GMPC and ISO 22716: What the Certificates Actually Cover

What a GMPC Certificate Covers — and What It Leaves Out

Choosing a GMPC ISO 22716 hair care manufacturer is not a matter of collecting two PDFs. A GMP certificate describes a management system for how a product is made: the building, the people, the documentation, the cleaning regime, the calibration schedule, the deviation process and the recall capability. It does not describe the product. That distinction sounds academic until a buyer discovers that a plant holding a valid certificate still shipped a batch that separated in transit, because the certificate never covered the specific formula or the specific pack.

Argan Gold-Repair Treatment Hair Mask

The useful way to read either document is as a floor. It tells you the factory has agreed to be audited against a documented standard and has survived that audit. It does not tell you which lines were audited, whether the filling hall was inside the scope, or whether the certificate belongs to the entity you are paying. Those three questions are where most sourcing mistakes sit.

This guide covers what GMPC and ISO 22716 each commit a factory to, how the scope and site lines on a certificate should be read, and the records a buyer can request to test whether the system described on paper is the system running on the floor.

ISO 22716 vs GMPC: Same System, Different Authority

ISO 22716 is the international standard for cosmetics good manufacturing practice, published in 2007 and built around the product lifecycle rather than around a single production step. It covers premises, personnel, equipment, raw materials, production, quality control, packaging, storage, documentation, complaints and recalls. In the European Union it is treated as the route to a presumption of conformity with the GMP obligation that sits under the cosmetics regulation, which is why it is the certificate most often requested by European importers and by contract manufacturers quoting into European brands.

GMPC — the guideline for good manufacturing practice for cosmetics — runs on the same architecture and predates the ISO text. In China it is the version most factories hold, and it is the one buyers see quoted in quotations and on factory profile pages. Certificates under either name are issued by third-party certification bodies, and that is the part buyers tend to skip: the value of a certificate depends on the accreditation of the body that issued it and on whether surveillance audits have actually happened since the initial certificate was granted.

Practically, a GMPC certified hair care manufacturer and an ISO 22716 certified cosmetics manufacturer are promising the same things. The difference is the audit standard the certification body worked to, and the market that standard is recognised in. For a European buyer, ISO 22716 is the cleaner currency. For an American buyer, neither certificate is a legal requirement, since the US system relies on facility registration and inspection rather than on third-party GMP certification — but the documentation behind the certificate is still the most reliable proxy for whether the plant can hold a specification.

Reading the Certificate Itself: Scope, Site and Validity

Four lines on the certificate carry almost all of the information a buyer needs, and each of them can be checked in a few minutes.

  • The certification body and its accreditation. A certificate from an unaccredited body is a document, not evidence. Ask which national accreditation service backs the body, and expect the accreditation mark to appear on the certificate itself.
  • The legal entity and the site address. Confirm that the entity name matches the contracting party on your quotation, and that the address is the plant you intend to audit. Groups with several factories routinely display the certificate of the strongest site while quoting from a different one.
  • The scope of activity. Certificates distinguish between design and manufacture, and some are limited to particular product categories. A scope limited to leave-on skincare does not cover a colour-depositing shampoo with a dye system.
  • Validity and surveillance history. Check the expiry date, then ask for the last surveillance audit report. A certificate that has never been through a surveillance cycle tells you only how the plant looked on the day of the initial audit.

The cosmetic gmp certificate scope line is the one buyers most often misread. It commonly reads as a category sentence rather than a product list, so a factory certified for “hair and body care” is covered for shampoo, conditioner and masks, but a factory certified only for “skin care” is not covered for a colour line even if it runs one.

Where GMPC ISO 22716 Hair Care Manufacturer Claims Break Down in Practice

Four failure patterns account for most of the gaps between what a certificate implies and what a buyer receives. Every one of them is visible from the outside, provided you ask a GMPC ISO 22716 hair care manufacturer for the entity and site lines before you discuss price.

The certificate belongs to a sibling company. The trading entity that issues the quotation is not the certified entity that holds the licence. This is common in Guangzhou, where a sales office and a production company are separate legal persons. It is not fraud, but it means the certificate is evidence about a third party, and the contract should name the certified entity as the manufacturer.

The filling step happens elsewhere. A plant can be certified for manufacturing bulk while subcontracting filling to a smaller workshop. The certificate is then accurate and irrelevant to the part of the process where contamination, seal failure and batch coding actually occur.

The system exists on paper only. Documentation written for an audit, with no records behind it, is the most expensive failure mode because it survives a certificate check. The test is not whether a procedure exists but whether a batch record shows the procedure being followed, including the deviations.

The certificate is out of scope for your product. Colour cosmetics, aerosol formats and products with a drug-like claim often sit outside a plant’s audited scope, even where the plant has the equipment to run them.

None of these are reasons to avoid certification. They are reasons to treat the certificate as the start of due diligence rather than the end of it. Our own buyer’s guide to a GMP certified hair care manufacturer in China sets out that sequence in audit order, and the companion piece on evaluating an ISO certified cosmetic factory in Guangzhou covers how to score what you find.

The Audit Trail Behind the Certificate

Every clause in the standard leaves a paper trail, and the trail is what a buyer can inspect without commissioning a full audit. A GMPC ISO 22716 hair care manufacturer that runs the system properly will have all six of the following ready to share, redacted where client confidentiality requires it:

  1. A complete batch record for a product close to yours, showing the weighing sheet, the in-process checks with timestamps, the operator signatures and the release decision.
  2. The deviation and non-conformance log for the last twelve months, with the corrective action recorded against each entry. A log with no entries at all is the least credible answer available.
  3. Calibration records for the pH meter, the viscometer and the filling-line scales, since these are the instruments that decide whether a batch is released.
  4. The water system test results. Process water is the largest single ingredient in any shampoo and the most common source of microbiological failure.
  5. The training matrix, showing who is qualified to sign off a batch and when that qualification was last refreshed.
  6. The supplier approval list, with the CoA on file for each raw material. This is where substitution risk lives.

How the batch is sampled and released is covered in more detail in our guide to quality control in hair care contract production, and the coding side — the part that makes a targeted recall possible instead of a market-wide one — is set out in batch coding and traceability in hair care manufacturing.

What to Ask a GMPC ISO 22716 Hair Care Manufacturer Before Ordering

Six questions separate a factory that runs a system from one that owns a certificate. Put them in writing, and keep the answers with the quotation — the same six apply whether you are ordering shampoo, a treatment mask or a colour line, which is why they are worth asking a GMPC ISO 22716 hair care manufacturer before the first sample rather than before the first container.

QuestionWhat a strong answer looks likeRed flag
Which legal entity will manufacture my batch?The certified entity, named in the contract“Our group” or a sales company name
Is my product category inside your certified scope?A scope sentence that names hair care, plus a category example“We can make anything”
Who fills and codes the batch?The same site, with the line identifiedA subcontractor disclosed only after the deposit
Can I see a redacted batch record for a similar product?A record with checks, signatures and a release entryA blank template instead of a record
What happens when a batch fails in-process?A written deviation and rework procedure with named responsibility“It never happens”
Which documents ship with the container?COA, MSDS, certificate set and the batch list, listed by marketDocuments promised only after payment

Two more items belong in the purchase contract rather than in an email: who bears the cost of a failed release, and how long retained samples are kept. Both are cheap to agree at signature and expensive to argue later.

Certification Is a Floor, Not a Ranking

A certificate answers one question well: has this plant been audited against a recognised cosmetics GMP standard, and did it pass. It answers nothing about whether the plant can run your specific formula, whether the filling hall sits inside the scope, or whether the entity you are paying is the entity being audited. Brands that treat certification as a ranking rather than a floor tend to discover the difference in the first ocean container.

For a first order, the sequence that works is certificate, then scope, then records, then a sample batch. It takes about a week of document review and it replaces most of what a factory tour is supposed to prove. If your destination market adds its own layer — a registration file, a responsible person, a labelling rule — that belongs in the brief from the start, not in a late email; our overview of hair care regulatory compliance covers which market asks for what.

If you are shortlisting suppliers now, send us your product category, destination market and expected first-order volume through our sample and quotation request form. We will reply with the certificate scope for the site that would run your batch, the document set issued at each stage, and a quotation against flexible, customizable minimum order quantities.