FSMA Intentional Adulteration: where cameras and access actually have to be

21 CFR Part 121 (the FSMA Intentional Adulteration Rule) is the regulation that drives food-defense camera and access design. FDA requires every covered facility to identify actionable process steps where intentional adulteration could happen and put mitigation strategies in place. The four key activity types FDA names: bulk liquid receiving and loading, liquid storage and handling, secondary ingredient handling, and mixing and similar activities.

For each activity type, the food defense plan documents the mitigation: access control on the room (badge-required entry, badge logs retained), camera coverage of the activity area (continuous recording, retention aligned to your reanalysis cycle), and a documented escalation path if the access log shows an unauthorized entry. The plan must be reanalyzed every three years and any time the process changes. FDA inspectors expect the camera, the badge log, the written mitigation, and evidence the system was tested. A camera offline for six months is a finding even if everything else is in place.

Worker-safety AI on existing cameras

Camera-agnostic worker-safety platforms like Intenseye run on cameras already in your facility. The detections that earn their keep: missing PPE (hard hat, hi-vis vest, safety glasses, hairnet, glove compliance in food-contact zones), forklift-pedestrian proximity in shared aisles, slip-and-fall events in wet areas, ergonomic risk during repetitive lifting, and unauthorized entry into machine guarding zones around mixers, ovens, and packaging lines.

The output is aggregate trend data, not individual write-ups: PPE compliance by department by week, forklift near-miss count by aisle, slip-and-fall events by shift. It gives EHS a leading indicator before an incident shows up on the OSHA 300 log. Most plant managers run the analytics for 90 days to establish a baseline before targets get set. The system tracks aggregate compliance without storing identity data on individual workers, which is what most CBAs require; where the contract is tighter, the analytics anonymize at capture, not just at report, documented as a deliverable.

Access control on raw materials, cold storage, and dock doors

Cloud access control with role-based permissions, integrated with your HR system. Production-floor staff get their lines and break areas; cold-storage and raw-material rooms get tighter scope (usually QA, sanitation, and named production leads); receiving and shipping docks have their own credential pool with delivery-driver visitor management at the gate. The HR integration is the underrated piece. Termination in Workday, ADP, or Kronos triggers credential revocation inside seconds, new hires get default access at the start of their first shift, and reassignments update the rules automatically. No lingering ex-employee credentials.

Dock doors get continuous camera coverage with vehicle-aware analytics. License plate recognition logs every truck arrival and departure, paired with the BOL and the shipper's gate log so any chain-of-custody question has three independent records to cross-check.