Skip to main content
Case Studies / Convenience Retail / Circle K
Convenience Retail RECORD CS-004
Circle K

5,000+ monitored units, one validated record,
zero unexplained excursions.

How a convenience retail operator brought walk-in coolers, reach-in freezers, and hot-hold across its stores under continuous Qualified Controls sensing — feeding its own enterprise monitoring platform for HACCP and food-safety control.

MONITORED
LORA TEMP  —  GRAB-AND-GO COOLER, STORE FLOOR
0
Units lost to unexplained excursion
11 min
To produce a complete audit record
5,000+
Active monitored units, chain-wide
01 / The Challenge

A record assembled after the fact is a record that can be questioned.

Circle K monitored refrigeration across thousands of stores with a mix of manual temperature checks and store-level controllers. Coverage was uneven: cold and hot holding across many store formats, with parameters no single method captured continuously. A questioned case of product could take hours of phone calls and paper logs to resolve — and the resulting record depended on whoever was on shift.

Everything Circle K sells to eat or drink has a safe-holding window written into the FDA Food Code and its own HACCP plan. Refrigerated grab-and-go at or below 41 °F, frozen product well below freezing, hot-hold at or above 135 °F. Product that leaves its window cannot be sold; it can only be discarded. Health-department inspections and internal food-safety audits required Circle K to demonstrate not only that holding was in control, but that it could prove it for any store on any day.

Could you reconstruct a complete compliance narrative for any single unit, on demand, without asking a person to remember?

FIG. 01  —  Pre-deployment record path: manual temperature checks and store-level controllers, logged by hand.
02 / What Is At Risk

In convenience retail, the loss is rarely the cooler. It is the interval nobody was watching.

Every case of food Circle K holds has a safe-holding window written into the Food Code, and each format fails in its own way. These are four failure modes that drive discard decisions across the chain — none of them announce themselves at the moment they begin.

Reach-in freezer · below 0 °F
A freezer fails overnight and the morning crew sells warm product.

A reach-in that loses its compressor holds cold for a while, then climbs — and nothing on the door indicates the interruption. Without a recorded interval, the discard decision comes down to a guess about how long the case was out of spec.

Walk-in cooler · at or below 41 °F
A door left ajar on a busy shift reads as a healthy cooler.

A walk-in with a door out of seal keeps compressing and keeps reading in range, until it does not. The excursion shows in the trend long before the display, and the product nearest the door warms first. Temperature alone cannot tell a busy restock from a fault.

Hot-hold · at or above 135 °F
Hot-hold drifts below safe temperature between checks.

Hot cases and roller grills sit in the danger zone the moment they fall below 135 °F, and manual checks catch it only at the next round. A continuous record is the difference between pulling one tray and questioning a whole day.

Chain-wide · thousands of units
One store's problem is invisible at the enterprise level.

With cold and hot holding spread across thousands of stores, a single failing case is easy to miss and impossible to prove after the fact. Continuous sensing turns thousands of independent checks into one monitored network.

For each of these, how long would it take to establish exactly when the interval began, and who was told?

03 / How The Architecture Answers It

Each failure mode is met by a measurement, not by a procedure.

Monitoring only prevents loss where the parameter that actually fails is the parameter being recorded. Qualified Controls specified the sensing layer against the four failure modes above, not against the equipment list.

FIG. 03  —  LoRa SPY recorder mounted to a monitored unit, probe placed at the qualified location.
The difference

A procedure asks a person to notice. A measurement records whether they did, and both outcomes are defensible only if the record exists before the question is asked.

Risk — overnight freezer failure
Redundant cellular uplinks and on-sensor buffering keep the alarm path alive.

A network or power interruption does not silence the system: readings buffer on the sensor and reconcile on reconnection, while independent uplinks carry the alarm out of the store. Off-hours escalation routes to the on-call manager, with acknowledgement recorded.

Risk — cooler door out of seal
Door state is recorded alongside temperature, with duration thresholds.

A door open past its threshold escalates on its own path, separate from a temperature excursion, so a busy restock never reads the same as a failed seal. Escalation reaches the store on shift rather than a distribution list.

Risk — hot-hold below safe temperature
Hot-hold is monitored on the same platform as cold, against its own limit.

A case that falls below 135 °F raises a tiered alarm and writes a timestamped interval, so the corrective action is made against a recorded window rather than the next manual check.

Risk — chain-wide blind spots
Every store's sensors feed one enterprise monitoring view.

Every store reports into Circle K's enterprise monitoring platform, so a regional manager sees every store on one board and any single case can be reconstructed on demand.

04 / The Architecture

One sensing layer, one record, every equipment class.

Qualified Controls specified the sensing layer store-by-store, mapped each holding parameter to the Food Code and Circle K's HACCP plan, and installed wireless recorders reporting into Circle K's enterprise monitoring platform. Wireless range removed the need for new cabling in occupied retail space, and the rollout scaled across store formats without a site-by-site redesign.

Continuous sensing

Every monitored unit records on a 15-minute interval with 5-minute alarm evaluation; humidity at 30 minutes, the most critical assets at one.

Redundant gateways

Redundant gateway coverage in every monitored zone with independent uplinks; on-sensor buffering holds data through network or power interruption.

Tiered escalation

Role-based routing with duration thresholds and shift-aware on-call chains, replacing per-device audible alarms across every store format.

Tamper-evident record

ALCOA+ aligned audit trail with electronic signatures on every acknowledgement and corrective action.

FIG. 02  —  Store cold-storage under continuous monitoring — every case on the LoRa SPY sensing layer.
Monitored unit mix
5,000+ UNITS / CHAIN-WIDE
Reach-in Freezer
Walk-in Cooler
Hot-Hold
Beverage Cooler
Ice Merchandiser
Roller Grill
Frozen Dispensing
Open Case
Deli Case
Back-stock Cooler
Bakery Case
Prep Cooler
Fuel-site Cooler
05 / Validation & Documentation

Qualified on paper before it was trusted in practice.

Qualified Controls authored and executed the full validation package. Every sensor was calibrated against NIST-traceable standards, mapped to its asset, and signed off before the legacy loggers were removed.

Stage
Deliverable
Status
IQ
Installation qualification — asset register, sensor placement rationale, gateway coverage survey
Approved
OQ
Operational qualification — alarm threshold challenge, escalation path test, power and network loss recovery
Approved
PQ
Performance qualification — 30-day parallel run against manual temperature-check logs, holding-temperature mapping per case type
Approved
HACCP
HACCP monitoring plan — holding limits per product class, corrective-action workflow, and record retention
Approved

Units taken out of service remain in documented maintenance mode. Every change of state is captured in the audit trail with an attributed electronic signature.

Inside The Deployment

Installed in occupied retail space, without new cabling.

Probe placement at the qualified location inside a walk-in cooler.
Redundant gateway coverage installed without disrupting store operations.
One asset register, one alarm policy, one audit trail across every store.
“We can prove any store was in temperature on any day, without a single phone call. The record already exists.”
Director of Food Safety
Circle K
Your Facility

Are all of your critical parameters being captured continuously?

The REM Risk Assessment documents every gap between what your specifications require and what your current system records. It takes one site visit.