Cold brew and food safety
Short answer: cold brew is the only thing a coffee bar makes that is not protected by heat. Everything else passes through near-boiling water; cold brew is a low-acid liquid held for hours or days at ambient or chilled temperature. That makes it a food-production activity, not a drink-making one, and it has to be run as one — written procedure, recorded temperatures, enforced discard point.
This article is an orientation to the questions, not regulatory advice. It names no threshold and is no substitute for checking what your own jurisdiction requires of you.
Why is cold brew different from everything else on the bar?
Because heat does a great deal of unacknowledged work in a coffee bar, and cold brew is the one process that never gets any. Espresso, filter, steamed milk and hot water for tea are all made with water hot enough that contact time barely matters, and the cleaning regime leans on heat too. Nothing on a hot bar sits in a state that lets a microbial population build: the process either kills what is there, or the drink is drunk within minutes.
Cold brew inverts all of it. Grounds and water are left together for hours; the liquid is separated, then held — often for days, sometimes in a sealed vessel, sometimes on a dispense system with lines and a tap. Nothing gets hot at any stage. The product is a nutrient-containing liquid with a long life and no kill step, which describes a food-production process rather than a beverage-service one.
That is why the risk is underestimated. An operator who has run a busy bar competently for years has no intuition for this process, because nothing else on the bar behaves like it.
Where does the risk actually come from?
Four properties, each unremarkable in isolation and consequential together.
No thermal kill step. Whatever is in the water, on the equipment, on the grounds or on the hands that touched them is still there at the end. Cold brewing does not reduce a microbial load; it carries it forward into a liquid that is then held for days.
A long hold time. Time multiplies every other factor: a small initial load and a permissive temperature matter little over minutes and a great deal over days.
A temperature that permits growth. Refrigeration slows microbial growth; it does not stop it, and steeping at ambient temperature is more permissive still. Much cold brew is held not at a controlled temperature but at whatever an over-full under-counter fridge manages on a busy day.
A pH that is only mildly acidic — the part most often misread. Coffee tastes acidic, so people assume it is self-protecting in the way a citrus or vinegar-based product is. It is not: coffee is mildly acidic but not low enough to be a control in its own right, so acidity cannot do the work that time and temperature are not.
Then add the fifth condition, the one the trade has had to reckon with: a low-acid liquid held in a sealed, oxygen-limited container is exactly the environment in which anaerobic organisms are a legitimate worry. That describes a keg, and it describes a nitro system, where the product is deliberately held under gas.
Kegged and nitro cold brew is therefore the higher-risk format — and it is the one most often assembled from parts over a weekend with no written procedure, no batch record and no line-cleaning schedule. The gap between the sophistication of the equipment and that of the process control is widest where it can least afford to be.
What are the hazards, in plain language?
Microbial growth during steeping and holding is the hazard operators think about. It is not the only one.
Cross-contamination. From a vessel used for something else, a filter rinsed rather than cleaned, hands, a scoop, a jug, a cloth. In a cold process, an event that would be irrelevant on a hot bar becomes the seed of a population.
Biofilm in lines, taps and fonts. Any dispense system builds a film where liquid sits. It is invisible from outside, not removed by flushing water through, and it re-seeds every batch passing over it — the most neglected part of a kegged or nitro setup.
Contaminated water or ice. Cold brew is mostly water — added at the start, often again at service — plus ice. All of it is an ingredient and none of it is heated, so water quality here is a food-safety input as well as a flavour one. See water for coffee: hardness, alkalinity and mineral content and choosing a water treatment system — and note that a treatment system is itself a wetted assembly needing a maintenance schedule.
Mould and yeast in wet grounds and damp equipment. Spent grounds are wet organic matter, and a filter bag, mesh basket or steeping vessel left damp between uses is a growth site. This usually produces an off-tasting batch rather than a dangerous one, but the conditions behind it are those behind the others.
Where are the control points?
This is a thinking exercise, not a plan. A hazard-analysis approach asks, at each step, what you are controlling and how you would know it is under control — in practice a record, an instrument, or a schedule somebody signs.
| Step | What you are controlling | How you would know |
|---|---|---|
| Water and ice | An ingredient that never gets heated | Treatment, filter and ice-machine maintenance records |
| Vessels and filters | Cleanability — no cracks, no absorbent surfaces, nothing improvised | A cleaning method per item; logged check; damaged items withdrawn |
| Steeping temperature | The longest exposure period | A thermometer and a recorded reading, not an assumption about the room |
| Holding temperature | Genuinely cold, not merely cool | A logged fridge temperature, with an out-of-range action |
| Total elapsed time | The batch's whole life, steep to disposal | A label carrying a start date and a discard date |
| Transfer and packaging | Hygiene where the product is exposed | A written transfer procedure; hand hygiene; sanitised surfaces |
| Lines, kegs, taps, fonts | Biofilm on wetted surfaces | A frequency, a named owner, a signature per clean |
| Labelling and rotation | Every container identifiable, oldest used first | Labels on everything; rotation enforced physically, not by memory |
| Disposal | That out-of-date product leaves the building | The discard recorded, the same as the production |
A control you cannot evidence is not a control. "We keep it cold" is a belief; a logged temperature is a control.
What are your legal obligations?
They depend on where you are, and this article cannot tell you what they are.
Food-safety requirements are set by the operator's own jurisdiction and enforced by its own authority, and they differ — between countries and often between regions within them. The obligations attaching to a glass poured on your own premises are commonly different from those attaching to a product you keg, bottle, or sell for consumption elsewhere.
Every operator producing cold brew should assume something applies to them and find out what. Depending on jurisdiction and format, that can include registering or notifying the activity, a documented food-safety plan based on a hazard analysis, specified record-keeping, and — for anything approaching a packaged or shelf-stable product — review and sign-off of the process by a qualified authority.
What causes trouble is rarely deliberate non-compliance. It is a keg added to the back bar as a menu extension, in good faith, without anyone registering that the business has started producing a low-acid unheated food. Ask before you build the system rather than after an inspection asks it for you — and ask someone qualified where you trade, because this article is an orientation to the questions, not an answer to them.
What does a control regime look like in practice?
Structure, not numbers. Every temperature, duration and shelf life comes from your own regulatory position and verified process, not from an article.
A written procedure per product. One page: what goes in, in what proportion, in which vessel, for how long, at what temperature, filtered how, into what, held where. A procedure that lives only in someone's head stops existing when they are on holiday.
Batch identification and date. Every vessel, keg and bottle carries an identifier and a start date. A batch you cannot identify is one you cannot withdraw.
A recorded hold temperature. Measured with an instrument, written down, with a defined action when it reads out of range. The action matters as much as the reading; an out-of-range log with no consequence is only paperwork.
A defined and enforced discard point, derived from your own process and regulatory position, marked on the container, honoured.
A cleaning schedule covering every wetted surface — lines, couplers, taps and fonts included — with a frequency, a named owner and a signature per completion. Unsigned schedules are aspirations.
Separate handling for concentrate and diluted product. Different properties, different lives; treating them as one product is a common route to a batch outliving its own rule.
Periodic review, so rules are confirmed or changed deliberately rather than drifting.
The discard point does the most work of any of these, and it is the one most often quietly ignored — on a slow week, when there is most of a batch left and the numbers are already thin. That commercial pressure is exactly what the written rule exists to resist. A rule is only a rule at the moment it costs you something; the rest of the time it is a preference. The fix is to size batches to real demand in the first place, a waste-and-forecasting problem before a safety one — see cutting waste in a café and how to cost and price a cup of coffee.
What changes if you sell it beyond your own counter?
Everything, and this is the escalation nobody plans for.
Pouring a glass from a fridge in your own café is one regulatory proposition. Bottling for retail, supplying another business wholesale, or producing something meant to keep on a shelf is a materially different one — different obligations, potentially different premises requirements and labelling duties, and potentially a requirement that the process be reviewed and validated by someone qualified.
Cafés cross this line gradually and without noticing: a few bottles for regulars, then a wholesale order from the deli next door, then a listing. Each step feels like a small extension of the last. Anyone contemplating it should assume they need advice first, not after.
What does this demand of equipment and layout?
Four things, and how hard each bites depends on the method — see cold brew methods for cafés compared.
Dedicated, cleanable vessels rather than improvised ones. Smooth, non-absorbent, no unreachable seams, no fittings that cannot be dismantled, used for nothing else. A repurposed container that cannot be fully cleaned is a permanent hazard however good the procedure around it.
Enough refrigerated space to hold batches at temperature. Cold brew occupies volume for days, and the common failure is a fridge so full that nothing in it is cold rather than cold-ish. A cold programme needs its own space, not the gap left over.
Cleaning access on any dispense system. Before installing lines, kegs, taps and a font, establish how each is cleaned, by whom, how often, and whether the parts come apart. A font that cannot be dismantled does not get cleaned.
A hygiene burden that scales with complexity. Every addition — a second product, a concentrate as well as a ready-to-drink, a nitro tap, a second font — adds surfaces, procedures and records, usually without anyone adding labour to match. The equipment side of the trend is in the rise of cold coffee and what it demands of equipment.
Should your café make cold brew at all?
Many should not.
Flash-chilled coffee removes the problem rather than managing it. Coffee brewed hot and chilled immediately, to order, has no steep, no batch, no hold time, no shelf life and no discard point, because there is nothing to hold. It passes through hot water like everything else on the bar, and it makes a good drink. For a venue with modest cold volume it is often the right answer; the trade-offs are in cold brew methods for cafés compared.
Buying in a finished product is legitimate, not a compromise. A producer supplying cold brew already carries the regulatory burden, the validated process, the records and the liability. Paying someone to carry that is a reasonable commercial decision.
And a venue that cannot commit to a written procedure, recorded temperatures and an enforced discard point should not be producing an unheated beverage for sale. Not because the risk is high in every batch — most batches are fine, which is why the discipline erodes — but because the process gives no feedback until something has gone wrong, and by then it has been served. If the honest answer to "who signs the cleaning schedule" is nobody, the honest answer to "should we make cold brew" is no.
Frequently asked questions
Is kegged or nitro cold brew riskier than cold brew from a fridge? It carries additional hazards. A sealed, oxygen-limited container of low-acid liquid is the condition of concern for anaerobic organisms, and a dispense system adds lines, couplers, taps and fonts that all build biofilm.
Does coffee's acidity protect it? No. Coffee is mildly acidic but not acidic enough to be self-protecting the way a genuinely acidic beverage is. Acidity cannot be treated as a control here.
What temperature and shelf life should we use? This article names none: those figures come from your jurisdiction and your own verified process. Get them from your enforcing authority or a qualified adviser, write them into your procedure, and hold to them.
Do we need to register or get approval? Possibly; it depends where you are and what you are doing, and it is more likely if you keg, bottle, or sell for off-premises consumption. Check before you start.
This article is part of the Vea Group knowledge base. Vea Group S.p.A. is an Italian designer and manufacturer of professional and premium coffee machines, with heritage dating to 1919 and production in Chignolo d'Isola, Italy, and Suzhou, China.