Cleaning vs sanitizing vs disinfecting: what the EPA and CDC actually say

The three-step ladder, in the government's own words

According to the EPA's disinfectant guidance (epa.gov), the three actions split cleanly: "Cleaning removes dirt and organic matter from surfaces using soap or detergents." "Sanitizing kills bacteria on surfaces using chemicals. It is not intended to kill viruses." "Disinfecting kills viruses and bacteria on surfaces using chemicals." Cleaning products are unregulated unless they claim to sanitize or disinfect; the moment a product makes a kill claim, it is an antimicrobial pesticide under federal pesticide law and must be registered with the EPA. The agency lists more than 4,000 registered antimicrobial products on the market.

All quoted language from EPA disinfectant guidance and the EPA Pesticide Registration Manual, retrieved August 2026. Hand sanitizer is the odd one out: it is regulated by the FDA, not the EPA, because it goes on skin.

One nuance worth keeping: many products pass both tests. The EPA notes that "many products are registered with EPA as both sanitizers and disinfectants because they've been tested using both methods." The same bottle often sanitizes at one dilution or contact time and disinfects at another, which is exactly why the label, not the product name, is the instruction.

Contact time: the rule most turnovers fail

Every registered sanitizer and disinfectant label carries a contact time, and the EPA's definition of it is stricter than most cleaning workflows: "The contact time is the time the product must remain on the surface for it to be effective. The surface should be visibly wet for the entire contact time. This may mean the product needs to be reapplied." The agency's own example: a label with a 10-minute contact time means the surface stays visibly wet for at least 10 minutes.

That is the quiet gap between what a checklist says and what happened. A cleaner who sprays a counter and wipes it ten seconds later cleaned the counter; they did not disinfect it, no matter what the bottle says. On a rushed same-day turnover, contact time is the step that gets eaten first, and it is invisible afterward: a wiped-dry counter looks identical either way. The CDC's bleach guidance (cdc.gov) makes the same point with numbers: a diluted bleach solution (5 tablespoons per gallon of water) needs to sit "for at least 1 minute" as a minimum, the solution must be made fresh because it loses effectiveness "after being mixed with water for over 24 hours," and bleach must never be mixed with other cleaners.

Two more label rules operators routinely miss, both from the EPA:

• Claims are pathogen-specific. Products "may not make efficacy claims against these pathogens unless the Agency has reviewed data to support the claim and approved the claim on the label." A disinfectant is not effective against "germs" in general; it is effective against the organisms on its label, at that label's contact time. The EPA maintains public lists of registered disinfectants by claim, including List N for products expected to kill SARS-CoV-2.
• The registration number is the product's identity. "The only way to accurately identify a product is by the EPA registration number." Brand names get reused across different formulations; the number on the back is what your supplier should match.

What each surface actually needs on a turnover

Federal guidance is more relaxed than most cleaning marketing. The CDC's household guidance (cdc.gov) says "cleaning alone removes most harmful viruses or bacteria from surfaces," and that sanitizing or disinfecting "to reduce the spread of disease at home is likely not needed unless there are sick people" present. Its facility guidance for non-healthcare buildings draws the same line: clean high-touch surfaces regularly, disinfect "areas of your facility where people have obviously been ill." Neither the EPA nor the CDC publishes hospitality-specific housekeeping guidance; the closest federal document is the CDC facility page, so the table below applies those rules to a rental turnover.

And one method warning worth writing into any cleaning contract, from the CDC's facility guidance: "In most cases, fogging, fumigation, and wide-area or electrostatic spraying are not recommended as primary methods of surface disinfection." A vendor selling a fogging pass as your disinfection step is selling against federal guidance.

Writing the checklist so the words carry weight

The practical payoff of the definitions is precision in your standard operating procedure. Three edits worth making:

1. Use "clean" as the default verb. It is what most surfaces need, and it keeps "disinfect" meaningful where you do use it.
2. Where you write "disinfect," name the product and the contact time. "Disinfect bathroom high-touch points: [product], stay wet 5 minutes" is checkable. "Sanitize bathroom" is not, and technically asks for a bacteria-only step.
3. Separate the sick-guest protocol. Routine turnovers and post-illness turnovers are different jobs under federal guidance. Keeping them as one checklist either over-works every turn or under-works the one that matters.

The uncomfortable truth for operators is that the kill steps are the least verifiable part of a turnover. A photo-documented checklist can prove a bed was made and a bathroom looks clean; no photo proves a surface stayed wet for its contact time. That is a training and trust problem more than an inspection problem, which is why the definitions matter: a team that knows why the dwell time exists is the only real enforcement mechanism it has.

Quick FAQ