Consultant plan · multi-client

Multi-client software for HACCP, quality & certification consultants

KoreLab is the cloud software for food safety and quality consultants: from HACCP to the voluntary standards — IFS Food, BRCGS, ISO 9001/22000 and FSSC — manage all your clients from a single dashboard. For a new client you prepare the entire first draft of the dossier under delegation, for later revisions you propose signed changes — no scattered files, no diverging versions, no re-entering anything.

€39/month (€390/year), VAT excluded · Early Adopter promo -25% until 31 October 2026 · Quality & Certifications side, multi-client.

The client's manual, versioned and under control

For each client you work on the self-monitoring manual with tracked versions (draft, approved, obsolete): you propose the changes, the company confirms and signs (dual signature), and everything stays sealed in the dossier. No more copy-paste between diverging Word files.

The versioned self-monitoring manual that the consultant updates for the client in KoreLab

The problem of managing multiple clients

The more businesses you follow, the more fragmented the work becomes. Each client is a different folder, each manual is a copy-and-paste, and when the certification body arrives nobody knows which version is the right one.

Files scattered everywhere

Excel on your PC, PDFs in emails, paper records in the client's back room, a USB stick passed between sites. When you need a piece of data, the treasure hunt begins.

Diverging versions

You have one draft, the client has edited another, the audit sees a third. Nobody knows which one is approved and when what changed.

Manuals rewritten from scratch

For every new client you rewrite sections you have already written a hundred times. Time burned on repetitive work instead of risk analysis.

No audit trail

A record corrected in pen, a temperature crossed out and rewritten: there is no way to prove who did what and when. At verification time, that's a problem.

Blurred responsibility

Did you edit the manual or did the client? Who takes responsibility in front of the auditor? Without a trail, the line gets blurry.

Wasted time

Trips to retrieve a record, manual data re-entry, emails asking "which is the latest version?". Hours you can't bill.

KoreLab does not belong to any consulting firm. It is an independent tool: you adopt it as your own method, you bring it to every client, and no competitor looks inside your portfolio. The data stays with the client, the method stays yours.

What you can do with KoreLab

All the work on the Quality & Certifications side, for every client, from a single interface. One single source of truth: the client's data, never copies to keep aligned.

Multi-client from a single dashboard

All your clients in one dashboard. Switch client with one click and land in their dossier: manual, hazards, records, deadlines. No multiple logins, no separate folders.

LIVE read-only delegated access

The client grants you delegation and you see their real data in real time, read-only. There is a single source — the client's data, with one single integrity chain (hash-chain). No copies to synchronise, no misalignment.

Read-only snapshot with expiry

You generate a link to a "frozen" read-only dossier, with an expiry date. You share it for example with the certification body or with a reviewer: they see the snapshot of the dossier as of that date, without accessing the live system.

Signed change proposals

On the Manual and on the client's data you don't write behind their back: you propose a change, signing it with your PIN. The client sees it, evaluates it, confirms it and signs it. Two signatures, clear responsibility. The «propose → confirm» model is no longer just for the Manual: it also extends to the Management review, Complaints, Training sessions and internal-audit planning.

You work on the client's ENTIRE suite

Versioned self-monitoring manual, hazard analysis by step, CCPs and critical limits, monitoring plan, operational records, warehouse & traceability, mock recall, supplier/FCM evaluations, Food Defence (TACCP), Food Fraud (VACCP), gap analysis, documents & attachments, training, complaints, management review and internal audits. All in one place.

Cross-mapped multi-standard

HACCP (base always active), IFS Food v8, BRCGS Issue 9, ISO 9001:2015, ISO 22000:2018, FSSC 22000 v7. Cross-mapping of clauses unifies equivalent requirements: you demonstrate the same requirement only once across multiple standards.

Reusable template library

Build your library of templates (manual texts, critical limits, settings) and reuse it across all clients. Export it and import it between accounts. Write once, apply everywhere.

Two-way notifications + proposal queue

You and the client exchange notifications both ways. The proposal queue shows a badge with how many are awaiting confirmation: no request is lost, no signature is left pending.

Traceability and mock recall

Goods receipt with batch/delivery note/expiry, FEFO stock from an append-only ledger, one-step-back / one-step-forward traceability (art. 18 Reg. (EC) 178/2002) and recall tests with the list of clients to alert. Ready to show in an audit.

For the full detail of the standards, the clauses and what the Quality suite covers, see the Certifications page.

How it works

The "propose → confirm" flow in 5 steps. You work, the client validates, the change enters the dossier sealed. It applies to the Manual and to quality operations: management review, complaints, training and internal audits.

1.

Get the delegation

The client invites you or grants you delegated access. From that moment you see their real data, read-only. The delegation is theirs and they can revoke it whenever they want.

2.

Work on the real data

No local copies: you analyse the manual, the hazards by step, the CCPs, the records and traceability directly on the client's single source. What you see is the truth of the dossier.

3.

Propose with YOUR PIN

When you want to change a section of the Manual or a piece of data, you create a proposal and sign it with your PIN. The proposal stays tracked: who made it, when, what changes.

4.

The FBO approves and signs

The client — the FBO, typically the Self-monitoring Manager or QA Manager — receives the proposal, evaluates it, confirms it and signs it with THEIR PIN. That's the dual signature: you propose, they validate and take responsibility.

5.

It enters the dossier sealed

On confirmation the change enters the dossier hooked to the hash-chain (concatenated SHA-256 seal), idempotently and transactionally. The "Verify integrity" function recalculates the chain: "✓ chain intact".

For a new client: you prepare the entire dossier under delegation

The "propose → confirm" flow is designed for one-off revisions on a dossier already up and running. For a client starting from scratch, KoreLab gives you a dedicated mode: you prepare the entire first draft yourself, the client adopts it and takes on the responsibility.

The client arms the preparation

With a dedicated switch — revocable at any time — the client authorises you to write in draft directly in their dossier, not just to propose.

You draft the first version across the entire setup

Requirements and gap analysis, hazard analysis by step, CCPs and critical limits, record templates, equipment, org chart: you prepare the entire documentation framework, not just the Manual.

"In preparation" banner on every page

Until it is adopted, every page of the client's dossier carries a fixed warning: it is not yet a valid dossier. Every PDF exported at this stage is marked "DRAFT — not adopted", with no evidentiary value.

You deliver, the client adopts and signs

Once the work is done, you deliver. The company — the FBO, typically the Self-monitoring Manager or QA Manager — reviews what you prepared and adopts it by signing with their own PIN.

Seal, freeze, responsibility transferred

Upon adoption the dossier enters the hash-chain and freezes: from that moment food safety responsibility belongs to the company, no longer to you.

Warehouse and documents stay theirs

Warehouse traceability remains the client's own operations (you see it only if they allow it); their documents and attachments stay read-only even in this mode.

The two modes coexist: use delegated preparation for new clients starting from scratch, and signed proposals ("propose → confirm") for later revisions on an already-adopted dossier.

Train the client's operators with an online HACCP test

Beyond the dossier, you also prepare the people: you generate a multiple-choice test on good HACCP practices and send it to the client's operators, with no need for them to open a KoreLab account.

Personal link by email, no account needed

Each operator receives a personal link and takes the test from a dedicated portal: they declare their identity and a statement of responsibility, then immediately see their score, weak topics and question-by-question correction.

Server-side correction only

Correct answers are never readable from the operator's device. Every link is personal and expiring, with questions and option order frozen at the moment it's sent.

200 curated questions, 5 topics, 3 levels

HACCP principles and critical points, personal hygiene, temperature and cold chain, cleaning and sanitisation, traceability/labelling/recall — each with a regulatory citation, written offline (never AI-generated at runtime) and verified through an independent double review.

PDF study guide and certificate

Illustrated study material on the 5 topics to send before the test as preparation, and a downloadable certificate for those who pass — both with KoreLab's visual identity.

Operator GDPR consent

Before receiving the study guide or test, every operator gives consent to the processing of their data from a dedicated page; consent and any revocation stay permanently tracked. The client company remains the data controller, you act under delegation.

Enters the dossier only after your confirmation

When an operator completes the test, you confirm it by signing with your PIN: it becomes a Training-session proposal (the same "propose → confirm" model), which the FBO approves and records, feeding the skills matrix and the 24-month renewal deadline.

The portal, emails, study guide and question bank are fully bilingual IT/EN, following the language set in the app. The test checks understanding of the good practices adopted by the company: it does not replace any local regulatory food-handler training requirements.

What improves in your work

The concrete benefits for those who provide HACCP consultancy across multiple businesses: less wasted time, more control, clear responsibility.

You save time

Templates reusable across clients, one dashboard for all, zero data re-entry. You reduce repetitive work and dedicate the hours to risk analysis — what the client really pays for.

Always audit-ready dossiers

Versioned manual, append-only ALCOA+ records, traceability and gap analysis always up to date and verifiable. When the certification body arrives, the dossier is already ready and demonstrable.

Clear responsibility

You propose, the FBO validates and takes responsibility with their signature. The boundary between consultant and operator is sharp, exactly as it should be in front of an auditor.

Traceability of changes

For every change it stays recorded who proposed, who approved and who signed, with date and time. No more "who touched what?": the answer is in the dossier.

No scattered files

One single source of truth per client. Diverging versions, USB sticks and emails with duplicate attachments disappear. What's in the dossier is the real version.

Work remotely on the real data

No trips just to retrieve a record. You access the client's real data from wherever you are and act in real time, on the single source, not on an old copy.

Professional image

Tidy snapshots, clean dossiers, signed and tracked proposals. You present yourself to the client and the certification body with a solid, verifiable method, not with improvised folders.

More clients, same method

The same workflow on every business you follow. You grow in client numbers without multiplying the chaos: the method stays a single one.

Who it's for

The Consultant plan is designed for those who do self-monitoring and quality as a profession, across multiple artisan food businesses.

Freelance HACCP consultant

You follow multiple workshops, charcuterie makers, dairies, pasta makers, breweries. You want one single method, audit-ready dossiers and less time on repetitive work. KoreLab gives you everything in one dashboard.

Consultancy firm

Multiple consultants, a shared client base. Common template library, uniform proposal-signature flow and traceability of who did what on each client.

Multi-site management / chains

Groups with multiple plants or production retail outlets. Keep the dossiers of the various sites aligned with the same documentation framework and the same standards.

The Consultant plan, €39/month

The full Quality & Certifications suite, across multiple clients, with live synchronisation and signed proposals. Prices VAT excluded.

Consultant — €39/month · €390/year

Quality & Certifications side MULTI-CLIENT: single dashboard, live delegated access, read-only snapshot, signed change proposals, reusable template library, sync with the client, certifications suite included. The right choice if you follow multiple businesses.

Certifications add-on — €19/month · €190/year

Adds to Free or Starter and enables the Quality suite on a single business. It's designed for the individual producer, not for those managing a portfolio of clients. Included in Pro, Qualità and Consultant.

Qualità — €24.90/month · €249/year

Only the Quality & Certifications side (no commercial side or AI) for a single business, certification included. Great for the business that does it itself, but it stays single-client: it's not multi-client like the Consultant plan.

Early Adopter promo -25% on all paid plans until 31 October 2026. For the full overview of the plans (Free, Starter, Qualità, Pro, Consultant) see the Pricing page.

Honesty about roles, the signature and the data

We tell it like it is: it's important you know exactly what KoreLab does and does not do.

KoreLab does not certify. It is a management and self-monitoring tool: it prepares and guides towards certification and keeps the dossier ready for the audit and for the certification body. It does not issue certifications and is not "Accredia-accredited".

The signature is a simple electronic signature — server-side verified PIN + chain seal with concatenated SHA-256 hash. It is not a qualified electronic signature (QES) and it is not a legal timestamp. We provide solidity and internal traceability, not the value of a qualified signature.

You propose, the FBO stays responsible. The consultant proposes with their own PIN; the client's FBO (Self-monitoring Manager / QA Manager) approves, signs with their own PIN and retains responsibility for the dossier. The dual signature makes this boundary explicit.

In delegated preparation, responsibility transfers to the company only on adoption. Until the client adopts and signs with their own PIN, what you write is a draft with no evidentiary value (every exported PDF states this): food safety responsibility remains, as always, the FBO's — and it formally transfers to them only with the signed adoption.

The data stays the client's. Delegated access is a grant from the client, revocable at any time. The source stays single (the client's data, one single hash-chain) and processing takes place in compliance with the GDPR.

The HACCP test stays under the company's control. Operators give their GDPR consent before receiving the study guide or test; the data controller remains the client company (FBO), you act under delegation. The result enters the client's dossier only after your PIN confirmation and the FBO's approval — never automatically.

The regulatory texts are indicative, to be verified and adapted. KoreLab does not provide legal advice and does not reproduce the full text of the standards.

Frequently asked questions

The answers to the most common questions of those who provide HACCP consultancy across multiple clients.

How does delegated access work? +
The client grants you a delegation and you see their real data in real time, read-only. You don't work on a copy: the source is single (the client's data, with one single integrity chain). When you want to change something, you create a signed proposal that the client must confirm.
Whose data is it? +
The data stays the client's. You access by virtue of a delegation that they grant; it does not become yours and you keep no copies to synchronise. Processing takes place in compliance with the GDPR.
Can I revoke, or can the client revoke my access? +
Yes. The delegation is revocable by the client at any time. When it is revoked, access to the real data stops. Changes already confirmed and signed remain in the dossier, sealed in the hash-chain.
Does the client see what I propose? +
Yes, and that's the point. Every proposal lands in a queue with a badge: the client sees it, evaluates it and decides whether to confirm it. Nothing enters the dossier without their approval and their signature.
Do proposals concern only the Manual? +
No. Beyond the self-monitoring Manual, the dual-signature «propose → confirm» flow also covers the Management review, Complaints, Training sessions and internal-audit planning: you propose signing with your PIN, the client's food-safety manager approves and signs with theirs. We are progressively extending the model to other quality modules.
Can I prepare the entire dossier for a new client myself? +
Yes, with a dedicated mode (different from "propose → confirm"). The client arms a preparation switch, revocable at any time; from there you write, in draft, the entire setup: requirements, hazard analysis by step, CCPs, limits, record templates, equipment, org chart. Every page of their dossier shows an "in preparation" banner and every exported PDF is marked "DRAFT — not adopted", with no evidentiary value. When you deliver, the company (the FBO) reviews and adopts it by signing with their own PIN: only then does the dossier seal into the hash-chain, freeze, and food safety responsibility formally transfer to them.
Can my clients' operators take an HACCP test? +
Yes. You generate a multiple-choice test (drawn from a bank of 200 questions across 5 HACCP topics, 3 difficulty levels) and send it with a personal link by email to each operator: no KoreLab account needed, they take it from a dedicated portal after giving their GDPR consent. They immediately see their score and correction; you get notified and, if you want it to enter the client's dossier, you confirm with your PIN — it becomes a Training proposal that the FBO approves. It also includes a PDF study guide and certificate, both bilingual IT/EN.
What's the difference between snapshot and live access? +
Live access is a real-time window onto the client's real data (read-only, single source). The snapshot, instead, is a "photo" frozen of the dossier at a certain date, shareable as a read-only link with expiry — useful for example for the certification body, without giving access to the live system.
How is it signed if we are two different accounts? +
With the dual signature. You, from your account, sign the proposal with your PIN. The client, from their account, approves and signs with their own PIN. Only at that point does the change enter the dossier, idempotently and transactionally, hooked to the integrity chain.
Is it compliant and does it respect the GDPR? +
KoreLab is a tool to manage self-monitoring (mandatory: Reg. (EC) 852/2004 art. 5; traceability Reg. (EC) 178/2002 art. 18) and to prepare for voluntary standards, with data processed in compliance with the GDPR. Note: the signature is a simple electronic signature (PIN + SHA-256 hash), not qualified and not a legal timestamp. KoreLab does not certify and does not replace legal advice.
How many clients can I follow? +
The Consultant plan is multi-client: you manage multiple businesses from the same dashboard, switching from one to another with one click. It is designed precisely for those who have a portfolio of clients, unlike the single-business plans (Certifications add-on and Qualità plan).
How much does it cost? +
The Consultant plan costs €39/month or €390/year (VAT excluded) and includes the full Quality & Certifications suite, multi-client. With the Early Adopter promo you get -25% until 31 October 2026. The full comparison is on the Pricing page.

Ready to manage all your clients in one place?

Activate the Consultant plan, get your clients' delegation and keep every dossier audit-ready — with signed proposals, traceability and reusable templates. Early Adopter promo -25% until 31 October 2026.