Skip to main content

SQF Edition 10 audits start January 2027. Is your program ready? Learn more →

Back to Insights

Research · Oct 8, 2026 · 12 min read

Your Food Safety Software Vendor Got Acquired. What to Check Before Renewal.

Four food safety platforms changed owner between October 2024 and August 2026, and a fifth changed its name. TraceGains went to Veralto for $350 million. Safefood 360 and Authenticate went to Ideagen. Trustwell moved from Riverside to TPG's Rise Funds. SafetyCulture became Mitti. It all lands on a renewal date: who owns the roadmap, what your contract says about assignment and data return, and whether records export with their dates and signatures. Eight questions to send before you sign.

SM
Steven Moussawer Founder

A vendor acquisition is a change of control that moves your food safety software's roadmap, pricing authority, and record custody to a new owner. What it does to your contract depends on what your contract says, which is the part nobody reads until renewal. Between October 2024 and August 2026, four platforms a mid-sized plant would shortlist changed hands, and a fifth changed its name.

What actually changed, and when

Four named food safety platforms have changed owner since October 2024 and one rebranded. Every line below is sourced to the acquirer's or the company's own announcement, linked in the table.

Product

What the company's own release says

Announced

Terms

TraceGains

Acquired by Veralto (NYSE: VLTO), placed in its Product Quality & Innovation segment and described as complementary to Veralto's Esko packaging and label design workflow software

Oct 7, 2024 (closed Oct 4)

$350 million, "subject to customary post-closing adjustments"

Safefood 360°

Acquired by Ideagen, combined with Authenticate and Ideagen's existing supply chain product (formerly Qadex) into a new Ideagen food and beverage division

July 21, 2025

Not disclosed

Authenticate

Same transaction. Ideagen describes it as "a cloud-based supply chain transparency platform"

July 21, 2025

Not disclosed

Trustwell (FoodLogiQ + ESHA Research)

Majority investment from TPG's The Rise Funds. The Riverside Company "has exited its investment in Trustwell"

Jan 5, 2026

Not disclosed

SafetyCulture

Rebranded as Mitti. No ownership change was announced in the materials reviewed

Aug 11, 2026

Not applicable

SafetyChain

$50 million minority growth investment from JMI Equity. No ownership change appears on its own newsroom through August 2026

Oct 20, 2021

$50 million

Trustwell is the compressed version of the whole pattern. ESHA Research and FoodLogiQ merged in October 2022 with investment from The Riverside Company, rebranded as Trustwell in February 2023, and passed to TPG's Rise Funds in January 2026. A plant that signed with FoodLogiQ in early 2022 has been through two changes of ownership and a new company name without ever switching software.

Ideagen adds a layer most buyers never look at. Hg took Ideagen private and Ideagen delisted from London's AIM market on July 8, 2022. Check the corporate parent as well as the vendor, because a product can sit inside a division that sits inside a sponsor-held company, and that's several layers between you and whoever sets the budget.

None of this is scandal. Consolidation is what happens to a software category once the buyers are real and the recurring revenue is provable. The consequences land on a renewal date, so find out who owns the product now before you sign the next term.

Who owns the roadmap now

After a close, ask who funds this product's roadmap, because it may no longer be the team that sold you the software.

Veralto said where TraceGains was going in its own announcement. It placed the product in the Product Quality & Innovation segment and called it complementary to Esko, Veralto's packaging and label design workflow business, and the FY2024 10-K puts TraceGains in that same segment. That's a coherent strategy. It also means releases get prioritized against packaging and label workflow demand, and your supplier document backlog competes with that.

Ask for a name. Who is the product manager for this product today, what shipped in the last two quarters, and what's committed for the next two. Get the answer in email, from someone who will still be there next year.

Pricing and per-user seats

Don't assume a price change waits for renewal. Check your current term, the renewal clause, and any cap on increases.

Acquirers buy recurring revenue. Veralto told the market TraceGains was on track for just over $30 million in sales in 2024, with more than 95% of it recurring. That figure is the asset, and growing it is the job of whoever runs the business now. Ask what that means for your line specifically.

Per-user seats are where this gets expensive for a plant. If you have 40 people on the floor who should be entering their own checks, a seat-based model charges you for doing the thing the software was bought to do, and the workaround is a shared login that destroys attribution on every record it touches. Ask for the renewal number in writing and multiply it out over three years before you compare anything.

Whether your product is becoming a module

Ask whether the product is still sold and supported on its own, and watch whether the parent still names it separately in its own marketing.

Ideagen's July 2025 announcement folded Safefood 360°, Authenticate, and its former Qadex supply chain product into a single food and beverage division. That's a reasonable way to sell to a large manufacturer that wants one contract. For a single-site plant that bought one of the three, it means the thing you bought is now a component of a suite built for somebody bigger.

The SafetyCulture rebrand to Mitti on August 11, 2026 is the mildest version and still not free. No ownership change was announced, but Mitti's own developer guidance says customer organizations move to the Mitti domains in stages into 2027, each on its own emailed window, and that sites restricting outbound traffic need the new domains on the allowlist before that window. Add the paperwork: every SOP, training deck, screenshot, and work instruction at your site that says SafetyCulture is now out of date, and document control says you have to fix them.

Where your records live and how you get them out

Run a real export now, while you're mid-term and nobody is in a hurry, and inspect what it actually contains.

Your vendor may well offer an export. What matters is what comes out of it. A CSV of CCP readings that drops the reviewer name, the electronic signature, the timestamp, and the attached photo gives you numbers in a grid with no evidentiary value. Pull a real month of data and open it. If the signatures don't survive, you have found your actual switching cost.

Dates are the other half. Trend evidence only counts if the timeline comes with it, which is why some SQF Edition 10 evidence can't be backfilled: a culture score moving over two surveys, an environmental monitoring series, a corrective action closed and verified months later. Migrate badly and your history arrives in the new system stamped with the import date, which reads to an auditor as a system with no history. Ask the vendor, in writing, whether the export preserves original record dates and signature metadata, and whether attachments come with it or as a separate dump you have to re-associate by hand.

Assignment, change of control, and data return

Read your own MSA rather than assuming. Four clauses decide what an acquisition can do to you.

The assignment clause, which sets whether the vendor can transfer the agreement without asking you. The change of control language, which in many contracts isn't there at all, so check rather than assume. The termination and data-return terms: how many days after termination your data stays available, in what format, and whether they'll certify deletion. And any cap on renewal price increases, which is the clause you most want and least often have.

Renewal is the one moment the vendor needs something from you, so that's when you ask for a data-return commitment with a number of days attached. Have your attorney read the clauses before you sign anything. This is contract mechanics, not legal advice.

How support changes

After a close, ask whether your named contact, your response commitment, and your included configuration help have changed.

The things worth checking by name are whether a named customer success manager has become a pooled queue, and whether configuration help that used to be included is now a professional services line item. Neither is unreasonable at a larger company. It's a problem when you bought partly on the strength of a person who answered the phone, and that was never written into the agreement.

Ask three things. Who is my named contact after this renewal, what response time is contractually committed rather than aspirational, and is setup or reconfiguration help still included in the subscription.

The eight questions to run before you sign

Run these eight questions on any vendor before you sign, acquired or not. Send them as one email and keep the reply.

  1. Who owns this product's roadmap today, and what's the product manager's name?

  2. What shipped in the last two quarters, and what's committed for the next two?

  3. What is the renewal price, and is there a cap on future increases?

  4. Is this product still sold and supported standalone, or only inside a suite?

  5. Can I export all of my records myself, without a support ticket or a fee?

  6. Does the export carry original dates, electronic signatures, reviewer names, and attachments?

  7. What do the assignment, change of control, and data-return clauses say?

  8. Who is my named support contact after renewal, and what response time is in the contract?

If the answers are good, renew and stop worrying about it. If four of the eight come back vague, start a parallel evaluation now rather than in the last month of your term.

When the bigger owner is the right answer

A larger parent is a real advantage for some plants, and it's worth saying plainly.

If you run six sites and need one contract, one invoice, and one security review, a company the size of Veralto or Ideagen is built for exactly that. Procurement teams that require SOC 2 and a completed security questionnaire before a signature should ask each vendor for both and see what comes back. Integration libraries track engineering headcount, so ask any vendor for its current connector list and check your ERP, LIMS, and warehouse system against it. And a company with a corporate parent is less likely to go dark on you, which is a real form of continuity.

If that's your profile, the right move after an acquisition is to renegotiate, not to leave.

Where SystemPath fits

SystemPath is built for 25-to-500-employee plants that want every shift on the system rather than a licensed few. I run an SQF-certified tahini facility in Michigan and I build Beacon, so weigh the rest accordingly. System Path LLC is founder-owned with no outside investor, the platform carries unlimited users so the floor enters its own records, and form records export on demand as CSV or per-record PDF, with the format deciding which signatures and attachments come along. The honest other side: we're small and we don't have SOC 2 yet. On integrations, ask us for the current connector list. The same eight questions apply to us, and question seven hardest, because a small vendor is its own kind of continuity risk. Ask us for the data-return terms the way you'd ask anyone else, and see our food safety software platform and document control before you decide.

FAQ

Does an acquisition void my software contract? Read your own agreement rather than assuming either way. Look at the assignment clause, the change of control language, the termination and data-return terms, and any cap on renewal increases. Don't assume an acquisition leaves the contract or the product unchanged until renewal.

How long after an acquisition do prices typically change? That depends entirely on your agreement, so check the current term, the renewal clause, and any cap on increases rather than assuming the change waits for renewal. Request the renewal quote 90 days before your term ends instead of 30.

What should I export before a vendor transition? Everything with a date on it: CCP and monitoring records, corrective actions with their closure and verification entries, supplier documents and certificates, environmental monitoring results, training records, and audit findings. Verify that signatures, timestamps, and attachments survive the export before you rely on it.

Is a private equity owner worse than a strategic acquirer? They optimize differently, not necessarily better or worse. A strategic buyer may fold the product into an existing suite, which is what Veralto's release describes in placing TraceGains alongside its Esko packaging software. A financial sponsor may hold for a period and sell again, which is what the Trustwell releases show between Riverside in 2022 and TPG's Rise Funds in January 2026. Ask the same questions of both.

My vendor rebranded but wasn't sold. Does that matter? More than you'd expect. SafetyCulture becoming Mitti in August 2026 was presented as a rebrand, and no ownership change was confirmed in the materials reviewed, but Mitti's developer guidance still has customer organizations moving to new domains in stages into 2027, with allowlist updates to make before your window. Every internal document naming the old product also goes out of date, and document control means someone has to update them.

When should I actually switch platforms? When the answers to questions one, two, and four come back vague, and the export in question six works. Confirmed record portability plus an uncertain roadmap is the case for moving. An uncertain roadmap with records you can't get out cleanly is a case for fixing the export problem first.


Run the eight questions on whatever you're renewing this quarter. Send them 90 days before your term ends, not in the last week, when the only answer you'll get is the renewal quote. If you want to see how a platform built for a single-site plant handles the records and the export side of it, book a call.

Run a food safety program? See how Beacon keeps it audit-ready.

See Beacon in 20 minutes