Cold Chain Warehousing in the Philippines: Temperature Zones, Power Risk and Compliance

Temperature zones: the real hazard is mixing them, not missing the setpoint

Cold storage is not a binary of cold and not-cold. Industry practice recognises at least five bands, and in the Philippines the failure that actually causes losses is rarely a chamber running warm — it is incompatible goods sharing one chamber.

Five bands, warmest to coldest: controlled ambient, which covers most general goods and many oral solid dosage forms; cool storage, sitting between ambient and chilled, which many supplements, certain medicines and chocolate-type foods require; chilled, covering fresh produce, dairy and most refrigerated medicines other than vaccines; frozen, covering meat, seafood and frozen prepared goods; and deeper freezing for specific seafood and some biological products. The exact band for any given item comes from the product label, the registration dossier and the regulator — never from a general sense that colder is safer. The band on the label was declared at registration, and a mismatch found during an inspection is a compliance finding.

Why mixing is the dangerous failure. First, cross-contamination and odour transfer: fresh produce, meat and packaged food in one chamber raise both microbiological and sensory risk, and food sharing space with medicines is generally not permitted at all. Second, temperature is not uniform inside a chamber: near the door, near the evaporator and at the top of the stack all read differently, and the fuller the room the worse it gets — while an inspection will sample the worst point, not the average. Third, door disturbance: a chamber opened constantly for picking and a chamber holding long-term stock have completely different duty cycles, and combining them serves neither well.

Three things to ask during a site visit: are the zones physically partitioned rather than merely racked apart; has a temperature mapping study been done to identify hot and cold spots; and is the staging area — the dock and marshalling space where goods sit during receiving and despatch — temperature controlled. Many facilities spend on the chambers and then let cargo wait on an uncontrolled dock, which is exactly where the chain breaks.

The ambient-versus-cold decision changes the warehousing model itself; see the warehouse selection guide, and where this cost sits in the wider chain in the logistics cost structure guide.

Power risk and backup requirements: the number one cold chain problem here

In the Philippines, a cold store's reliability is its backup power's reliability. Judge any facility on four points: transfer time, generator capacity and redundancy, fuel autonomy, and the most recent load-test record. If a provider cannot answer all four, nothing else on the specification sheet matters.

① Transfer time. There is a gap between the utility supply failing and the generator carrying the load. With automatic transfer equipment the gap is brief. With manual starting, the gap depends on whether somebody is present and how quickly they reach the switchgear — and night-time and typhoon conditions, which are precisely when outages cluster, are also when nobody is there. Ask explicitly whether transfer is automatic, and go look at the switchgear.

② Capacity and redundancy. What matters is not the nameplate rating but whether it carries the full refrigeration load or only lighting and offices. Compressor inrush current is far higher than running current, so an undersized set trips on start — invisible in normal operation, revealed on the first real outage. Ask whether there is a second set or a changeover connection for a hired unit.

③ Fuel autonomy. Outages frequently arrive with typhoons, and in a typhoon the filling stations may be closed and the roads impassable. Ask how many running hours the on-site fuel supports, whether the supply agreement has a priority clause, and how fuel is stored and tested. In the rainy season this is the line between an incident and a total loss.

④ Load testing. The classic generator failure is the one that will not start when it is finally needed. Ask for periodic on-load test records — a no-load run does not prove anything — plus the maintenance log for batteries, starting systems and cooling.

Two supporting requirements. First, an uninterruptible supply must separately cover the monitoring and data-logging system. If the loggers die with the mains, you have a blank in the record for exactly the period you will later need to explain to a regulator or an insurer. Second, define the alarm escalation path: who receives an excursion alert, within what time they must respond, and what happens if they cannot be reached. Write it down and rehearse it — a buzzer nobody is contractually obliged to answer is decoration.

Backup equipment selection is covered in more depth in the Philippine power outage guide, and outages and sailing suspensions tend to arrive together, as described in the inter-island shipping guide.

Temperature records are evidence, not maintenance logs

Temperature data is not an internal operations metric. It is evidence in three separate settings: regulatory inspection, customer and channel audit, and insurance claims after a loss. Without a continuous, traceable, tamper-evident record, you do not have a cold chain — you have a claim you cannot prove.

Four requirements for the recording system:

① Continuous. Automatic capture at a fixed interval, not a technician writing a figure on a clipboard twice a day. Manual logs carry very little weight in an inspection and almost none in a claim.

② Positioned at the worst case. Probes belong at the hot spots identified by the mapping study, not where readings look best. You need coverage of the chamber, the staging area and the transport leg at minimum.

③ Calibrated, with records. Loggers and probes need periodic calibration traceable to a recognised standard. Data without a calibration history reads, to an auditor, as no data.

④ Tamper-evident and exportable. The system must produce a complete export for any date range and demonstrate that values were not edited afterwards. This is decisive in a claim.

Alarms must close the loop. After an excursion you need a record of who was alerted, when they acknowledged it, what action was taken, what was decided about the goods — released, quarantined pending assessment, or destroyed — and who authorised that decision. That written loop is your only proof that reasonable care was exercised.

Transport is where the record usually goes blank. Plenty of companies keep excellent chamber data and then lose visibility the moment goods leave the door. Reefer vehicle logs, door-open duration during loading and unloading, and dwell time at the pier during inter-island transfer are the three highest-risk gaps — especially the pier, where a trailer waiting for a vessel may or may not have its refrigeration unit running and powered, and where nobody is watching. Require carriers to supply in-transit logger data and write that obligation into the contract.

One cheap practice worth adopting: put a single-use temperature indicator or electronic tag inside every high-value consignment so it travels with the goods and is read on arrival. It costs very little, and it converts "I suspect the chain broke" into "I can show which leg it broke on" — which is worth a great deal in the liability discussion below.

When the chain breaks: proving which leg failed comes before arguing about money

Cold chain claims are not decided by the size of the loss. They are decided by whether you can show whose custody the goods were in when the temperature went out of range. Where that cannot be shown, every party asserts the goods were already compromised on receipt — which is how most cold chain disputes actually end.

Cut the chain into custody segments. A typical chain has at least five handovers: supplier loading, receipt at the warehouse, storage, despatch loading, and final delivery. Every one of those handovers should produce a temperature reading and a signature at the same moment. Only readings confirmed by both parties at handover make the segments separable. A chain without handover readings is functionally one undivided segment, and a loss inside it cannot be allocated.

Roughly how the three parties divide:

— The warehouse operator answers for chamber temperature, equipment operation, backup power and records. Contracts routinely carve out force majeure, utility interruptions beyond an agreed duration, and goods that were already out of specification on receipt. That last defence is the one operators reach for most often, which is exactly why the inbound reading has to be captured.

— The carrier answers for temperature in transit, but liability is normally capped by piece or by weight rather than by cargo value, which falls far short for high-value chilled goods. Consequential losses arising from delay are usually outside the scope entirely.

— You answer for packaging, loading method, stack height, and whether you specified the temperature requirement clearly. If the contract and the work instruction do not state the band, you will struggle to hold anyone to the standard you had in mind.

Insurance deserves particular care. Standard property and cargo policies frequently exclude spoilage arising from refrigeration breakdown, which then has to be added by extension. Confirm three points word by word before binding: whether machinery breakdown is covered, whether utility interruption is covered, and whether the policy requires the outage to exceed a stated duration before it responds. Those three determine whether the policy is useful in the scenario you will actually face.

Disposition decisions need a signature. After an excursion, whether stock is released, quarantined for assessment or destroyed is a decision requiring documented justification and authorisation, never a verbal call by whoever is on the floor. For food and medicines, returning out-of-specification stock to the market carries consequences far heavier than the write-off, with regulatory and legal exposure attached — seek advice from a qualified lawyer and compliance professional on your specific situation; this article is not legal advice.

Food versus pharmaceuticals: different licences, different audits, different exposure

The same chamber storing food and storing medicines sits under two different regulatory logics. Three differences matter: which licence is required, whether the storage address must appear on that licence, and whether the audit examines the facility or the quality system.

The food side. Entities importing and dealing in food require a licence from the health regulator, the products themselves carry separate registration or notification requirements, and storage and distribution fall within scope. Meat and seafood run on an additional track — cold stores handling imported meat generally need accreditation from the relevant national inspection authority, a gate that catches new entrants completely unprepared. When shortlisting a cold store, ask first whether they hold the accreditation for your commodity, not what the rate is. Local-level sanitary permits, pest control records and staff health certification are all inspected as well. The overall import licensing route is set out in the food import licence guide.

The pharmaceutical and medical device side is materially heavier. The difference is not temperature — it is the system: documented quality procedures, qualified equipment and validated processes, change control, deviation handling, recall capability and traceable batch management. An audit tests whether your records reconcile end to end, not merely whether the room is cold. The storage address normally has to appear on the licence itself, so adding or moving a warehouse requires a variation. Device licensing structure is in the medical device certification guide, the pharmacy and medicines side in opening a pharmacy, and renewal timing discipline in FDA LTO renewal.

Vaccines and biologicals are a further step up, with narrower bands, far lower tolerance for excursions, stricter documentation and typically specific transport qualification and continuous monitoring. They do not belong in a general-purpose cold store.

Three practical warnings. ① Never assume a cold store can hold anything — ask which commodity categories its existing licences and accreditations cover, because storing outside that scope leaves the exposure with you. ② Co-storage of food and medicines is generally not permitted, and physical partitioning alone does not settle it; confirm the regulator's position first. ③ Goods requiring a prior permit that arrive before the permit does simply sit at the port accruing charges — see regulated and restricted imports. If you want the entry route mapped end to end, that is what Yixing's market entry service does.

Auditing a cold store, and when to outsource rather than build

Do not evaluate a cold store from a slide deck. Walk the site and look at four things: backup power, records, partitioning, and logbooks. The first three tell you about the facility. The fourth tells you how the company actually runs day to day.

The site walk, in order:

① Backup power. Read the generator nameplate and the distribution board and establish whether the full refrigeration load is covered. Look at the transfer equipment. Look at the fuel tank and ask about the supply agreement. Ask for load-test records rather than verbal assurance.

② Temperature records. Ask them to export a full recent period on the spot, and look specifically for gaps and for suspiciously flat stretches. Check where the probes sit against the mapping study. Check calibration certificates and their expiry.

③ Partitioning and staging. Are zones genuinely partitioned. Is the receiving and despatch dock temperature controlled. Are there air curtains or airlocks. Do the door-opening frequency and the traffic flow make operational sense.

④ Logbooks and people. Review maintenance records, cleaning and pest control logs, and the history of temperature excursions and how each was dispositioned. A history of documented excursions is a good sign — it means somebody is watching; a blank record usually means nobody is. Ask about night shift and holiday cover, and about the typhoon procedure.

⑤ Licences. Establish which commodity categories the existing licences cover, whether the registered address matches the building you are standing in, and how much validity remains.

⑥ Contract terms. Liability cap, exclusions, the agreed treatment of utility interruption, ownership of and access to the temperature data, and who retains that data in a dispute.

When to outsource. Almost always, at least at first. Cold storage carries very high fixed costs with electricity dominating the running expense, and building your own adds equipment maintenance, backup power, licensing and staffing on top. Owning starts to make sense only when your volume fills a facility and your commodity mix is narrow enough to design the duty cycle around. The common middle path is a dedicated chamber inside a third-party facility — you get physical partitioning and control of the setpoint without carrying the equipment or the licences.

One final filter: if a provider is vague about when the last on-load generator test happened, or cannot export a temperature curve while you are standing there, do not use them at any price. Those two answers are a reliable forecast of your future loss rate.