...

What is cosmetic GMP under ISO 22716?

Cosmetic GMP under ISO 22716 is a practical, process-based set of guidelines for how cosmetics should be produced and controlled—covering the daily disciplines that reduce contamination, mix-ups, and batch-to-batch drift. ISO 22716 itself is the international standard titled “ISO 22716:2007 Cosmetics — Good Manufacturing Practices (GMP) — Guidelines on Good Manufacturing Practices,” and ISO notes this version was reviewed and confirmed as current in 2022.

For private label buyers, it helps to separate three ideas: “cosmetic GMP” (the expectation to manufacture under good practices), ISO 22716 (a widely used GMP guideline), and “certification” (a third-party audit outcome that may or may not match your product scope or site). That’s why vetting isn’t “do you have a certificate?” but “do your real controls and records behave like ISO 22716?”

What does ISO 22716 cover (and what it doesn’t)?

ISO 22716 is focused on how you manage production and quality for cosmetics—typically from receipt of materials through making, filling/packing, storage, and shipment. A helpful plain-language overview is on the Singapore Standards eShop page for ISO 22716, which states it gives guidelines for production, control, storage, and shipment, and also notes important boundaries (for example, it’s not written to cover personnel safety or environmental protection, and it’s not applicable to R&D activities and distribution of finished products).

What ISO 22716 is designed to coverWhat it doesn’t replace (common buyer misunderstanding)
Personnel hygiene & training, premises & equipment controlsYour brand’s regulatory strategy (claims, market access rules, labeling law)
Raw material & packaging material controlA full product safety assessment by itself (ISO 22716 is a GMP guideline, not a “product approval”)
Production & filling controls, line clearance, prevention of mix-upsR&D workstreams and finished-goods distribution design (outside ISO 22716 scope)
QC checks, nonconforming product handling, CAPAEHS programs (personnel safety / environment are not its main scope)
Documentation, traceability, complaints & recallsA guarantee that every certificate you see matches the site and scope you’re buying (you still must verify)

Which sections matter most for private label brands?

Private label brands usually fail on repeatability and change discipline, not on “can you make a sample.” The ISO 22716 sections that most strongly protect repeat orders are the ones that stop silent drift and make issues containable.

ISO 22716 area (buyer lens)Why brands should prioritize itWhat to check quickly during vetting
Supplier & incoming control (RM + packaging)Prevents variability from vendorsIncoming inspection records + acceptance criteria
Production controls & line clearancePrevents mix-ups, wrong labels, wrong fillLine clearance checklist + 1–2 batch records
QC & release disciplineStops nonconforming lots from shippingLot release record showing “hold/release” authority
Deviations, CAPA, and change controlPrevents the “2nd order is different” problemA real change record + post-change verification notes
Traceability + complaints/recall readinessEnables fast containment and customer responseA mock trace: RM lot → finished lot → shipments

If you’re building a broader supplier evaluation flow, it’s cleaner to link ISO 22716 checks into your overall OEM due diligence (for example, your internal process might route certificate checks + document sampling into your existing vendor framework like Zerun’s “cosmetic contract manufacturer checklist” page at Cosmetic Contract Manufacturer Checklist so ISO 22716 doesn’t get treated as a standalone badge.

What documents should match ISO 22716 For Custom?

ISO 22716 “compliance” shows up as consistent documents + consistent records. You don’t need a mountain of files—just enough to prove the system is real and routinely used.

ISO 22716 documentation list (what to request)What it should demonstrateRed flags that matter for buyers
SOP index + document control (revision history)Controlled procedures, not tribal knowledgeSOPs without effective dates/approvals
Training matrix + training recordsPeople are qualified for their rolesTraining is generic; no role mapping
Material specs (RM + packaging) + COA handlingInputs are defined and verifiedCOAs exist but no specs/limits
Batch manufacturing record (BMR) + in-process checksExecution is recorded and controlledMissing weights/times/signatures
QC methods + acceptance criteriaTests are meaningful and decision-based“Pass” only; no limits or methods
Nonconformance + deviation/CAPA recordsProblems are investigated and prevented“We never have deviations”
Cleaning/sanitation logs + calibration recordsDaily discipline is realLogs are blank, back-filled, or irregular
Complaint handling + traceability/recall procedureYou can contain issues fastNo lot-based complaint linkage

Packaging-related failures are a repeat-order killer (leaks, clogging, discoloration, odor pickup), so your ISO 22716 document sampling should connect to your packaging workflow—e.g., aligning packaging specs and incoming checks with your packaging sourcing process at Custom cosmetic packaging so the GMP controls match what you actually buy.

How do you verify certificate scope and validity?

This is where many buyers get misled: a supplier may show a real-looking certificate, but the site, scope, or issuing body may not match your procurement reality.

Use a three-step verification:

  1. Confirm the “site” matches the facility that will produce your SKUs.

    Multi-site groups sometimes certify one plant, then quote the certificate for another.

  2. Confirm the “scope” matches your activity and product category.

    Look for wording that clearly covers cosmetics manufacturing activities relevant to you (e.g., manufacturing and/or filling/packing), and ensure it’s not limited to a different business activity.

  3. Confirm the certificate is from an accredited certification chain.

    One practical check is using the International Accreditation Forum’s CertSearch information page “IAF CertSearch,” which explains you can validate certifications knowing the certification body is accredited and the accreditation body is an IAF MLA signatory, and it points to the database website for verifications/monitoring.

A quick buyer habit that works: ask the supplier to provide (a) the certificate PDF, (b) the audit report summary page (with site address and scope), and (c) the certification body name + certificate number so your team can cross-check.

What audit questions reveal true GMP maturity?

A mature ISO 22716 operation can answer with records, examples, and “here’s what changed after we learned something.” These questions surface whether you’re seeing a living system or a staged binder.

  • Change control reality: “Show one change you made (RM, packaging, process) and what you re-verified afterward.”
  • Release gate strength: “Who can place a lot on hold, and what happens commercially when QA says ‘no’?”
  • Trace speed: “Run a mock trace now: one finished lot back to key raw materials and packaging lots.”
  • Deviation learning: “Show the last deviation and the CAPA—what trend improved afterward?”
  • Supplier control: “How do you qualify and re-evaluate packaging suppliers (pumps, valves, liners)?”
  • Line clearance discipline: “Show the line clearance checklist for a recent changeover.”

If the answers stay abstract (“we follow ISO”) without showing real examples, you’re not auditing GMP—you’re listening to a pitch.

What are the most common ISO 22716 gaps?

Even factories that “know ISO 22716” often have repeat gaps that matter specifically to private label brands:

  • Scope/site mismatch on certificates (the paperwork doesn’t match the producing site).
  • Strong SOPs, weak records (procedures exist, but batch and release records are incomplete or inconsistent).
  • Packaging treated as “just a purchase,” not a GMP risk (incoming inspection and defect rules are vague).
  • Change control is informal (raw material substitutions or packaging component changes aren’t risk-assessed).
  • Release is production-driven (QA exists but lacks true hold authority).
  • Complaint handling isn’t lot-based (hard to trend issues and contain them quickly).
  • Training is onboarding-only (no refresh rhythm, no evidence of role competence updates).

Conclusion

ISO 22716 is best used as a buyer-side operating checklist: it tells you what “cosmetic GMP” should look like in day-to-day controls and records, but it doesn’t remove your responsibility to verify site, scope, and real execution. For private label manufacturing, the winning suppliers aren’t the ones with the prettiest certificate—they’re the ones whose batch records, release gates, change control, and traceability behave consistently when nobody is watching.

More Related

Custom Formulations

Hot Private label Beauty products

Hot ingredients

Custom cosmetic solutions

FAQ Categories

Can't find the answers?

No worries, please contact us and we will answer all the questions you have during the whole process of OEM Cosmetic customization.

Make A Sample First?

If you have your own formula, packaging idea, logo artwork, or even just a concept, please share the details of your project requirements, including preferred product type, ingredients, scent, and customization needs. We’re excited to help you bring your personal care product ideas to life through our sample development process.

Copyright 2023-20330Zerun Cosmetic, All rights reserved.

Contact Us Today, Get Reply Within 12-24 Hours

I am Ruby, our team would be happy to meet you and help to build your brand.