Cashew Certifications by Market: What Your Destination Actually Requires
Last updated: 2026-10-13 · 13 min read · By Tùng Trần, Founder & Sourcing Director
Key takeaways
- HACCP appears on 11 of 17 audited Vietnam supplier sites — its presence signals baseline, not advantage
- Market access certificates differ by destination: GACC for China, FDA registration for the US, BRCGS for EU retail
- Regional buyers differ in grade, packing and payment preference, not only in paperwork
- Organic certification appears on 2 of 17 and is a genuine differentiator
- Always confirm which facility a certificate covers, not just that the supplier holds it
Table of contents
- Which cashew certifications are baseline?
- What does each destination market require?
- How do regional buyers differ beyond paperwork?
- How long does supplier qualification take?
- What documents travel with the shipment?
- Which certifications actually differentiate?
- Why AFI is missing from the conversation
- What does a GFSI audit actually examine?
- How do I verify a certificate is real and in scope?
Which cashew certifications are baseline? {#baseline}
HACCP and ISO 22000 are baseline food safety systems, not competitive advantages. In our September 2026 audit of 17 Vietnam cashew supplier websites, HACCP appeared on 11 and ISO 22000 on 6 of the 12 sites that publish certifications at all. Their absence is a warning; their presence tells you very little.
This distinction matters because supplier marketing tends to present every certificate with equal weight. A logo wall implies that each badge represents a differentiating investment. In practice the wall usually contains two categories: systems any credible exporter maintains, and specific credentials that unlock specific markets.
Here is what the audit found across the 12 sites that publish certifications:
| Certification | Sites | Category |
|---|---|---|
| HACCP | 11 | Baseline |
| ISO 22000 | 6 | Baseline |
| BRC / BRCGS | 6 | Market access — EU retail |
| Halal | 6 | Market access — Muslim markets |
| FDA registration | 5 | Market access — United States |
| Kosher | 3 | Market access — niche channels |
| AFI | 2 | Grading standard, not certification |
| Organic (USDA / EU / JAS) | 2 | Differentiator |
| SMETA | 1 | Social compliance |
| GACC | 1 | Market access — China |
Source: HotaNuts supplier web audit, September 2026 (n = 17 independent sites).
Five of the seventeen sites published no certifications at all — including established exporters. Their websites are company brochures rather than buyer tools, which is a documentation gap rather than a compliance gap. Do not read an absent logo wall as an absent certificate; ask.
What does each destination market require? {#by-market}
Requirements follow the destination, not the supplier. China requires GACC registration of the exporting facility. The United States requires FDA food facility registration and a compliant importer verification programme. European retail chains generally require a GFSI-recognised scheme such as BRCGS. Gulf markets require Halal certification in practice.
| Destination | Practical requirement | Notes |
|---|---|---|
| China | GACC facility registration | Registration is of the facility, not the trader |
| United States | FDA food facility registration | Importer also needs a supplier verification programme |
| EU / UK retail | BRCGS or equivalent GFSI scheme | Often a retailer requirement rather than a legal one |
| Gulf / Middle East | Halal certification | Also a strong tin-packing preference |
| Israel, Jewish channels | Kosher | Channel-specific |
| Japan | Buyer-specific audit | Expect additional documentation demands |
Two nuances worth internalising before you shortlist.
Legal requirement and commercial requirement are different things. BRCGS is rarely written into EU food law, but a major retailer's buying policy makes it non-negotiable in practice. Missing it does not stop your container at the border; it stops the listing conversation months earlier.
Registration attaches to facilities. GACC and FDA registration cover a specific site. A trading company can be entirely legitimate while the facility packing your consignment is not the registered one. That is a question to ask explicitly, and it is the single most common gap between a certificate that exists and a certificate that protects you.
How do regional buyers differ beyond paperwork? {#regional-buyers}
Certification is only one axis. Regional markets differ systematically in the grades they buy, the packing they expect, the payment structures they prefer, and how much of the relationship happens before the first order. Matching a supplier to your region means matching all four, not just the certificate list.
| Region | Typical grades | Packing | Payment tendency |
|---|---|---|---|
| Middle East / Gulf | W160, W180, W210 | Tin preferred | Relationship-led, negotiated |
| United States | W240, W320 | Vacuum PE | Structured, contract-driven |
| EU / UK retail | W240, W320 | Vacuum PE | Structured, audit-heavy |
| China | W320, blemished classes | Bulk, vacuum | Volume-driven |
| Japan / Korea | W160, W180, W240 | Vacuum PE, high spec | Documentation-heavy |
| Emerging importers | W320, WS, pieces | Mixed | Cautious, small first orders |
Middle East and Gulf. The preference for large grades and tin packing is consistent and long-established. Halal certification is a practical requirement rather than a nice-to-have, moisture specifications run tighter to suit tin and a humid chain, and business tends to move through relationship and direct conversation rather than formal tender. Arabic-language communication is a genuine advantage, not a courtesy.
United States. W240 and W320 dominate mainstream retail. FDA food facility registration is table stakes, and the importer carries its own verification obligations that will generate document requests to your supplier. Expect the contract to matter more than the conversation.
Europe. Similar grade profile to the US, but with a heavier audit burden. BRCGS or an equivalent GFSI scheme is usually the gate to retail listing, and social compliance auditing is increasingly requested alongside food safety.
China. GACC registration is the hard gate. Volume is high, grade preference skews toward W320 and the blemished classes where further processing follows import, and price sensitivity is real.
Japan and Korea. Large premium grades for gifting, high documentation expectations, and buyer-specific audits that go beyond any standard scheme. Plan for a longer qualification period.
Emerging importers. Smaller first orders, more questions, and a strong preference for suppliers willing to explain rather than simply quote. This is where a well-answered RFQ wins business outright.
How long does supplier qualification take? {#qualification-time}
Qualification timelines differ by region and buyer type, typically running one to three months for relationship-led Gulf buyers, three to six months for US and European enterprises evaluating a new supplier, and six to twelve months for importers entering the category for the first time. Certificate gaps extend all of these.
| Buyer type | Typical evaluation window | What drives the length |
|---|---|---|
| Gulf distributor | 1–3 months | Relationship and sample approval |
| Product manager, food manufacturer | 2–4 months | Spec testing against the recipe |
| US / EU enterprise importer | 3–6 months | Audit, documentation, internal approval |
| First-time importer | 6–12 months | Learning the category alongside the supplier |
The pattern behind these ranges is consistent: the more the buying decision rests on documented systems rather than on a personal relationship, the longer it takes and the earlier certificates need to be in place.
This has a direct planning consequence. If your launch date is fixed and your destination requires a certificate your shortlisted supplier does not hold, the honest options are to change supplier or to change the date — because certification is an audit cycle, not a purchase. Asking a supplier to obtain BRCGS for your account is a reasonable request over quarters and an unreasonable one over weeks.
The practical sequence that avoids this trap: filter on the certificates your market requires first, evaluate commercial terms second, and run samples third. Buyers who reverse that order routinely find themselves eliminating an otherwise ideal supplier late, after the relationship investment has already been made.
What documents travel with the shipment? {#documents}
Certificates prove a system exists; shipping documents clear your goods at the border. A cashew consignment normally travels with a commercial invoice, packing list, bill of lading, certificate of origin, phytosanitary certificate, fumigation certificate and a certificate of analysis. Destination-specific documents sit on top of that base.
Only one of seventeen audited sites published its document list, which makes this another field the RFQ has to extract rather than read.
| Document | What it does |
|---|---|
| Commercial invoice | Basis for customs valuation and payment |
| Packing list | Carton count, net and gross weight, marks |
| Bill of lading | Title to the goods and proof of shipment |
| Certificate of origin | Establishes origin, may unlock preferential duty |
| Phytosanitary certificate | Plant health clearance for agricultural goods |
| Fumigation certificate | Confirms treatment where required |
| Certificate of analysis | Laboratory results against the agreed specification |
Two document questions decide more than buyers expect.
Which certificate of origin form? The form determines whether your consignment qualifies for preferential duty under a trade agreement. Vietnamese exporters commonly issue Form E for ASEAN–China trade, with other forms serving other agreements. Asking for the correct form at contract stage is free; discovering the wrong one at customs is not.
Who pays for what, and when do documents arrive? Under a payment structure settling against a bill of lading copy, the timing of document release is part of the payment mechanism, not an administrative detail. Name in the contract which documents are required, in how many originals, and by when.
Destination adds its own layer. China requires the GACC registration to be reflected correctly on labels and documents. The United States expects the importer's verification programme to be supported by supplier documentation. Retail-packed goods for any market carry labelling obligations — nutrition, allergen and language rules — that belong to whoever prints the label, and that responsibility should be written down.
Which certifications actually differentiate? {#differentiators}
Organic certification is the clearest differentiator, appearing on only 2 of 17 audited sites. Social compliance audits such as SMETA are similarly rare and increasingly requested by European retailers. Both represent real ongoing cost, which is why few suppliers carry them and why they hold their signalling value.
Organic cashew supply is structurally constrained. It requires certified growing areas, segregated processing and an unbroken chain of custody through to shipment. That is a genuinely harder operation to run, which is why the certificate appears on roughly one site in eight rather than on most of them. It also means organic supply cannot be scaled up quickly in response to demand — the constraint is upstream of the factory.
Social compliance sits on a similar footing. SMETA and comparable audits examine labour conditions rather than food safety, and European retail buyers ask for them with rising frequency. One site in our sample published SMETA. If your buying policy includes an ethical sourcing requirement, that ratio tells you how much of the Vietnamese supply base you can address without asking suppliers to certify specifically for you.
The practical implication for a buyer is a sequencing decision. Baseline certificates can be assumed and verified later. Differentiating certificates should be a filter applied at the very start of your search, because retrofitting them onto a supplier relationship takes quarters, not weeks.
Why AFI is missing from the conversation {#afi-missing}
Ten of seventeen audited sites sell kernels using AFI grade codes such as W240 and W320, while only two mention AFI itself. The standard's vocabulary has spread through the trade far more widely than the standard, which means grade codes are often used without the defect tolerances that give them meaning.
This is the most consequential gap the audit surfaced. AFI is not a certification a supplier holds; it is the grading framework that defines what W320 means and what defect levels are acceptable within it. When a quote names a grade without referencing the standard, the grade name is doing less work than the buyer assumes.
The remedy is not to demand an AFI certificate, which is not really what AFI is. It is to require the parameters explicitly in your enquiry: moisture, broken and defect maximums as numbers, alongside the grade code. Article 3 in this series covers how to phrase that so it comes back answered.
Reference: Association of Food Industries — cashew grading standards.
What does a GFSI audit actually examine? {#gfsi-audit}
A GFSI-recognised audit such as BRCGS examines the management system, not just the product. Auditors look at hazard analysis, process control, traceability, facility environment, personnel practices and record-keeping, then issue a graded result with a scope statement naming the site and processes covered.
Understanding this helps you read a certificate properly rather than treating it as a pass or fail badge.
Scope is the most important line. A certificate covers named processes at a named site. If your order involves a process outside that scope — a different packing line, a subcontracted step — the certificate does not reach it.
Grade and audit type matter. Schemes issue graded outcomes and distinguish announced from unannounced audits. Two suppliers can both be "BRCGS certified" with materially different results behind the claim.
Certificates expire. Audit cycles are periodic, and a certificate found on a website may sit outside its validity window. Always read the dates rather than the logo.
Traceability is the clause you will actually use. If a quality problem arises, the traceability system determines how quickly the supplier can identify which lots are affected. That capability matters far more in a real incident than the certificate that verified it.
How do I verify a certificate is real and in scope? {#verify}
Ask for the certificate document with its number, issuing body and expiry date, then confirm the facility named on it is the facility packing your order. A logo on a website is a claim; a current certificate naming a specific site is evidence.
Four checks that take under an hour:
Get the document, not the logo. Certificate images on websites are frequently outdated. Request the current PDF, and read the validity dates rather than the header.
Check the scope statement. Every genuine certificate names what it covers — which site, which processes, sometimes which product categories. This is where claims most often fail, and it fails quietly because everything else looks correct.
Verify with the issuing body where possible. BRCGS operates a public directory. Certification bodies will confirm a certificate number. This is routine due diligence and no legitimate supplier objects to it.
Match the certificate holder to the contracting entity. If you contract with one company and the certificate names another, ask how the two relate. There is often a perfectly good answer involving a group structure, but you want to hear it before shipment rather than after.
Where independent confirmation of the goods themselves is needed, third-party inspection sits alongside certification rather than replacing it. SGS and Bureau Veritas operate internationally; Vinacontrol and Cafecontrol are widely used within Vietnam. A certificate tells you a system exists; an inspection tells you what is in this container.
This verification loop is a standing part of how HotaNuts works as a Vietnam-based cashew sourcing and export partner — confirming that the certificate on the website covers the facility that will actually pack the container, and coordinating third-party inspection where a buyer wants independent confirmation.
Glossary
BRCGS — Brand Reputation Compliance Global Standards, a GFSI-recognised food safety scheme widely required by European retailers.
GACC — General Administration of Customs of China, which registers overseas food facilities permitted to export to China.
GFSI — Global Food Safety Initiative, which recognises food safety schemes such as BRCGS and FSSC 22000.
HACCP — Hazard Analysis and Critical Control Points, the baseline food safety management system.
Scope statement — The section of a certificate naming which site and which processes it covers.
SMETA — Sedex Members Ethical Trade Audit, an audit of labour and social compliance rather than food safety.
Frequently Asked Questions
Which certification is required to export cashews to China?
GACC registration of the exporting facility is required. Registration attaches to the specific site rather than to a trading company, so confirm that the facility packing your consignment is the registered one before shipment.
Is HACCP enough for a cashew supplier?
HACCP is a baseline expectation rather than a sufficient credential. It appeared on 11 of 17 audited Vietnam supplier websites, so its presence is normal. Market access usually depends on additional certificates specific to your destination.
Do EU buyers legally require BRCGS for cashews?
Rarely as a legal requirement, but commonly as a retailer buying policy. Major European retail chains generally require a GFSI-recognised scheme such as BRCGS before listing, which makes it a practical requirement for retail-bound volume.
How many Vietnam cashew suppliers hold organic certification?
Organic certification appeared on 2 of 17 audited supplier websites. Certified organic supply requires segregated growing and processing with unbroken chain of custody, which limits how many suppliers maintain it and preserves its differentiating value.
What grades do Middle East cashew buyers prefer?
Gulf markets favour large whole grades such as W160, W180 and W210 for gifting and premium retail, typically in tin packing with tighter moisture specifications. Halal certification is a practical requirement rather than an optional credential.
How do I check a cashew supplier's certificate is valid?
Request the certificate document with its number, issuing body and expiry date, read the scope statement to confirm which facility it covers, and verify the number with the issuing body. BRCGS maintains a public directory for this purpose.
What documents come with a cashew shipment?
A cashew consignment normally travels with a commercial invoice, packing list, bill of lading, certificate of origin, phytosanitary certificate, fumigation certificate and certificate of analysis. Destination markets add their own requirements on top of that base set.
Which certificate of origin form should I request?
The form depends on the trade agreement between origin and destination, and it determines whether your consignment qualifies for preferential duty. Vietnamese exporters commonly issue Form E for ASEAN–China trade. Confirm the correct form at contract stage rather than at customs.
Is AFI a certification cashew suppliers can hold?
No. AFI is a grading standard defining kernel grade codes and defect tolerances, not a certificate a supplier is awarded. Rather than requesting AFI certification, specify moisture, broken and defect maximums as numbers in your enquiry.
Take the next step
This closes the five-part series. Together the articles cover what suppliers publish, what grade codes mean, how to write an RFQ that gets comparable replies, how packing drives landed cost, and which certificates your market requires.
If you are assembling a shortlist and want a second pair of eyes on certificate scope or supplier documentation, our team is glad to help.
Last updated: 2026-10-13. Certification requirements change; verify current rules for your destination before shipment.