Business & Operations

The Supplier Document Checklist Before You Buy Ingredients

The CoA, SDS, and INCI-plus-CAS paperwork every cosmetic ingredient supplier should hand over before you buy, filed for audits.

The Compliance Desk4 min read

Every cosmetic recall investigation eventually asks the same question: where did this ingredient come from, and what do you have to prove what it actually was. If your answer is "an email from three years ago and a screenshot of a product page," you're going to have a bad week. The fix isn't complicated, it's just a habit: collect the right documents from every supplier before the ingredient goes into a batch, not after something goes wrong.

The four documents you actually need

Certificate of Analysis (CoA). This is the batch-specific proof of what you actually received: purity, identity confirmation, sometimes microbial or heavy metal testing depending on the ingredient. A CoA tied to a specific lot number is far more useful than a generic spec sheet the supplier reuses across years of production, because it tells you what was true of the material you actually bought, not what's typically true.

Safety Data Sheet (SDS). A proper SDS has 16 sections, and section 3, composition and information on ingredients, is the one you'll reference most for formulation work. Keep the current version on file, and note the date, since SDS documents do get revised as classification data updates.

INCI name and CAS number documentation. Trade names are fine for ordering and marketing conversations, but they never belong on a regulatory filing. You need the supplier to confirm, in writing, the INCI name of what you're buying, and ideally the CAS number too, since some ingredients carry more than one CAS number and some botanical extracts have none at all. If a supplier can't tell you the INCI name of their own product, that's a real red flag, not a minor gap.

Blend composition breakdown. If you're buying a proprietary blend, get the component breakdown with percentages inside the blend. You cannot correctly determine the real concentration of any active ingredient in your finished product without this. The math is straightforward once you have it: multiply the component's percentage within the blend by the blend's use level in your formula, and that gives you the actual finished-product concentration, which is what any filing or Hotlist screening actually needs.

Quick reference table

Document What it proves Why you keep it
Certificate of Analysis Identity and purity of the specific lot Batch-level evidence if a claim or complaint arises
Safety Data Sheet Hazard classification, composition (section 3), handling Workplace safety and formulation composition reference
INCI / CAS confirmation What the ingredient actually is, in regulatory language Required to file correctly, since trade names never appear on filings
Blend component breakdown Real percentage of each active inside a supplier blend Needed to calculate true finished-product concentration

Building the habit, not just the folder

The paperwork only helps if it's organized in a way you can retrieve fast. A shared drive with one folder per ingredient, named by INCI rather than by trade name, saves real time later. Attach the CoA to the specific batch it belongs to, and keep a running note of which formulas use which ingredient, so if a supplier issues a recall or updates a spec, you know immediately which of your products are affected.

It's also worth asking new suppliers for this documentation before you place a first order, not after. A supplier who can produce a CoA, current SDS, and INCI/CAS confirmation without friction is telling you something useful about how seriously they run their own operation. One who stalls or can only offer a marketing spec sheet is telling you something too.

Where this connects to filing

None of this documentation replaces a notification or a safety assessment, but it's the raw material that makes both possible to do correctly. When Cosmetic Comply builds out your ingredient list, matching each item to its INCI name and CAS number and screening it against a market's restricted list, the accuracy of that screening depends entirely on having correct supplier information to start from. Garbage INCI data in means an unreliable screen out, regardless of how good the tool doing the screening is. Getting the supplier paperwork right at the buying stage is what makes the rest of the compliance process actually trustworthy.

READY TO FILE?

Send your ingredients and we take it from here

A short intake form is all it takes to start. Every ingredient gets checked against your market's prohibited and restricted lists, then we file your notification and hand you a number you can track.

Start a filing

Keep reading