Creating a PIF in practice: content, structure, retention and common audit pitfalls

The Product Information File (PIF) is not a formality. It is the central documentation for every cosmetic product in the EU. Without a complete and properly maintained PIF, a product may not be placed on the market. In audits, it is the first document that is examined.
This guide shows in practical terms what belongs in a PIF, how it should be structured, how long it must be retained and which mistakes regularly lead to objections.
What is a PIF?
The PIF is the legally mandated product documentation under Art. 11 of Regulation (EC) No 1223/2009. It must be created for each individual cosmetic product and be accessible to the competent authority at the address of the Responsible Person.
The PIF serves to demonstrate the safety, compliance and traceability of the product.
Mandatory components of a PIF under Art. 11
A complete PIF consists of five mandatory components. Each one is required for the product to be placed on the market.
1. Product description
Unambiguous identification of the product:
- Trade name and product category
- Variant and type of packaging
- Unambiguous assignment to the formulation
The description must allow an unambiguous assignment to the safety assessment.
2. Safety report (CPSR)
The Cosmetic Product Safety Report consists of two parts:
Part A β Safety information
- Quantitative and qualitative composition
- Physico-chemical properties
- Microbiological quality
- Impurities and packaging material
- Exposure and toxicological profiles
Part B β Safety assessment
- Reasoned safety assessment
- Warnings and restrictions on use
- Qualification of the safety assessor
Without a complete CPSR, the product cannot be placed on the market. This is the most common reason for objections during market surveillance inspections.
The preparatory work for PartΒ A is in practice the biggest time factor. Tools such as the CPSR assistant in INCIkit help to compile formulation data, raw material specifications and exposure data in a structured way β directly from the formulation management, without manual transcription errors.
3. Description of the manufacturing method (GMP)
Evidence of manufacture in accordance with ISO 22716 (Good Manufacturing Practice for cosmetics). This includes:
- Manufacturing instructions (batch record)
- Batch record with target and actual quantities
- Test records and release note
- Cleaning and hygiene concept

This is where many manufacturers fail in audits, because the documentation is incomplete. Small manufacturers in particular often lack systematic batch records.
4. Evidence for the claimed effect
When claims such as βmoisturisingβ or βanti-ageingβ are used, they must be substantiated. Typical evidence:
- Clinical studies or in-vitro tests
- Scientific literature
- In-use studies with volunteers
Unsubstantiated advertising claims lead to warning letters or market surveillance measures.
5. Animal testing data
A declaration that no animal testing prohibited under the EU Cosmetics Regulation has been carried out. This is purely a declaration of conformity.
Recommended PIF structure
In practice, a clear, numbered folder structure has proven its worth. Each section corresponds to a mandatory component or to supplementary documentation:
- Product master data β name, category, variants
- Formulation + version history β current and previous versions
- CPSR β safety report Part A + B
- Raw material specifications β INCI, CAS, safety data sheets
- Manufacturing instructions β batch records, SOPs
- Batch documentation β batch records with target/actual
- Test records β quality controls, stability tests
- Labels and packaging β current print artwork
- CPNP notification β confirmation of receipt
- Claim substantiation β studies, literature
Important
Versioning and change tracking are crucial. Every formulation change requires an update of the CPSR.
Retention requirement: 10 years
The PIF must remain available for at least 10 years after the last batch was last placed on the market. This means that even discontinued products must remain archived.
Paper folders are not sufficient in the long term. Digital, structured archiving is considerably more secure and faster to search.
Common audit pitfalls
The following points regularly lead to objections from market surveillance authorities:
Missing version history
The formulation was changed, but the CPSR was not updated. The safety assessment refers to an outdated composition.
Incomplete batch documentation
Batch records not completed in full. Actual quantities are missing or the LOT numbers of the raw materials are not documented.
Missing traceability
Raw material batches not clearly assigned to production batches. In the event of a recall, it is impossible to determine which batches are affected.
Unclear responsibilities
No documented release by a qualified person. Signatures are missing or cannot be attributed.
Inconsistent details
The label does not match the formulation or the CPNP notification. The INCI list deviates from the actual composition.

Digital PIF management as a competitive advantage
Manual folder structures work when there are only a few products. As soon as several formulations, variants and batches have to be managed, sources of error arise.
A structured system enables:
- Automatic version control for formulation changes
- Linking of formulation, batch record and raw material LOTs
- Structured PDF exports for authorities and audits
- Gap-free archiving across the entire 10-year period
- Considerably faster audit preparation
Those who work cleanly here save weeks when it really matters.
Production documentation for your PIF
INCIkit links formulations, batches and raw materials automatically β for a gap-free PIF.
Conclusion
A correctly maintained PIF is not a bureaucratic obstacle but the foundation of a legally compliant cosmetics business.
If you meet the following points, you are audit-ready:
- A complete CPSR for every formulation variant
- Documented manufacture in line with GMP principles
- Traceable batches with raw material LOTs
- Claims substantiated with evidence
- Structured archiving for at least 10 years
The biggest weak point is not the legal situation but unstructured documentation.
FAQ β Frequently asked questions about the PIF
Who may create a PIF?
The Responsible Person is obliged to keep the PIF available. Parts such as the CPSR must be prepared by qualified professionals (e.g. toxicologists, pharmacists).
Does the PIF have to be kept digitally?
No, there is no legal obligation to keep it digitally. For practical reasons β particularly for the 10-year retention period and rapid audit readiness β it is nonetheless strongly recommended.
What happens if the PIF is missing?
Possible consequences are a sales ban, fines and, in extreme cases, product recalls. The market surveillance authorities can prohibit the product from being placed on the market.
Does every variant need its own PIF?
Yes, provided the composition or the safety assessment differs. For purely cosmetic differences (e.g. packaging colour) a shared PIF with a variant annex can suffice.
PIF checklist
Use this checklist to verify the completeness of your PIF:
PIF completeness check
- Product unambiguously identified (name, category, variant)
- Formulation versioned and up to date
- CPSR complete (Part A + Part B)
- Safety assessor qualified and documented
- GMP documentation in place (manufacturing instructions, batch records)
- Batch records with target/actual quantities archived
- Raw material LOTs documented in a traceable way
- Claims backed by evidence
- CPNP notification documented
- Labels consistent with formulation and CPNP
- Archiving ensured for at least 10 years
Further reading
Creating a PIF β overview & software
A compact overview: mandatory PIF content, an example structure and how INCIkit simplifies its management.
GMP & ISO 22716 guide
Batch records, SOPs and quality control in accordance with ISO 22716 β what is needed for PIF-compliant manufacturing.
CPNP notification step by step
After the PIF comes the notification β how to register your product correctly in the EU portal.
Want to document your cosmetics with full compliance?
INCIkit builds PIF, INCI list and batch records from your formula data β ready for the authority check.
INCIkit Editorial
Cosmetics Compliance Desk
More articles

Starting a Home-Based Cosmetics Business: Step-by-Step Guide
Want to sell cosmetics from home? This guide explains business registration, choosing a structure, GMP requirements, insurance and taxes β written for small home producers across the EU.

Making and Selling Soap: Everything You Need to Know
Want to sell your homemade soap? This guide explains all the rules, from the EU Cosmetics Regulation through the safety assessment and INCI list to the CPNP notification. With a practical example and cost table.

Selling Homemade Cosmetics Legally: The Complete Beginner's Guide
Want to sell your handmade cosmetics? This guide explains the 5 steps from business registration through the safety assessment to the CPNP notification β with concrete costs, real-world examples and a checklist.