Quick Answer: Audit a cosmetic manufacturer by defining scope and criteria, sampling real production evidence, observing work, interviewing staff and following findings through corrective action. Record what was examined and why the evidence supports approval, conditional approval or a hold. A buyer audit is not a certificate or regulatory approval.
Define the decision the audit must support
An audit starts with an approval question, not a factory tour. Identify the legal manufacturer, exact production address, proposed products, markets, processes and subcontractors. Specify whether you are qualifying a new supplier, expanding an approved site’s scope or investigating a recurring problem. Those purposes need different samples and different expertise. A facility that packs a supplied bulk cream may not be qualified to formulate or manufacture it.
Write the scope in terms of activities and products. Include raw material receipt, weighing, mixing, bulk holding, filling, packaging, testing, storage and dispatch where relevant. Record exclusions and explain why they are acceptable. Confirm access to the relevant areas, personnel and records before booking travel. Commercial confidentiality can be managed with a nondisclosure agreement and redacted examples; an absence of access must remain a stated limitation.
Agree acceptance criteria before the visit. These may include the buyer’s specification, agreed procedures, relevant GMP expectations and destination obligations. The NSAI summary of ISO 22716 describes guidance covering production, control, storage and shipment. The European Commission cosmetics standards page provides EU context for EN ISO 22716. Neither a short buyer audit nor a website checklist replaces the full standard or a competent legal assessment. Our OEM and ODM manufacturing guide explains the wider supply relationship.
| Sequence milestone | Practical action | Required output |
|---|---|---|
| Plan | Set scope, criteria, team competence and access | Approved agenda and sampling rationale |
| Sample | Select relevant batches and transactions | List of records and activities to trace |
| Investigate | Observe work, interview staff and cross-check records | Dated evidence linked to criteria |
| Evaluate | Separate facts, limitations and risk judgements | Defensible findings and provisional decisions |
| Follow up | Review corrections, causes and effectiveness | Closed actions or documented restrictions |
Prepare a risk based sample before arriving
Request an organisation chart, process flow, product categories, key procedures, recent deviations, complaints and a list of outsourced activities. Use them to select audit trails. For a water based leave-on cosmetic, water control and contamination prevention may deserve more attention than for a simple anhydrous product. A new pack size can make filling checks and line clearance especially relevant. Explain this rationale in the plan instead of assigning equal time to every department.
Choose more than one kind of example: a routine completed batch, a batch with a deviation and a recent material or packaging change can reveal different controls. Ask for a current production activity where practical. Keep some selections independent of the supplier’s presentation so that you are not reviewing only polished showcase records. Sampling cannot prove that every historic batch was correct; the report should state the period and examples examined.
Match the team to the risks. A purchasing manager can assess commercial access and contract alignment, but microbiological controls, complex equipment and technical investigations may need specialist competence. Agree a lead auditor, an evidence recorder and escalation contacts. Remote document review can reduce visit time, while physical observations still matter for layout, actual segregation and how personnel perform tasks.
Open the visit with a common understanding
At the opening meeting, reconfirm scope, manufacturing activities, available staff, safety rules, confidentiality and the closing meeting time. Ask what has changed since the documents were supplied. A recent move, new subcontractor or replacement water system can change the priority of the visit. Record these changes and adjust the sample openly.
Follow the product through the site rather than visiting departments as isolated rooms. Start with receipt and status identification, then trace materials into weighing, manufacturing, holding, filling and release. Watch how the operator knows which version of the instruction to use. Check whether the physical status of a material agrees with the inventory system and whether rejected or quarantined stock can accidentally enter production.
Ask neutral questions such as “show me how you handle this event” and request an example. Avoid coaching an answer. Interview the person who performs the task and cross-check the explanation with a supervisor or quality representative when necessary. Differences between a procedure, an interview and actual practice are evidence to investigate, not a reason to jump immediately to an accusation.
| Control area | Manufacturer supplies and connects | Buyer reviewer verifies |
|---|---|---|
| Material identity | Receipt status, supplier lot, weighing record and formula version | Shows the intended inputs entered the selected batch |
| Process execution | Equipment identity, cleaning release and recorded parameters | Connects approved instructions with the work performed |
| Analytical control | Sample identity, method, result and specification | Makes the release result attributable to the batch |
| Disposition | Deviation review and authorised release record | Shows who decided the batch could move forward |
| Distribution trace | Finished lot, quantity and dispatch destination | Supports investigation and targeted market action |
Evaluate controls using records, observations and interviews
The FDA cosmetic GMP guidelines and inspection checklist discusses areas including buildings, equipment, personnel, raw materials, production, laboratory controls and records. Use it as a source of inspection questions within its stated context. It does not establish that a private audit grants FDA approval, and teams must check current requirements and applicable rules separately.
For cleaning, look beyond a signed checklist. Ask how the procedure fits the equipment and product, how completion is recorded, what happens when the equipment is idle and how a failed check is handled. For laboratory evidence, examine sample identity, specification version, methods, atypical results and the link to disposition. A test report without a clear batch identity is a weak basis for accepting the selected lot.
Investigate exception handling because routine paperwork can conceal weak decisions. Follow a rejected raw material, an out-of-specification result, an artwork correction or a complaint. Determine who can stop work, who approves a change and whether a commercial deadline can bypass quality review. Keep the sample proportionate and protect personal information; the objective is to assess the system, not collect unnecessary copies of confidential files.
Write findings that another reviewer can understand
A useful finding identifies the agreed criterion, the observed evidence, the gap and its risk. “Poor documentation” is too vague. A stronger statement explains that the selected batch record lacked the required second check at weighing, identifies the record and date, and states that the team could not establish whether the check occurred. Do not invent a requirement after observing the condition.
Separate nonconformities from improvement suggestions and unresolved questions. Grade severity using a definition agreed in advance, considering potential product impact, extent and likelihood of recurrence. A numerical average can hide a serious unresolved risk. The approval decision should explicitly address high consequence findings rather than allowing many minor passes to cancel them out.
Discuss factual accuracy at the closing meeting. Give the supplier a chance to supply missing evidence or correct a misunderstanding. Record any disagreement without diluting a supported finding. State the sample limits and areas not examined. An audit report is evidence for a bounded purchasing decision; it is not a guarantee about every product, an external certificate or regulatory approval.
| Finding or limitation | Proportionate requirement | Release implication |
|---|---|---|
| Traceability cannot be demonstrated | Complete a documented trace and assess affected stock | Hold approval for the relevant scope |
| Cleaning evidence is incomplete | Assess product impact and verify the corrected control | Restrict work until risk is addressed |
| Minor isolated record omission | Correct the record appropriately and evaluate recurrence | Document whether conditional approval is justified |
| Subcontractor was outside the review | Assess the outsourced activity and quality agreement | Exclude that activity pending review |
| Corrective action lacks effectiveness evidence | Set a follow-up sample and measurable check | Keep the action open |
Close corrective actions with evidence of effectiveness
A correction addresses the immediate problem; corrective action addresses why it happened and how recurrence will be prevented. Ask the manufacturer for containment, impact assessment, cause analysis, action owner and due date. Training alone may be insufficient if the underlying problem is a confusing form, unsuitable equipment or conflicting responsibilities. Review the proposed action against the actual cause.
Define closure evidence when agreeing the action. It could include revised controlled instructions, completed records from subsequent batches, a trace exercise or a follow-up observation. Verify that the action works in routine conditions. A promise, a new procedure with no implementation record or a photograph of one tidy shelf does not necessarily close a system failure. Escalate overdue actions through the agreed quality and commercial contacts.
The manufacturer owns its operating controls and factual production records. The brand owns its supplier acceptance criteria and must coordinate product safety, claims, labelling and market duties with the appropriate local responsible roles. Put approved sites, subcontractor changes, complaint access and record retention expectations into the quality agreement. Factory qualification and permission to release a specific product remain connected but separate decisions.
Keep the final report, decision and follow-up schedule together. Reassess when there is a significant site, process, product or ownership change, or when complaint and deviation trends justify it. Use our manufacturer selection guide and factory certification guide alongside the audit record. For a proposed project, contact the team with the product category, destination and scope requiring review.
| Destination context | Manufacturing audit focus | Separate market review |
|---|---|---|
| European Union | Assess relevant cosmetic GMP evidence and the actual manufacturing scope; review EN ISO 22716 context | The responsible person coordinates applicable product safety, file, notification and labelling duties |
| United States | Use relevant FDA cosmetic GMP inspection topics as evidence questions and check the current applicable framework | Confirm current facility, product, safety and responsible-person obligations for the arrangement; an audit is not FDA approval |
| Other intended markets | Identify locally relevant manufacturing criteria before assigning a conformity conclusion | Have qualified local roles verify classification, claims, filings and other applicable conditions |
Frequently asked questions
How long should a cosmetic manufacturer audit take?
Duration depends on site scope, product risk, records and access. Plan enough time for selected evidence trails and follow-up questions rather than promising a universal one-day assessment.
Can a remote audit replace a factory visit?
Remote review can examine documents and interviews, but visibility of physical conditions and actual work may be limited. Record those limits and decide whether an on-site review is needed.
Does an audit mean a factory is certified?
No. A buyer audit supports a defined supplier decision. Certification is a separate attestation process, and neither should be described as universal product approval.
Who should approve the corrective actions?
The manufacturer proposes and implements actions. A competent reviewer acting for the buyer evaluates their adequacy and effectiveness against the agreed criteria.
Should the brand approve the supplier after every finding is closed?
Closure informs approval but does not replace the full decision. Confirm scope, residual risks, commercial conditions and separate product readiness obligations before accepting supply.
Last reviewed: 30 October 2026. General sourcing and quality planning information, not product specific legal, safety or certification advice. Confirm applicable requirements and decisions with qualified advisers.