Paper-based internal audit management still passes BRC audits at many UK food sites. The problem is not that paper is inherently wrong — the problem is that paper is only as good as the systems built around it, and those systems are much harder to maintain consistently than most Technical Managers expect.
BRC Issue 9 Section 3.4 requires a documented internal audit programme, with audits conducted by appropriately competent personnel, and records demonstrating that non-conformances are identified, assigned, root-caused, corrected, and independently verified as closed. It does not specify digital records. Paper is acceptable.
The challenge is in "demonstrating" — when an auditor asks to trace a specific NC through its full lifecycle, the quality of paper-based records varies enormously. A well-maintained paper system at a small, stable site can be excellent. A paper system at a site with staff turnover, high NC volumes, or a recent change in food safety management is a different matter.
| Capability | Paper-Based | AuditCore |
|---|---|---|
| BRC Issue 9 audit questions | ~ Create your own forms | ✓ Pre-loaded, clause-mapped |
| GMP inspection on the shopfloor | ✓ Works anywhere | ✓ Offline-capable on tablet |
| NC created automatically from failed items | ✕ Manual transcription | ✓ Automatic, linked to clause |
| CAPA workflow enforced | ✕ Convention only | ✓ System-enforced flow |
| Independent verification of NC close-out | ~ Signature on form | ✓ Different user required in system |
| Audit trail (who, what, when) | ~ Handwriting and dates | ✓ Timestamped, user-attributed |
| NC pattern analysis across audit periods | ✕ Manual review of forms | ✓ Automatic, clause and area level |
| Management review preparation | ✕ Manual collation | ✓ One-click PDF |
| Multi-user access | ✓ Shared folder | ✓ Role-based, simultaneous |
| No technology required | ✓ Pen and paper | ~ Browser or tablet needed |
| Risk of lost records | ✕ Physical loss possible | ✓ Cloud-backed, no paper |
| Cost | ✓ Near zero | ~ From £59/site/month |
Paper is genuinely effective at small, stable sites — typically under ten employees, single Technical Manager, low NC volume, consistent team. The audit forms are filed, reviewed, and stored systematically. The BRC auditor sees a neat folder and a clear chain of evidence. This is not unusual in UK food manufacturing, particularly at smaller artisan and regional producers.
Paper also has one absolute advantage: it requires no technology. In a cold store environment, on the shopfloor with cold or wet hands, or in a site with patchy Wi-Fi, a clipboard and pen can be more practical than a tablet — although AuditCore's offline GMP inspection mode addresses this directly.
Staff turnover breaks the system. When the person who ran the audit programme leaves, so does the institutional knowledge of how the filing is organised, which forms refer to which NCs, and what "close-out" actually looked like in practice. Paper systems are typically held together by one person. When that person leaves, it shows.
Tracing NCs across forms is slow. An NC raised during a system audit may generate a separate corrective action form, which references a verification sign-off on a third form filed in a different folder. Tracing this chain under auditor scrutiny, in real time, is stressful and error-prone. Digital systems link these records automatically.
Pattern analysis is nearly impossible at volume. Identifying that the same BRC clause has generated six NCs in twelve months, or that a particular production area accounts for 70% of GMP findings, requires someone to manually review every form and collate the data. This rarely happens until the external auditor asks the question.
Paper is a reasonable choice for small, stable sites with a dedicated food safety lead and low NC volume. For sites with more than five audit users, meaningful staff turnover, or upcoming BRC re-certification, the risk profile of paper-based management becomes difficult to justify against a £59/month alternative. The question is not whether paper can pass an audit — it can. The question is whether you want to find out the hard way that it couldn't.
No credit card. No sales call. See if it fits your site.
Start Free TrialWritten by Anthony Oakes, founder of AuditCore — 30 years in UK food manufacturing, Six Sigma Black Belt, Advanced HACCP Level 4, IRCA Lead Assessor. Last updated May 2026.