Last reviewed: September 10, 2026 | For: International B2B beauty brands
Choosing a manufacturing partner is a regulatory decision as well as a commercial one. The right supplier can provide reliable technical evidence; the brand owner still remains responsible for market-specific decisions, product claims, notification and the party named on the label. A factory’s “FDA registered” or “ISO certified” statement is not a universal passport to sell a cosmetic worldwide.
What does a compliant cosmetic manufacturer mean?
It means a manufacturer operates a quality system that can consistently make the agreed product and can provide traceable, accurate evidence about that work. The evidence needed depends on the market. In the EU, cosmetic manufacture must comply with good manufacturing practice under Article 8 of Regulation (EC) No 1223/2009. In Great Britain, government guidance explains that GMP can be demonstrated through the designated standard ISO 22716, while the Responsible Person must maintain product information and arrange a safety assessment. In the United States, facility registration and product listing under MoCRA are not product approval and are not marketing certificates.
| Question to ask | What a credible answer looks like | Warning sign |
|---|---|---|
| Which markets can this formula support? | A market-by-market answer tied to ingredients, claims, labels and the responsible party. | “One certificate works everywhere.” |
| How is the formula controlled? | Versioned formula, INCI list, raw-material specifications and a written change-control process. | No formula version or undocumented substitutions. |
| How is manufacturing controlled? | Batch records, line clearance, cleaning, training, traceability and release checks. | Only broad claims about a “modern factory.” |
| What can be shared before launch? | A documented list of available technical files, with appropriate confidentiality controls. | Certificates without supporting records or scope. |
Begin with the product and the markets—not a certificate list
Before sending an RFQ, write a short regulatory brief. Include the countries of sale, product category, intended consumer, pack format, claims, variants and launch date. “Skin care” is not enough: a moisturising cosmetic, a product claiming to treat acne, and a product containing a regulated colour additive can follow very different pathways in the United States. A similar issue applies elsewhere when claims change a product’s classification.
| Brief item | Why it changes the factory assessment |
|---|---|
| Target jurisdictions | It determines ingredient screening, required documentation, notification, labels and local representative roles. |
| Claims and product positioning | Claims can affect cosmetic/drug or other product classification and the evidence needed to support them. |
| Formula and variants | Fragrance, shade, preservative or concentration changes may require separate review, testing or notification updates. |
| Packaging and use conditions | They affect compatibility work, warnings, stability planning and label content. |
| Named market operator | It clarifies who acts as Responsible Person, importer, distributor or U.S. responsible person. |
Documents a manufacturer should be able to provide
The exact deliverable set is contractual and market-specific. Do not ask a factory to certify legal compliance it cannot own; ask it to supply evidence for the parts it controls. Your qualified safety assessor, Responsible Person or regulatory adviser can then decide whether the full file is sufficient.
| Manufacturer-controlled evidence | Typical purpose | Brand-owner follow-up |
|---|---|---|
| Current INCI list and formula version | Ingredient and label review | Confirm market restrictions and final claim alignment. |
| Raw-material specifications and COAs | Identity and quality traceability | Confirm the scope and revision date match the production lot. |
| Batch manufacturing and quality records | Traceability, release and investigation support | Agree retention, access and recall contacts in the quality agreement. |
| Stability, microbiological or compatibility information | Supports shelf-life and packaging decisions | Have a qualified reviewer assess relevance to the exact finished product and pack. |
| SDS and packaging specifications | Supply-chain, handling and documentation support | Check local label and transport obligations separately. |
How to assess GMP in practice
GMP is not a logo. It is the repeatable way a site manages people, premises, materials, production, laboratory work, deviations and complaints. ISO 22716 is commonly used as a cosmetics GMP framework, but an ISO 22716 certificate alone does not prove a particular formula is legal in every market. Ask for the certificate issuer, scope, site address, validity date and audit coverage; then compare those details with the actual manufacturing site and activities.
- Verify identity and scope. Confirm the legal manufacturer, physical site, product categories and any outsourced steps.
- Review controlled records. Request sample batch, release, deviation and change-control records with confidential details redacted where necessary.
- Check traceability. Ask how the factory connects finished batch, bulk, packaging and critical raw materials.
- Agree responsibilities. Put testing, specifications, artwork approval, complaint handling, serious-adverse-event escalation and recall cooperation into a quality agreement.
- Audit proportionately. For a higher-risk or high-volume launch, use a qualified audit or independent assessment rather than relying on marketing material.
Manufacturer responsibility vs brand-owner responsibility
| Usually manufacturer-led | Usually brand-owner or market-operator-led |
|---|---|
| Manufacturing controls, batch documentation, raw-material and packaging traceability, agreed technical information. | Market selection, product claims, final artwork approval, appointment of a Responsible Person/importer and commercial product positioning. |
| Providing factual production and quality information to support the file. | Confirming notification/registration duties and retaining the market file through the legally responsible party. |
| Investigating manufacturing deviations and supporting complaint/recall actions under the quality agreement. | Post-market reporting, market communications and decisions required of the legal market operator. |
Check the claims behind common compliance statements
Ask for precise wording. In the United States, FDA states that facility registration and product listing are neither a cosmetic approval programme nor a promotional tool, and FDA does not issue certificates to verify that a facility is registered or that a product is listed. In the EU, CPNP notification is a notification system, not a product approval. These distinctions matter when you evaluate a supplier’s website, sales deck or tender response.
- “GMP compliant”: Which standard or controls, which site, which dates and what scope?
- “FDA registered”: Is the statement about a facility registration, and does it avoid suggesting FDA approval?
- “EU compliant”: Has an EU Responsible Person reviewed the exact formula, safety assessment, PIF, label and CPNP notification?
- “Tested”: Which test, on which formula and packaging version, under what conditions and by whom?
Questions to include in an RFQ or supplier audit
- Can you provide a controlled INCI list and formula revision history for the quoted product?
- Which records are retained for each batch, and for how long?
- Which finished-product tests are available, and do they match the intended pack and use conditions?
- How do you approve a raw-material, fragrance, packaging or manufacturing-site change?
- Who notifies the brand before a change, deviation, complaint trend or recall issue?
- Which technical documents can be supplied to the Responsible Person, safety assessor or importer?
- Can your certificates be independently verified with the issuer and site scope?
Official sources to verify before you decide
| Authority | Why it matters |
|---|---|
| EUR-Lex: Regulation (EC) No 1223/2009 | EU cosmetics requirements, including Article 8 GMP. |
| U.S. FDA: Registration & Listing | Current MoCRA facility registration and product listing information, including FDA’s warning against treating them as approval. |
| GOV.UK: Making cosmetics available in Great Britain | Responsible Person, PIF, safety assessment, notification and GMP guidance. |
FAQ
Is ISO 22716 certification mandatory everywhere?
No single certificate is mandatory everywhere. The legal requirement and acceptable evidence depend on the market. Evaluate the actual GMP controls and the certificate’s scope, not the logo alone.
Does FDA registration mean FDA approved the cosmetic?
No. FDA states that facility registration and product listing are not a cosmetic approval programme and do not indicate FDA approval.
Can a manufacturer prepare all regulatory documents?
A manufacturer can provide important factual technical evidence. The party legally responsible for the product must ensure the complete market file, notification, claims and local obligations are correctly handled.
Should a brand audit a manufacturer before launch?
For higher-risk, high-volume or multi-market projects, a qualified audit or an independent assessment can be a sensible part of supplier qualification. The appropriate depth depends on the product and risk.
Regulatory requirements may change. Brands should verify current requirements with the relevant regulatory authority or qualified compliance professional before placing cosmetic products on the market.