MoCRA Recordkeeping: What to Keep and for How Long

Nobody starts a cosmetics brand because they love recordkeeping, but MoCRA quietly turns every responsible person into a records custodian, and the requirement is easy to underestimate because it does not show up as a single dramatic form. It shows up as a habit you either build or do not.

The categories that matter

Adverse event records. If a consumer reports a health-related issue linked to your product, that report needs to be documented, and serious adverse events carry a reporting obligation to FDA. "Serious" generally covers things like a reaction requiring medical intervention, not a routine mild complaint, but the safest posture is to log every report you receive, evaluate it, and keep the documentation regardless of whether it clears the serious threshold, because you need the history to show a pattern if one exists.

Safety substantiation. Separate from adverse events, you need the file that shows you had a reasonable basis to believe the product was safe before you sold it. This includes test data, ingredient safety documentation, and any expert assessment tying it together.

Product listing information. The listing you filed with FDA (ingredients, product category, responsible party) needs to stay accurate. If you reformulate, the listing itself needs to be updated, and you should keep a record of what changed and when.

Facility registration details. Your registration needs periodic renewal, and any change in ownership, responsible person, or operational status at the facility should be reflected promptly rather than left for the next renewal cycle.

Manufacturing and batch records. Documentation tying a specific batch of finished product back to the raw materials, lot numbers, and manufacturing conditions used. This is what lets you trace a specific consumer complaint back to a specific batch if it ever comes to that.

A practical inventory

Record type	What it covers	Rough retention approach
Adverse event reports	Every consumer health complaint received, evaluated	Keep for the product's marketed life plus a reasonable buffer
Safety substantiation file	Test data, literature, expert assessment	Keep as long as the formula is sold, updated on reformulation
Product listing records	What you filed with FDA and when	Keep for the product's marketed life
Facility registration history	Registration, renewals, amendments	Keep across the life of the facility's registration
Batch and manufacturing records	Lot-level production detail	Keep long enough to trace complaints back to specific batches

Retention periods are not always spelled out to the day in a single place, and the safest approach for a small brand is to keep records at minimum for as long as the product is on the market plus a reasonable tail afterward, since a complaint can surface well after a product was sold. If you are unsure what applies to your specific situation, checking current FDA guidance directly is worth the ten minutes, since recordkeeping specifics are the kind of detail that can be updated.

Why organization matters more than volume

The point of this recordkeeping is not to accumulate paperwork for its own sake. It is so that if FDA requests records, or if a serious adverse event needs investigating, you can actually produce a coherent, complete answer promptly rather than reconstructing it after the fact from scattered emails and supplier PDFs.

A few habits make this manageable for a small team:

1. One file per product, not one giant folder for the whole brand, so you can hand over exactly what is relevant to a specific product question.
2. Log every adverse event report the moment it comes in, even ones that seem minor, with a short note on how you evaluated it.
3. Version your formula and listing records, so a reformulation creates a new dated entry rather than overwriting the old one.
4. Keep supplier documentation (SDS, COAs) attached to the ingredient, not buried in a separate purchasing folder.

The habit that actually protects you

None of this is complicated in isolation. What trips brands up is treating recordkeeping as an afterthought instead of something built into the normal rhythm of formulating, manufacturing, and selling. A folder structure set up on day one, updated as you go, beats a heroic reconstruction effort after a request lands in your inbox.

Cosmetic Comply is built around the same instinct: every ingredient gets mapped to its INCI name and CAS number with the filing itself trackable by number, and duplicating a past filing for a minor variant keeps your formula history organized rather than scattered, which is exactly the kind of record trail MoCRA expects you to be able to produce.