WhatsApp and spreadsheets are free, familiar, and flexible. Most food businesses start with them — and many stick with them long past the point where they should have moved on. The problem is not the cost. It is that neither constitutes a valid compliance record in the eyes of an EHO, neither can produce a Natasha's Law compliant food label, and both leave your business exposed the moment something goes wrong.
Here is an honest look at what the DIY approach actually provides — and where it falls short of what a food business operating in 2025 actually needs.
A Google Sheet can be edited at any time, by anyone with access, with no record of when entries were made versus when they were changed. An EHO reviewing your temperature log in a spreadsheet has no way to verify that the readings were taken in real time rather than entered retrospectively the morning of their visit.
WhatsApp messages are worse: they are informal communications stored on personal devices. They are not structured compliance records. They can be deleted. There is no search by date, no export format, and no way to produce them as a clean, dated audit trail for an inspector. If a staff member leaves and deletes their app, those messages are gone.
Businesses running on spreadsheets and WhatsApp sometimes receive their first formal warning from an EHO not because they were doing anything unsafe — but because they could not prove they were doing things right.
Every record in CompliChef is created with an immutable timestamp — the exact date, time, and staff member who completed it. Temperature logs, cleaning checks, HACCP completions, label prints — all are recorded at the moment they happen and cannot be altered after the fact.
When an EHO visits, you open one system. Everything is there in chronological order: every temperature check your team has taken, every cleaning record, every label printed, every HACCP completion — with the name of the staff member who did it and the exact time it was done. That is the standard of evidence that demonstrates genuine, consistent food safety management.
Your records are also accessible from any device — so if an inspector wants to see three months of fridge temperature data, you can pull it up in seconds without rifling through spreadsheet files or scrolling through chat threads.
Many food businesses maintain their allergen information in a spreadsheet — a list of dishes and which of the 14 major allergens they contain. This is a useful reference, but it does not satisfy Natasha's Law (the Food Information (Amendment) (England) Regulations 2021) for food prepacked for direct sale (PPDS).
Natasha's Law requires that PPDS food carries a physical label with the full ingredient list and allergens emphasised in the text. Having the information in a spreadsheet on a laptop behind the counter does not meet this requirement — the label must be on the packaging. Businesses producing PPDS food without compliant labels face enforcement action from their local authority.
A spreadsheet also cannot generate a Use By label, log who prepared a dish, or provide a QR traceability code — all of which contribute to a robust allergen management system.
CompliChef Labels prints all four label types your kitchen needs, directly from the Sunmi device: Allergen Labels (all 14 major allergens auto-populated from your KitchenPortal recipes), Use By Labels (preparation date auto-stamped, use-by date calculated from a configurable period or preset), Sale Labels (Natasha's Law compliant PPDS labels with full ingredient list and allergens in bold), and Scan Labels (QR traceability codes).
Allergens come from your recipe data — not a separate spreadsheet to maintain. Update a recipe in KitchenPortal and every future label reflects the change automatically. There is no separate label database to keep in sync with what your kitchen actually makes.
Every print is timestamped and logged against the staff member who printed it. If an allergen question ever arises, you can show exactly what label was printed, by whom, and when — in the same system as the rest of your compliance records.
Posting shifts on a WhatsApp group, confirming availability via message, and resolving HR queries through chat is how most small hospitality businesses start. It works — until it does not.
The GDPR risks are real: staff personal phone numbers are personal data. Processing them through a personal WhatsApp account — on the manager's personal phone — does not meet the requirements of UK GDPR for lawful, documented data processing. If a member of staff requests their personal data under a GDPR Subject Access Request, there is no clean way to respond when their data is scattered across personal WhatsApp accounts.
Practically, when a manager leaves and deletes the group, all shift history goes with them. There is no formal record of who agreed to work which shift, no signed confirmation of rota changes, and no audit trail if a wage dispute arises.
CompliChef StaffPortal is a GDPR-compliant business system for managing your team. Staff rotas, shift confirmations, HR records, contract storage, and training logs all live in a controlled platform — not on personal phones or WhatsApp accounts.
Every shift allocation is recorded against the staff member's profile. Every rota change is timestamped. HR records are accessible to managers in the portal and are not tied to any individual's personal devices — if a manager leaves, their access is revoked, not the data.
StaffPortal also integrates with the rest of CompliChef: when a staff member completes a temperature check in KitchenPortal or prints a label using Labels, the record is linked to their staff profile. One system for compliance and staffing — not a mix of an app and a group chat.
The honest answer: WhatsApp and spreadsheets work until they do not. Here is when each matters.
Every check, every temperature, every label printed — timestamped and immutable. Open one system in an EHO inspection and show three months of clean, credible records in seconds.
Print PPDS compliant Sale Labels with full ingredient list and allergens in bold. Allergens come from your recipe data — no separate spreadsheet to maintain alongside the labels.
Bluetooth probe pairs with the CompliChef app — staff hold the probe, the reading is auto-logged with their name and timestamp. No manual entry, no guessed readings.
Staff rotas, HR records, and shift confirmations in a controlled business system — not scattered across personal WhatsApp accounts on personal phones.
Recipes power your labels. Staff profiles link to compliance records. Label prints sit alongside temperature logs. One login for everything — not five separate tools.
KitchenPortal, Labels, StaffPortal, and RecruitPortal under one subscription. For most businesses, less than the cost of a single hour of minimum wage per week.
No spin. There are things the DIY approach does genuinely well — and it is worth being honest about them.
The DIY approach makes sense when you are just starting out. It stops making sense once you are serving allergen-containing food, producing PPDS items, employing staff, or facing your first EHO inspection — because at that point, the risk of not having proper records far outweighs the cost of £29/month.
14-day free trial. No credit card. No spreadsheets. Full access to KitchenPortal, Labels, StaffPortal, and RecruitPortal from day one.