Supplier certificate tracking for cosmetics and personal care manufacturers
If you make cosmetics or personal care products, the certificates your suppliers owe you sit across a spreadsheet, a shared drive and somebody's inbox, and they expire on dates nobody is watching. Certly keeps the supplier list, the required document types and the expiry dates in one place, warns you at 90, 60 and 30 days, and shows the whole position on one screen you can export as a PDF.
How cosmetics and personal care plants track supplier certificates today
A cosmetics plant carries a supplier list longer than its product list. Surfactants, emulsifiers, actives, preservatives, pigments, fragrance compounds, bulk ingredients, the converters who supply bottles, pumps and closures, and often a contract filler or a private label partner. Every one of them owes you documents, and most of those documents go out of date on a schedule nobody at the supplier is tracking on your behalf.
The usual system is a spreadsheet and a folder. One tab lists the approved suppliers, a column holds a date someone typed in from the front page of a PDF, and the PDFs sit in a shared drive or in the inbox of whoever asked for them last. It works in the sense that the information exists somewhere. It fails in a specific way: the spreadsheet is only as current as the last person who opened it, and the date in the cell was copied by hand from a document that may since have been superseded.
Why it bites harder in personal care
- Fragrance allergen statements are reissued when a compound is reformulated, so the version on file can be overtaken quietly while the spreadsheet still reads fine.
- A contract filler or private label plant is audited twice over, by its certification body and by each brand owner, and each brand owner asks for the evidence in its own format on its own timetable.
- Raw material certificates of analysis arrive per batch and per consignment, so the question is rarely whether a CoA exists, it is whether the right one is on file against the right supplier.
- ISO 22716 sets out good manufacturing practice for cosmetics, and a third-party GMP audit certificate issued against it carries a validity period like any other certificate.
- The paperwork obligation has been growing rather than shrinking. The United States introduced facility registration and product listing duties under the Modernization of Cosmetics Regulation Act of 2022, and the EU Cosmetic Products Regulation requires a product information file to be kept available for each product placed on the market.
What actually goes wrong at the audit
It is rarely a supplier you forgot. It is a supplier you have, with a certificate you had, that lapsed in March, and nobody noticed because the reminder lived in one person's head or in a calendar entry that moved. The cost is the finding, the corrective action, and the days spent reassembling evidence in the week you have the least time for it.
Certly does not touch registration, product files or formulation review. It does one job: it holds the supplier list, the documents each supplier owes, and the expiry date recorded against each one, and it tells you what needs attention before the date passes.
The workflow, from supplier list to the PDF an auditor reads
- Build the supplier list and say what each one owes
Add each supplier with its contact details and tick the certificate types required from it: allergen declaration, CoA, audit certificate. A fragrance house that owes you an allergen statement and a CoA gets two slots. A contract filler that owes you a GMP audit certificate gets one. This is the approved supplier list you already keep, with the document requirement attached to each line rather than held in a separate tab.
- Put the documents you already hold on file
Your QA team uploads each certificate against the supplier and the certificate type, with its issue and expiry dates. PDFs, PNGs and JPEGs of scanned certificates are what the product stores, which is what a supplier normally sends.
- Decide how much warning you want
Expiry tracking runs on configurable thresholds at 90, 60 and 30 days before the recorded expiry date, computed by a scheduled job. Ninety days is usually the useful one in personal care, because a fragrance house reissuing a compound statement or a certification body scheduling a re-audit does not move at two weeks' notice.
- Work from the status screen instead of the folder
One screen shows every supplier and every required document in one of four states: current, expiring soon, expired, missing. Missing is the state a spreadsheet hides best, because a row that was never filled in looks identical to a row nobody has opened.
- Ask the supplier for the renewal
Certly can email the supplier contact a chase for a certificate approaching expiry or already lapsed, with a one-click upload link, and log each send. The detail of what the supplier receives and how the upload link works is covered on its own pages rather than repeated here.
- Export the screen when someone asks for evidence
The dashboard exports as a PDF for an auditor, or for a brand owner working through its supplier questionnaire. The export carries the same statuses as the screen, and the same standing disclaimer: Certly tracks and reminds, it does not verify certificate authenticity or guarantee compliance.
Where cosmetics documents sit in Certly
| What you ask a personal care supplier for | Certificate type in Certly | What the dashboard shows |
|---|---|---|
| Certificate of analysis for a surfactant, active or preservative | CoA | Current, expiring soon, expired or missing against the date you record on it |
| Allergen statement for a fragrance compound or a raw material | Allergen declaration | The same four states, per supplier, on one screen |
| ISO 22716 or other third-party GMP audit certificate from a contract filler | Audit certificate | Expiring soon from 90 days out, by default |
| Audit certificate from a packaging converter or a component supplier | Audit certificate | Missing until a document is on file, so an empty slot is visible rather than silent |
A note on CoAs and expiry dates
A batch CoA is not a certificate with a renewal cycle in the way an audit certificate is. Certly tracks whatever date you record against a document, so plants typically record either a retest or review date, or the date by which they expect the next consignment's paperwork. That is a convention you choose, not something the product decides for you, and it is worth agreeing internally before you load the list.
The same honesty applies in the other direction. Certly reads the dates you or your supplier enter. It does not open the PDF, read the certificate, check it against the issuing body, or judge whether the scope on it covers the material you buy. Those are judgements for your QA team, and the product is deliberately built so the record of that judgement stays yours.
What this changes for a personal care QA team
One list instead of three places
Suppliers, contact details and required certificate types live together, so the approved supplier list and the document requirement stop drifting apart.
The empty slot is visible
Missing is one of the four statuses, so a supplier that has never sent an allergen declaration reads as missing rather than as a blank row that looks like every other blank row.
Ninety days of warning on a GMP audit certificate
Re-audits and reissued statements take time at the supplier's end. Thresholds at 90, 60 and 30 days give you a run at it, and you can configure them per certificate type.
One screen the whole team reads the same way
Current, expiring soon, expired, missing. The same four states appear on the dashboard and on the exported PDF, so nobody has to translate between a working file and an auditor's copy.
Evidence you can hand over in a format someone else reads
The PDF export covers the dashboard, which is what an auditor or a brand owner's supplier questionnaire usually opens with: who you buy from, what each owes, and the state of each document today.
Plain about what it is not
A standing disclaimer on the dashboard and the PDF states that Certly tracks and reminds, and does not verify certificate authenticity or guarantee regulatory compliance. That line is there on purpose, because the alternative is a tool that implies more than it does.
Which plan fits a cosmetics plant
Starter, $3,228 a year
One plant tracking up to 50 suppliers. Billed annually, which works out at 269 dollars a month, 10 percent off the 299 dollar monthly rate for paying up front. Includes the supplier database with required certificate types, expiry tracking with 90, 60 and 30 day alerts, automated chase emails with supplier self-upload links, and the audit-ready dashboard and PDF export. Starts with a 14-day free trial.
Professional, $5,388 a year
One plant with a deeper supplier base, up to 200 suppliers, which is the usual shape once fragrance houses, component suppliers and converters are all on the list. Everything in Starter. Billed annually, 449 dollars a month equivalent, 10 percent off the 499 dollar monthly rate. Starts with a 14-day free trial.
Multi-site, $10,788 a year
For groups and consultants covering up to 30 sites under one agreement, with no supplier cap, adding and switching sites from one sign-in. Billed annually, 899 dollars a month equivalent, 10 percent off the 999 dollar monthly rate.
Questions
Is Certly only for food plants?
It is built around three certificate types, allergen declaration, CoA and audit certificate, which is the same set a cosmetics or personal care plant collects, under different names. A fragrance allergen statement sits in the allergen declaration slot, a raw material CoA in the CoA slot, and an ISO 22716 or brand owner audit certificate in the audit certificate slot. If your document set is broader than those three today, the waitlist is the place to say so.
Can I track a GMP audit certificate from a contract filler?
Yes, as an audit certificate against that supplier, with the expiry date recorded on it. Once the date is on file, the 90, 60 and 30 day thresholds apply and the status moves to expiring soon, then expired, on the dashboard and in the PDF export.
How do you handle CoAs, which arrive per batch rather than per year?
Certly tracks the date you record against a document, so you decide the convention: a retest date, a review date, or the date you expect the next consignment's paperwork. The product applies the thresholds to whatever date is on the record. It does not read the document to infer one.
Does Certly check that a certificate is genuine?
No. It tracks documents and reminds you about dates. A standing disclaimer on the dashboard and on the PDF export says exactly that: the platform does not verify certificate authenticity and does not guarantee regulatory compliance. Verification stays with your QA team.
Can I show the dashboard to a brand owner, not just an auditor?
The PDF export is the dashboard as a document, so it suits anyone asking for the current position across your suppliers, including a brand owner working through a supplier questionnaire. It carries the same four statuses and the same disclaimer as the screen.
We run two filling sites. Does that work?
Starter and Professional each cover one site. The Multi-site plan at $10,788 a year covers up to 30 sites under one agreement, with no supplier cap, and lets you add and switch between sites from one sign-in.
When can I use it?
Certly is on a waitlist rather than open for sign-up. Joining tells us your supplier count and document mix, which is what shapes the first release. Starter and Professional each begin with a 14-day free trial when they open.