Cold Chain Failure Checklist: The Fridge That Warmed Up While Everyone Watched the Power

Refrigeration fails in two different ways, and most businesses prepare for only one of them.

The power fails — that's the generator and UPS conversation, and it gets all the attention. But the more common cold-chain failure happens while the power is perfect: a compressor that dies at 2am, a door seal that split on Tuesday, a defrost timer that stuck open. The machine fails, the building hums along, and the walk-in starts warming up while everyone is watching the storm outside.

This page is the checklist for the second failure: what to do in the first thirty minutes, the two-hour rule, and the monthly checks that catch the $200 door seal before it becomes a $4,000 stock write-off.

The first thirty minutes

1. Shut the doors and keep them shut. Opening the walk-in "to check" is the most expensive reflex in refrigeration. Read the external thermometer, log the number, close it.
2. Put a thermometer in liquid, not air. Air temperature swings every time the door opens. A glass of water tracks what the product is doing. Air-only readings mean you don't actually know anything yet.
3. Triage by value and tolerance. Proteins, dairy, and prepared food first; produce next; condiments and drinks almost always ride through. Today's service ingredients are the ones worth moving.
4. Call the refrigeration tech now. The tech called at 5am and the tech called at 4pm are working two different jobs. The number belongs on the walk-in door, not in someone's phone.
5. Start the log on the first reading. Time, temperature, who read it, what you did. This is the document your insurer, your health inspector, and your supplier will all ask for.

The two-hour rule

Perishable food held above 4°C for more than two hours is discarded — and the two hours don't need to be consecutive. Accumulated warm time counts, which is why the log matters. A full freezer holds roughly 24-48 hours unopened; a half-full one, about half that.

The discard decision is made against the log, not against how the food looks. Food that smells fine at 12°C is still food you cannot sell — and "it looks okay" is the sentence that turns a stock loss into a customer-sickness claim.

• Save: hard cheeses, whole produce, butter, anything still at or below 4°C with log proof.
• Move: today's service ingredients, into a working fridge or packed coolers — but move them into the log, or you've converted a loss into a liability.
• Discard: meat, poultry, seafood, dairy, ready-to-eat above 4°C for over two hours. Photograph the discard against the log before it leaves the building.

Where failures actually get caught

Once a month, ten minutes per unit:

• The door-seal test. Close the door on a banknote. If it slides out freely, the seal is leaking and the compressor is paying for it in run-hours. The number-one precursor to a warm walk-in is a $200 seal.
• The condenser coils. Dusty coils make compressors run hot and die young.
• Watch one full defrost cycle. Ice sheets mean a timer or heater is failing — the slow failure that starts as "the fridge runs all the time" and ends as a warm morning.
• The drain line, the alarm, the thermometer. Flush the drain; make the alarm alert on purpose and confirm a human receives it; ice-point check the thermometer (packed in crushed ice it should read 0°C).

Monitoring that isn't a clipboard

A once-a-day paper log catches yesterday's failure. A cheap USB or Bluetooth logger records every fifteen minutes and alerts your phone a degree before the safety line — a heads-up instead of a post-mortem. It's also your insurance evidence by default: a continuous timestamped trace beats a handwritten sheet every time.

The bakery's 5am log

A bakery's walk-in read 9°C at 5am. The previous night's reading was 3°C, so the warm-up window was known: about six hours, not "sometime over the weekend". Doors stayed shut. Tech called at 5:15. Day's dough and dairy moved into the uprights. Everything protein or dairy above 4°C for over two hours was photographed against the log and binned — about $600 of stock.

The tech found a split door seal and a compressor that had been short-cycling for weeks. The seal was $200. The continuous temperature log, the discard photos, and the repair invoice added up to a paid claim in under a month — and the reopening notice went out the same morning.

The bakery down the road that ran the same fridge without a log would have thrown out the same stock and absorbed the loss. "We think it was cold until midnight" is not a claim; it's a shrug.

The full page — the save-move-discard table, the traps, and the worked example — lives on the ops notes site. If you want the incident-side version of this discipline (what to do in the first 30 minutes when any system fails), the First 30 Minutes checklist is free.