Before you release purchase order funds for a Korean hyaluronic ampoule serum, you need documented proof — not verbal assurances — that the manufacturer, the formula, and the label all meet US requirements. This checklist covers nine document categories a sourcing or QA manager should run through before committing funds. Each checkpoint tells you what to ask for, what a solid response looks like, and the red flag that means stop.
Why Documentation Matters Before You Commit
Import compliance rules for cosmetics changed significantly after the Modernization of Cosmetics Regulation Act of 2022 (MoCRA). Per the FDA, facility registration enforcement began on July 1, 2024. If your Korean supplier has not registered their manufacturing facility with the FDA, your shipment can be refused entry at a US port.
Beyond registration, the responsible person named on the product label now carries formal obligations for safety substantiation records, adverse event reporting, and product listing — obligations that did not exist in US federal law before MoCRA. A supplier who cannot document compliance with these requirements is not ready for US distribution, regardless of product quality.
Many Korean cosmetic manufacturers do carry the right credentials. Others claim credentials they no longer hold, or never completed. The only way to tell the difference before you wire funds is to request the documents, check the details, and verify key claims independently.
The nine checkpoints below follow the order you should run them — starting with the manufacturer's facility and ending with the incoming shipment you will receive.
Nine Checkpoints: Document by Document
Pre-Order Verification Checklist: Korean Hyaluronic Ampoule Serum
- ISO 22716 GMP certificate — confirm issuing body name and validity datesRequest the full certificate from an accredited third-party body. A self-declaration does not count.
- Batch Certificate of Analysis (CoA) — match lot number to the quoted batchCoA must include microbial limits, heavy metals, pH, and an authorized QC unit signature. No undated or unsigned documents.
- Accelerated stability report (minimum 3 months) under stated conditionsReport must show testing temperature and humidity and cover the specific 50ml PET formula.
- Real-time stability data (minimum 12 months) to support the 24-month shelf lifeMoCRA safety substantiation records must include stability testing. Twelve months minimum validates a 24-month claim.
- Preservative Efficacy Test (PET) report using USP <51> or ISO 11930Test must be run on the final finished formula, not an ingredient. Confirm the specific paraben-free preservative system was tested.
- Full INCI ingredient list cross-checked against 21 CFR Part 700 prohibited ingredientsHyaluronic acid and niacinamide are unrestricted. Verify any color additives appear on the FDA-approved list under 21 CFR Parts 73/74.
- MoCRA facility registration number — verify independently in FDA Cosmetics DirectEnforcement started July 1, 2024. Ask for the registration number and look it up yourself.
- US Responsible Person appointment letter or contractNon-US manufacturers must name a US Responsible Person on the label. Without one, the product cannot legally enter US commerce.
- Claim substantiation files for each marketing claim24-hour hydration: Corneometer data. Clinically tested: full RCT protocol and results. 95% naturally derived: calculation methodology.
- US-compliant draft label reviewed against 21 CFR 701 and the FPLAMust show product identity, net quantity in US and metric units, Responsible Person address, INCI list, and country of origin — all in English.
- Filled pre-shipment sample for physical fill-weight and leak verificationWeigh net contents. Run a drop test and cap seal check. No PO release without a sealed, filled sample.
- AQL inspection plan confirmed — Level II, AQL 2.5 Major / AQL 4.0 MinorFor a 4,000-unit lot, the standard sample is 200 units. Arrange a third-party inspector before the shipment date.
Checkpoint 1: GMP Evidence (ISO 22716)
What to ask for: The full ISO 22716:2007 certificate, including the name of the issuing certification body and the validity dates.
What good looks like: A certificate issued by an accredited third-party certification body, currently valid, and covering the specific manufacturing location. Per the International Organization for Standardization, ISO 22716 covers production, control, storage, and shipment of cosmetic products. It is the globally accepted GMP benchmark for the cosmetics industry.
Red flag: A self-declaration stating the factory "operates to GMP standards." A scanned certificate with no issuer name visible. A certificate that has expired.
Checkpoint 2: Batch Certificate of Analysis (CoA)
What to ask for: A CoA for the specific batch or lot number referenced in the supplier's quote, signed by an authorized member of the manufacturer's quality unit.
What good looks like: Per the Contract Laboratory Network, a valid cosmetics CoA includes the product name, batch number, manufacturing and expiry dates, test results for microbial limits, heavy metals, and residual solvents, specification limits with pass or fail determinations, and an authorized signature. These fields confirm the batch was tested before release.
Red flag: A generic CoA with no batch number. An unsigned document. Results that omit microbial limits or heavy metals. A CoA dated years before the current quote.
Checkpoint 3: Stability and Preservative Efficacy Data
What to ask for: Two separate documents — (a) a stability test report and (b) a Preservative Efficacy Test (PET) report — both run on the finished formula, not on individual ingredients.
What good looks like: Per Zignify Regulatory Compliance, stability testing for cosmetic serums should include at least 3 months of accelerated testing at elevated temperature and humidity, plus 12 months of real-time stability testing. This data validates the stated 24-month shelf life and is part of required MoCRA safety substantiation records.
For PET, per Eurofins Scientific, a water-based multi-use product like a serum should have challenge testing using USP <51> or ISO 11930. The report should show which bacteria, yeast, and mold were introduced, the log-reduction results at each time point, and whether the formula met Criteria A or Criteria B.
Red flag: Stability data run on the hyaluronic acid ingredient rather than the finished 50ml formula. A PET report that does not name the specific preservative system. Missing stability data entirely.
Checkpoint 4: INCI Ingredient Disclosure and Restricted-Ingredient Screen
What to ask for: The full INCI ingredient list in descending order of predominance — every ingredient in the formula, listed by its INCI common name.
What good looks like: Per 21 CFR 701.3, all cosmetic ingredients for US retail must be declared in descending order using their INCI names. Per the FDA, hyaluronic acid and niacinamide are not on the prohibited or restricted ingredient list under 21 CFR Part 700.
What to verify yourself: If the formula contains any color additives, check each one against the FDA's approved list at 21 CFR Parts 73, 74, 81, or 82. Per the FDA, color additives in cosmetics require pre-market approval, and many require batch certification in FDA laboratories before legal use in the US market.
Red flag: Ingredients listed under trade names rather than INCI names. A color additive you cannot locate in the FDA approval tables. An INCI list provided only in Korean.
Checkpoint 5: MoCRA Facility Registration and US Responsible Person
What to ask for: (a) The FDA MoCRA facility registration number for the manufacturing site. (b) A signed appointment letter or contract naming a US Responsible Person who will appear on the product label.
What good looks like: Per the FDA, facilities required to register under MoCRA had to complete registration by December 29, 2023, with enforcement beginning July 1, 2024. Per Cosmeservice Regulatory, registrations must be renewed every two years, and facilities must update their registration within 60 days of any changes. To verify the registration number independently, search FDA Cosmetics Direct.
The Responsible Person is defined by the FDA as the manufacturer, packer, or distributor whose name appears on the label. Per Zignify Regulatory Compliance, a non-US manufacturer must designate a US agent to serve as the official point of contact with the FDA. Without a US Responsible Person named on the label, the product cannot legally be marketed in the US.
Red flag: Supplier says facility registration "is in process" or "will be completed soon." Supplier cannot provide a registration number. No US Responsible Person has been identified.
Checkpoint 6: Marketing Claim Substantiation
What to ask for: For each marketing claim on the product, request the specific study or test run on the finished formula.
- "24-hour hydration": Per J&J Consulting Group, a claim like this requires instrumental testing using a Corneometer — which measures skin hydration levels — with measurements at baseline and at 24 hours post-application. Consumer self-evaluation studies can support but do not replace instrumental data.
- "Clinically tested": Per J&J Consulting Group, this claim requires a randomized controlled trial with a clear protocol, statistical significance, and documentation of ethical conduct. A complete Product Information File with the full testing protocol, raw data, and final scientific report is required. Ingredient supplier efficacy data alone is not sufficient — the claim must be proven in the final finished formula.
- "95% naturally derived": Per the FDA, there is no legal definition of "naturally derived" or "natural" for cosmetics. A percentage claim like this requires a documented calculation methodology explaining what qualifies as "naturally derived" in the formula and how the percentage is derived. The FTC requires that any such claim be strictly accurate.
Red flag: Supplier sends ingredient supplier data sheets as claim proof. "Clinically tested" is supported only by a raw material vendor monograph. No Corneometer data exists for the hydration claim.
Checkpoint 7: US Label Compliance
What to ask for: A draft US label for your review before any production run.
What good looks like: Per the FDA's summary of cosmetics labeling requirements under 21 CFR Parts 700–740 and the Fair Packaging and Labeling Act, every US cosmetic label must include: (1) a product identity statement on the principal display panel, (2) net quantity of contents in both US and metric units, (3) the name and address of the responsible person, (4) an INCI ingredient declaration in descending order of predominance, and (5) country of origin, required under the Tariff Act of 1930. All required label text must be in English.
Red flag: Net quantity appears in metric units only. The Responsible Person section is blank or shows the Korean manufacturer's address. INCI ingredients are listed in Korean or use trade names.
Checkpoint 8: Fill-Volume and Packaging Verification
What to ask for: A filled, sealed pre-shipment sample that is identical to the production run — same fill volume, same cap, same PET bottle.
What good looks like: Per Blackbird Skincare, importers should verify that net contents match declared quantities, including in both US and metric units as required by 21 CFR. Physical stress tests — leak tests and drop tests — simulate real-world conditions. A vacuum chamber test can verify packaging integrity for sealed bottles.
For a 50ml PET bottle: weigh the net fill on a calibrated scale. Drop the sealed bottle from a standard height to test the cap seal. Check for any visible leakage after the drop.
Red flag: Supplier cannot provide a filled sample before PO release. The actual fill weight is short of 50ml when weighed. The cap leaks on a basic drop test.
Checkpoint 9: AQL Incoming Inspection Plan
What to ask for: Before the shipment arrives, establish your inspection plan and communicate defect classifications to a third-party quality inspector.
What good looks like: Per QIMA, the standard for consumer goods is ANSI/ASQ Z1.4 at General Inspection Level II, with AQL 2.5 for Major defects (those affecting product function or appearance) and AQL 4.0 for Minor defects. Critical defects — such as contamination or adulteration — carry AQL 0, meaning zero tolerance. For a 4,000-unit lot at AQL 2.5, the standard sample size is 200 units.
Red flag: No inspection plan has been set before the shipment date. Supplier objects to a third-party pre-shipment inspection. No inspector has been arranged.
Red Flags: Stop and Do Not Release Funds
Red Flags: Do Not Release PO Funds
Stop immediately if you see any of these
Supplier refuses to name the GMP certificate issuing body or share the expiry date. CoA is undated, unsigned, or does not reference the specific batch being quoted. Stability data was run on a raw ingredient, not the finished formula. MoCRA facility registration number cannot be found in FDA Cosmetics Direct. No US Responsible Person has been appointed. Claim substantiation is ingredient supplier data sheets only — no finished-formula testing. A filled pre-shipment sample cannot be provided before funds are released.
Individual red flags can sometimes be resolved with a follow-up request. When you encounter multiple red flags together — for example, a supplier who cannot produce a GMP certificate issuer name, has an unsigned CoA, and has not completed MoCRA registration — that is a pattern, not an oversight.
Two or more red flags from the checklist above should pause your purchase order until every open item is resolved. Release of funds is the point of maximum leverage in a sourcing relationship. Once the PO is placed, your options narrow considerably.
If the supplier cannot provide a filled pre-shipment sample before you release funds, that alone is a reason to stop.
Frequently Asked Questions
Ask the supplier for their facility registration number. Then verify it yourself in FDA Cosmetics Direct at the FDA's official portal. Per the FDA, facilities were required to register by December 29, 2023, and enforcement of this requirement began July 1, 2024. If the number does not appear in the system, the facility is not registered.
Per the Contract Laboratory Network, a valid cosmetics CoA must include: the product name, batch or lot number, manufacturing and expiry dates, test results for microbial limits (total aerobic count, yeast and mold), heavy metals, pH, and any other formula-specific parameters, specification limits with pass or fail status, and an authorized quality unit signature. A CoA that lacks any of these fields is incomplete.
The obligation to name a Responsible Person falls on whoever appears on the product label as the manufacturer, packer, or distributor, per the FDA. For products manufactured in Korea and sold under a US brand, the Responsible Person is typically the US importer or brand owner — not the Korean factory. The Korean manufacturer must designate a US Agent to communicate with the FDA directly. Both must be in place before the product is marketed in the US.
The two recognized standards are USP <51> and ISO 11930. Per Eurofins Scientific, USP <51> requires a log reduction by Day 14, with stability maintained through Day 28. ISO 11930 offers two pass criteria: Criteria A (more strict) and Criteria B (less strict). Either standard is acceptable for a US cosmetic. The test must be run on the final finished formula with the specific preservative system used — not on a test model with a different preservative.
Yes. Third-party contract labs can run accelerated and real-time stability testing on samples you purchase. However, the time required means you will not have the full 12-month real-time dataset before your first order. The minimum acceptable approach for a first purchase order is a current 3-month accelerated report from the supplier, with real-time data ongoing. A supplier who has no stability data of any kind and cannot point to an ongoing study is not ready to substantiate a 24-month shelf life claim under MoCRA.