Safety Substantiation: What Records MoCRA Expects You to Keep

Ask five small cosmetic brands what "safety substantiation" means and you will get five different answers, ranging from "I sent it to a lab once" to "I'm not totally sure." MoCRA requires that a responsible person have adequate substantiation supporting the safety of a cosmetic product, but it does not hand you a checklist with box sizes marked out. That ambiguity is exactly why it is worth pinning down what a reasonable file actually contains.

What "adequate substantiation" is trying to prove

The underlying question a regulator or a plaintiff's attorney will eventually ask is simple: did you have a reasonable basis to believe this product was safe under its labeled or customary conditions of use, before you sold it? Substantiation is the paper trail that answers yes.

It is not one document. It is usually a combination of several kinds of evidence, and how much you need scales with the product's risk profile. A gentle, well-established body lotion formula needs less than a leave-on product with active botanical extracts nobody has used at that concentration before.

The building blocks of a substantiation file

Test data. This includes any product-specific testing you commissioned: microbial challenge testing (preservative efficacy), stability testing, patch testing or a human repeat insult patch test (HRIPT), and any irritation or sensitization screening. Not every product needs every test, but a preservative system without challenge test data is a common gap.

Ingredient safety data. Safety data sheets for raw materials, supplier certificates of analysis, and any toxicology summaries the raw material supplier provides. This is where you lean on the fact that most cosmetic ingredients have decades of published safety literature behind them; you do not need to reinvent that research, you need to show you consulted it.

Published literature and prior use history. If an ingredient has a long history of safe cosmetic use at the concentration you are using it, published safety assessments (from bodies that review cosmetic ingredient safety) and industry literature can substantiate that ingredient's use. This is often the bulk of the file for a conventional formula.

Expert or qualified assessment. For many small brands, this is a formal review by a cosmetic chemist or a toxicologist who looks at the finished formula, the intended use, and the population likely to use it, and documents a professional opinion that it is safe as formulated. This ties the individual pieces of evidence together into a conclusion.

Manufacturing controls. Batch records, raw material lot numbers, and evidence that you are manufacturing under reasonable good practice (ISO 22716 is the recognized GMP standard for cosmetics) all support the argument that what left your facility matched what was substantiated.

A simple table to think it through

Record type	Why it matters	Who usually provides it
Preservative challenge test	Shows the product resists microbial growth over its shelf life	Contract lab
Stability test	Shows the formula holds up under storage/temperature conditions	Contract lab or in-house
Raw material SDS/COA	Documents identity, purity, known hazards of each input	Ingredient supplier
Published ingredient safety literature	Supports safe use at your concentration and use type	Assembled by you or your assessor
Expert safety assessment	Ties the file together into a documented conclusion	Cosmetic chemist or toxicologist
Batch and lot records	Shows consistent manufacturing matching the substantiated formula	Your production records

Recordkeeping in practice

MoCRA also expects a responsible person to keep records of adverse events reported for the product, separate from the safety substantiation file itself, and to be able to produce safety records reasonably promptly if FDA requests them. Practically, that means the smart move is a labeled folder (physical or digital) per product or per formula version, not a scramble through email threads when something is requested.

If you tweak a formula, even a small change like a new preservative or a different fragrance load, treat it as needing its own look at whether the substantiation file still holds up. A file substantiates the formula as tested, not the general idea of the product.

Where small brands go wrong

The most common gap is not missing data, it is missing organization. A brand might genuinely have all the pieces (supplier COAs, a stability test from two years ago, a general sense that the formula is standard) but nothing tying it together into a single file that shows the reasoning. Building that file as you formulate, rather than retroactively, saves a lot of stress later.

Cosmetic Comply does not replace a safety assessor's judgment, but by mapping every ingredient in your formula to its correct INCI name and CAS number and carrying supplier blend percentages through, it gives you a clean ingredient-level foundation to hand to your assessor or to reference when you are pulling your substantiation file together for a MoCRA product listing.