Valent
Readiness guide

MoCRA readiness guide for cosmetics manufacturers

A practical operating guide for manufacturers and CMOs getting ready for MoCRA across facility registration, product listing, adverse event reporting, safety substantiation, labels, GMP preparation, and pending FDA rulemakings.

Updated for the 2026 renewal cycle · Operational guide, not legal advice

Treat MoCRA as a live compliance system

The strongest cosmetics teams can answer three questions quickly: which obligations apply, which records support the answer, and who approved the decision. Valent turns those answers into a living review file instead of a deadline-driven document hunt.

Why this matters

MoCRA readiness is no longer a one-time registration project. The durable work is keeping facility records, product listings, labels, safety files, supplier evidence, complaints, and review decisions connected as rules, products, and customers change.

Map your MoCRA evidence workflow

Where MoCRA readiness usually breaks down

A facility registration exists, but renewal dates, FEIs, U.S. Agent details, or brand changes are not tracked in the operating calendar.
Product listings are submitted, but formula, INCI, fragrance, color additive, and facility evidence are not tied to the listing record.
Customer-care teams receive complaints, but serious adverse event triage and the 15-business-day FDA clock are not operationalized.
Safety substantiation files exist unevenly across products, especially where toxicology, stability, microbiology, supplier COAs, and label claims are reviewed separately.

MoCRA readiness map

Who registers

Domestic and foreign establishments that manufacture or process cosmetics for U.S. distribution need facility registration unless an exclusion or small-business exemption applies.

Who lists products

The Responsible Person named on the label lists each cosmetic product and keeps listing data tied to formula, ingredient, category, and facility evidence.

What is enforced now

Facility registration, product listing, serious adverse event reporting, safety substantiation, professional-use labeling, and adverse-event contact labeling are already enforceable.

What to watch

GMP, fragrance allergens, talc/asbestos testing, PFAS state restrictions, and formaldehyde hair-smoothing rules should be handled as change-management work now.

Dates teams should have on the calendar

December 29, 2023

Serious adverse event reporting, safety substantiation, and professional-use labeling requirements took effect.

July 1, 2024

FDA began enforcing Section 607 facility registration and product listing after extending the original deadline.

December 29, 2024

Cosmetic labels needed a U.S. address, U.S. phone number, or electronic contact for adverse event reports.

2026 renewal cycle

Facilities renew every two years from initial registration. Cosmetics Direct now supports renewal status and renewal reminders.

Rulemaking watch

GMP, fragrance allergens, talc/asbestos testing, PFAS-related state activity, and formaldehyde hair-smoothing rules should stay on the compliance watchlist.

Manufacturer action plan

Use this sequence to turn MoCRA from a regulatory topic into work your manufacturing, QA, regulatory, operations, and customer-care teams can actually run.

01

Build the facility file

Create one controlled record for each manufacturing or processing site. For foreign sites, include the U.S. Agent details and make sure the contact path is usable during FDA communications.

Legal facility name and physical addressOwner/operator contactsFEI and registration statusU.S. Agent for foreign facilitiesRenewal date and change-update owner
02

Create the product listing file

For each marketed cosmetic, connect the listing to the label name, product category, full ingredient declaration, formula version, and every facility FEI used to manufacture or process it.

Product label name and SKU scopeProduct category codesINCI ingredient listFragrance, flavor, and color additive supportListing number and annual update trigger
03

Set update triggers

Treat MoCRA updates like controlled change management. A brand change, facility move, new contract manufacturer, reformulation, fragrance change, new product, or discontinued SKU should create a review task.

60-day facility registration updates120-day listing deadline for new productsAnnual product listing reviewBiennial facility renewalReformulation and supplier-change review
04

Stand up complaint and SAE operations

Customer-care and QA need a clear path for intake, seriousness assessment, escalation, FDA reporting, and retention. The 15-business-day clock starts when the Responsible Person receives a serious adverse event report.

Label contact channelComplaint intake logSeriousness triage SOPMedWatch submission process6-year retention, or 3 years for qualifying small businesses
05

Make safety substantiation inspection-ready

Maintain a product-specific dossier that shows why the product is safe under labeled and customary use. Refresh it when formula, supplier, exposure, claims, or manufacturing conditions change.

Formula and exposure assessmentIngredient safety dataToxicology or qualified expert reviewMicrobiology and stability recordsSupplier COAs and specifications
06

Prepare GMP controls now

Even while FDA's cosmetic GMP rule is delayed, manufacturers should close obvious gaps against ISO 22716-style controls so the final rule does not become a last-minute rebuild.

Batch recordsTraining and hygieneDeviation, CAPA, and change controlSupplier qualificationQuality agreements with contract manufacturers

Confirm scope and ownership

Start by deciding which obligations apply to each entity, product, and manufacturing site. The Responsible Person owns many of the product-level duties, while facility owners and operators carry the registration obligation.

Responsible Person named on label
Domestic and foreign facility scope
Contract manufacturer FEI verification
Small-business and high-risk product review

Keep Section 607 current

Registration and listing work depends on details that change constantly: brands, formulations, facilities, categories, ingredients, and product names. Those fields need owners, evidence, and update triggers.

Facility registrations and renewal dates
Product listing numbers and annual updates
INCI, fragrance, flavor, and color additive evidence
FEIs for every manufacturing or processing site

Operationalize adverse events

Since December 29, 2023, serious adverse events must be reported to FDA within 15 business days. The workflow needs to begin before legal or regulatory review sees the case.

Complaint intake channel on label
Seriousness triage and escalation SOP
MedWatch submission and 1-year follow-up tracking
6-year adverse event recordkeeping

Substantiate product safety

MoCRA requires adequate substantiation of safety for each marketed cosmetic. FDA has not defined a single required file format, so teams should build product-specific dossiers that can survive inspection.

Qualified safety assessment or toxicology review
Formula, ingredient, supplier, and exposure evidence
Microbiology, preservative challenge, and stability records
Label, claim, and reformulation history

Prepare for GMP before the rule lands

FDA has missed the statutory GMP rulemaking deadlines, but the expected direction remains clear: documented, risk-based manufacturing controls aligned with recognized cosmetic GMP standards such as ISO 22716.

Batch records, deviations, CAPA, and change control
Personnel training and hygiene records
Raw material and supplier qualification
Internal audits and quality agreements

Track labels and pending rulemakings

Labels now need adverse-event contact information, and professional-use products need full retail-style labeling plus a licensed-professional statement. Fragrance allergens, talc/asbestos methods, PFAS pressure, and formaldehyde rules should be monitored as change-management work.

Adverse-event contact on every label
Professional-use-only label statement
Fragrance allergen supplier data collection
Talc, PFAS, and state ingredient restriction review
Checklist

Build the MoCRA file before the request arrives

Use these checks to keep the evidence trail current before FDA, a customer, a retailer, or an internal reviewer asks for it.

01

Map each product, brand, facility, FEI, Responsible Person, and contract manufacturer.

02

Confirm whether the facility is registered, excluded, or small-business exempt.

03

Create a compliance calendar for renewals, annual listing updates, new-product listings, and 60-day registration changes.

04

Tie each listing field to source evidence: label name, category, full ingredient list, facility FEIs, and Responsible Person contact data.

05

Put adverse-event intake, triage, reporting, follow-up, and retention into a trained workflow.

06

Build a safety substantiation dossier for every marketed cosmetic and refresh it after changes.

07

Audit labels for adverse-event contact information, professional-use requirements, ingredient declarations, warnings, and country-of-origin needs.

08

Compare manufacturing controls against ISO 22716-style GMP expectations while the final GMP rule remains pending.

09

Collect fragrance allergen, talc, PFAS, formaldehyde, supplier COA, microbiology, and stability evidence before pressure creates a scramble.

10

Preserve reviewer identity, decision rationale, approval timestamp, exceptions, and released packet history.

Prepare for the audit before it becomes urgent

See how Valent turns supplier evidence into a live Trust Grid, review queue, and customer-ready bundle.

Audit Bundle
Retailer Clean Bundle
READY
§01Responsible person attestationSIGNED
§02Product listing · 12 SKUsSIGNED
§03Formula disclosure + RSL cross-checkSIGNED
§0447 supplier evidence packetsSIGNED
§05Allergen + preservative declarationSIGNED
SHA256 · A41F…E302 · 14 MB