The Myth of the "FDA Compliance Certificate"
Every few weeks, a founder emails our firm in a panic: a marketplace (Amazon, Walmart Marketplace, TikTok Shop, or a retail buyer) has demanded an "FDA Compliance Certificate" or "FDA Approval Certificate" before the product can go live. The founder assumes this is a routine piece of paperwork they simply forgot to request. It isn't—because it doesn't exist.
The FDA does not issue a general compliance certificate, approval certificate, or "seal" for cosmetic products or the facilities that make them. This is true before the Modernization of Cosmetics Regulation Act (MoCRA) and remains true after it. Understanding why requires understanding how FDA actually regulates cosmetics—and how that differs from drugs.
Cosmetics vs. Drugs: Why the Distinction Matters
Federal law (the Food, Drug, and Cosmetic Act) treats cosmetics and drugs very differently.
- Drugs (including OTC drugs like sunscreen, anti-acne treatments, or antiperspirants making certain claims) generally require either FDA approval through a New Drug Application or compliance with an OTC monograph. Drugs often carry an NDC number and are subject to premarket review of safety and efficacy.
- Cosmetics, by contrast, are not subject to premarket approval. A moisturizer, lipstick, or shampoo can be sold without FDA signing off on the formula in advance.
This is the root of the confusion. Founders coming from regulated industries, or simply assuming "the FDA approves everything," expect a credential. For cosmetics, no such credential exists—responsibility for safety sits with the company, not a government stamp of approval.
What MoCRA Actually Requires
MoCRA, enacted in December 2022, was the most significant expansion of FDA's cosmetics authority in decades. It introduced several new obligations, but none of them are a "certificate":
- Facility registration for manufacturers and processors of cosmetic products distributed in the U.S.
- Product listing for each cosmetic product (or product family) marketed.
- Designation of a Responsible Person—typically the brand owner—accountable for safety substantiation and adverse event reporting.
- Serious adverse event reporting to FDA within a defined window.
- Recordkeeping supporting the safety substantiation of each product.
- Forthcoming Good Manufacturing Practice (GMP) regulations and fragrance allergen labeling rules, both still moving through rulemaking.
None of these create a document that says "FDA-Certified" or "FDA-Approved." They create registration numbers, listing numbers, and internal compliance files.
Facility Registration Is Not a Seal of Approval
When a facility registers through FDA's Cosmetics Direct portal, it receives a registration number. That number confirms the facility told FDA it exists and makes cosmetics—nothing more. FDA does not inspect every registered facility before issuing the number, does not test the products made there, and does not vouch for the facility's practices in that registration record.
Founders should treat the registration number the way they would treat an EIN from the IRS: proof you're in the system, not proof you're doing everything right.
Product Listing: A Database Entry, Not a License
Product listing works the same way. Each product (or product family sharing a formulation and claims) gets listed with basic information—name, category, ingredients, Responsible Person contact. FDA does not review the formula for safety before accepting the listing, and it does not issue a certificate confirming the product is "compliant." The listing number is a record-keeping tool for FDA's internal use, including in the event of a recall or adverse event investigation.
Why Platforms Ask for "Proof of FDA Compliance"
Marketplaces have their own liability concerns. After MoCRA passed, many platforms updated seller policies to require documentation for cosmetic listings—partly to manage their own exposure, partly because customer service teams and legal departments don't fully understand the regulatory landscape either. The request for an "FDA certificate" is usually a poorly worded proxy for: show us you're a legitimate, registered seller who has done the legal homework.
The problem is that founders, eager to keep a listing live, sometimes go looking for a document that matches the platform's language literally—and find vendors happy to sell them one.
What to Send Instead of a Fake Certificate
Rather than manufacturing or purchasing a document that doesn't legitimately exist, founders should respond to these requests with the real artifacts of compliance:
- The facility's FDA registration number and confirmation from Cosmetics Direct.
- The product listing number for the SKU in question.
- Identification of the Responsible Person and contact information.
- A summary (not necessarily the full file) of the safety substantiation on record.
- Safety Data Sheets, label images, and ingredient disclosures.
- A short cover letter explaining, plainly, that FDA does not issue compliance certificates for cosmetics and citing MoCRA's registration and listing framework.
Most platform compliance teams, once educated, accept this substitute documentation. If a platform insists on a literal "certificate" that cannot legally exist, that is worth escalating in writing—both to protect the brand and to create a record that the request was addressed in good faith.
The Danger of Paying for a "Certificate" Online
There is a cottage industry of consultants and websites selling "FDA Cosmetic Registration Certificates" for a few hundred dollars. These documents are not issued or recognized by FDA. Relying on one creates real exposure:
- It can constitute a misrepresentation to the platform, risking account suspension or clawback of sales.
- It may expose the Responsible Person to liability for false statements in commerce.
- It diverts resources from the substantive compliance work—registration, listing, and safety substantiation—that actually matters if FDA or a plaintiff's attorney comes asking questions later.
If a vendor offers to sell you an "FDA Compliance Certificate," that is a signal to end the conversation, not to pull out a credit card.
Marketing Claims: The Line Between Cosmetic and Drug
A related and recurring trap for indie brands is claims drift. A product legally marketed as a cosmetic can become, in FDA's eyes, an unapproved drug based solely on its marketing claims—regardless of the formula. Phrases like "treats eczema," "reduces inflammation," "heals," or "prevents wrinkles at the cellular level" push a product toward drug status, triggering the approval requirements cosmetics are otherwise exempt from.
Founders should audit label copy, website claims, and influencer talking points with the same rigor they apply to formulation. A compliant formula paired with aggressive drug-like claims does not protect the brand—it simply creates a different, more serious regulatory problem.
Practical Compliance Checklist for Launch
Before going live on any platform, founders should be able to confirm:
- Facility registration is complete and current.
- Each product is listed, with listings updated when formulas change materially.
- A Responsible Person is formally designated, with a documented safety substantiation file.
- Labels and marketing claims have been reviewed for drug-claim risk.
- A system exists for logging and reporting adverse events.
- Staff handling platform compliance requests understand that no FDA certificate exists, and know what to send instead.
MoCRA raised the bar for cosmetics compliance, but it did not create a credential to wave at marketplaces. The real work—and the real protection—lies in registration, listing, substantiation, and disciplined claims review, not in a piece of paper FDA never agreed to issue.