Every private-label cosmetics order from China produces two things: a pallet of product and a folder of paper. Buyers plan the first in detail and improvise the second, then discover at the port that the freight forwarder wants a safety data sheet, the customs broker wants an ingredient breakdown, and the retailer's compliance team wants a certificate of analysis for the batch that is already on the water.
The paper is not an afterthought to the manufacturing. Most of it is produced during manufacturing and cannot be reconstructed convincingly afterwards. This guide covers what a Chinese cosmetics contract manufacturer can legitimately hand you, what it cannot, and where the line falls between the factory's job and yours.
The document pack, and who owns each piece
It helps to separate the folder into three groups, because they come from three different places and fail in three different ways.
Factory-produced documents describe what was made. A safety data sheet, a certificate of analysis, an ingredient list with percentages, batch and production records, and a packing list all originate inside the plant. A capable OEM treats these as standard output. Langfang-based Aozi Cosmetics, for example, lists export documentation — MSDS and CoA preparation alongside customs paperwork — as one of its declared capabilities rather than as a favour, which is the posture you want.
Third-party documents describe what was tested by someone else: microbiological testing, challenge testing, heavy-metal screens, packaging compatibility. The factory arranges them; an external laboratory issues them. The name on the report matters more than the result, a point worth remembering when you review any supplier's certificate folder.
Market documents describe your legal position in the destination country. Registration, notification, responsible-person appointment, labelling approval. These are almost never the factory's to hold, and a supplier who claims otherwise is either confused or selling you something that does not exist.
Most disputes at the port trace back to a buyer assuming a document sits in group one when it actually sits in group three.
What an MSDS is for, and what it is not
The safety data sheet is the single most requested and most misunderstood document in cosmetics export. It is a chemicals and transport document. It exists so that a warehouse worker, a firefighter or an airline loadmaster can decide how to handle a drum or a carton, and it is structured in sixteen standard sections under the UN Globally Harmonized System — identification, hazards, composition, first aid, firefighting, accidental release, handling and storage, exposure controls, physical properties, stability, toxicology, ecology, disposal, transport, regulatory information, other.
What it is not is a market-approval document. An MSDS does not demonstrate that your face cream may be sold in the United States or the European Union. It says nothing about whether your claims are permissible. Buyers who file the MSDS and consider compliance handled are the ones who get a letter from a regulator eighteen months later.
Where the MSDS genuinely earns its place is logistics. Alcohol-based toners, some nail products and anything pressurised can fall under dangerous-goods rules for air freight, and the transport section is what the forwarder reads to classify the shipment. Ask for the sheet at the sampling stage, not at booking, because a formula that turns out to be restricted for air is far cheaper to reformulate than to re-route. The same logic applies to the broader compliance checklist by destination market: the cheap moment to discover a problem is before tooling.
One practical check: a sheet that lists the finished product under a generic description, gives no supplier contact in section one, and carries no revision date is a template someone filled in for you. Section sixteen should name a revision date. If it does not, the document has not been maintained.
Reading a certificate of analysis
A certificate of analysis is a batch-level test record. It states what was measured on this production lot and compares each result against an agreed specification. It is the only document in the pack that ties paperwork to the physical goods in the container, which is why retail compliance teams ask for it and why it should never be issued before the batch exists.
A usable CoA carries the batch or lot number that appears on the cartons, the manufacture and expiry or best-before dates, and a row for each tested parameter with three columns: specification, method, result. Typical parameters for a rinse-off or leave-on personal-care product include appearance, odour, pH, viscosity, relative density, and microbiological counts for total aerobic plate count, yeast and mould, plus absence testing for specific organisms.
The failure mode to watch for is the certificate that reports every result as "conforms" with no numbers. That is a statement of opinion. Insist on measured values, because a pH of 5.4 against a specification of 5.0–6.0 tells you the batch sits comfortably inside range, while a pH of 5.9 tells you the next batch may not. Reading the drift across three consecutive CoAs is one of the least expensive quality signals available to an importer, and it pairs naturally with the stability and shelf-life testing you commission separately.
Agree the specification during formulation and sampling, not at first production. A specification written after the fact is written around whatever the first batch happened to do.
What the factory cannot give you: market registration
This is where most private-label programmes go wrong, and where an honest supplier is worth more than an accommodating one.
In the United States, the Modernization of Cosmetics Regulation Act requires facilities that manufacture or process cosmetics for the US market — including facilities outside the United States — to register with the FDA, and requires cosmetic products to be listed. Registration and listing are administrative acts. The FDA does not approve cosmetic products, and it does not certify or endorse the facilities that register. A supplier advertising itself as "FDA approved" is describing something that does not exist. The responsible person named on the label, normally the brand owner or importer, carries the listing and safety-substantiation obligations. Our guide to importing cosmetics into the USA works through the sequence in detail.
In the European Union, Regulation (EC) No 1223/2009 requires a Responsible Person established within the Union, notification of the product through the Cosmetic Products Notification Portal before it is placed on the market, and a Product Information File including a safety assessment held and kept available. Again, none of this is the Chinese manufacturer's to hold, though the manufacturer must supply the formulation and manufacturing data the safety assessor needs. The CPNP notification route is a separate exercise from your purchase order.
A Chinese cosmetics plant producing for the domestic market holds a provincial cosmetics production licence, which is a genuine and verifiable credential — and an entirely domestic one. It is not an export permit, and it does not substitute for anything above. Ask which licence a supplier holds, ask to see the number, and then ask nothing further of it.
Building the pack into the order, not after it
The practical fix is scheduling. Documents that are requested as deliverables at defined milestones arrive; documents requested as favours after shipment arrive late, incomplete, or not at all.
At quotation, ask which documents are included as standard and which carry a testing cost, and get the answer in writing. At sample approval, take the draft MSDS and the full ingredient list with percentages — this is also when you confirm the formula is air-freightable if you need it to be. Before the production run, agree the finished-product specification that the CoA will be measured against. At batch completion and before shipment, take the CoA for the actual lot, the packing list and the commercial invoice with correct tariff classification. After shipment, retain everything, because market registration and any future retailer audit will draw on it.
None of this is exotic; it is the same discipline as the general list of documents to ask a China supplier for before a first order, applied to a category with unusually heavy regulatory freight. Buyers sourcing across several personal-care formats — a skincare range, a colour cosmetics line, or a hotel amenity programme — should assume each format generates its own pack rather than one shared folder, because the testing parameters and the transport classification differ by product type.
The document folder is not administration around the deal. For a regulated consumer product, it is a substantial part of what you are buying.
Common questions
Is an MSDS required to import cosmetics?
A safety data sheet is a transport and workplace-safety document rather than a cosmetics market-approval document, which means that whether one is strictly required depends on the destination country, the transport mode and the formulation itself rather than on the product being a cosmetic at all. In practice freight forwarders, customs brokers and warehouse operators request it for almost every consignment, and airlines require it for anything that may be classified as dangerous goods, so treat it as a standard deliverable.
Ask for it at the sampling stage. A formula that turns out to be restricted for air freight is far cheaper to change before tooling than after.
What is the difference between an MSDS and a certificate of analysis?
An MSDS describes the hazards and safe handling of a product type and stays the same from batch to batch, while a certificate of analysis reports measured test results for one specific production lot and changes every time. The MSDS answers "how should this be handled and shipped"; the CoA answers "does the material in this container meet the agreed specification".
You need both, and they are produced at different moments — the MSDS during development, the CoA at the end of the production run.
Can a Chinese factory register my cosmetics with the FDA?
A Chinese manufacturer registers its own facility with the FDA where it processes cosmetics for the US market, but it cannot hold your product listing or act as your responsible person, because those obligations attach to the brand owner or importer named on the label. The factory supplies the formulation and manufacturing information you need; the filings themselves remain yours.
Treat any supplier claiming to be "FDA approved" with caution, because the FDA does not approve cosmetic products and does not certify the facilities that register with it, so the phrase signals either a misunderstanding or a sales exaggeration.
What should a certificate of analysis contain?
A usable certificate of analysis names the product and the batch number printed on the cartons, gives the manufacture and expiry or best-before dates, and lists every tested parameter across three columns showing the agreed specification, the test method that was used, and the value actually measured on that lot. Typical parameters for personal-care products include appearance, odour, pH, viscosity, relative density and microbiological counts.
Reject certificates that report "conforms" without numbers. Measured values let you watch a specification drift across consecutive batches; a conformity statement tells you nothing you can act on.
Who is responsible for cosmetics labelling compliance?
Responsibility for labelling compliance sits with the party placing the product on the market, meaning the brand owner, the importer or an appointed responsible person, and it does not transfer to the contract manufacturer in China even when that factory designs the artwork and prints the labels itself. The manufacturer must supply accurate ingredient and formulation data, but the decision on what a label may claim in a given market is a legal judgement made in that market.
The workable arrangement is that you supply approved artwork and the factory prints exactly what you supplied, with any deviation flagged rather than corrected locally.