Cosmetic OEM/ODM compliance requires a clear division of work between the manufacturer, brand and legally responsible parties in each destination market. Agree product specifications, access to technical evidence, label approval, required submissions, batch release and change control before production. Outsourcing development or manufacture does not automatically transfer the brand’s or responsible person’s legal duties.
By mooyam_admin, MOOYAM · Last reviewed: 10 September 2026
What does cosmetic OEM/ODM compliance mean in practice?
It means connecting the finished product to the evidence, decisions and responsible businesses needed for its intended markets. The practical challenge is often the handover: the factory holds manufacturing information, the brand controls positioning and artwork, and a local responsible party or adviser needs sufficient information to assess the product.
This guide focuses on managing that relationship. It proposes an operational framework, not a universal legal contract. Pair it with the finished-product compliance checklist and our international launch planning guide when coordinating the wider project.
OEM vs ODM: what changes in the compliance handover?
Suppliers use OEM and ODM terminology differently. In a typical OEM arrangement, a manufacturer produces to an agreed customer specification. An ODM arrangement may include supplier-led product development or adaptation of an existing formulation. The actual agreement matters more than the label.
| Project model | Question to settle early | Compliance handover risk |
|---|---|---|
| Customer-led specification | Who owns and approves the formula and supporting evidence? | The factory and brand may hold different versions. |
| Supplier-led development | What confidential information can the responsible reviewer access? | An attractive sample may arrive without adequate data access. |
| Adapted private-label product | Which changes require further assessment? | Old evidence may not support the modified finished product. |
Agree ownership, permitted use and access rights separately. Ownership of a formula is not the same as possession of every report needed for a market review. A brand should know what it will receive, what an assessor can inspect confidentially and what support continues after the first order.
Who is responsible under the destination-market rules?
Legal roles depend on the jurisdiction and supply chain, not merely the commercial manufacturing model. For example, FDA’s MoCRA overview defines the US responsible person by reference to the manufacturer, packer or distributor named on the label. It also describes duties concerning safety-substantiation records and serious adverse-event reporting.
For Great Britain, GOV.UK guidance places defined duties on the Responsible Person, including an up-to-date PIF and arranging a qualified safety assessment. In the EU, the European Commission’s CPNP guidance identifies responsible persons and certain distributors as notification participants under Regulation (EC) No 1223/2009.
These examples show why a contract should name the relevant legal role instead of assigning everything to “the supplier”. A commercial agreement can allocate assistance and costs, but the parties should obtain qualified advice on who actually bears each statutory duty.
Build a responsibility matrix before the purchase order
Give each deliverable a preparer, reviewer and decision owner. The example below is a recommended coordination structure; it must be adapted to the legal roles and services agreed for the project.
| Workstream | Manufacturer input | Brand or appointed party coordination |
|---|---|---|
| Formula and specifications | Controlled technical information and production feasibility | Intended markets, use and approval of the product brief |
| Safety and quality evidence | Available reports, samples and manufacturing data | Gap review and commissioning additional work where needed |
| Packaging and claims | Technical input and agreed pack specifications | Market review, translations and final artwork approval |
| Submissions | Accurate facility or product information as applicable | Named submitter, account access and confirmation records |
| Post-market issues | Batch investigation and manufacturing records | Market contacts and legally required reporting coordination |
Include an escalation contact when a reviewer cannot approve a file. “Sent to the brand” should not be the final status for an unresolved technical question. Keep the issue open until the responsible decision maker records a conclusion or a documented action.
What can a cosmetic manufacturer provide?
Request a document index tailored to the actual product. Depending on the project, support may include INCI information, formula data through an agreed confidentiality route, specifications, COAs, relevant SDS information, manufacturing documentation, available stability or microbiological reports, packaging-compatibility information and batch records.
Do not assume all documents exist at quotation stage or that a report on a base formula covers every variation. Ask which documents are existing, which require new work and which will be available only after a production batch. The agreement should identify any third-party testing or assessment separately from manufacturing services.
| Document control field | What to capture |
|---|---|
| Product identity | Formula code, version, variant and packaging configuration |
| Evidence identity | Report reference, issuing party and relevant sample or batch |
| Access | Who holds the file and who may review it |
| Applicability | What the reviewer accepts it as supporting |
| Open action | Missing information, owner and agreed response date |
How should confidential formulation data be handled?
Resolve access before selecting the manufacturing partner. A practical arrangement can distinguish documents provided to the brand from information supplied directly to a qualified assessor or designated responsible party. Have legal and technical reviewers confirm that the arrangement allows the necessary work and any required authority access.
Also discuss continuity. What happens if the supplier relationship ends, the local representative changes or a later safety question requires old records? Define retention and transfer arrangements appropriate to the market obligations. Do not leave these questions to an email exchange after the final shipment.
Use formal change control for formula, packaging and claims
A change-control process starts with a written description of what is changing and why. The reviewer then assesses the implications for specifications, testing, safety evidence, labels and submissions. It should be clear when the changed version is allowed into production and which markets may receive it.
- Identify the old and proposed product versions.
- Describe the ingredient, supplier, packaging, process or claim change.
- Request the relevant technical and market assessments.
- Update affected files and approve the implementation plan.
- Identify the first affected batch and control remaining old stock.
- Confirm that downstream partners receive the correct information.
As a hypothetical example, replacing a dispensing pump may affect the product’s use or compatibility assumptions even when the formula stays the same. The appropriate response is an impact review, not an automatic conclusion that every test must be repeated or that no review is needed.
Separate batch release from market release
A manufacturing batch may meet the agreed production specification while the destination-market handover is still incomplete. Treat these as distinct decisions. The quality team should record the batch disposition; the party coordinating market access should confirm that the relevant pre-sale conditions are satisfied.
Agree what evidence accompanies shipment and how discrepancies are resolved. If a label version is wrong or a necessary review remains open, quarantine or hold procedures should be available. Neither a delivery deadline nor a signed sales order resolves a compliance gap.
Prepare the complaint and investigation workflow
Set up a route for collecting product identity, market, batch and available complaint details, while protecting personal information. Decide who reviews potential safety issues and how manufacturing records can be retrieved quickly. FDA’s MoCRA overview describes a 15-business-day reporting requirement for serious adverse events by the responsible person; internal coordination needs to support applicable legal deadlines.
Do not wait for the next routine supplier meeting to raise an urgent safety issue. Agree contacts, escalation arrangements and how findings are shared. A manufacturing investigation and a regulatory reporting decision may need to proceed together rather than sequentially.
Frequently asked questions
Does ODM mean the supplier owns all compliance duties?
No. Development services and legal responsibility are different. Confirm the jurisdiction-specific roles and the precise support included in the agreement.
Can existing test reports be reused for a private-label product?
Possibly, but a competent reviewer must assess relevance to the actual formulation, packaging, intended use and claims. Do not reuse a report solely because the products look similar.
Who should control notification accounts and confirmation records?
Agree this with the legally responsible party. Ensure authorised access, continuity and a documented handover if a service provider changes.
What if the manufacturer cannot provide a requested file?
Identify why it is needed and whether an appropriate alternative exists. If the responsible reviewer cannot establish adequate evidence, keep the affected market release on hold.
Are supplier certificates enough for qualification?
They are only part of the review. Check scope and authenticity, then assess the product evidence and working arrangements. Read our manufacturer certificate verification guide for the procurement checks.
Agree the support scope with MOOYAM
MOOYAM provides cosmetic OEM/ODM manufacturing and technical documentation support for international beauty brands. Send your product brief and target markets to discuss the document handover, responsibilities and project-specific evidence needs before production.
Regulatory requirements may change. Brands should verify current requirements with the relevant regulatory authority or qualified compliance professional before placing cosmetic products on the market.