Compliance & Legislation
Ghost kitchens operate almost entirely through third-party delivery apps. They face every SB 68 disclosure obligation a physical restaurant does — and none of the structural reminders that push physical operators toward compliance.
By Dylan McDonnell, Founder & CEO, Foodini | May 2026 | 8 min read
A ghost kitchen operating five virtual brands from a single facility in Los Angeles. No storefront. No physical menus. No walk-in guests. The only surface where a consumer ever sees a menu is on DoorDash, Uber Eats, or Grubhub — and the menu listing on each platform was built from a PDF of item names and prices when the brand launched.
On July 1, 2026, under California's SB 68, that operator is required to provide written disclosure of all nine major food allergens for every menu item on every digital menu where a consumer can see it. If the chain has 20 or more locations nationally under the same brand name, the law applies — regardless of whether any of those locations have a physical dining room, a menu board, or a front door.
The ghost kitchen and virtual brand segment is among the least prepared parts of the restaurant industry for allergen disclosure compliance.
SB 68 applies to any restaurant or similar retail food establishment in California that is part of a chain with 20 or more locations nationally operating under the same name and substantially the same menu, where at least one location is in California.
Physical restaurants have a natural compliance anchor: the in-store menu. Ghost kitchens have none of that. Their entire menu surface is digital, with no printed menu cycle, no dining room manager who notices something is out of date, and no visible reminder of the compliance obligation.
Ghost kitchen facilities running multiple virtual brands from a single kitchen face compounded complexity. Brand A has a peanut-containing item. Brand B's item does not contain peanuts as an ingredient — but it is prepared on the same surfaces as Brand A. The legal liability from cross-contact is significant regardless of whether SB 68 requires a cross-contact disclosure.
Industry guidance and Foodini's recommendation is always to include cross-contact disclaimers in ghost kitchen environments.
A single virtual brand on three delivery platforms with 20 California facility locations means up to 60 platform listings that need accurate allergen information. Managing those listings manually is not sustainable. The brands that remain compliant are those feeding all platform listings from a single authoritative allergen data source through integrations, not manual updates.
A diner at a physical restaurant can ask a server about allergens. A delivery app guest has only the platform menu. If the allergen information on that menu is wrong, there is no fallback. This is precisely why accurate allergen disclosure matters more for ghost kitchens than physical restaurants — it is the only information the guest has.
The delivery-only model does not create a compliance exemption. If you operate a virtual brand with 20 or more locations nationally, you have the same SB 68 obligation as a McDonald's or a Chipotle — applied entirely to your delivery platform menus.
Foodini builds allergen compliance for ghost kitchens and virtual brands — AI-powered ingredient analysis, dietitian QA, and automatic propagation to all delivery platform menus.
See how Foodini handles delivery-only allergen compliance →