Salicylic Acid Limits for Leave-On and Rinse-Off Products

Salicylic acid is one of those ingredients where the same INCI name means something quite different depending on how the product gets used. A toner that sits on skin all day is a different exposure than a cleanser rinsed off in thirty seconds, and the permitted concentration reflects that difference. If you've formulated the same "salicylic acid product" in both a leave-on and a rinse-off version, you can't just carry over one number.

Why product type changes the limit

The logic behind concentration limits for exfoliating acids generally comes down to contact time and total exposure. A leave-on product delivers a sustained, lower-level exposure over hours. A rinse-off product delivers a brief, sometimes higher-tolerance exposure because the active ingredient doesn't stay in contact with skin nearly as long. Regulators account for this by permitting different maximum concentrations for the same ingredient depending on the product category.

This is exactly the kind of detail that's genuinely market-specific and does change over time as new safety data comes in, so treat any specific percentage number you've seen elsewhere as something to verify against the current Cosmetic Ingredient Hotlist before you finalize a formula, rather than something to assume is still current.

The category question comes first

Before you can even look up the right limit, you need to be honest about what category your product actually falls into:

• Leave-on: facial serums, toners left on skin, spot treatments, moisturizers
• Rinse-off: cleansers, face washes, exfoliating scrubs meant to be rinsed within a short window

A product marketed as a "wash" that's actually meant to sit on skin for several minutes before rinsing occupies an awkward middle ground. If your instructions tell the user to leave it on for five or ten minutes, some reviewers will treat that closer to a leave-on exposure than a quick rinse-off. When in doubt, the safer approach is to formulate to the more conservative limit rather than lean on a technicality in your own product instructions.

The child-warning condition

Salicylic acid restrictions in many jurisdictions come bundled with a labeling condition, not just a bare percentage cap. A common structure is a warning statement required on products intended for use by children under a certain age, since salicylate sensitivity and absorption considerations differ for younger users. If your restriction includes a condition like this, it's not optional decoration, it's part of what makes the concentration permissible at all. Leaving the warning off while keeping the ingredient at the permitted percentage can turn a compliant formula into a non-compliant label.

Practical checklist:

1. Confirm which concentration limit applies to your specific product category (leave-on vs. rinse-off).
2. Check whether a child-age warning statement is attached to that limit.
3. If so, make sure the exact required wording appears on your packaging, not just something similar in spirit.
4. Re-verify the current Hotlist limit at the time of filing, since these thresholds do get revisited.

How this shows up on your notification

On the Cosmetic Notification Form, you list Salicylic Acid by its INCI name with the concentration or range you're using. The form itself won't stop you from entering a number that's technically too high, the screening against the Hotlist is a separate check you (or your notification tool) need to run. This is one of the more common ways a filing goes sideways: the ingredient list looks fine at a glance, the percentage is entered correctly, but nobody cross-referenced it against the specific limit for that product category.

Product type	Contact time	Typical concern
Leave-on serum/toner	Hours	Sustained low-level skin exposure
Rinse-off cleanser	Seconds to minutes	Brief, higher-tolerance exposure
Leave-on scrub used as instructed	Minutes	Ambiguous, formulate conservatively

Where a lot of small brands get stuck

Small skincare brands often run one salicylic acid formula through two SKUs, a cleanser and a leave-on treatment, using the same base percentage in both because it's simpler to manufacture. That's understandable from a production standpoint, but it means one of your two products is very likely either under-delivering on the treatment side or sitting closer to the ceiling than intended on the rinse-off side. Worth running the numbers separately for each SKU rather than assuming one percentage serves both.

Cosmetic Comply screens each ingredient concentration against the current Cosmetic Ingredient Hotlist automatically as part of preparing your notification, flagging anything that's close to or over a limit before a reviewer looks at it, so a mismatch like running the same percentage across a leave-on and rinse-off SKU gets caught early instead of after you've already filed.