasizes drying and protection from moisture during storage and transport. Moisture content is useful for receiving checks, but a single percentage is not a universal safe/unsafe switch. Follow a documented supplier specification, reject suspect lots, and store beans in clean, dry conditions protected from pests and rewetting.

Roasting is not a dependable way to eliminate mycotoxins. One maker’s experience with tested lots cannot establish that the entire craft supply chain is free of them.

Polycyclic Aromatic Hydrocarbons (PAHs)

PAHs can form during incomplete combustion and contaminate foods exposed to smoke or combustion gases during drying. Ask suppliers how beans were dried and how contamination is controlled. Sun drying avoids direct exposure to dryer combustion gases, but “sun-dried” does not prove absence of contaminants from other sources.

Smoky flavor cannot quantify PAHs, and origin or occasional consumption is not enough to establish safety. Avoid heavily smoke-contaminated lots rather than treating smoke as a quality feature that overrides contaminant controls. The Codex codes of practice include guidance on PAHs from smoking and direct drying (CXC 68-2009).

FDA Shell Limits

The U.S. standard of identity for cacao nibs specifies a maximum shell content of 1.75% by weight on an alkali-free basis. See 21 CFR 163.110 in the official CFR publication. This should not be restated as a blanket finished-bar allowance or a target of “under 2%.”

Good cracking and winnowing removes shell and improves texture, but a particular juicer-and-fan setup does not demonstrate compliance. Neither total weight loss nor a taste test measures residual shell reliably: discarded material can contain lost nibs as well as shell. Commercial compliance needs an appropriate analytical method. Also sort out stones and other foreign matter; shell removal alone does not control every physical hazard.

Water Activity and Shelf Stability

Water activity describes water available for microbial growth; it is not the same as percentage moisture. Plain chocolate usually has sufficiently low water activity to inhibit pathogen growth. Organisms can nevertheless survive without growing, so keeping contaminated chocolate dry does not make it safe.

Do not apply a universal 0.65 threshold to all bacteria, yeasts and molds or to filled chocolates. Cream, fruit and other moist fillings change the product and may require refrigeration and a validated shelf life. For consumer storage and quality changes, see does chocolate go bad?.

Keep water out of the melanger and plain chocolate for both processing quality and hygiene. Deliberately water-containing products need their own formulation and storage controls; “no water” is not a substitute for a food-safety plan.

Basic HACCP Principles for Small-Scale Production

HACCP means Hazard Analysis and Critical Control Points. The FDA HACCP guidelines explain how hazards, control measures, critical limits, monitoring, corrective action and verification fit together.

Identify hazards. Consider raw-material pathogens, contamination after treatment, allergens, metals, mycotoxins, PAHs and foreign matter.

Establish controls. A qualified hazard analysis determines which steps are critical control points. Roasting may be one, but it needs scientifically supported limits for the actual equipment and product. Winnowing is not automatically a CCP for every operation.

Monitor and act. Keep batch and process records, including deviations and corrective actions. If using a Behmor, an end-of-roast reading alone does not verify the entire treatment. Do not release a failed batch merely because it tastes properly roasted.

Prevent cross-contamination. Separate raw and treated material and maintain clean food-contact surfaces, tools and packaging. Include the ingredients added after roasting in the hazard assessment.

Allergens

Cacao is not one of the nine major allergens specified in U.S. labeling law, but that does not mean nobody can react to it. Chocolate ingredients and inclusions may introduce milk, soy, peanuts, tree nuts, wheat, egg or sesame. Read each ingredient’s specification, including lecithin and decorative ingredients.

FDA allergen guidance explains labeling and cross-contact concerns. A “dark,” “vegan” or “nut-free recipe” description does not itself establish freedom from unintended allergens. Use an effective allergen-control program and accurate labeling when making chocolate for others.

Putting the Controls Together

Good sourcing, an effective pathogen-reduction treatment and protection of finished chocolate all matter. Fermentation, a pleasant roast flavor and low water activity cannot replace any of them.

For the foundational process, see our bean-to-bar beginner’s guide. For sourcing questions, see our bean sourcing guide.