We just had our GAP audit and got a minor on 2.4.1.3 stating that "Ensure that it is specified that product owned by customers is to be managed by customers, and how any issues related to the facility (FDA inspection findings of the facility, failed health inspections etc.) will be reported to SQF."
I have in our policy that we "will be responsible for notifying SQFI and our certifying body within 24-hours if issued a regulatory warning or in regard to an event." She clearly said when we were discussing this that "the customer has to send the notifications."
We do not own any of our stored products, and only 1 of the 5 customers in our first buildings to go SQF are themselves SQF certified. If a non-SQF customer has an issue regarding product stored in our warehouse, how would they know to contact SQFI and our certifying body? Also, I don't get how if we have a regulatory issue, the customer would be responsible for the notifications. Why wouldn't we be responsible for notifying everyone: customers impacted, SQFI, and the CB? If a customer has a regulatory issue that involves us needing to take action (like putting product on hold or dumping product for them) does SQFI and our CB need to be notified since we are only a piece of the process?
On a side note, our customer had a representative at our audit and was very chatty with the auditor and I know they glossed over a few things, so I don't know if she just missed what I had in our policy or if this is something I need to actually address. There are a couple other things we got minors for and her comments pretty much match what was in our documents, so between interruptions to chit chat and her referring to one of our sites by another cities name a number of times, I don't know.
Any other 3PL's have any insight on this?