You opened a bakery to bake.
Not to manage multiple sets of permits.

It depends on where you bake and how you sell, but most bakeries need a business registration, a state bakery or food establishment license, and a food handler card before they open. A home baker can often start under a state cottage food exemption with no license at all, as long as sales stay under a state cap and the goods are shelf-stable. Selling wholesale to stores adds a state wholesale license and FDA Food Facility Registration, and a farmers market booth needs a temporary food permit for each market. The exact list, fees, and agencies vary by state and city, so check your state guide for the specifics and confirm against the official sources. The moment you add a second sales channel, the number of licenses and renewal dates climbs fast, and that growing pile is what CredentiAlert keeps in one place.

Selling baked goods business-to-business almost always requires more than a retail food permit. Most states issue a separate Wholesale Food Processor license (the exact name varies, sometimes Manufactured Food License, sometimes Food Processing Plant License) issued by the state department of agriculture or department of health. The wholesale facility gets its own inspection on a different schedule than the retail counter. If the wholesale account ships product across state lines, FDA Food Facility Registration is also required at the federal level. Cafes and grocers increasingly audit their vendor files, and a lapsed wholesale license is grounds for an account to drop the bakery as a supplier.

Under the Food Safety Modernization Act, the FDA requires every facility that manufactures, processes, packs, or holds food for US consumption to register with the FDA, and the registration must be renewed in Q4 of every even-numbered year. The renewal window only opens October 1 and closes December 31. The next window after 2026 is October 1 to December 31, 2028. Missing the window means the registration goes inactive, and operating without it carries federal civil penalties on top of any state-level enforcement.

In most jurisdictions, yes. A Temporary Food Establishment (TFE) permit is issued by the city or county health department where the market is held, not by the state, and not by the market itself. A bakery selling at three different markets in three different cities will typically carry three separate TFE permits, each with its own renewal cadence and its own inspector. Some markets require the permit be posted at the booth during operating hours, and the market manager has authority to refuse setup if the permit is expired or missing.

Most state health codes require a Certified Food Protection Manager (CFPM) on duty during all operating hours, which means the bakery must have enough certified staff to cover every shift the doors are open, including weekends and early mornings. A single shift without a current CFPM card on the floor is a critical violation in most inspection scoring systems, and critical violations drop the letter grade displayed in the front window. CFPM certifications (the most common is ServSafe) are typically valid for five years and require renewal through an accredited program.

Cottage food laws vary state by state, but most set either a sales cap (Oklahoma at $20,000 gross annually, California at $150,000) or a venue restriction (no shipping, no sales to retailers, no farmers market wholesale). Crossing any of those lines without first securing commercial permitting is the trip wire. In some states it is a misdemeanor with fines, in others a cease-and-desist letter, but in all of them it permanently complicates the transition to a fully licensed retail bakery. The clean path is to apply for the retail food establishment permit, the state wholesale license if selling B2B, and any local business licenses before crossing the cottage food line.

It depends on the state. Illinois requires every restaurant and food establishment to have at least one Allergen-Safe Adult (ASA) certified employee per shift. Michigan requires similar allergen awareness training for food handlers. Most other states do not mandate it, but most product liability insurers ask whether bakery staff carry allergen training, and a documented allergen program is a near-requirement for any wholesale account selling into schools or healthcare facilities. Tracking which staff have current allergen certifications is what separates a bakery that can take a wholesale account from one that gets passed over.

Most wedding venues require a Certificate of Insurance (COI) from any food vendor working the event, listing the venue as additional insured for the date of the event. General liability is the baseline. Product liability is often required separately, especially given allergen exposure risk. Commercial auto insurance covers the delivery van. The COI is typically requested 48 to 72 hours before the event, and venues will refuse delivery without it on file. Bakeries doing more than a handful of weddings a year benefit from a standing relationship with their insurer to turn around venue-specific COIs same-day.

A POS handles transactions, employee clock-ins, inventory counts, and basic sales reporting. Square, Toast, Lightspeed, and the bakery-specific platforms like BakeSmart and Cybake all operate at the transaction and production layer. None of them track when the FDA registration is due to renew, whether the head baker's ServSafe card is still current, whether the city TFE permit for the Saturday market expires next week, or whether the wedding venue has a current COI on file. CredentiAlert tracks the licensing and credential layer that sits underneath the POS, alerts on every upcoming expiration, and stores every document in one place. The two systems are complementary.