Quality control is not something a buyer can see. You cannot watch a batch being made, and a factory visit only shows you one day, which is why the plan for that day matters as much as the documents you collect around it. What you can do is establish whether the claims made to you are checkable, and then check them. This guide is about that second part: which documents actually support a quality claim, which ones only restate it, and how to verify the ones that can be verified.
It replaces an earlier, much shorter version of this page. It makes no statement about any particular factory's certification, because that has to come from the documents your own supplier provides.
1. Two kinds of supplier statement
Almost every quality claim you will receive falls into one of these groups. Sorting them early saves a lot of reading.
| Verifiable | Not independently verifiable | |
|---|---|---|
| What it looks like | A certificate with a number and an issuing body; a test report from a named laboratory; a batch record | A website badge, a catalogue sentence, a verbal assurance |
| How you check it | Contact the issuer, confirm the scope and the facility, confirm the dates | You cannot, beyond asking for the underlying document |
| What it establishes | That a named organisation assessed something against a named standard | Nothing, until the supporting document is produced |
The useful response to an unverifiable claim is not distrust. It is a specific request: "please send the certificate number and the issuing body so we can confirm it." A supplier who holds one will answer quickly.
2. What the common cosmetics certificates actually cover
These are the documents most often offered in oral care sourcing. They are not interchangeable, and knowing what each one addresses prevents the most common misunderstanding.
| Document | What it addresses | What it does not tell you |
|---|---|---|
| ISO 22716 / GMP for cosmetics | The facility's manufacturing practice: documentation, premises, equipment, production and release controls | That the product in your brief performs as you want, or that the specific batch was made under the certification |
| ISO 9001 | A quality management system across the organisation | Anything specific to cosmetics manufacturing practice |
| ISO 14001 / 45001 | Environmental, and occupational health and safety, management | Product quality |
| Halal or kosher certificate | Conformity with a defined set of dietary or religious requirements, as assessed by the certifying body | GMP compliance |
| Third-party test reports | The specific tests performed on the specific sample submitted | That other batches behave the same way |
| FDA facility registration | That a facility has registered, where the applicable rule requires it | Any judgement by the FDA about quality, and it is not an approval |
The last row deserves its own paragraph, because it is the most frequently misread. The United States FDA states plainly that cosmetic product facility registration is neither an approval program nor a promotional tool, and that a facility registration number does not indicate FDA approval of the facility or its products. The agency also states that it does not issue certificates or other documents to verify compliance for that registration. So an "FDA registered" line on a supplier's page tells you something narrow and administrative; it is not a quality finding, and there is no FDA document to request that would make it one. The agency's own clarification is worth reading before that phrase is treated as evidence: FDA Clarifies It Does Not Provide Certificates or Other Documents to Verify Compliance for Cosmetic Product Facility Registration.
3. How to verify a certificate
A scan of a certificate is a claim, not a proof. The verification takes minutes if you do it in this order.
- The number and the issuer. Ask for both, then look the certificate up through the issuing body's own channel rather than through a link you were sent.
- The scope. A certificate covers stated activities at a stated site. Check that the scope describes manufacturing of the product type you are buying, not trading or warehousing.
- The address. The certified address should be the address that actually produces your goods. A certificate for a head office or a different site does not cover the factory.
- The dates. Check the validity period and whether the certificate is current, suspended or withdrawn. An expired certificate is a historical fact.
- The accreditation. Where the issuer claims accreditation, the accreditation should be checkable in the same way.
Three habits worth adopting: never accept a certificate page that has been cropped to remove the number or the issuer; be cautious of logos used with no document attached; and ask what the certificate covered on the date your batch was produced, not only today.
4. The batch record is the layer below the certificate
A certificate speaks about a facility and a period. A batch record speaks about your goods. Buyers often stop at the certificate, which is why the record is the more useful document.
What to look for in it: the batch code matching the code on your units, the materials and components used, the production and filling steps, the tests performed and their results against the specification, the release decision and who made it. Our guide to requesting batch traceability records covers how to ask for this so the reply is usable rather than a generic file.
5. Where physical checks fit
Documents describe intent and history; the goods are the outcome. A pre-shipment check confirms the delivered lot matches the reference before the container is sealed, and it is the only stage where you can still influence what ships. Our pre-shipment inspection checklist sets out the sampling and unit-level checks, and the approved sample versus batch comparison covers checking the delivered batch against the reference under agreed tolerances.
6. Put the quality expectations in writing
Most quality disputes are not about bad intentions. They are about an expectation that was never written down. A short quality agreement, or the equivalent clauses in the purchase order, closes that gap. These are the elements worth covering.
| Element | What to agree |
|---|---|
| Specification ownership | Which document defines the product, who approves it, and how versions are controlled |
| Records | Which records exist, in what format, and for how long they can be requested after delivery |
| Batch coding | The format, where it appears, and how it links to the record |
| Change notification | What counts as a change, the notice window, and what the notice must contain |
| Complaint response | Who to contact, the response time, and what investigation evidence you will receive |
| Release decision | What makes a batch releasable, and who decides |
Change notification is the element most often left out, and the one that causes the most trouble two orders later; our private label change management guide sets out a clause and a version record for it.
7. Five checks before you sign
- Name the reference documents — the specification, the artwork revision, the carton specification — and confirm they are versioned and dated.
- Ask for one certificate number and issuer, and verify both independently.
- Ask for one complete batch record and confirm the batch code on it matches units you can point to.
- Confirm the record retention period, and test it later with a request for an older batch.
- Agree the change-notification window in writing, including what the notice must contain.
None of that requires you to audit a factory. All of it can be done over email, and all of it produces documents you can file.
8. What this page does not tell you
It does not say which certificates any particular factory holds, because that is a fact about a supplier and has to come from their documents. It does not state what your destination market requires, which is a regulatory question for your market. And it does not claim that a certificate, a batch record or an inspection adds up to a guarantee: each establishes a specific thing, and the value comes from knowing which.
The document most often mistaken for a conclusion is the certificate of analysis: our CoA reading guide takes it field by field, in the order a buyer should check it.
9. Next step
Send us the product reference and the market you are supplying, and we will tell you which specification, certificate and batch documents accompany an order and what they cover. Send your requirement, or start with the sample evaluation checklist if the product is not yet fixed.