Choosing a cosmetic contract manufacturer is one of the biggest decisions a new brand makes. The partner you pick decides your quality, your launch date and, just as importantly, how easy it is to meet EU or UK safety rules. This guide shows how to compare manufacturers, which questions to ask, what to put in the contract and which safety documents you still own even when someone else fills your bottles.
Contents
- The short answer
- What does a contract manufacturer actually do?
- Who is the responsible person when you outsource?
- Which certifications and documents should you ask for?
- How do you match the manufacturer to your product?
- What safety testing should the manufacturer support?
- What should go into the contract?
- Red flags when comparing manufacturers
- A simple selection process
- Frequently asked questions
- Key takeaways
The short answer
Choose a cosmetic contract manufacturer that works under good manufacturing practice (ISO 22716), shares full batch and formula information, supports your safety documentation and agrees clear responsibilities in writing. Outsourcing production does not outsource legal responsibility: the responsible person named on your label remains accountable for the CPSR, the product information file, notification and labelling, whoever makes the product.
What does a contract manufacturer actually do?
Contract manufacturers (also called private-label or white-label producers, or toll manufacturers) cover a range of services. Understanding which one you buy matters for the legal position:
- Stock formulas: the manufacturer offers existing formulas that you brand. Fast and low-risk, but you share the formula with other brands and have little control over changes.
- Custom formulation: the manufacturer develops a formula to your brief. You should clarify who owns the formula and whether you can move it to another site.
- Fill-and-pack only: you supply the formula or bulk, and the site fills, labels and packs. Your own quality control becomes more important.
- Full service: formulation, sourcing, production, packaging and sometimes regulatory support.
Read also Dropshipping Cosmetics in the EU: Legal Pitfalls
Who is the responsible person when you outsource?
Under Regulation (EC) No 1223/2009, each product on the EU market needs a responsible person established in the EU. For a product made in the EU, this is normally the manufacturer, but the manufacturer may appoint another EU-based person by written mandate, and a brand that places the product on the market under its own name or trademark generally takes on that role itself. In practice, many brands and contract manufacturers agree who acts as the responsible person, and the label shows that name and address. Agree it in the contract, not by assumption, because the answer decides who holds the safety report and who answers to the authorities. Our CPSR overview explains the documentation that sits behind this role.
Which certifications and documents should you ask for?
Start with proof of good manufacturing practice. Compliance with the harmonised standard ISO 22716 gives a presumption of conformity with the GMP requirement of the regulation. Ask for:
- an ISO 22716 certificate or the latest audit report, and what the scope covers (does it include your product type?);
- a site description, including hygiene zones, water system, cleaning validation and pest control;
- an example batch record and a certificate of analysis;
- quality procedures for deviations, complaints and recalls;
- a list of approved suppliers and how raw-material specifications are checked;
- references from brands with similar products.
A certificate is a good sign, not a guarantee. If possible, visit the site or commission an audit.
How do you match the manufacturer to your product?
Not every site can make every format. Check that the manufacturer has experience with your product type and its risks:
- Water-based products (creams, lotions, gels) need strong microbiological control and a validated preservation system.
- Anhydrous products (balms, oils, powders) have lower microbial risk but need correct filling and moisture control.
- Sun care, baby care and products around the eyes carry stricter safety expectations and often special testing.
- Natural and organic positioning requires a supply chain that can support the certification or claim.
Also check practical limits: minimum order quantities, batch sizes, lead times, packaging compatibility and whether they can scale up if your product takes off.
Read also Influencer Beauty Brand Compliance: The Basics
What safety testing should the manufacturer support?
A good contract manufacturer knows that your safety assessment depends on data from their site. Ask whether they provide, or let you commission, the following:
- Stability and compatibility data on the formula in your final packaging. A stability and compatibility test shows shelf life, PAO and whether the pack interacts with the product.
- Microbiological quality of the finished product from production batches, which the microbiological specifications test covers.
- Preservation efficacy for water-containing products, shown by a challenge test on the final formula.
- Raw-material data: safety data sheets, specifications and certificates for every ingredient, which feed Part A of the CPSR.
Stock formulas from a manufacturer often come with some data, but check that it covers your exact variant (colour, fragrance, pack). A different fragrance or packaging usually means new testing.
What should go into the contract?
A clear manufacturing agreement protects both sides. Cover at least these points:
- Formula ownership and confidentiality: who owns the formula, who may use it elsewhere, what happens when you leave.
- Change control: no change to formula, raw materials, suppliers or process without written agreement, because changes can invalidate the CPSR and stability data.
- Specifications and acceptance: agreed release criteria, sampling, and what happens to a batch that fails.
- Batch records and traceability: access to records and retention samples, so you can respond to complaints and authority requests.
- Responsible person and documents: who holds the CPSR and product information file, who notifies the product, and how fast files can be produced on request.
- Recall and complaints: who investigates, who informs authorities, who bears the process.
- Subcontracting: no hidden fill or pack subcontractors without your approval.
- Exit plan: transfer of the formula, data and packaging components if you change supplier.
Red flags when comparing manufacturers
- They refuse to share the full ingredient list or INCI declaration before you order.
- They cannot show any GMP evidence, or the certificate does not cover your product type.
- They promise a safety report as part of the order without naming a qualified assessor.
- They change raw materials “to the same quality” without telling you.
- There are no stability or microbiological data for the formula you are buying.
- They are vague about claims, for example offering an “anti-ageing” formula with no evidence.
Read also Change Cosmetic Formula Testing: What to Retest After a Change
A simple selection process
- Write a brief: product type, claims, markets, packaging, expected volumes.
- Shortlist three to five manufacturers with relevant experience.
- Request the documents above and a sample of a similar product.
- Visit or audit your favourite site.
- Run a pilot batch and test it: stability, microbiology and, for water-based products, challenge.
- Agree the contract, then plan CPSR, notification and labelling before the first commercial batch.
Frequently asked questions
Does the contract manufacturer take care of EU compliance?
Only the parts you agree in writing. Even if the manufacturer prepares documents, the responsible person named on the label is legally accountable, so always check the content and keep copies.
Can I use the contract manufacturer’s safety report for my product?
Only if the report covers your exact formula, packaging and intended use, and if it was signed by a qualified assessor. A report for a generic base does not automatically cover your fragrance, colour or pack.
Is a small brand better off with stock formulas or a custom formula?
Stock formulas shorten time to market, while custom formulas give differentiation and control. Whichever you choose, you still need data and a signed CPSR for the final product.
Key takeaways
- Choose a manufacturer with ISO 22716 evidence and experience in your product type.
- Agree in writing who is the responsible person, who owns the formula and how changes are controlled.
- Test the final formula in the final pack, then build the CPSR and product file before launch.
- Outsourcing production never outsources legal responsibility.