Government · Moraph software
Food Safety Inspection Router
Send inspectors where the risk is, and let them record findings with or without a signal
Overview
The Food Safety Inspection Router scores regulated food facilities by risk, using their violation history and current information such as recalls, complaints and laboratory results, and proposes inspection assignments and routes for supervisors to approve. Inspectors work from a mobile app that records findings offline and synchronizes when a connection returns. Every score, assignment and finding keeps its reasons, so the program can show how inspection resources were directed.
The problem it solves
Inspection programs have more facilities to cover than inspectors to cover them, and assignments are often built from fixed rotations, spreadsheets and local knowledge. Facilities with a history of problems can wait as long as those with clean records, while inspectors in rural districts lose time to long drives and to paper forms that are keyed in later because there was no signal on site. When oversight bodies ask why one facility was visited and another was not, the reasoning is hard to reconstruct.
Who it’s for
- Federal food safety inspection programs and their district offices
- Field inspectors and investigators who visit processing and manufacturing facilities
- Supervisors and schedulers who build inspection assignments
- Risk and data analysts who maintain facility risk models
- Program leadership, inspectors general and auditors who review how inspection resources are used
How the work flows
- ScoreFacility records, inspection history and current signals are combined into a risk score for each facility, with the factors behind the score shown in plain words.
- PlanThe Router proposes which facilities each inspector should visit in the coming period and in what order, balancing risk, required inspection frequencies, travel time and inspector qualifications. A supervisor reviews and approves the plan.
- InspectInspectors open each assignment on a mobile device, see the facility's history and the reasons it was selected, and record observations, photos and findings, whether or not they have a connection.
- Follow upFindings feed back into the facility's history and risk score. Noncompliance is routed for supervisory review and, where needed, follow-up inspection or referral for enforcement under the agency's procedures.
What it does
- Explainable risk scores
- Each facility's score lists the factors behind it, such as recent findings, product type, volume and open recalls, so a supervisor can see why it ranks where it does.
- Proposed assignments and routes
- Assignments and visit order proposed for each inspector, taking account of risk, required frequencies, travel time and qualifications. A supervisor approves every plan.
- Offline mobile inspection
- Checklists, facility history and assignments are available on the device without a connection, and findings synchronize when coverage returns.
- Conflict-aware synchronization
- When the same record was changed in two places while a device was offline, both versions are kept and the conflict is shown to a supervisor to resolve.
- Configurable checklists
- Inspection checklists by facility and product type, each item linked to the regulatory citation your agency uses.
- Photo and evidence capture
- Photos, sample identifiers and notes attached to the finding they support, with the time and the inspector recorded.
- Signal intake
- Recalls, complaints, laboratory results and outbreak notices linked to the facilities they concern, so they can raise a facility's priority.
- Mandatory frequency tracking
- Facilities that must be inspected at a set frequency are tracked separately, so risk-based planning never displaces a required visit.
- Qualification and conflict checks
- Assignments respect inspector qualifications for the facility type and any recorded conflicts of interest.
- Model governance
- Risk model versions, factor weights and the tests run before each change are recorded, and changes need approval before they take effect.
- Follow-up and referral
- Open findings tracked to follow-up inspection or referral, with the decision and its reason recorded.
- Audit trail
- Who scored, planned, approved, inspected and changed what, and when, for every facility and assignment.
Who uses it
- Field inspector
- Carries out assigned inspections on a mobile device and records findings, online or offline
- Supervisor
- Approves inspection plans, reviews findings and decides on follow-up
- Planner
- Builds inspection plans from the Router's proposals for a district or circuit
- Risk analyst
- Maintains and tests the risk model, without approving plans or findings
- Enforcement officer
- Receives referred findings and records enforcement decisions under agency procedures
- Auditor (read-only)
- Views scores, plans, findings and the audit trail, with no ability to change them
Integrations
- Facility registry
- Facility identifiers, locations, product types and establishment details from your agency's registry, by scheduled file or API.
- Inspection and enforcement history
- Past inspections, findings and enforcement actions from your existing systems, mapped during implementation.
- Laboratory results
- Sample results from the laboratory information systems your agency uses, linked to the facility and sample.
- Recalls and complaints
- Recall notices and consumer complaint records from the agency's intake systems.
- Mobile device management
- The mobile app is deployed and managed through your agency's mobile device management, so device policies and remote wipe stay under your control.
- Single sign-on
- Staff sign in through your identity provider (SAML or OpenID Connect), including PIV-backed authentication where your agency uses it.
- Work API
- Scores, plans, findings and follow-up status available to your data warehouse and reporting tools through the Moraph Work API.
Security
- United States hosting
- Data is hosted in Moraph's United States region only.
- Cleared support lane
- Support tickets from federal clients are handled only by US citizens with active security clearances.
- Protected data on devices
- Data held offline on a device is encrypted, limited to the inspector's current assignments, and removed once synchronized and no longer needed.
- Encryption and keys
- Client data is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.
- Complete audit trail
- Every view, change, approval and synchronization is logged with the person and time, and cannot be edited.
- Tested releases
- Every release passes security testing gates before it ships, and a software bill of materials is maintained for the product. Moraph is SOC 2 Type II and ISO/IEC 27001 audited.
Hosting and deployment
- Moraph cloud, United States
- Hosted and operated by Moraph in the United States region, with data kept in the US.
- Dedicated environment
- A single-tenant environment for agencies that require isolation, scoped in the proposal.
- With a managed service
- Optionally run alongside a Moraph managed service for administration, model monitoring support and integration support.
Implementation
- Data mapping
- We map your facility registry, inspection history, laboratory and complaint data to the Router's model and agree the file or API schedule. We need data extracts and a contact from each owning system.
- Risk model configuration
- Risk factors and weights are set with your program and risk staff, documented, and tested against past inspection outcomes before approval.
- Planning rules
- Required frequencies, districts, circuits, travel constraints, qualifications and conflict rules are configured to match your procedures.
- Checklists and citations
- Inspection checklists are built for each facility and product type, with each item linked to your agency's citations.
- Mobile rollout
- The app is packaged for your mobile device management, and offline use is tested in the districts with the weakest coverage before go-live.
- Pilot and training
- A pilot district runs the Router alongside current scheduling for a period you choose, and inspectors, planners and supervisors are trained on their own workflows.
What it doesn’t do
- The Router proposes; it does not decide. Inspection plans are approved by a supervisor, and findings and enforcement decisions belong to your agency.
- Risk scores depend on the completeness and quality of the facility, inspection and signal data you provide, and should be reviewed periodically as that data changes.
- It does not replace inspection frequencies set in law or regulation. Required visits are planned alongside risk-driven ones.
- Offline use covers the inspector's downloaded assignments. Facility records not downloaded beforehand are not available without a connection.
- It is not a laboratory information system or a recall management system. It uses results and notices from the systems your agency already has.
- Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your agency's own authorization decision.
- It is not designed for classified information.
- The mobile app requires agency-managed devices that meet the supported operating system versions listed in the proposal.
How to evaluate it
- Load a sample of your facility and inspection history and compare the Router's ranking with where your inspectors actually found problems
- Check that each risk score's explanation would make sense to a supervisor and an auditor
- Ask a planner to build a period's plan for one district and note what they still need to adjust by hand
- Take the mobile app to a site with no coverage, record an inspection and confirm it synchronizes correctly
- Confirm that required-frequency visits are never dropped from a plan
- Review role separation: who can propose, approve and change plans, findings and the risk model
Questions
Does the Router decide which facilities get inspected?
No. It proposes assignments and routes with the reasons behind them. Planners adjust them and a supervisor approves every plan.
What happens when inspectors have no signal?
Assignments, facility history and checklists are downloaded beforehand, and inspectors record findings on the device. Records synchronize when the device is back in coverage, and any conflicting changes are shown for review.
Can we set our own risk factors?
Yes. Factors and weights are configured with your program staff during implementation, tested against past inspections, and changed later only through the approval step.
Is it FedRAMP authorized?
No. Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your agency's own authorization decision.
Who owns the data?
Your agency does. How it is returned to you and deleted at the end of the agreement is set out in the contract.
Is there an accessibility conformance report?
Ask for one through the procurement request form at /how-to-buy/request, naming the version you are evaluating.