Safety Substantiation for Small Cosmetics Makers: What It Actually Means
Under MoCRA, the Modernization of Cosmetics Regulation Act of 2022, safety substantiation is documented reasoning that your product is safe for its intended use. That is the legal definition, and it is worth sitting with, because nowhere in it does it say you need a laboratory, a cosmetic chemist on retainer, or a five-figure toxicology study.
What it does require is a paper trail. One that shows you thought carefully about what you put in your product, how it will be used, and why you believe it will not harm someone. If you have been making products seriously for any length of time, parts of that paper trail already exist. This post will show you where to find them and what gaps to fill.
What "Adequate" Actually Means Under MoCRA
MoCRA requires that every cosmetic product sold in the United States have "adequate substantiation of safety" before it reaches consumers. The FDA uses that word deliberately: adequate. Not exhaustive. Not laboratory-proven. Adequate.
What counts as adequate depends on your product. A simple three-ingredient lip balm made with well-studied materials sits in a very different risk category than a leave-on serum with active botanicals targeting a sensitive eye area. The FDA evaluates substantiation proportionally, and your documentation should reflect that same proportionality.
In practice, adequate substantiation is a package of evidence. It can include:
Safety data on each ingredient at the concentration you are using it
A formulation record showing what is in the product and how much
Evidence that similar formulas have a history of safe use
Your manufacturing process, including hygiene and contamination controls
Any stability or preservation testing you have conducted
A documented review of that evidence by someone qualified to assess it
That last point is the one that makes small makers nervous. We will address it directly in a moment.
The Documentation You Probably Already Have
Most experienced makers are sitting on more substantiation than they realize. The question is whether it is organized in a way that could be reviewed and understood by someone else.
Supplier Safety Data Sheets
Every cosmetic ingredient supplier is required to provide a Safety Data Sheet, or SDS, for the materials they sell. These documents contain toxicological information, known hazard profiles, recommended usage rates, and skin sensitization data. If you have been buying from reputable suppliers, you have received these sheets. Collect them, organize them by ingredient, and keep them with your product records.
An SDS alone does not constitute substantiation, but it is a foundational input. It tells you and any reviewer that the ingredient has been evaluated, that known hazards are documented, and that you are aware of them.
Your Formulation Records
A complete formulation record showing ingredient names (INCI), percentages, supplier sources, and lot numbers is a core piece of your substantiation package. If you are still working from informal notes or a recipe card, now is the time to move to a structured format. The record should be specific enough that someone could reproduce the batch and verify the ingredient concentrations you are claiming.
This is also where having a Bill of Materials system earns its keep. Accurate, version-controlled formulation records are not just a production tool. They are a compliance document.
Established Usage Rates and Published Safety Data
Many cosmetic ingredients have published safety assessments from organizations like the Cosmetic Ingredient Review (CIR), which has evaluated thousands of cosmetic ingredients and made those assessments publicly available. If your ingredient is on their list and you are using it within their established safe concentration range, that published assessment can be cited as part of your substantiation. Keep in mind that CIR assessments evaluate ingredients individually — if your formula combines multiple actives or botanicals in ways that have not been widely studied together, that interaction is a gap your safety rationale will need to address separately.
This is significant. For a maker using standard cosmetic-grade ingredients at conventional usage rates, CIR assessments provide a legitimate, peer-reviewed evidence base that does not require you to commission new testing.
The EU's CosIng database is another useful reference, particularly if you sell in European markets or want additional safety references for your ingredients.
Already have SDS files and usage notes but no idea if that counts as compliance?
MoCRA added new requirements that go beyond safety documentation, including FDA registration and product listing rules that depend on your revenue and product type. Answer a few quick questions to see exactly where you stand.
Check your compliance →Where Product Category Changes the Equation
Not every product requires the same depth of substantiation, and understanding where your products fall on the risk spectrum helps you focus your effort appropriately.
Lower-Risk Categories
Rinse-off products, including shampoos, body washes, and facial cleansers, generally carry lower risk than leave-on products because skin contact time is short. Bar soaps made through traditional saponification may qualify as soap under FDA's definition and fall outside cosmetic regulation, but only under three conditions:
The product must be composed primarily of an alkali salt of fatty acids.
Its detergent action must derive from that compound.
It must be marketed and labeled solely for cleansing, without cosmetic claims such as moisturizing or anti-aging.
Calling the product a cleansing bar, beauty bar, or similar term may void the exemption regardless of formulation (see the FDA's guidance on soap). If any cosmetic claim is made, or if synthetic detergents contribute to the cleansing action, the product is regulated as a cosmetic regardless of how it is made.
For these product types, substantiation built primarily from supplier SDS sheets, CIR assessments, and your formulation records is a reasonable starting point, provided your ingredients are conventional and your concentrations are within established norms.
Higher-Risk Categories
Leave-on products, particularly those applied to the face, near the eye area, or to compromised or sensitive skin, warrant more thorough substantiation. So do products marketed to children or to anyone with a stated skin condition. In these cases, relying entirely on published ingredient assessments may not be sufficient, especially if your formula includes concentrations, combinations, or ingredient types that have not been widely evaluated together.
If your product line includes leave-on facial serums, eye creams, or products with high concentrations of botanical extracts or actives, a professional formulation review is worth budgeting for. Independent cosmetic safety assessors typically review these products on a per-product basis and costs and scope are covered in the Qualified Reviewer section below.
The Qualified Reviewer Question
MoCRA's guidance references a "qualified professional" reviewing safety data. This phrase stops a lot of small makers cold. It should not.
A qualified professional does not have to mean a cosmetic chemist at a contract lab. It means someone with sufficient expertise to evaluate the evidence you have assembled. Depending on your situation, that could look like several things.
Formulation Review Services
A number of independent cosmetic chemists and safety assessors offer document review services on a per-product basis. Costs for a per-product safety review from an independent assessor typically range from roughly $200 to $500 for a straightforward formula to $1,000 to $2,500 or more for complex multi-active products. These are planning estimates only — costs vary significantly by assessor, product complexity, and region. Always request itemized quotes from at least two or three providers before committing. Organizations like the Society of Cosmetic Chemists maintain member directories that can help you identify qualified reviewers who work with independent makers.
Structured Self-Assessment with Documented Rationale
For lower-risk products built from well-studied ingredients at established usage rates, a maker with sufficient formulation knowledge can document their own safety rationale. This means writing out, clearly and specifically, why you believe each ingredient at each concentration is safe for the intended use, citing the sources you relied on. It is not a lab report. It is a reasoned argument with cited evidence. Whether this constitutes adequate substantiation depends on the complexity of the product and the credibility of the sources cited.
Industry Education Programs
Several cosmetic formulation schools and professional development programs offer training specifically in safety assessment documentation. Building this knowledge base over time is a legitimate path for makers who intend to run a serious operation long-term.
The honest answer is that there is a spectrum here. A maker producing a four-ingredient body butter with well-documented ingredients is in a different position than one producing a complex multi-active facial serum. Match the level of rigor to the actual risk profile of your product.
How to Build Your MoCRA Safety Substantiation File Today
You do not need a new system to start. You need a folder, physical or digital, for each product. Inside that folder, you are collecting and creating the following.
1. Complete Formulation Record
Every ingredient, INCI name, percentage, supplier, and lot number. Keep this version-controlled. If you change the formula, create a new version and date it.
2. SDS Files for Every Ingredient
Request these from your suppliers if you do not have them. Any legitimate cosmetic ingredient supplier will provide them. Organize by ingredient name.
3. Published Safety Assessment Citations
For each ingredient, note the CIR assessment reference and the safe concentration range it establishes. You can search by INCI name at cir-safety.org. If your ingredient appears in multiple assessments, cite the most recent final report. If no CIR assessment exists for your ingredient, note that and identify an alternative peer-reviewed safety source. Confirm your usage rate falls within that range. Document both the source and your conclusion.
4. Manufacturing Process Summary
A written description of how you make the product, including hygiene practices, equipment, temperature controls, and any preservation or contamination testing you perform. This does not need to be long. It needs to be accurate.
5. Safety Rationale Document
A written summary that pulls the above together. Why do you believe this product is safe for its intended use? What evidence supports that conclusion? Who reviewed it, and what is their basis for being qualified to do so?
That is the file. It is not a single document. It is a coherent package that, if someone picked it up, would let them follow your reasoning from ingredient to finished product to safety conclusion.
The FDA's MoCRA guidance page is worth bookmarking. As of mid-2025, the agency is still issuing implementation guidance and substantiation record requirements may be further defined as rulemaking progresses. Small businesses — those with annual sales under $1 million in the previous three-year average — have historically received extended compliance timelines under MoCRA for certain provisions such as facility registration. Substantiation requirements apply broadly, but enforcement priorities and small business thresholds may shift as rulemaking continues. Confirm your business size classification against current FDA guidance before finalizing your compliance plan.
If you are managing multiple products across a growing line, keeping these records current is one of the harder operational problems. Your formulation records need to stay in sync with the versions you are actually producing, which is where having an organized production and recipe management system pays off beyond just making batches. When your Bill of Materials is accurate and version-controlled, your substantiation file stays accurate too.
Building a substantiation file is easier when your formulation records are already in order
If you are manually tracking ingredient percentages, lot numbers, and batch versions across spreadsheets or notebooks, that folder for each product gets messy fast. Batchforja keeps your recipe versions, materials, and batch records in one place so your documentation stays audit-ready.
Get early access →
Key Takeaways
Here is what small cosmetics makers need to know about MoCRA safety substantiation.
Safety substantiation is documented reasoning, not necessarily third-party laboratory testing. The standard is adequacy, not perfection.
Most experienced makers already have the foundation: supplier SDS sheets, formulation records, and access to published CIR safety assessments. The work is organizing and formalizing what exists.
Product risk category matters. Rinse-off products with conventional ingredients require less extensive substantiation than leave-on products, eye-area products, or formulas with higher-risk actives.
A qualified reviewer does not have to mean an expensive contract lab. For lower-risk products, a formulation review service or a well-documented self-assessment with cited sources may be appropriate.
Your substantiation file is a living set of documents: formulation record, ingredient SDS files, published safety data citations, manufacturing process summary, and safety rationale. Build it once, keep it current.