Certifications

Certification is the least useful thing to ask a cosmetics factory about, and the most useful thing to verify. Any supplier can list logos. What separates a real certificate from a marketing badge is whether you can check it independently, and whether the scope covers the product you are actually buying.

This page lists what BodyLife Global holds, what each item actually covers, and — more usefully — how to verify any of them yourself without taking a supplier’s word for it.

Cosmetics quality control laboratory at BodyLife Global where stability, microbiology and heavy metal testing are performed
In-house testing laboratory. A certificate says a system exists; the lab is where that system produces evidence.
BodyLife Global at a glance
Manufacturer type Cosmetic OEM / ODM / private label manufacturer
Location China — two GMP-certified sites, 60,000+ m² total
Capacity 100M+ units per year across 20+ production lines
Minimum order 500 units per SKU (startup band 500–1,000; standard 3,000)
Sampling 7–10 days from approved brief
First production 20–30 days after sample approval; reorders 7–14 days
Quote turnaround Within 48 hours
Certifications GMP, ISO 22716, ECOCERT, COSMOS, FDA, SMETA, CPNP, CPSR
Testing Every batch tested, COA issued, full batch traceability
Clients 300+ active brands across 50+ countries, since 2002
Colour cosmetics Foundation and pressed powder only — not eyebrow pencils or eyeshadow

The distinction most buyers miss

Not everything in a cosmetics supplier’s logo wall is the same kind of document. There are three different things being shown, and conflating them is how buyers get misled:

  • Audited management system certification — an external body inspects the factory and issues a certificate with a scope and an expiry date. Examples: GMP, ISO 22716, SMETA. These are verifiable against the certifying body’s register.
  • Product or ingredient standard — applies to a specific formulation’s ingredients, not the factory. Examples: ECOCERT, COSMOS. A factory holding this means some of its inputs are certified, not that every product it makes is organic.
  • Regulatory filing or registration — a legal obligation, not an achievement. Examples: FDA facility registration, EU CPNP notification, CPSR. Every legitimate supplier selling into that market must have these. Listing them as credentials is technically true but not differentiating.

Why this matters: if a supplier lists CPNP alongside GMP as if they carry equal weight, that is a signal about how carefully they present information — which is the same care they will apply to your batch records.

What BodyLife Global holds

GMP — Good Manufacturing Practice

The baseline for cosmetics manufacturing: documented procedures, batch records, equipment qualification, personnel hygiene, deviation handling. It answers one question — can this factory prove what it made and trace a defective batch? We operate two GMP-certified sites totalling 60,000+ m² with 20+ production lines.

ISO 22716 — Cosmetics GMP guideline

The international standard specifically for cosmetics, harmonised with EU Regulation 1223/2009. Where GMP is the general principle, ISO 22716 defines the cosmetics-specific requirements: production, quality control, storage, distribution, and the documentation that ties them together.

ECOCERT — organic input certification

Certifies organic content in ingredients and formulations against a defined standard. Scoped to specific products, not to the whole factory. If organic positioning matters to your brand, ask which specific SKUs and what percentage of organic content is certified — a factory-level ECOCERT mention does not automatically make your product certifiable.

COSMOS — COSMetic Organic and natural Standard

A European standard for organic and natural cosmetics, jointly governed by certification bodies. Two tiers exist (COSMOS ORGANIC and COSMOS NATURAL) with different thresholds. Ask which tier applies.

FDA — US facility registration and product listing

Under MoCRA, US-market cosmetics require facility registration and product listing with FDA. This is a legal requirement to sell into the US, not a quality endorsement. It does mean the facility is on FDA’s register and subject to inspection.

SMETA — Sedex Members Ethical Trade Audit

A social and ethical audit covering labour standards, health and safety, environment and business ethics. Relevant if you sell through retailers that require ethical supply chain evidence. It is a four-pillar audit format, and the report has a corrective action plan attached — ask to see it, not just the certificate.

CPNP — Cosmetic Product Notification Portal

The EU notification system under Regulation 1223/2009 Article 13. Any cosmetic placed on the EU market must be notified before it goes on sale. It is a filing, not an audit.

CPSR — Cosmetic Product Safety Report

The safety assessment required by Article 10 and Annex I of the same regulation, prepared by a qualified safety assessor. Every EU product needs its own CPSR — it is product-specific, not factory-specific.

How to verify any certificate yourself

This takes about ten minutes and removes almost all of the risk of being shown a forged or expired document:

  1. Ask for the certificate number and the certifying body’s name — not the certificate PDF first. A supplier who sends the PDF but cannot name the issuing body is a problem.
  2. Check the certifying body’s public register — most audit bodies publish a searchable client register. Look up the company name, not just the number.
  3. Check the scope statement — this is where most claims fall apart. A GMP certificate is issued for a specific site and specific product categories. Confirm the address matches the factory you are buying from, and the scope covers your product type.
  4. Check the expiry date — GMP and ISO certificates are typically valid three years with annual surveillance audits. An expired certificate is not a certificate.
  5. Ask whether the factory is certified or the trading company is — very often the entity holding the certificate is not the entity you are contracting with. This is the single most common gap.
Technician examining a cosmetic sample under a microscope for microbiological testing before batch release
Microbiology bench. Every batch is tested before release, and a COA is issued against that batch.

What certification does not tell you

Being precise about the limits is more useful than another logo:

  • It does not measure whether the product is good. A GMP-certified factory can make a formula that separates in three months. Certification covers process discipline, not formulation quality.
  • It does not guarantee the batch you receive matches the sample. Only per-batch testing and a COA do that.
  • It does not cover every line. The scope statement matters. A certificate for one site says nothing about a sister facility.
  • It is not a substitute for an audit. If your order is large enough to justify it, visit. Certificates describe a system; a walkthrough shows whether people follow it.

Frequently asked questions

Is GMP the same as ISO 22716?

No. GMP is the general principle of documented, controlled manufacturing. ISO 22716 is the cosmetics-specific standard that defines what GMP means for cosmetic products, aligned with EU Regulation 1223/2009. A factory can hold GMP certification without ISO 22716, so ask for both if you sell into the EU.

Do I need a GMP-certified factory to sell cosmetics?

Legally it depends on the market. Practically, most retailers and distributors will require it, and the EU places GMP obligations on the responsible person regardless. Selling without it limits you to channels that do not audit their suppliers.

How often are these certificates renewed?

GMP and ISO 22716 are typically three-year certificates with annual surveillance audits. Product-level certificates (ECOCERT, COSMOS) follow their own annual cycles. Always check the current expiry date rather than a certificate’s issue date.

Can a trading company hold these certificates?

A trading company can hold certifications for its own activities, but the GMP certificate that matters belongs to the factory that physically makes your product. Ask for the certificate of the manufacturing site, and confirm the address on it matches where production happens.

What is the difference between a certificate and a COA?

A certificate covers the factory’s system over time. A Certificate of Analysis covers one specific batch: it records the measured values for that production run. You need both — the certificate to trust the process, the COA to verify your batch.

Next step

If you need certificate copies and scope statements for a supplier qualification file, ask for them directly — including which legal entity holds each one. Request a quote · OEM manufacturing · Custom formulation · About BodyLife Global

Further Reading

Scroll to Top