Private Label Skincare Quality Agreement and GMP FAQ

What is a quality agreement in cosmetic private label manufacturing?

A quality agreement is a document that assigns quality responsibilities between the brand owner and the manufacturer, so each party knows who approves specifications, who releases batches, who handles deviations, and who investigates complaints. It sits alongside the commercial contract and makes the GMP system operational between two companies rather than inside one factory. Core clauses cover specification approval, testing, release, deviation handling, change control, complaints, audit rights, and record retention.

Is ISO 22716 certification enough without a quality agreement?

No. ISO 22716 describes good manufacturing practice inside the manufacturer's facility, but a private-label product is made for a brand that also holds obligations on specifications, artwork, claims, and post-market response. The agreement bridges the two, defining which decisions belong to the brand and which to the manufacturer. A compliant factory can still deliver a non-compliant product when the interface between the two parties is undefined.

Which clauses must a quality agreement contain?

Eight: specification approval, artwork and label control, sampling and testing, batch record review and release, deviation and out-of-specification handling, change control, complaints and recall, and audit rights with document retention. Each clause should name the responsible party and a timeline. The deviation clause is the one most often missing, and it is the clause that resolves the common case of a batch failing an in-process check.

How are responsibilities split between brand and manufacturer?

The brand typically approves the formula and specification, holds ingredient safety evidence, approves and substantiates claim text, owns the customer-facing complaint response, and files regulatory submissions in each market. The manufacturer proposes the formula against the brief, supplies ingredient data, applies approved artwork, performs and retains batch records, signs authorised release, records deviations, and provides technical investigation. Laying the two side by side exposes any gap before a defect does.

What does change control look like in practice?

Any change to formula, process, supplier, or packaging is notified and approved before it takes effect. A formula change triggers a safety assessment and possibly a notification update; a supplier change triggers re-qualification and traceability checks; a process change triggers an impact review against the batch record; a packaging or site change can invalidate compatibility data, label text, GMP certification, or registration. Controlled notification is what protects the market-entry file you already built.

What audit rights should a brand request?

The brand should be able to request manufacturing data, certification status, and the deviation log, and to conduct a periodic on-site audit with reasonable notice. Because the records behind market entry and post-market response usually live with the factory, the agreement should name the transfer of manufacturing and registration data as a written deliverable with a timeline. Audit access is what keeps a certification a live position rather than a snapshot.

When should the quality agreement be signed?

Before the first production run. An agreement signed after launch leaves the first batches outside the assigned responsibilities, which is exactly when specifications, release, and deviation handling matter most. Update the agreement whenever the relationship changes — a new product line, a new site, a new supplier — rather than waiting for a complaint to reveal the gap. Sources: ISO 22716 cosmetics GMP, WHO quality and safety guidance, U.S. FDA cosmetics registration and GMP under MoCRA, CIR ingredient safety assessments.