Contract Manufacturer Guide: Compliance Requirements and Digital Tools
Contract manufacturers — also known as third-party manufacturers — are the backbone of the European cosmetics industry. They produce creams, serums, shampoos and colour cosmetics for dozens of brands at the same time. But anyone manufacturing for several clients bears a particular regulatory responsibility: GMP-compliant production in accordance with ISO 22716, complete batch traceability per client, data separation between clients and comprehensive documentation for audits and authority inspections.
The EU Cosmetics Regulation (EC) 1223/2009 defines clear obligations for manufacturers — regardless of whether you produce your own brands or contract products. Since 2026, stricter documentation requirements have also applied, which pose challenges in particular for contract manufacturers with several clients.
This guide explains all compliance requirements for contract manufacturers step by step, shows typical pitfalls from practice and describes how digital tools simplify multi-client management.
What is a contract manufacturer in the cosmetics industry?
A contract manufacturer (also known as a third-party manufacturer) produces cosmetic products on behalf of a brand owner. The client supplies the formulation or develops it together with the contract manufacturer, who takes on production, filling and often quality control as well.
Distinction: three models at a glance
| Model | Who develops? | Who produces? | Who markets? |
|---|---|---|---|
| Own brand | Brand owner | Brand owner | Brand owner |
| Contract manufacturing | Client | Contract manufacturer | Client |
| Private label | Contract manufacturer | Contract manufacturer | Client |
Within the EU Cosmetics Regulation, the contract manufacturer is classified as a “manufacturer” within the meaning of Art. 2 (EC) 1223/2009. It is not automatically the “Responsible Person” (RP) — this role is usually taken on by the client or a third party designated by the client. Nevertheless, the contract manufacturer has its own obligations that go beyond mere production.
Regulatory obligations under the EU Cosmetics Regulation
Responsibilities in the cosmetics supply chain are clearly divided. As a contract manufacturer, you need to know which obligations are yours and which belong to the client.
Allocation of responsibilities under (EC) 1223/2009
| Obligation | Responsible Person | Contract manufacturer |
|---|---|---|
| Safety assessment (CPSR) | ✓ | — |
| Product Information File (PIF) | ✓ | Provides data |
| CPNP notification | ✓ | — |
| GMP-compliant production (ISO 22716) | — | ✓ |
| Batch records | — | ✓ |
| Raw material traceability | — | ✓ |
| Labelling | ✓ | As specified |
| Archiving (10 years) | ✓ | ✓ |
Common misconception: Many contract manufacturers assume that the client is responsible for the entire compliance. That is not the case. The contract manufacturer is independently liable for GMP-compliant production, the batch documentation and raw material traceability. In the event of a product recall, both parties can be held liable.
GMP requirements for contract manufacturers
Since 2013, compliance with Good Manufacturing Practice (GMP) in accordance with ISO 22716 has been mandatory for all cosmetics manufacturers in the EU — including contract manufacturers. The standard covers the entire production process: from raw material receipt through manufacturing to dispatch.
Core areas of ISO 22716 for contract manufacturers
- Premises and equipment: Clean, separate areas for different production lines. Particularly critical for colour cosmetics or products with different fragrances.
- Staff qualification: Documented training for all employees, regular refresher courses, hygiene training.
- Raw material management: Incoming goods inspection, identity testing, LOT tracking, FIFO principle, storage temperature monitoring.
- Production documentation: Batch records with target/actual comparison, environmental parameters (temperature, humidity), equipment used with calibration status.
- Quality control: In-process controls, finished-product testing, release process, retention samples.
Practical example: cross-contamination with colour cosmetics
A contract manufacturer produces for 8 clients on the same equipment — including a natural cosmetics brand and a supplier of colour cosmetics. During an internal check, pigment residues are discovered in a batch of the natural cosmetics line. The cause: insufficient cleaning evidence between the production batches. The result: 500 units have to be destroyed, and the natural cosmetics client threatens to terminate the contract. Lesson: Documented cleaning validation between different product lines is not optional but mandatory.
Multi-client management: the biggest challenge
What fundamentally distinguishes contract manufacturers from own-brand manufacturers is the simultaneous management of several clients. Each client has its own formulations, its own quality requirements and expects absolute confidentiality.
The four pillars of multi-client management
1. Data separation
Formulations are trade secrets. No employee may have access to the formulation data of another client. Access control at file and system level is mandatory.
2. Batch allocation
Each batch must be clearly assigned to a client. Batch prefixes per client (e.g. “CA-” for client A, “CB-” for client B) prevent mix-ups.
3. Production planning
Parallel orders require precise planning: cleaning times between batches, raw material availability, staff and machine capacities.
4. Audit readiness
Each client can carry out its own audits. You must be able to present client-specific batch records, raw material certificates and test reports at any time.
Practical example: mixed-up batch LOTs
A contract manufacturer produces a similar hyaluronic acid serum for two clients. Both use the same hyaluronic acid raw material, but different concentrations. During manual batch documentation in Excel, the LOT entry for client A is accidentally copied into the record for client B. The incorrect LOT assignment is only noticed during the audit three months later. Lesson: Manual documentation is a source of error when there are several clients with similar products. Automated batch allocation eliminates this risk.
Digital tools for contract manufacturers
The complexity of multi-client management increases with every new client. From 3–5 clients, manual documentation in Excel becomes a risk factor. Specialised software solves the most critical problems.
Comparison: manual vs. specialised software
| Requirement | Excel / manual | Compliance software |
|---|---|---|
| Formulation management per client | Separate files, error-prone | Multi-tenant, access-controlled |
| Batch allocation | Manual prefixes, risk of mix-ups | Automatic per client |
| Batch records | Word/PDF, no version control | Automatic target/actual comparison |
| Raw material traceability | Manual linking, time-consuming | End-to-end LOT tracking |
| Audit preparation | Hours to days of compilation | PDF export at the touch of a button |
| Archiving (10 years) | Folders, backup risk | Automatic, fail-safe |
Practical example: 12 hours less per week
A contract manufacturer with 6 clients and around 40 production batches per month spends 15 hours a week on documentation: creating batch records in Word, looking up LOT numbers manually in Excel, matching raw material certificates and compiling PDF records for audits. After switching to a specialised compliance software, the effort drops to 3 hours a week — with higher documentation quality and complete traceability.
The following software features are essential for contract manufacturers:
- Multi-client capability: Separate data areas per client
- Batch prefixes: Automatic batch numbers with client-specific prefix
- LOT tracking: Complete raw material traceability from incoming goods to finished product
- Audit trail: Who changed what and when — indispensable for GMP
- PDF export: Batch records as PDF for clients and authorities
- Archiving: 10-year retention obligation under (EC) 1223/2009 Art. 11
Checklist: compliance requirements for contract manufacturers
These 10 points form the minimum for every contract manufacturer that wants to work GMP-compliant and audit-proof:
- ISO 22716-compliant premises and processes documented
- Staff training (GMP, hygiene) carried out and recorded regularly
- Raw material incoming goods inspection with LOT tracking established
- Batch records with target/actual comparison for every batch
- Cleaning validation between different production lines
- Data separation between clients (physical or digital)
- Batch prefixes defined per client
- Quality control with retention samples and release process
- Archiving of all production data for at least 10 years
- Audit-ready PDF exports available at any time
You can also find this checklist as a downloadable template on our templates page.
Frequently asked questions (FAQ)
Does a contract manufacturer need its own Responsible Person?
Not necessarily. The Responsible Person (RP) is designated by the client who places the product on the market under their own name. The contract manufacturer itself does not have to designate an RP — unless it places its own products on the market. However, the contract manufacturer must cooperate with the RP and provide it with all relevant production data (batch records, raw material certificates, analysis results).
Which GMP certification do I need as a contract manufacturer?
The EU Cosmetics Regulation (EC) 1223/2009 requires that manufacturing be carried out in accordance with the principles of Good Manufacturing Practice (GMP) as set out in ISO 22716. Formal certification is not legally mandatory, but it is required by most clients. In practice, brand owners expect an ISO 22716 certificate from an accredited body such as TÜV, DEKRA or SGS. Without a certificate, you will lose contracts to competitors.
How do I separate the data of different clients?
Data separation is essential, because formulations are trade secrets. In practice this means: separate folder structures (physical or digital), access-restricted areas per client, no cross-linking of formulation data and unique batch prefixes per client. Specialised software solves this through multi-tenant structures in which each client has its own isolated data silo.
Does the contract manufacturer have to submit the CPNP notification?
No. The CPNP notification (Cosmetic Products Notification Portal) is the responsibility of the Responsible Person, not of the manufacturer. However, the contract manufacturer must supply the data required for it: quantitative composition, safety data for the raw materials, production data and, where applicable, certificates of analysis. Without a complete data supply, the RP cannot carry out the notification correctly.
Which software is suitable for contract manufacturers with multiple clients?
Contract manufacturers need software with multi-client capability: separate formulation management per client, client-specific batch prefixes, access control, complete batch traceability and PDF export for audits. Specialised compliance tools such as INCIkit offer these functions from under 100 €/month. Enterprise solutions such as Cosmetri or Centric PLM are also suitable, but cost many times more.
What happens during a GMP audit at a contract manufacturer?
A GMP audit in accordance with ISO 22716 examines: premises and hygiene, staff qualification and training, raw material management (receipt, storage, traceability), production documentation (batch records with target/actual comparison), quality control, complaints management and archiving. At a contract manufacturer, particular attention is paid to the separation of different production lines and the avoidance of cross-contamination. Auditors expect complete documentation — gaps lead to deviations (non-conformities).
Conclusion and further resources
Contract manufacturers bear an independent compliance responsibility that goes far beyond mere production. GMP-compliant documentation, raw material traceability, data separation between clients and a 10-year archiving obligation make multi-client management the most complex task in day-to-day business.
Digital tools take away this complexity: automatic batch allocation, complete LOT tracking, an audit trail and PDF export at the touch of a button. For most contract manufacturers, the switch from Excel to specialised software pays for itself within a few weeks.
Further resources
Want to document your cosmetics with full compliance?
INCIkit builds PIF, INCI list and batch records from your formula data — ready for the authority check.
INCIkit Editorial
Cosmetics Compliance Desk
More articles
Starting a Home-Based Cosmetics Business: Step-by-Step Guide
Want to sell cosmetics from home? This guide explains business registration, choosing a structure, GMP requirements, insurance and taxes – written for small home producers across the EU.
Making and Selling Soap: Everything You Need to Know
Want to sell your homemade soap? This guide explains all the rules, from the EU Cosmetics Regulation through the safety assessment and INCI list to the CPNP notification. With a practical example and cost table.
Selling Homemade Cosmetics Legally: The Complete Beginner's Guide
Want to sell your handmade cosmetics? This guide explains the 5 steps from business registration through the safety assessment to the CPNP notification — with concrete costs, real-world examples and a checklist.