Reading an ISO 22716 Certificate for What It Covers
A supplier sends a certificate as a PDF, and it looks convincing: a logo, a certificate number, a scope in small print and a signature. The buyer files it. Nobody notices that the certificate covers a trading company rather than the plant,
A supplier sends a certificate as a PDF, and it looks convincing: a logo, a certificate number, a scope in small print and a signature. The buyer files it. Nobody notices that the certificate covers a trading company rather than the plant, that the scope excludes the filling line, or that the surveillance audit fell due eight months ago.
ISO 22716 is the reference most cosmetics supply chains use to demonstrate good manufacturing practice, and the certificate is the artefact most buyers actually see. This article explains what the standard governs, how to read a certificate field by field, where its scope can mislead, and which additional evidence converts a document into confidence.
Table of Contents
- What the standard actually governs
- Reading the certificate field by field
- Where a certificate overstates
- Verification beyond the document
- Practical guide: qualifying a site
- Frequently asked questions
- Conclusion
What the standard actually governs
ISO 22716 is a guidance standard for the manufacture, storage and shipment of cosmetic products. It sets out how a site should control premises, equipment, personnel, raw materials, production, packaging, quality control, finished goods, laboratories, waste, subcontracting, complaints, recalls, change control and documentation.
Two limits follow from that description. It is a management-system standard, so it certifies a way of working rather than a product. And it is written for manufacturing activities, so what falls inside a given certificate depends entirely on how the scope was drafted.
Certified system, uncertified product
No ISO 22716 certificate says anything about whether a specific fragrance is safe, correctly labelled or properly notified. Those questions belong to the safety report, the artwork and the notification. Conflating the two is the most common category error in supplier files, and it survives because both documents arrive as PDFs with logos.
How it relates to the legal duty
EU cosmetic rules make good manufacturing practice mandatory, and ISO 22716 is the standard the industry uses to demonstrate it in practice. How a competent authority treats a particular certificate is a matter for that authority, so confirm the current position rather than assuming a certificate settles the legal question.
Reading the certificate field by field
Six fields carry most of the information. Read them against the commercial documents, not in isolation.
| Field | What to check | Common defect |
|---|---|---|
| Legal entity and address | Matches the entity that will invoice you and the site you visited | Certificate held by a trading arm, production elsewhere |
| Scope statement | Names the activities you are buying: compounding, filling, packing | Wording excludes aerosol, alcohol-based or small-batch lines |
| Standard and edition | ISO 22716, with the edition year stated | An older or unrelated GMP scheme presented as equivalent |
| Accreditation mark | Certification body accredited for this standard and activity | Body operating outside its accredited scope |
| Validity dates | Issue and expiry, consistent with a three-year cycle | Certificate displayed after expiry or suspension |
| Annex of sites | Every manufacturing site listed and current | Site you are buying from absent from the annex |
The scope statement deserves a second reading. "Manufacture of cosmetic products" and "filling and packing of cosmetic products" are not the same activity, and a site certified only for the second may buy its compound from an unqualified source.
Check the accreditation, not the logo
A certificate is only as good as the body that issued it. Accredited certification bodies appear in their national accreditation body's directory, and the accreditation carries a scope that should include this standard and this type of activity. A body certifying outside its scope produces a document with no independent standing.
The three-year cycle explains most date anomalies
Certification runs in a cycle with surveillance audits between full reassessments. A certificate can be suspended for a missed surveillance audit while the PDF continues to circulate, which is why the expiry date alone is not enough: ask for the date of the most recent surveillance audit as well.
Where a certificate overstates
Four situations account for most of the gap between what a buyer assumes and what a certificate actually covers.
First, excluded processes. A scope can be narrowed to specific lines or product types, and alcohol-based filling, aerosol filling and small-batch sampling are often handled separately from the main line.
Second, outsourced steps. If filling or labelling is subcontracted, the certificate covers the site that holds it, not the subcontractor. The brand's protection is the site's supplier-qualification process, which is auditable but rarely offered voluntarily.
Third, multi-site annexes. A group certificate may list several sites, with the head office named first. The address on the certificate is not necessarily the address where your batch was made.
Fourth, the brand's own activities. Storage, repacking and labelling carried out by the brand or its distributor fall outside the manufacturer's certificate entirely, and they are where many small brands actually lose control of traceability.
Why a good certificate can still sit on a weak site
Certification assesses conformity on the days of the audit. It does not guarantee that your batch was made under the same conditions, particularly with seasonal labour, temporary lines or a newly installed filler.
Verification beyond the document
Three questions turn a certificate into evidence, and all three are answerable by a supplier who is genuinely in control.
| Request | What it answers | Warning sign |
|---|---|---|
| Latest surveillance audit summary | Whether the site was assessed recently and what was found | Refusal to share anything but the certificate |
| Open non-conformities and CAPA status | Whether problems found were closed, and how | "No findings" across several cycles |
| Recall or mock-recall date and outcome | Whether traceability works in practice | No recall exercise ever run |
| Deviation and complaint trend | Whether quality signals are collected and acted on | Trends described qualitatively only |
| Change-control example | How a new bottle, pump or supplier is introduced | Changes handled informally by production |
These requests are normal in pharmaceutical and food supply chains and increasingly normal in fragrance. A supplier that treats them as hostile is telling you something about its documentation culture.
What a site visit adds that paper cannot
Walk the line that will make your product. Check whether the batch record is written as the batch runs or reconstructed afterwards, whether raw materials are segregated, and whether the alcohol store is ventilated and bunded. Filling lines are configured around the pack, so the bottle and closure choices on our packaging page determine which line your batch runs on.
Practical guide: qualifying a site
Step 1 — Confirm the entity before the certificate
Establish which legal entity will manufacture, which will invoice, and which holds the certificate. If those are three different companies, ask for the relationship in writing.
Step 2 — Read the scope against your product
Match the scope wording to the processes your product needs: compounding, alcohol handling, filling, labelling, packing. Ask explicitly about any process that is not named.
Step 3 — Verify the certificate with the issuer
Use the certification body's own verification route, or the accreditation directory, rather than a QR code on the PDF. Confirm status, scope and expiry at source.
Step 4 — Ask for the last audit's findings
A summary with non-conformities and closure dates is more informative than a clean certificate. Suppliers with mature systems expect the question.
Step 5 — Trace one batch end to end
Pick a recent batch and follow it from raw material receipt to finished goods release. The exercise tests documentation, segregation and traceability at once.
Step 6 — Agree what happens on a scope change
If a new line, site or subcontractor is introduced, require notification. Coverage that silently narrows after approval is worse than no certificate, because the file still looks complete.
Frequently asked questions
What is private label perfume manufacturing?
A fragrance made to a buyer's specification and sold under the buyer's name, with the plant responsible for development, filling and batch records.
Does a private label manufacturer need its own certification?
It needs to demonstrate GMP for the processes it performs. Whether that comes as ISO 22716 certification or as a documented system verified by audit is a commercial and regulatory question, not a fixed rule.
What should I send with a first enquiry?
Product type, target markets, volume, bottle and closure preference, scent direction, and any claims intended on pack. Certification questions come after the product definition is clear.
Does ISO 22716 certify my product as safe?
No. It certifies a manufacturing system. Product safety is established by the safety report and the underlying data, which is a separate document and a separate competence.
Can a certificate cover several factories?
Yes, through an annex of sites. Check that the site making your batch appears on it, and that the activities it performs are inside the scope rather than adjacent to it.
What if the certificate has expired but the audit passed?
Ask for the current status in writing from the certification body. A lapsed or suspended certificate is not evidence, however good the underlying audit was.
Is a site audit by my own team worth the cost?
For a first order in a new relationship, usually yes. A one-day visit answers questions about segregation, documentation and storage that no certificate addresses.
How often should I re-check certification?
At least annually, and immediately after any change of ownership, site or subcontractor. Certificates change status quietly, and the file does not update itself.
Conclusion
A certificate is a claim made by a third party about a system, at a point in time, for a defined scope. Read that way it is useful. Read as a guarantee about the product in the drum, it is not, and the gap between the two readings is where supply failures live.
The buyers who qualify sites well do three things: they match the scope to the process, they check the issuer rather than the artwork, and they ask for the audit findings. None of that is expensive, and all of it is available before the first purchase order. Where a programme also involves ingredient documentation and artwork claims, the file grows quickly, so our customization process sets out the order in which those items are usually assembled, and our note on supplier ingredient checks covers the material side of the same file.
Discuss your fragrance programme with our team:
WhatsApp: +86 17324762943
Email: adon@customperfumeoem.com
Website: customperfumeoem.com
