Until late 2022, cosmetics in the United States were regulated under a statute written in 1938 that gave FDA almost no meaningful enforcement authority. Brand owners could launch a skincare line without registering a facility, listing a product, or substantiating a single safety claim. The Modernization of Cosmetics Regulation Act, signed in December 2022, ended that era. MoCRA gave FDA mandatory facility registration, mandatory product listing, adverse event reporting, safety substantiation requirements, records access, and recall authority. The regulatory bar moved sharply, and brand owners launching skincare in 2026 are operating under the most aggressive cosmetic regulatory regime the US has ever had.
The practical question for brand owners is whether their contract manufacturer moved with the bar. NSF/ANSI 455-3 is the audited GMP standard that signals they did.
NSF/ANSI 455-3 is the cosmetic and personal care GMP standard developed in 2018 by NSF International in partnership with the Global Retailer and Manufacturer Alliance. It's an ANSI-accredited consensus standard that harmonizes ISO 22716 (the international cosmetic GMP standard) with FDA's domestic GMP guidance for cosmetic manufacturing. The Food and Drug Law Institute has openly noted that FDA could adopt 455-3 as the national cosmetic GMP standard under MoCRA's rule-making authority, which would make it the de facto compliance benchmark for any cosmetic manufactured for the US market.
When a manufacturer says they're "GMP compliant," the claim is usually self-reported and unverified. When a manufacturer holds NSF/ANSI 455-3 certification, an NSF auditor has been on site annually, reviewed documentation, examined process controls, and verified that the facility meets the published standard. The certification renews each year with a full on-site audit, and unannounced surveillance audits can happen between renewals.
Brand owners now face direct FDA enforcement for the first time. Mandatory facility registration means FDA has a list of every cosmetic manufacturing facility producing for the US market. Product listing means FDA has a record of every product on the market, including ingredients and labeling. Adverse event reporting requires manufacturers and brand owners to file 15-day reports of serious adverse events. Safety substantiation requires brand owners to keep records demonstrating that each product is reasonably substantiated as safe before placing it in interstate commerce. Records access means FDA can request those records during an inspection. Recall authority means FDA can mandate a recall, not just request one.
For brand owners, the implication is direct. Selecting a manufacturer without audited GMP verification means assuming all of that compliance risk personally, with no documented chain showing reasonable due diligence. A manufacturer with 455-3 certification provides documented evidence that an independent auditor verified GMP compliance against a published standard. That documentation matters when FDA shows up at a brand owner's office asking for records.
Retailers have moved in parallel. Sephora, Ulta, Credo Beauty, Whole Foods Beauty, Target Clean, and Amazon Beauty have all tightened third-party verification expectations for cosmetic suppliers. The specific accepted standards vary across retailers, but NSF/ANSI 455-3 is among the most commonly recognized.
Three other terms get used interchangeably with NSF/ANSI 455-3 in marketing copy. They aren't the same.
ISO 22716 is the international cosmetic GMP standard, published by the International Organization for Standardization. It's voluntary, recognized globally, and forms the basis for cosmetic GMP requirements in the European Union and many other markets. ISO 22716 is a strong standard, but it's an international document with no specific alignment to FDA's domestic guidance or MoCRA's enforcement priorities. NSF/ANSI 455-3 incorporates ISO 22716 and adds the US-specific FDA-aligned requirements that MoCRA enforcement now demands. For a brand selling into the US, 455-3 is the more directly applicable standard.
FDA registered means the facility submitted MoCRA's mandatory registration form to FDA and received a registration number. Registration was due by July 2024 for most cosmetic manufacturers selling into the US market. It's a legal requirement under MoCRA, not a quality verification. Every legitimate US cosmetic manufacturer is FDA registered after MoCRA. It's table stakes, not a quality signal.
cGMP compliant is a soft claim. FDA publishes cosmetic GMP guidance, and a manufacturer can self-attest that they follow it. There's no third-party verification unless the facility holds an audited certification. A self-attested cGMP claim is essentially the manufacturer's word.
NSF/ANSI 455-3 is the third-party audited version of cosmetic GMP that incorporates ISO 22716, FDA guidance, and MoCRA-aligned retailer requirements. That's the meaningful step up.
The 455-3 audit covers formulation controls, raw material qualification, microbiological controls, water system management, packaging integrity, stability testing protocols, environmental monitoring, sanitation procedures, employee training, complaint handling, and recall systems. It also covers documentation practices that align with MoCRA's records retention requirements, which means a 455-3 certified facility is already operating with the documentation infrastructure a brand owner needs to defend products if FDA requests records.
The audit is graded rather than pass/fail. Facilities receive scores showing how they actually perform against the standard, with high-performing facilities earning an "A" rating. The grade reveals more than the binary fact of certification, and a manufacturer that won't share the grade is telling you something about the grade.
Ask for the certificate number and the issuing facility. NSF publishes its certified facility list publicly. Certificates are tied to specific physical addresses, not corporate entities. A manufacturer with multiple campuses might be certified at one facility and not another, and that distinction matters when production is assigned.
Ask whether the facility is registered with FDA under MoCRA. A manufacturer producing cosmetics for the US market that hasn't registered is operating outside MoCRA compliance, which exposes the brand owner.
Ask about stability testing capabilities. MoCRA's safety substantiation requirement means brand owners need data demonstrating product stability across the labeled shelf life. A manufacturer that doesn't run stability protocols in-house is asking the brand owner to source that work elsewhere, which adds time and cost.
Ask which other NSF/ANSI 455 standards the facility holds. The 455 family includes 455-2 for dietary supplements, 455-3 for cosmetics, and 455-4 for OTC drugs. A skincare brand that may eventually launch an OTC sunscreen, acne treatment, anti-dandruff shampoo, or anti-aging product with active drug claims should select a manufacturer with 455-4 capability already in place. Without it, the brand has to switch manufacturers when the product category shifts.
Ask about international certifications. A brand selling into Canada needs a Health Canada-registered manufacturer. A brand pursuing Halal certification needs Halal verification. A brand making organic claims needs USDA NOP certification through an accredited certifier.
Eagle Labs holds NSF/ANSI 455-3 certification at Seminole, Almighty Nutrition, and CORE. The Seminole facility is the dedicated liquids, creams, and serums production site, where most US skincare brands launch creams, anti-aging serums, hair serums, massage oils, and similar formats.
Coverage extends across the full NSF/ANSI 455 family. Eagle Labs holds 455-2 (dietary supplements GMP) at Oldsmar, Seminole, Almighty Nutrition, and CORE. It holds 455-4 (OTC drug manufacturing GMP) at Oldsmar, Seminole, Almighty Nutrition, and CORE. A brand running a skincare line through Eagle Labs has the option to add OTC sunscreens, acne treatments, or other drug-classified products under the same operating group without switching manufacturers, because the OTC certification is already in place.
Eagle Labs is FDA registered, USDA NOP organic certified through OneCert (Certificate 2580006210), Halal certified (HPFR 7334-CH), and Health Canada registered (FSRN 63033). US-based manufacturing in Florida means brand owners get domestic supply chain control and audited certification coverage in one operation, which simplifies MoCRA documentation considerably. Minimum order quantities for creams and liquids start at 5,000 units.
No. FDA registration is one component of MoCRA compliance, but registration alone does not satisfy MoCRA's safety substantiation, adverse event reporting, or records retention requirements. A facility can be FDA registered and still fail to meet the full compliance picture. NSF/ANSI 455-3 certification verifies GMP-level documentation and process controls that align with MoCRA's records and substantiation expectations.
ISO 22716 is the international cosmetic GMP standard, voluntary and globally recognized. NSF/ANSI 455-3 incorporates ISO 22716 and adds US-specific FDA-aligned requirements and retailer-driven quality controls. For brands selling primarily in the US under MoCRA, 455-3 is the more directly applicable standard. For brands selling into the EU, ISO 22716 compliance may also be required.
MoCRA includes some small-business exemptions from registration and product listing requirements based on annual revenue thresholds, but adverse event reporting, safety substantiation, and good manufacturing practices apply broadly. Small brands should review the small-business provisions carefully and confirm exemption status, because the exemptions do not cover all MoCRA requirements.
Retailer requirements vary. Sephora, Ulta, Credo Beauty, Whole Foods Beauty, Target Clean, and Amazon Beauty have all tightened third-party verification expectations for cosmetic suppliers, and the specific accepted standards differ. NSF/ANSI 455-3 is among the most commonly recognized third-party cosmetic GMP standards. Brand owners should verify current requirements for their specific retail targets before committing to a manufacturer.
Yes. A facility producing both dietary supplements and cosmetics can hold 455-2 and 455-3 simultaneously, with each scope audited separately. Holding multiple 455 standards across the same operating group signals breadth of audited capability and gives brand owners flexibility to expand product lines without switching manufacturers.
Certifications are typically issued for one year and require annual on-site audits to maintain. Unannounced surveillance audits can occur between renewals. A manufacturer should be able to produce a current certificate with a verifiable expiration date, and the facility status can be checked on NSF's public listings.
Foreign manufacturers can hold NSF/ANSI 455-3 certification, but many do not, and many are unfamiliar with MoCRA's specific requirements. Brand owners using foreign manufacturers should verify that the facility is registered with FDA under MoCRA, holds appropriate third-party GMP certification, and has documentation infrastructure that can support MoCRA's records retention and safety substantiation requirements. Domestic manufacturing simplifies all of this and shortens the documentation chain considerably when FDA inspects.
Read More
