Microbiological Testing Rules for Cosmetics You Export
What challenge testing and microbial limits mean for a safety file, and which export markets expect results before you notify.
Preservation is one of those things that feels solved once you've picked a preservative system and it's worked fine in your own use for months. Then you go to sell into a second market and discover that "it's worked fine" isn't the same as documented microbiological evidence, and those are two very different things to a regulator or a distributor's compliance team.
What challenge testing actually is
Challenge testing, sometimes called a preservative efficacy test, deliberately inoculates a sample of your finished product with specific microorganisms, bacteria, yeast, and mold, and then measures how quickly and completely your preservative system kills or controls that contamination over a defined period. It's not testing whether your product happens to be clean right now. It's testing whether your formula's preservation system can hold up against contamination it's likely to encounter across its real shelf life and real consumer use, including repeated hand contact, water introduced by wet fingers, and open-jar exposure over months.
This matters more for water-based products, emulsions, and anything packaged in a jar than for anhydrous products like oil blends or true soap bars, which have much lower inherent contamination risk. But "lower risk" isn't the same as "no testing needed," particularly once a regulator or export market asks for documentation rather than your assurance.
Microbial limits, the other half of the picture
Separate from challenge testing, many markets and product categories expect a microbial limit test on the finished product as manufactured, confirming it falls under acceptable total count thresholds for aerobic bacteria, yeast, and mold, and confirming the absence of specific pathogens that shouldn't be present at all regardless of product type. This is closer to a release test, confirming a given batch is clean, than to challenge testing's forward-looking question of whether the preservation system will hold up over time. You generally want both, because they answer different questions.
| Test type | Question it answers | When it's typically run |
|---|---|---|
| Challenge test (preservative efficacy) | Will the preservation system control contamination over shelf life and use? | Once per formula, or after any formula or packaging change |
| Microbial limit test | Is this specific batch clean as manufactured? | Per batch, or at defined release intervals |
Where this connects to your safety file
Test results feed directly into the safety documentation several export markets expect as part of the notification or registration process. In the EU, for example, the Cosmetic Product Safety Report is signed by a qualified safety assessor and is expected to reflect the actual safety basis for the product, which includes microbiological safety alongside toxicological review of the ingredients. A CPSR built without real challenge test data behind a preservative system claim is a weaker file than one with actual results attached, and a safety assessor doing their job properly will ask for it.
Markets that operate on notification rather than pre-market approval, Canada's Cosmetic Notification Form being one, don't require you to submit microbiological test results as part of the filing itself. But that doesn't mean the underlying safety obligation disappears. It just means the burden sits with you to have it on file and produced if asked, rather than reviewed upfront by the regulator.
Practical steps if you're expanding into new markets
A few things worth doing before you scale into an export market you haven't sold into before:
- Confirm whether challenge testing has ever been run on your current formula, not just a similar one from a prior product line. Formula changes, even swapping one humectant for another, can shift preservation performance enough to matter.
- Check if your packaging changed. A jar packaged product has different contamination exposure than the same formula in an airless pump, and test results from one don't automatically transfer to the other.
- Ask what documentation the specific export market or distributor expects. Requirements genuinely vary, and what satisfies one market's safety file may fall short of another's expectations, so this is worth verifying with the current regulator guidance for wherever you're actually selling rather than assuming.
Where Cosmetic Comply fits
Cosmetic Comply's job is the ingredient side of your filing, mapping every component to its INCI name and CAS number, screening against the market's prohibited and restricted substances, and getting a real reviewer to check the result before filing your Canadian notification. Microbiological testing is a separate, complementary piece of your safety story, one worth commissioning from a qualified lab regardless of which market's ingredient screening you're running through, since a clean ingredient list doesn't mean much if the finished product can't hold up against contamination once it's opened on someone's bathroom counter.
Send your ingredients and we take it from here
A short intake form is all it takes to start. Every ingredient gets checked against your market's prohibited and restricted lists, then we file your notification and hand you a number you can track.
Start a filingKeep reading
Northern Ireland Cosmetic Rules Are Not the Same as Britain
Selling across the whole UK from one label? Northern Ireland still follows EU cosmetic rules while Great Britain runs its own separate system.
Korean Language Labeling Rules for Imported Cosmetics
Selling into Korea means a Korean-language label the importer applies, and its ingredient names do not map one-to-one with INCI.
Why Sunscreen Is a Drug in Some Markets and a Cosmetic in Others
How the US, EU, and Australia treat SPF products differently, and where sunscreen claims can knock your notification out of the cosmetic lane.
Labeling a Cosmetic in Multiple Languages Without Errors
Which label elements must be translated in Canada, the EU, and the Gulf, and why INCI ingredient names stay in a single fixed form everywhere.