Wholesale vs Direct Sales: Who Carries the Compliance Load

A maker asked me recently whether getting into a boutique's wholesale program meant the store would "handle the compliance side." It does not, and the assumption is common enough that it's worth walking through exactly where the line sits.

Direct-to-consumer: you own everything

When you sell straight to a customer, whether through your own website, a farmers market table, or a craft fair booth, you are the manufacturer, the notifier, and the label owner all at once. Every obligation lands on you:

• Filing the Cosmetic Notification Form in Canada, or the equivalent notification in whatever market you're selling into
• Getting the label right, including bilingual English and French text if you're selling in Canada
• Keeping your safety documentation current
• Responding if a customer has a reaction and a regulator asks questions

There is no intermediary to catch a mistake before it reaches the end user. That is not necessarily a bad thing. It also means nobody else is second-guessing your ingredient list, which is exactly why errors on direct-sale labels tend to persist longer than errors that get caught by a buyer's intake process.

Wholesale: a second set of eyes, not a transfer of duty

Selling into a retail store, spa, or distributor changes the picture, but not by shifting your legal notification obligation onto the retailer. In almost every regulatory framework, the entity that manufactures or first sells the product into the market is the one responsible for notification. A stockist reselling your product is not typically the notifier.

What wholesale does change is who is checking your work before it hits a shelf:

• Retail buyers often ask for proof of notification before agreeing to carry a line, partly to protect their own store from liability and partly because bigger retailers have been burned before by unregistered products.
• Distributors sometimes require a specific label format, ingredient disclosure standard, or documentation package as a condition of the wholesale agreement, above and beyond what the law strictly requires.
• A store's own insurance or corporate policy may add requirements that are stricter than the baseline regulatory minimum, things like requiring a signed safety data sheet or a letter confirming your CNF numbers are current.

So the compliance load does not move to the retailer, but the retailer becomes a checkpoint. If your paperwork is not in order, you find out at the buyer meeting instead of after a complaint, which is arguably better, just earlier and more visible.

Where the risk actually sits in each channel

Factor	Direct-to-Consumer	Wholesale
Who files the notification	You, always	You, almost always
Who checks your paperwork first	Nobody, until a regulator does	The buyer, before stocking
Consequence of a gap	Discovered later, possibly after sales	Discovered at intake, before sales
Label requirements	Set by the regulator only	Regulator plus possibly the retailer's own standard
Speed to market	Faster, no third-party gate	Slower, buyer review adds time

A subtler wrinkle: private label and store brands

If a retailer asks you to manufacture a product under their own brand name, the responsibility question gets more nuanced. Depending on the market and the specific arrangement, the party that is legally considered the manufacturer or first seller can shift to the brand owner rather than the contract manufacturer. This is exactly the kind of arrangement where you want written clarity on who is filing the notification, because "the store's name is on the label" does not automatically mean the store is the notifier in every market's rules.

What actually protects you in either channel

Regardless of which way you're selling, the practical fix is the same: have your notification filed and current before you need it, not after a buyer asks. Keep a folder per SKU with your CNF number, ingredient list with INCI names and concentrations, and any safety documentation a buyer might request. When you're expanding a line into wholesale, that folder is what turns a buyer meeting from a stalling point into a quick yes.

Cosmetic Comply is built around exactly this kind of readiness. It maps your formula to INCI names and CAS numbers, screens it, has a reviewer confirm it, and files your notification, so when a buyer asks for your CN number you already have it rather than scrambling to produce it during the meeting.