You Got a Facility Registration Number, Now What?

You registered your facility with the FDA under MoCRA, you got a number back, and now there's a natural moment of "okay, did I just finish this, or did I just start it." The honest answer is you started it. Facility registration and product listing are two separate steps, and the number itself doesn't do much sitting alone in an email confirmation.

Registration and listing are not the same thing

MoCRA, the Modernization of Cosmetics Regulation Act from 2022, splits the FDA paperwork into two parts. Facility registration covers the physical place where your products are manufactured or processed. Product listing covers each individual product you make there. Your facility registration number identifies the building, effectively, and every product listing you submit needs to reference that number so the FDA can connect a given product back to where it was made.

If you've only registered the facility and haven't listed any products yet, you're not done. Product listing requires its own submission, typically covering things like the product's name, category, ingredient list, and the responsible person's contact information, and it's the piece that actually ties a specific formula to your facility record.

What a named responsible person means here

MoCRA requires a named responsible person, essentially the party who takes on the safety substantiation and adverse event recordkeeping obligations for the product. This can be the manufacturer, packer, or distributor whose name appears on the label, and this designation needs to be consistent across your registration and your listings. If you contract out manufacturing to a facility that isn't yours, sort out up front whose registration number the product listing points to and who is named as responsible person, because this is a common source of mismatched paperwork between brand owners and contract manufacturers.

Where the number does and doesn't show up

The facility registration number is an internal FDA identifier used to link your records together. It is not something that's designed to appear as a consumer-facing badge or claim on your packaging the way, for example, a Cosmetic Notification number in Canada gets referenced in some markets. Don't advertise "FDA Registered" language implying an approval or endorsement, since registration is not the FDA certifying your product safe. It's a recordkeeping requirement, not a stamp of approval, and treating it as marketing language risks misrepresenting what MoCRA actually requires.

Some businesses don't need to register at all

MoCRA does carve out an exemption for some small businesses from registration and listing requirements, so if you're a very small operation, check whether you actually fall under that exemption before assuming you need to register in the first place. The exemption criteria are specific enough that it's worth verifying against the current FDA guidance rather than assuming either way based on general size.

A short checklist for after you register

• Confirm every product you sell has been listed, not just the facility
• Confirm the responsible person named matches what's on your label
• Set up your adverse event recordkeeping system now, before you need it, since MoCRA requires you to maintain records rather than build them retroactively after a complaint
• If you use a contract manufacturer, get written clarity on whose facility number and whose responsible-person designation appears on the listing
• Remember sunscreen is regulated as an OTC drug, not a cosmetic, so if any of your products make sunscreen claims, MoCRA's cosmetic listing pathway isn't the right one for those specific products

Keeping it current

Registration and listing aren't necessarily a one-time event either. If you add new products, change facilities, or your responsible person changes, your records need to reflect that. Treat this the way you'd treat any other regulatory filing: current, not just completed once.

Cosmetic Comply is currently built around Canada's Cosmetic Notification System, with the US, EU, and Australia on the way, but the same instinct applies regardless of market: getting a number back from a regulator is the start of an ongoing recordkeeping relationship, not a box you check once and forget.