How Food Trucks Use Time as a Public Health Control: Four-Hour Limits, Marked Containers, and Written Procedures

A food truck service line can be crowded even when the menu is focused. The cold unit holds backup ingredients. Hot equipment protects cooked food. At the window, however, a small working supply may need to stay within reach so the crew can build orders quickly and consistently.

That is where time as a public health control, commonly shortened to TPHC, may enter the conversation. Under an approved TPHC system, time temporarily replaces continuous temperature control for specific time/temperature control for safety foods. The system is not an informal grace period, and it is not permission to keep food at room temperature until it looks, smells, or tastes questionable. It is a documented process with a defined starting condition, a visible clock, an absolute deadline, and a required discard decision.

The 2026 FDA Food Code model describes a maximum four-hour option for certain foods and a more restrictive six-hour option for qualifying cold food. Both depend on written procedures, correct starting temperatures, clear identification, and disciplined follow-through. State and local jurisdictions decide which Food Code provisions they adopt, how they apply them, and whether an operator's specific method is acceptable. A mobile food operator must therefore follow its permit conditions, approved procedures, and regulatory authority—not this article alone.

Used correctly, TPHC can support a fast, compact service line. Used casually, it erases the very temperature controls meant to limit pathogen growth. The difference is the system around the pan.

TPHC Is an Alternative Control, Not “Food Can Sit Out”

Most TCS food is protected through temperature: cold food is kept at the applicable cold-holding limit, and hot food is kept at the applicable hot-holding limit. Refrigeration, insulated transport, hot-holding equipment, lids, thermometers, and logs all help maintain those conditions.

TPHC uses a different control for a limited working supply. Once the food leaves temperature control, the operation relies on a measured time limit instead. That trade only works when the crew can answer four questions immediately:

1. Which food is under time control? The container or batch must be unmistakable.
2. When did its clock start? The starting point cannot be reconstructed later from memory.
3. Which approved limit applies? The four-hour and six-hour options have different conditions.
4. What happens at the deadline? The food is cooked and served, served if ready-to-eat, or discarded as the approved procedure requires.

TPHC does not “pause” when the line slows down. Moving a pan into a cooler later does not rewind the time already used. Transferring food into a clean container does not create a new batch. Adding fresh food to an older pan does not give the older food the newer clock. The controlling history follows the food.

This distinction is especially important on a truck because containers move frequently. A pan might travel from a reach-in to a rail, from a rail to a lowboy, or from one station to another. Without a visible batch identity and time mark, motion can make the food's history disappear.

Written Procedures Come Before the First Timed Batch

The FDA model calls for written procedures to be prepared in advance, maintained in the food establishment, and made available to the regulatory authority on request. The procedure must explain how the operation will comply with the selected TPHC option and, when applicable, how previously cooked and refrigerated food meets cooling requirements before time control begins.

A practical mobile-kitchen procedure should be specific enough that a trained employee can run it during a rush. It should identify:

• the foods and container sizes covered;
• whether each food uses the four-hour option or the six-hour cold-food option;
• the required starting temperature or other qualifying starting condition;
• the exact event that starts the clock;
• how the start and discard times are marked;
• who makes and verifies the mark;
• any temperature monitoring required during the period;
• the maximum amount staged at one time;
• how backup food remains under temperature control;
• what happens to unmarked, incorrectly marked, mixed, or over-limit food; and
• how the crew documents and reviews exceptions.

“Label it and use it quickly” is not an adequate procedure. It leaves the important decisions to improvisation. The written method should define what “quickly” means, what label is used, where it is placed, and what the employee does when the plan fails.

The procedure should also match the real truck. A system written for a full restaurant line may fail in a mobile kitchen where labels get splashed, timers are hard to hear, and only one employee can reach the refrigerator. Test the method under the same pan sizes, station layout, staffing level, menu, and service pace that the crew will actually use.

The Four-Hour Option: A Firm Endpoint

Under the 2026 FDA Food Code model's four-hour provision, food generally begins at 41°F or below when removed from cold holding or 135°F or above when removed from hot holding. The food is marked or otherwise identified with the time that is four hours past removal from temperature control. It must then be cooked and served, served at any temperature if ready-to-eat, or discarded within those four hours.

The 2026 model also includes a specific starting allowance for certain ready-to-eat fruits or vegetables that become TCS when cut on-site and for certain shelf-stable hermetically sealed foods that become TCS when opened on-site. Under the listed conditions, these foods may start at 70°F or below, may not exceed 70°F within the four-hour period, and must be marked with the applicable four-hour endpoint. An operator should not generalize that allowance to other foods; it is a defined provision, not a blanket room-temperature starting rule.

The four-hour mark is the discard time, not an estimate of when quality may decline. If a qualifying cold pan leaves the cooler at 11:00 a.m., a four-hour system identifies 3:00 p.m. as the outside endpoint. If service ends at 2:15 p.m., the remaining timed food does not automatically return to ordinary storage for another day. Its disposition follows the approved procedure and the controlling limit.

The rule also removes ambiguity around missing information: food in an unmarked container, or marked with a time beyond the allowed four hours, is discarded. The operation does not create a plausible time after the fact. A late label cannot prove when the food actually left control.

For a truck, the best use of this option is often a deliberately small working quantity. Backup food stays protected in the refrigerator or hot-holding unit. The crew replenishes only what demand justifies, starts a new clock for the genuinely new batch, and never combines it with the older one.

The Six-Hour Cold-Food Option Has More Conditions

The six-hour option is not simply the four-hour plan with two extra hours. It applies to cold food and carries additional temperature controls.

Under the FDA model, the food must be 41°F or below when removed from temperature control. During the six-hour period, its warmest portion may not exceed 70°F. The operation must monitor the food to ensure that limit is not exceeded, unless it maintains an ambient air temperature that ensures the food stays at or below 70°F. The food is identified with both the removal time and the time six hours later.

If the food exceeds 70°F, it is discarded. If it remains within the required conditions, it must be cooked and served, served if ready-to-eat, or discarded within the maximum six-hour period. Unmarked containers and containers marked beyond the six-hour limit are discarded.

That temperature ceiling changes the operational burden. A label alone is not enough. The crew needs a monitoring method that represents the warmest portion of the food. Direct sun through the service window, heat from a griddle, a shallow pan, frequent lid opening, and a crowded rail can all affect how quickly the product warms.

Before selecting the six-hour option, an operator should confirm that the planned food, pan depth, station, ambient conditions, and measurement method can reliably stay within the limit. A process that works in a cool commissary may not work beside cooking equipment during an August event. If the truck cannot monitor or maintain the required conditions, the longer option is not the right operational choice.

Mark the Food at the Moment Control Changes

The strongest time mark is made when the food leaves temperature control, not after the pan reaches the line and not when an employee has a spare moment. The start event and the labeling event should be one connected action.

A clear system may use removable labels, food-safe tape, pan tags, or another method accepted by the operation's regulatory authority. Whatever the format, it should survive condensation, routine handling, and the visual noise of a busy station. The crew should be able to read it without lifting a pan or opening a lid.

For the four-hour option, the most important visible field is the discard time. Many operations also record the start time because it makes the history easier to audit. For the six-hour option, the FDA model calls for both the removal time and the six-hour endpoint.

Color can help employees locate a timed batch, but color alone is rarely enough. A red dot might mean “discard at 2:00” to one person and “allergen order” to another. The written procedure must define the identifier, and the actual mark must communicate the controlling time.

A short verification step catches simple mistakes:

• Employee A removes and marks the pan.
• Employee B or the person in charge confirms the correct option and endpoint.
• The pan moves to the service position only after the mark is verified.

This check can take seconds. It is still faster than stopping service to investigate an unidentified pan—or discarding a full one because its history cannot be established.

Small Batches Preserve Control and Quality

TPHC does not require the maximum possible quantity to be placed on the line. In fact, smaller working batches often make the system easier to manage.

A small pan is more likely to be used before its endpoint. It spends less time exposed to heat from the cooking line. It is easier to identify as a single batch. When demand drops, less food reaches a mandatory discard decision. The backup inventory remains under continuous temperature control, where its status is easier to verify.

Batch size should be linked to a realistic service interval. If the crew normally uses one shallow pan every 25 minutes during peak demand, staging two hours of product creates no service advantage. Replenish from controlled backup instead. If demand is unpredictable, begin with a conservative amount and let actual orders guide the next batch.

Never top off a timed pan with new food. Mixing creates two histories in one container and transfers the older deadline to the combined contents. The cleaner method is to let the working pan run down, remove it, bring forward a separately marked fresh batch, and use a clean pan or the operation's approved changeover method.

Small-batch planning connects TPHC with the broader event inventory system. Forecasting helps determine how much backup food to load; live counts determine how much to stage. The goal is not zero leftover food at any cost. The goal is a controlled service line with enough product to meet demand without obscuring deadlines or encouraging unsafe carryover.

Assign One Person to Own the Clock

Everyone on the truck should understand the label, but one role should own the control during each service period. Depending on the crew, that may be the person in charge, expediter, line lead, or a prep-and-replenishment employee.

That person watches upcoming deadlines, authorizes new batches, confirms marks, and makes discard calls. Central ownership prevents a common failure: every employee assumes someone else is watching the pan.

A simple time-control board can support the labels. It might list the batch identifier, start time, deadline, required monitoring checks, and disposition. The board does not replace the mark on the food; it provides a second view for the person coordinating service.

Timers are helpful only when they are attached to a batch identity. A beeping timer labeled merely “Timer 2” does little if three pans are active. Use a pan number, product abbreviation, station, or another unambiguous identifier that matches the procedure. When the alarm sounds, the employee should know exactly which food requires action.

Clock ownership also belongs in the pre-shift briefing. The crew should know which foods are under ordinary hot or cold holding, which use TPHC, which option applies, and who can start a new batch. That clarity prevents an employee from treating every pan on the line as if it follows the same rule.

Temperature Checks Still Matter

Using time as the control does not eliminate thermometer work. Starting temperatures determine whether food qualifies for the selected option, and the six-hour cold-food option requires ongoing assurance that the warmest portion stays at or below 70°F.

Before release, use a clean, sanitized, accurate probe suited to the food. Measure the food itself—not only the refrigerator display, rail setting, or ambient air. Check a representative location and allow for uneven temperatures in dense or layered foods. If a pan does not meet the approved starting condition, do not simply write a shorter label and hope for the best. Follow the operation's corrective-action procedure.

The thermometer calibration and temperature-check guide explains why probe accuracy, placement, cleaning, and records matter. A wrong thermometer reading can invalidate the decision at the very start of the clock.

TPHC should also fit into the operation's cold-chain system. The food's receiving, storage, transport, and preparation history must already be controlled. Time control cannot repair a batch that arrived warm, cooled too slowly, or has an unknown history.

For hot food, the same principle applies. Food entering the four-hour option from hot holding must meet the applicable starting condition. A lukewarm pan that has already spent an unknown period below the hot-holding limit does not gain a clean four-hour clock simply because someone adds a label.

Build Corrective Actions Into the Procedure

The crew should never have to invent a response while orders are waiting. The written procedure needs predetermined actions for predictable failures.

The container is unmarked

Discard it. The FDA model specifically directs that unmarked food under the time-control provisions be discarded. A recollection such as “I think that came out after noon” is not a verified control.

The mark shows a time beyond the allowed limit

Discard the food and correct the labeling process. Do not edit the mark to create an allowable endpoint unless the operation can establish that the food never left control and the mistake was caught before release; the exact response should be defined with the regulatory authority.

The four-hour deadline has passed

Discard the remaining food. Reheating, re-refrigerating, tasting, or relabeling does not erase the elapsed time.

Food under the six-hour option exceeds 70°F

Discard it. The six-hour option depends on that upper limit. The operation should also examine pan depth, station heat, lid practices, ambient conditions, and check frequency before using the method again.

Fresh food was added to an older timed batch

Treat the mixed food according to the oldest controlling history, then correct the replenishment practice. If that history cannot be verified, discard the contents.

The timer, clock, or record system fails

Use a documented backup only when the food's start time and identity remain verifiable. If the crew cannot establish the controlling time, the safest and clearest action is discard. Replace or repair the failed tool before starting another batch.

These decisions may create food cost, but uncertainty does not become safety just because the product is expensive. Strong systems reduce waste upstream through smaller batches, better forecasts, and earlier alerts rather than weakening the discard rule at the end.

How TPHC Fits a Real Event Timeline

Imagine a lunch service scheduled from 11:30 a.m. to 1:30 p.m. The crew expects a noon peak and plans to use an approved four-hour TPHC procedure for a specific ready-to-eat TCS ingredient.

At 11:15 a.m., the assigned employee verifies the starting condition, removes one small pan, marks the correct four-hour discard time, and receives a second-person check. The backup pans stay under refrigeration. At 11:55, demand rises, but the first pan still has product. The crew does not top it off. It finishes the older batch, changes the pan according to procedure, then starts and marks a new small batch.

At 1:20, demand falls sharply. Instead of staging another full pan, the lead releases only the amount likely to be used before the window closes. At 1:30, service ends. Each remaining timed batch is handled according to its controlling history and written disposition rule. The crew records any discard, then reviews whether the final batch could have been smaller.

The event host may never see this system, but schedule quality affects it. A confirmed meal window, realistic guest count, and notice of program delays help the truck stage smaller batches at the right time. Sudden hour-long pauses or unannounced attendance changes create waste and operational pressure. Clear event communication supports food safety as well as speed.

A Pre-Service TPHC Check

Before the first timed batch leaves temperature control, the person in charge should be able to confirm:

• The jurisdiction and permit conditions allow the planned method.
• A food-specific written procedure is present and current.
• The crew knows which option applies to each food.
• The food meets its required starting condition.
• Labels, tape, markers, timers, and thermometers are ready.
• The marking format clearly shows the controlling times.
• The six-hour method, if used, has an approved monitoring plan.
• Backup food will remain under proper temperature control.
• Batch sizes match expected demand and station capacity.
• One employee owns the clock and a second can verify marks.
• Unmarked, over-limit, mixed-history, or temperature-failed food will be discarded.
• The closeout process records disposition and learning for the next event.

This checklist is short because the hard work happened earlier: choosing eligible foods, validating the process, training the crew, and getting the procedure accepted where required. Service should be the execution of a known system, not the first experiment.

The Bottom Line

Time as a public health control can give a food truck a practical way to manage a limited working supply without keeping every pan continuously hot or cold. Its value comes from precision: a qualified starting point, a defined option, an immediate time mark, monitoring where required, small batches, and an endpoint that the crew will enforce.

The four-hour option is a firm maximum, not a flexible target. The six-hour cold-food option adds a 70°F ceiling and monitoring obligations. Neither option tolerates missing labels, invented start times, or clocks that restart when food moves.

The strongest system makes the safe action obvious even during the rush. Every timed pan has an identity. Every employee understands the mark. One person owns the deadline. Backup food stays protected. When the limit arrives, the decision has already been made.

Frequently Asked Questions

What does “time as a public health control” mean?

It is a controlled method in which time temporarily replaces continuous temperature holding for specified TCS food. It requires an approved written procedure, qualifying starting conditions, clear time identification, and service, cooking, or discard within the applicable limit. Local adoption and permit requirements control whether and how an operator may use it.

Is the four-hour rule extra time after food falls out of temperature?

No. Under the FDA model, the clock begins when qualifying food is removed from temperature control or, for the specified cut-produce and opened hermetically sealed-food allowance, when it is rendered TCS under the listed conditions. Unknown prior time cannot be ignored or added before a new four-hour clock.

Can a food truck put timed food back in the refrigerator and use it later?

Refrigeration does not reset elapsed time. Disposition must follow the operation's approved procedure and adopted code. A truck should never assume that cooling a timed pan creates a fresh service period.

What is different about the six-hour option?

It is a cold-food option. The food must begin at 41°F or below, remain at or below 70°F in its warmest portion, be monitored as required, and be marked with both the removal time and the six-hour endpoint. Food that exceeds 70°F, is unmarked, or exceeds the limit is discarded.

Can fresh food be added to a timed pan?

It should not be used to extend the pan's life. Combining new and old food gives the mixture the oldest controlling history and makes verification harder. Small, separate replacement batches are clearer and easier to manage.

Does every food truck need to use TPHC?

No. Many operations can keep all TCS food under continuous hot or cold holding. TPHC is an optional control when allowed and properly implemented; it is not a sign of a better or faster truck by itself.

Who decides whether a food truck's TPHC procedure is acceptable?

The applicable state or local regulatory authority and the truck's permit conditions govern. The FDA Food Code is a model rather than a universally self-executing federal rule. Operators should confirm the adopted requirements and obtain any required review or approval before using TPHC.

Sources and Further Reading

• FDA Food Code 2026, especially § 3-501.19, “Time as a Public Health Control.”
• FDA Food Code landing page, including current and prior editions and supporting materials.
• Grilly Cheese: How Food Trucks Reheat Food Safely
• Grilly Cheese: How Food Trucks Keep Ingredients Cold From Commissary to Service

Regulatory note: This article summarizes the 2026 FDA Food Code model for general education. The Food Code is not itself a universal federal regulation for every retail food operation. Requirements vary by jurisdiction, permit, menu, process, and population served. Follow the code adopted by the applicable authority and the operation's approved procedures.