Are cheap or template cosmetic safety reports valid?

Two bodies of law sit behind this question, and the word most people type into a search box belongs to only one of them. A cosmetic product safety report, a CPSR, is the instrument named in Regulation (EC) No 1223/2009, which applies in the European Union and, as assimilated law, in Great Britain. United States federal law has no document of that name. It has a duty, in the Federal Food, Drug, and Cosmetic Act as amended by the Modernization of Cosmetics Regulation Act of 2022, and that duty names no format at all. So the first thing to settle is not what you paid. It is which of the two is reading your file.

Ways the United States half of this page may not be about your product. Where a cosmetic product or facility is also subject to the requirements of subchapter V of the Act, the drugs and devices subchapter, the Act exempts it from seven sections, and safety substantiation is one of the seven, except as provided in the subsection that follows it (21 U.S.C. 364i(a)). Read that exception, because it decides how far the exemption travels: a facility covered by it that also manufactures or processes cosmetic products which are not subject to subchapter V is not exempt from those same seven sections with respect to those products (364i(b)). The exemption follows the product, not the building. FDA describes an antidandruff shampoo, a fluoride toothpaste with breath and cleansing claims, a deodorant that is also an antiperspirant, and a moisturizer or makeup marketed with sun-protection claims as products that are both, and says such products must comply with the requirements for both (FDA, “Is It a Cosmetic, a Drug, or Both?”, agency guidance rather than law). Separately, the duty in subsection (a) of the substantiation section does not apply to coal-tar hair dye that otherwise complies with section 361(a), and an express duty to maintain records related to the safety of that product is left in its place (364d(b)). And an article that meets the Act’s own reading of soap is outside all of it, because the statutory definition of a cosmetic excludes soap (21 U.S.C. 321(i)). If any of those describes what you sell, the American analysis below is about somebody else’s product, and the article that reads both exemptions out clause by clause is the one to start with. The European analysis may still reach you.

On this page: The United States test · The EU and Great Britain test · What decides it, market by market · What a template can carry · Where the cheap file breaks · Five things to read on the report you hold

The United States test: sufficiency, judged by people, not a form

The duty is one sentence. A responsible person for a cosmetic product shall ensure, and maintain records supporting, that there is adequate substantiation of safety of such cosmetic product (21 U.S.C. 364d(a)).

Now read what the Act says those words mean. Adequate substantiation of safety means tests or studies, research, analyses, or other evidence or information that is considered, among experts qualified by scientific training and experience to evaluate the safety of cosmetic products and their ingredients, sufficient to support a reasonable certainty that a cosmetic product is safe (364d(c)(1)). There is no list of documents in that sentence. There is a body of people and a standard of sufficiency, and nothing else. FDA states a neighbouring absence on its own page, about tests rather than about documents: neither the law nor FDA regulations require specific tests to demonstrate the safety of individual products or ingredients, manufacturers can use relevant safety data that is already available, and it is important that all data used to support the safety are derived from what the agency calls scientifically robust methods (FDA, MoCRA page, agency guidance rather than law, read 18 August 2026).

So under United States law, valid cannot mean matches the official format. There is no official format to match. A report is not disqualified for being short, for being cheap, or for resting on data somebody else generated. It has to be enough, in the judgment of people qualified to make that judgment, about this product.

Two more definitions decide how much of that judgment a template can survive. Safe means the cosmetic product, including any ingredient of it, is not injurious to users under the conditions of use prescribed in the labeling thereof, or under such conditions of use as are customary or usual (364d(c)(2)). Your own label is inside the test. And a cosmetic product is a preparation of cosmetic ingredients with a qualitatively and quantitatively set composition for use in a finished product (364(2)). Your percentages are inside the definition of the thing being substantiated. A report that carries neither is not a thin report about your product. It is a report about a different one.

What the Act attaches to not holding an adequate one runs through the product rather than through the paperwork: a cosmetic product that, including each ingredient in it, does not have adequate substantiation for safety, as defined in section 364d(c), is deemed adulterated (361(g)), and the introduction or delivery for introduction into interstate commerce of an adulterated cosmetic is a prohibited act (21 U.S.C. 331(a)). That chain, and the records access that sits beside it, are read out in the sibling article on the duty itself.

The EU and Great Britain test: a named report and a named qualification

Here the document exists in law, which is why the same question has a harder answer. The safety standard itself sits one article earlier: a cosmetic product made available on the market shall be safe for human health when used under normal or reasonably foreseeable conditions of use, taking account in particular of its presentation, its labeling, its instructions for use and disposal, and any other indication or information provided by the responsible person (Regulation (EC) No 1223/2009, Article 3). The report is how that standard is demonstrated, not what it says. Before a cosmetic product is placed on the market the responsible person must ensure that it has undergone a safety assessment on the basis of the relevant information, and that a cosmetic product safety report is set up in accordance with Annex I (Regulation (EC) No 1223/2009, Article 10). The same article requires that the intended use of the product and the anticipated systemic exposure to individual ingredients in a final formulation are taken into account, that an appropriate weight-of-evidence approach is used for reviewing data from all existing sources, and that the report is kept up to date in view of additional relevant information generated after the product goes on sale.

The person is named as well as the document. The safety assessment set out in Part B of Annex I has to be carried out by a person in possession of a diploma or other evidence of formal qualifications awarded on completion of a university course of theoretical and practical study in pharmacy, toxicology, medicine or a similar discipline, or a course recognized as equivalent. The equivalence is recognized by a Member State in the European text and by the Secretary of State in the Great Britain text (Regulation (EC) No 1223/2009, Article 10, as it forms part of assimilated law in Great Britain).

Annex I then says what the report contains as a minimum, and most of Part A is about your product rather than about ingredients in general. It names the quantitative and qualitative composition; the physical and chemical characteristics and the stability of the product under reasonably foreseeable storage conditions; the microbiological specifications and the results of preservation challenge test; impurities, traces and the relevant characteristics of packaging material; the normal and reasonably foreseeable use, with the reasoning justified in the light of the warnings and other explanations in the product labeling; exposure to the product, taken by site of application, surface area, amount applied, duration and frequency of use, exposure routes and target populations; exposure to the substances; the toxicological profile, where the systemic effects and margin of safety based on a no observed adverse effects level shall be calculated and the absence of these considerations shall be duly justified; undesirable effects and serious undesirable effects; and other relevant information (Regulation (EC) No 1223/2009, Annex I, Part A).

Part B is four items, and the last is the one a cheap report most often cannot produce. The assessment conclusion. The statement on labeled warnings and instructions of use. The reasoning, explained so that it rests on the descriptions set out in Part A, with margins of safety assessed and discussed where relevant. And the assessor’s credentials: name and address of the safety assessor, proof of qualification of safety assessor, date and signature of safety assessor (Regulation (EC) No 1223/2009, Annex I, Part B).

That is why a report can fail on its face here in a way it cannot fail in the United States, and the reason has nothing to do with the invoice. The regulation names contents. A report with no exposure calculation, no margin of safety and no justification for its absence, or no proof of who signed it, is missing things the text lists.

What decides it, market by market

The same file, read under each regime. Nothing in this table turns on what the report cost.

What this table does not evidence: it is a reading of two texts, not a survey of how either is enforced, and it says nothing about how often a cheap report is challenged or by whom.

What a template can carry, and what it cannot

A template is not a fraud, and it is worth being straight about that. The European regulation describes a report by its headings, so in that market a heading structure is a real thing to buy, and so is a standing library of published toxicological data on common ingredients. Nobody generates that from scratch per product, and FDA says on its own page that manufacturers can use relevant safety data that is already available (FDA, MoCRA page, agency guidance rather than law). United States law describes no document at all, so a template cannot be wrong there for its shape.

What a template cannot carry is anything that is true of your product and not of the category. Reading the two lists above, that is your composition at your own use concentrations, the conditions of use your own label prescribes, the amount applied and how often and where, the preservation challenge result on the formula you actually sell rather than the one you used to sell, and the packaging material you actually fill into. Each of those is named in Annex I as report content (Regulation (EC) No 1223/2009, Annex I, Part A), Two of them, your composition and the conditions of use your label prescribes, sit inside the American definitions of cosmetic product and of safe themselves (364(2); 364d(c)(2)). The others are not named in those definitions. They are simply what a judgment about your product, rather than about the category, would have to be made on.

Which makes the sales line to read hardest the one that promises a single report covering endless products. A cosmetic product is defined as a composition, set qualitatively and quantitatively (364(2)). Change the composition and you have changed the thing the report is about. A shade variant that moves only a colourant may be a short argument to make in the file. A different preservative system is not.

Where the cheap file breaks, and the rule behind each break

These are the failure patterns, not a verdict on any seller. A report can carry a low price and none of them. A report can carry a high price and all four.

• It is right about a formula you no longer sell. The file was written once, the product was reformulated, and the change was processed as a minor one. Under the American definition the composition is part of what the product is (364(2)), and the European text requires the report to be kept up to date in view of additional relevant information generated after the product is on the market (Regulation (EC) No 1223/2009, Article 10). A file that is right about the wrong product substantiates nothing.
• The conclusion is asserted rather than calculated. A confident safe as used sentence with no exposure figure and no margin of safety behind it. Annex I requires the reasoning to be explained and based on the Part A descriptions, with margins of safety assessed and discussed where relevant, and requires that where the systemic effects and margin of safety are not calculated their absence shall be duly justified (Regulation (EC) No 1223/2009, Annex I). The American test asks whether qualified experts would consider the evidence sufficient (364d(c)(1)), and a sentence is not evidence.
• Nothing in it shows who signed it or what they are qualified in. For a product going into the EU or Great Britain this is a named content item: name and address, proof of qualification, date and signature (Regulation (EC) No 1223/2009, Annex I, Part B). A scanned signature with no qualification behind it does not meet it.
• It was written from ingredient paperwork and never from the finished product. Supplier statements about each raw material, and no finished-product evidence. Annex I asks for the microbiological specifications of the substance or mixture and the cosmetic product, and for results of preservation challenge test (Regulation (EC) No 1223/2009, Annex I, Part A). The American definition of safe reaches the cosmetic product, including any ingredient of it (364d(c)(2)). Safe ingredients are not a safe product.

Specimen drawn from the Document Control™ case — a clean beauty reformulation nobody re-substantiated, and a file that certified the paperwork instead of the product

Five things to read on the report you already hold

None of these needs a toxicologist to check. They need the report open next to the product.

1. Find your formula in it. Not the ingredient list from the label. The composition at use concentrations, and check it against the batch you are shipping now.
2. Find your label in it. The conditions of use the report assumed should be the conditions your own labeling prescribes, because those conditions are inside the statutory definition of safe (364d(c)(2)). A leave-on assumption on a product you sell as a rinse-off, or a face assumption on a product used on the body, is a different exposure.
3. Find a number behind the conclusion. An exposure figure and a margin of safety, or a stated reason there is none.
4. Find a finished-product test. On the formula you sell today, not on the one before the reformulation.
5. Find the signature and the qualification. If you are selling into the EU or Great Britain, the proof of qualification is report content, not a courtesy (Regulation (EC) No 1223/2009, Annex I, Part B).

If all five come back clean, the report you bought did the work, whatever it cost, and you do not need anything further from us on this question.