What is cosmetic GMP under ISO 22716?
Cosmetic GMP under ISO 22716 is a practical, process-based set of guidelines for how cosmetics should be produced and controlled—covering the daily disciplines that reduce contamination, mix-ups, and batch-to-batch drift. ISO 22716 itself is the international standard titled “ISO 22716:2007 Cosmetics — Good Manufacturing Practices (GMP) — Guidelines on Good Manufacturing Practices,” and ISO notes this version was reviewed and confirmed as current in 2022.
For private label buyers, it helps to separate three ideas: “cosmetic GMP” (the expectation to manufacture under good practices), ISO 22716 (a widely used GMP guideline), and “certification” (a third-party audit outcome that may or may not match your product scope or site). That’s why vetting isn’t “do you have a certificate?” but “do your real controls and records behave like ISO 22716?”
What does ISO 22716 cover (and what it doesn’t)?
ISO 22716 is focused on how you manage production and quality for cosmetics—typically from receipt of materials through making, filling/packing, storage, and shipment. A helpful plain-language overview is on the Singapore Standards eShop page for ISO 22716, which states it gives guidelines for production, control, storage, and shipment, and also notes important boundaries (for example, it’s not written to cover personnel safety or environmental protection, and it’s not applicable to R&D activities and distribution of finished products).
| What ISO 22716 is designed to cover | What it doesn’t replace (common buyer misunderstanding) |
|---|---|
| Personnel hygiene & training, premises & equipment controls | Your brand’s regulatory strategy (claims, market access rules, labeling law) |
| Raw material & packaging material control | A full product safety assessment by itself (ISO 22716 is a GMP guideline, not a “product approval”) |
| Production & filling controls, line clearance, prevention of mix-ups | R&D workstreams and finished-goods distribution design (outside ISO 22716 scope) |
| QC checks, nonconforming product handling, CAPA | EHS programs (personnel safety / environment are not its main scope) |
| Documentation, traceability, complaints & recalls | A guarantee that every certificate you see matches the site and scope you’re buying (you still must verify) |
Which sections matter most for private label brands?
Private label brands usually fail on repeatability and change discipline, not on “can you make a sample.” The ISO 22716 sections that most strongly protect repeat orders are the ones that stop silent drift and make issues containable.
| ISO 22716 area (buyer lens) | Why brands should prioritize it | What to check quickly during vetting |
|---|---|---|
| Supplier & incoming control (RM + packaging) | Prevents variability from vendors | Incoming inspection records + acceptance criteria |
| Production controls & line clearance | Prevents mix-ups, wrong labels, wrong fill | Line clearance checklist + 1–2 batch records |
| QC & release discipline | Stops nonconforming lots from shipping | Lot release record showing “hold/release” authority |
| Deviations, CAPA, and change control | Prevents the “2nd order is different” problem | A real change record + post-change verification notes |
| Traceability + complaints/recall readiness | Enables fast containment and customer response | A mock trace: RM lot → finished lot → shipments |
If you’re building a broader supplier evaluation flow, it’s cleaner to link ISO 22716 checks into your overall OEM due diligence (for example, your internal process might route certificate checks + document sampling into your existing vendor framework like Zerun’s “cosmetic contract manufacturer checklist” page at Cosmetic Contract Manufacturer Checklist so ISO 22716 doesn’t get treated as a standalone badge.
What documents should match ISO 22716 For Custom?
ISO 22716 “compliance” shows up as consistent documents + consistent records. You don’t need a mountain of files—just enough to prove the system is real and routinely used.
| ISO 22716 documentation list (what to request) | What it should demonstrate | Red flags that matter for buyers |
|---|---|---|
| SOP index + document control (revision history) | Controlled procedures, not tribal knowledge | SOPs without effective dates/approvals |
| Training matrix + training records | People are qualified for their roles | Training is generic; no role mapping |
| Material specs (RM + packaging) + COA handling | Inputs are defined and verified | COAs exist but no specs/limits |
| Batch manufacturing record (BMR) + in-process checks | Execution is recorded and controlled | Missing weights/times/signatures |
| QC methods + acceptance criteria | Tests are meaningful and decision-based | “Pass” only; no limits or methods |
| Nonconformance + deviation/CAPA records | Problems are investigated and prevented | “We never have deviations” |
| Cleaning/sanitation logs + calibration records | Daily discipline is real | Logs are blank, back-filled, or irregular |
| Complaint handling + traceability/recall procedure | You can contain issues fast | No lot-based complaint linkage |
Packaging-related failures are a repeat-order killer (leaks, clogging, discoloration, odor pickup), so your ISO 22716 document sampling should connect to your packaging workflow—e.g., aligning packaging specs and incoming checks with your packaging sourcing process at Custom cosmetic packaging so the GMP controls match what you actually buy.
How do you verify certificate scope and validity?
This is where many buyers get misled: a supplier may show a real-looking certificate, but the site, scope, or issuing body may not match your procurement reality.
Use a three-step verification:
Confirm the “site” matches the facility that will produce your SKUs.
Multi-site groups sometimes certify one plant, then quote the certificate for another.
Confirm the “scope” matches your activity and product category.
Look for wording that clearly covers cosmetics manufacturing activities relevant to you (e.g., manufacturing and/or filling/packing), and ensure it’s not limited to a different business activity.
Confirm the certificate is from an accredited certification chain.
One practical check is using the International Accreditation Forum’s CertSearch information page “IAF CertSearch,” which explains you can validate certifications knowing the certification body is accredited and the accreditation body is an IAF MLA signatory, and it points to the database website for verifications/monitoring.
A quick buyer habit that works: ask the supplier to provide (a) the certificate PDF, (b) the audit report summary page (with site address and scope), and (c) the certification body name + certificate number so your team can cross-check.
What audit questions reveal true GMP maturity?
A mature ISO 22716 operation can answer with records, examples, and “here’s what changed after we learned something.” These questions surface whether you’re seeing a living system or a staged binder.
- Change control reality: “Show one change you made (RM, packaging, process) and what you re-verified afterward.”
- Release gate strength: “Who can place a lot on hold, and what happens commercially when QA says ‘no’?”
- Trace speed: “Run a mock trace now: one finished lot back to key raw materials and packaging lots.”
- Deviation learning: “Show the last deviation and the CAPA—what trend improved afterward?”
- Supplier control: “How do you qualify and re-evaluate packaging suppliers (pumps, valves, liners)?”
- Line clearance discipline: “Show the line clearance checklist for a recent changeover.”
If the answers stay abstract (“we follow ISO”) without showing real examples, you’re not auditing GMP—you’re listening to a pitch.
What are the most common ISO 22716 gaps?
Even factories that “know ISO 22716” often have repeat gaps that matter specifically to private label brands:
- Scope/site mismatch on certificates (the paperwork doesn’t match the producing site).
- Strong SOPs, weak records (procedures exist, but batch and release records are incomplete or inconsistent).
- Packaging treated as “just a purchase,” not a GMP risk (incoming inspection and defect rules are vague).
- Change control is informal (raw material substitutions or packaging component changes aren’t risk-assessed).
- Release is production-driven (QA exists but lacks true hold authority).
- Complaint handling isn’t lot-based (hard to trend issues and contain them quickly).
- Training is onboarding-only (no refresh rhythm, no evidence of role competence updates).
Conclusion
ISO 22716 is best used as a buyer-side operating checklist: it tells you what “cosmetic GMP” should look like in day-to-day controls and records, but it doesn’t remove your responsibility to verify site, scope, and real execution. For private label manufacturing, the winning suppliers aren’t the ones with the prettiest certificate—they’re the ones whose batch records, release gates, change control, and traceability behave consistently when nobody is watching.
More Related
How to Vet an “FDA GMP” Cosmetics Suppliers →
Cosmetic Good Manufacturing Practice SOPs→
How To Run GMP Cosmetic Manufacturing Audit→
How To Verify A GMP Factory For Cosmetics →
FDA cosmetic compliance Documents Checklist→
Cosmetics Label Requirements Compliance Checklist→
Cosmetic Manufacturing Contract Agreement key clauses →
Custom Formulations
Hot Private label Beauty products
Hot ingredients
Custom cosmetic solutions
FAQ Categories
Can't find the answers?
No worries, please contact us and we will answer all the questions you have during the whole process of OEM Cosmetic customization.
Make A Sample First?
If you have your own formula, packaging idea, logo artwork, or even just a concept, please share the details of your project requirements, including preferred product type, ingredients, scent, and customization needs. We’re excited to help you bring your personal care product ideas to life through our sample development process.