ReposiTrak supplier onboarding: a 7-day playbook

A founder running a small chevre creamery in Vermont forwarded me an email last Thursday. Subject line:

"ReposiTrak Traceability Network Invitation: Action Required Within 14 Days"

She had three questions, in this order:

1. What is ReposiTrak?
2. Did I sign up for this?
3. Can I just ignore it?

The answers are: a compliance portal, no, and no. If you got a similar invitation from Erewhon, Whole Foods, Wegmans, or any of the 4,000+ suppliers now in the ReposiTrak Traceability Network, this post is the survival guide. It will not make you a FSMA 204 expert in seven days. It will get you to a clean submission, a green dashboard, and an open buyer relationship without burning a week of your operating time.

First, what ReposiTrak actually is

ReposiTrak is a shared compliance platform that retailers use to collect supplier documents, certifications, and now, increasingly, FSMA 204 traceability data. You don't pay a per-customer fee. You pay one flat annual fee to ReposiTrak and your records are shared with every in-network buyer that requests them.

Three things to know up front:

• You didn't pick this. Your buyer did. Erewhon picked ReposiTrak in early 2026 (announcement). Whole Foods has used it for years. Wegmans uses it. World Food Products (the Florida-based broker that services regional chains) announced expanded use on May 5, 2026.
• Ignoring the invitation gets you delisted. Most retailer onboarding programs run on a "no clean ReposiTrak profile, no purchase orders" model. The 14- to 30-day deadline in your email is real.
• The portal is not the audit. Uploading documents to ReposiTrak satisfies your paperwork obligation. It does not certify your facility, your products, or your traceability records as actually compliant. That's still your buyer's discretion, and increasingly your GFSI auditor's discretion.

If you're already overwhelmed, take that third point and put it on a sticky note. The producers who get burned in ReposiTrak onboarding are the ones who treat the portal as the finish line instead of the starting line.

Why this is hitting you now (and not last year)

Three independent forces stacked into the same six-week window.

1. The FDA's January 2026 enforcement deadline for the Food Traceability Final Rule moved retailers from "we'll figure this out later" to "we need data from suppliers now," regardless of whether your product is on the Food Traceability List.
2. Retailer recall liability has become a board-level concern. A single dirty recall (no clean lot trace, no supplier records, no 24-hour response) is now a national news story and a securities-class-action risk. Faster than the FDA, retailers have decided the cheapest fix is a uniform supplier portal.
3. ReposiTrak's network reached critical mass. Once Whole Foods + Erewhon + Wegmans + a long tail of regional chains all agreed to use the same portal, every retailer that hadn't adopted started looking like the outlier. That's why your invitation showed up in May 2026 and not December 2025.

You are not being singled out. You are one of roughly 4,000 suppliers who got the same email within a four-week window.

The 7-day playbook

This assumes you have a 14-day deadline (the most common). If your retailer gave you 30 days, you can stretch each step. If they gave you 7 days, skip ahead to "What to do if you have less than 7 days" at the bottom.

Day 1 (Monday): triage, don't react

Open the invitation. Note three things in a single text file or sticky note:

• Which retailer sent the invite (the email will name them)
• The deadline (count weekdays, not calendar days)
• Whether the invitation includes a documents checklist or just a portal login

Do not click the portal login yet. Do not pay the activation fee yet. Most "urgent" wording in these emails is template language, not buyer urgency. You have time.

Email your buyer contact (the actual person who picked up your line, not the ReposiTrak support address) and ask one question: "Is this onboarding tied to a specific PO window or shelf reset, or is it a general supplier-program update?" Their answer tells you whether the real deadline is the one on the email or weeks later.

Day 2 (Tuesday): inventory what you already have

Almost every ReposiTrak onboarding asks for the same eight documents. Pull each file into one folder before you log in. You probably have six of the eight already.

If you're missing the GFSI certificate, that's not a 7-day problem; that's a 6-month project. Talk to your buyer about whether a HACCP plan plus FDA inspection will hold them over while you book an audit.

Day 3 (Wednesday): the TLC quick check

This is the field that didn't exist on supplier portals two years ago and now decides whether you submit a clean profile.

A traceability lot code (TLC) is the unique identifier you assign to a finished batch. The retailer wants to see that:

1. Every finished lot you ship has a TLC printed somewhere on the case or pallet label
2. You can match any TLC back to the ingredient lots that went into it
3. You can match any TLC forward to every customer who received it

Pull three random invoices from the last 30 days. For each one, find the TLC, then trace it back to ingredients and forward to other customers. Time yourself. If the whole exercise takes less than 30 minutes per lot, you're in good shape. If it takes longer, or it relies on memory, that's the gap you'll need to close before submission.

This is also the moment to admit if your TLC is just "the production date." A date is not a TLC. It is not unique within a day, it cannot survive a same-day reformulation, and it will fail a serious traceback request. Fix this before you put it in writing on a retailer portal.

Day 4 (Thursday): upload your KDEs

Once you log into the portal, you'll see a section for Key Data Elements (KDEs) at each Critical Tracking Event (CTE): receiving, transformation, creation, and shipping. The retailer wants a sample, not your full history. Upload one clean lot end to end.

Pick a finished SKU you shipped to that retailer in the last 60 days. Upload:

• The receiving record for every ingredient lot that went into it
• The production record showing the transformation
• The finished-product record with the TLC
• The shipping record matching the TLC to the retailer's PO

This is the part most producers get wrong by overdoing it. You're not uploading every lot you've ever shipped. You're proving the chain works on one lot.

Day 5 (Friday): run a dry mock recall

Print the WGS Mock Recall worksheet or use any one-page recall scenario template. Pick a single ingredient lot from one of your last five shipments. Ask yourself: if my supplier called me right now and said this lot is recalled, can I answer the following in under four hours, on a Friday evening, without opening a filing cabinet?

• Which of my finished lots used this ingredient lot
• Which of my customers received those finished lots
• The total weight of affected product still in the field
• The TLCs and PO numbers for every shipment

If yes, you're done. If no, you have a weekend to fix it.

Day 6 (Saturday): fill the gaps

This is the day most producers actually do the real work. If your TLC system is the production date, switch to a real lot-code format (cheese, nut butter, and cut greens worked examples are coming in a separate post). If your supplier-approval folder is missing a sub-ingredient disclosure (the #1 audit failure mode per the Whole Foods supplier-audit teardown), email your flavor or preservative supplier today and ask for one.

Day 7 (Sunday): submit and breathe

Log into ReposiTrak. Upload the eight documents from Day 2 plus the lot trace from Day 4. Mark the questionnaire complete. Email your buyer contact and confirm submission. Do not wait for them to chase you.

What ReposiTrak doesn't fix

ReposiTrak is a document-and-attestation system. It is not a traceability operating system. It will not:

• Run your daily lot tracking
• Flag a missing receiving record before you ship
• Generate a 24-hour traceback report on demand
• Track the Compliance Score that your buyer increasingly wants to see month over month

Producers who treat ReposiTrak as their traceability solution end up uploading old spreadsheets, getting through onboarding, then failing the first real lot-trace request 90 days later when the retailer asks for fresh records. The portal is the inbox. Your operating system is what you actually live in every day.

If you want to know where you stand right now, before you submit anything to ReposiTrak, take five minutes and run our FSMA 204 Compliance Score quiz. It scores your readiness on the same dimensions ReposiTrak (and your buyer) will check. It will not submit anything on your behalf. It will tell you exactly which of the seven days above is going to bite you before you start.

What to do if you have less than 7 days

If the email gave you a 7-day window, collapse the plan. Day 1 and Day 2 happen on the same evening. Days 3, 4, and 5 happen on the weekend. Day 6 is your gap fix. Day 7 is submission. The TLC quick check (Day 3) is the only step you cannot skip, because it's the only step that protects you from submitting wrong data that becomes the retailer's evidence in your next traceback request.

The producers who survive ReposiTrak onboarding without breaking their week are the ones who treat the portal as a paperwork exercise on top of an operating system that already works. The producers who get burned are the ones who treat the portal as the operating system.

You almost certainly have most of what you need already. The 7-day plan is the wrapper.