ISO 22716 is the international standard for Good Manufacturing Practices in cosmetics. If you are choosing a contract manufacturer, it is the single most useful document to ask for — and the single most commonly faked or overstated credential in the industry.
Key takeaways
- ISO 22716 covers how a product is made — premises, equipment, personnel, materials, production, QC — not whether the formula is safe.
- A certificate only counts if its scope covers cosmetics manufacturing and the site address matches the factory you are buying from.
- You should receive a Certificate of Analysis, batch record and retained samples with every production run.
- GMP does not replace a CPSR safety assessment or stability testing — you need all three.
What ISO 22716 covers
| Clause area | What it requires | What it means for you |
|---|---|---|
| Personnel | Training records, hygiene rules, defined responsibilities | Fewer handling errors and contamination events |
| Premises | Zoned areas, controlled air and water, cleaning schedules | Lower microbial risk in water-based products |
| Equipment | Calibration, maintenance logs, cleaning validation | Consistent batch-to-batch viscosity and fill weight |
| Raw materials | Supplier qualification, incoming inspection, traceability | You can trace any problem to a material lot |
| Production | Written instructions, batch records, in-process controls | Repeatability across orders |
| Finished product QC | Release criteria, testing, quarantine of non-conforming goods | Defects caught before shipment, not by your customer |
| Documentation & traceability | Retained samples, batch numbering, complaint handling | Evidence if a dispute or recall occurs |
How to verify a certificate is real
A PDF of a certificate is easy to produce and easy to embellish. Four checks take five minutes and filter out most problems:
- Check the scope statement. It should explicitly mention cosmetic product manufacturing (and ideally the product types you are buying). A scope limited to "trading" or "design" is not GMP certification.
- Check the site address. The certified address must be the facility that will actually produce your goods, not a head office or a related entity.
- Check the certificate number and issuing body. Contact the certification body directly, or verify through its online register. Reputable bodies maintain searchable databases.
- Check validity dates. Certificates lapse. Ask for the most recent surveillance audit report if the certificate is more than 12 months old.
If a supplier cannot produce items 1 and 3 quickly, treat that as the answer.
Documentation you should receive per batch
- Certificate of Analysis (CoA) — appearance, odour, pH, viscosity, specific gravity, fill weight, microbial counts, against agreed specifications.
- Batch production record — raw material lot numbers, equipment used, process parameters, operator and supervisor sign-off.
- Retained samples — normally at least two units per batch, held for the shelf life plus a margin. Confirm the retention period in writing.
- Stability and compatibility reports — for the formula, not just a generic template.
- Microbiological test results — total viable count, and absence of specified pathogens.
- Packaging compatibility confirmation — evidence the closure and formula were tested together.
A manufacturer that routinely issues these without being chased is demonstrating GMP behaviour whether or not it holds a certificate.
What GMP does not cover
This is where brand owners get confused:
- GMP does not assess formula safety. That requires a toxicological safety assessment (CPSR in the EU) by a qualified safety assessor.
- GMP does not establish shelf life. That requires stability testing on the specific formula in its specific packaging.
- GMP does not register your product. Market notification (CPNP, MoCRA listing) is a separate regulatory step.
- GMP does not validate your claims. Claim substantiation is your responsibility as brand owner.
Think of it as four separate pillars: GMP (process) + safety assessment (toxicology) + stability (shelf life) + notification (market access). You need all four; none substitutes for another.
Related standards you may be asked about
| Standard / scheme | Focus | When it matters |
|---|---|---|
| ISO 22716 | Cosmetics GMP | Default requirement for export manufacturing |
| ISO 9001 | General quality management | Baseline; weaker evidence than 22716 for cosmetics |
| US FDA MoCRA GMP | US-specific GMP rulemaking | Required for US market; rule continues to develop |
| ISO 16128 | Natural / organic definitions | Only if you make natural or organic claims |
| Halal certification | Ingredients and process | Required for parts of Middle East and Southeast Asia |
| ISO 14001 | Environmental management | Retailer ESG questionnaires |
Questions to ask on an audit or factory tour
- Can you show me the batch record for the last product you shipped?
- Where are retained samples stored, and for how long?
- How is purified water tested, and how often?
- What happens to a batch that fails release testing — can I see the non-conformance log?
- How do you qualify a new raw material supplier?
- Who signs off the final release, and are they independent of production?
The last question is the most revealing. In a functioning GMP system, QC release is independent of the people who made the batch.
Frequently asked questions
Is ISO 22716 legally required?
It is mandatory in practice in several markets — the EU cosmetics regulation requires manufacturing to follow GMP, and ISO 22716 is the recognised harmonised standard for demonstrating it. In the US, MoCRA requires FDA to issue GMP regulations. Even where not strictly mandatory, most serious retailers and distributors require it.
Can I rely on my manufacturer's certificate for my own compliance?
Partly. As brand owner you remain responsible for placing a compliant product on the market. The manufacturer's GMP certificate supports your position; it does not transfer your legal responsibility for safety assessment, labelling and notification.
What is the difference between ISO 22716 and ISO 9001?
ISO 9001 is a generic quality management standard applicable to any business. ISO 22716 is written specifically for cosmetics manufacturing and covers hygiene, contamination control, batch traceability and product-specific controls. For a cosmetics factory, 22716 is the meaningful credential.
Should I audit the factory in person?
For a first order of any size, yes if you can. If you cannot travel, ask for a live video tour with the specific questions above, and request a virtual walk-through of the filling line and QC area rather than a marketing showroom.
Ready to Develop Your Own Skincare Line?
Guangzhou Laiyue Biological Group is a skincare OEM / ODM and private label manufacturer operating from Guangzhou, China. We maintain a library of more than 10,000 mature formulas, hold 50+ formulation patents, and ship to brand owners in 60+ countries.
Our team handles the entire chain for you: formula development or matching, stability and compatibility testing, regulatory documentation (CPNP, MoCRA, ISO 22716), filling, packaging sourcing and export paperwork — so you can put your budget into brand building and distribution.
Tell us what you want to make and we will come back with a formulation proposal, MOQ options and a factory-direct quote within 48 hours.
- WhatsApp (fastest): +86 187 0971 3948
- Email: laiyue001@gmail.com
- Send a requirement brief: https://oemcosmeticsodm.com/contact.php
No obligation, and we sign an NDA before you share any formula or brand detail.