Skincare OEM Factory Audit FAQ

Data: ISO 22716 sets expectations for documentation, personnel, premises, and process control in cosmetics manufacturing, which a factory should demonstrate with records rather than description.

Judgment: Read the scope line on the manufacturing-practice certificate, because a certificate issued to one legal entity does not automatically cover production performed by a differently named company at the same address.

Source: ISO - ISO 22716 - Cosmetics Good Manufacturing Practices (2007)

Data: Cosmetic ingredient safety assessments published by independent review panels consolidate toxicological evidence for individual ingredients, supplying a traceable basis for ingredient-level safety conclusions.

Judgment: Ask which published assessments the factory references for the actives in your formula, because a factory that can name them is working from evidence while one that answers only with brand experience is working from habit.

Source: Cosmetic Ingredient Review (CIR) - CIR Ingredient Safety Assessments (2024)

Data: Advertising claims in major markets must be truthful and substantiated with evidence held before publication, which places claim support inside the product file rather than after launch.

Judgment: Include claim evidence in the audit scope, because a factory that manufactures well but cannot trace the evidence behind a printed claim leaves the brand carrying that risk alone.

Source: U.S. FTC - Truth in Advertising and Claim Substantiation (2024)

What should a skincare OEM factory audit cover?

Six domains: the legal entity and certificate scope, incoming raw-material control, batch manufacturing and filling records, laboratory and stability capability, packaging and label control, and the documentation that transfers to the buyer. A tour that covers only a showroom and a production hall verifies none of them. Each domain should produce a document the buyer keeps, because an audit without retained evidence is an opinion rather than a record.

Do I need to visit the factory in person?

Not necessarily. A remote audit built on documents - certificates, batch records, test protocols, and photographs of controlled areas - answers most buyer questions. An in-person visit adds value where the order is large or the formula is complex and the buyer wants to see the line running. If you do visit, inspect the material quarantine, the weighing records for a recent batch, the line clearance sheet, and the finished-goods release log, because those four artefacts are difficult to stage quickly.

What audit findings should stop an order?

Three findings justify stopping. First, the manufacturing-practice certificate names a different legal entity than the contracting supplier, because the certified party is then not the party you are buying from. Second, refusal to provide a sample batch record, because there is no defensible manufacturing record for the product. Third, no written stability or compatibility test plan, because product durability and pack safety are unverified. Most other findings are fixable with a corrective action before production.

How do I verify the certificate scope?

Read the certificate and match three items: the legal entity name against your contracting party, the certified scope against the product type you are buying, and the validity dates against your production schedule. Manufacturing ownership structures are frequently layered, and the contracting entity is not always the certified entity. If the names differ, ask for written clarification before the purchase order, because a certificate that does not cover your producer is a document about someone else.

How should an audit be scored?

Score each domain against a threshold set before the visit, and record the evidence reference beside the score. Weight entity scope, raw-material control, batch documentation, and document transfer as high; weight laboratory capability and packaging control as medium. A written report with named evidence also creates the baseline for later comparison, so when a second order is audited against the first report, deviations appear as facts rather than suspicions.

What documents should the factory transfer after the audit?

Five files: the specification sheet, a batch record for the product, a certificate of analysis, the stability and compatibility data, and the ingredient list with concentrations. These are the documents a market notification, a retailer onboarding, or a re-sourcing project will request. Agree the transfer list at order stage and name it in the contract annex, because documentation requested as a favour after shipment arrives late or not at all. Sources: ISO 22716, U.S. FDA cosmetics programme, Cosmetic Ingredient Review, U.S. FTC truth-in-advertising.