Worldover, AI operating system for substance-based businesses

    Ask an expert

    What is a cosmetic safety assessment,and what evidence does it require?

    The cosmetic safety assessment, formally the Cosmetic Product Safety Report (CPSR), is the safety evaluation at the heart of every cosmetic PIF in the EU and UK. Part A is the data. Part B is the safety assessor's reasoned conclusion. Both must exist before the product can be placed on the market, and both must be kept current.

    Last reviewed by the Worldover regulatory team.

    Quick answer

    A cosmetic safety assessment, formally a CPSR (Cosmetic Product Safety Report), is the safety assessment required under Annex I of Regulation (EC) 1223/2009 and the equivalent UK regulation. Part A compiles the safety-relevant data (composition, physical and chemical properties, microbiological quality, impurities, stability, normal and reasonably foreseeable use, exposure, toxicology, undesirable effects). Part B is the qualified safety assessor's reasoned conclusion, with warnings and instructions for use. The CPSR sits inside the Product Information File (PIF) held by the Responsible Person and must be updated when the product, composition or scientific evidence changes.

    See how Worldover assembles the PIF
    • Required under Annex I of EU 1223/2009 (and UK equivalent)
    • Part A: safety data (composition, exposure, toxicology, microbiology)
    • Part B: safety assessor's conclusion, warnings, instructions
    • Signed by a qualified safety assessor (pharmacist, toxicologist, or equivalent)
    • Held in the PIF, available to authorities on request
    • Updated when product, composition or scientific evidence changes

    Cosmetic safety assessment (CPSR): what it covers and who signs it

    Part A: the data

    Part A is the dossier of safety-relevant data: qualitative and quantitative composition, physical and chemical characteristics, microbiological quality, impurities and traces of forbidden substances, stability, packaging, normal and reasonably foreseeable use, exposure to the product and to each substance, toxicological profile of each substance, undesirable and serious undesirable effects, and any other information on the product. It's a structured evidence file, not a marketing document.

    Part B: the assessment

    Part B is the qualified safety assessor's reasoned conclusion: a safety assessment based on Part A, with warnings and instructions for use, a justified statement on the safety of the product when used under normal or reasonably foreseeable conditions, and the assessor's credentials, signature and date. Without a signed Part B the PIF is incomplete and the product isn't lawfully placed on the market.

    Who can sign a cosmetic safety assessment?

    The safety assessor must hold a qualification in pharmacy, toxicology, medicine or a similar related discipline, recognised in a Member State. The assessor can be in-house or external, but can't be the same person whose work is being assessed without independence safeguards. No software, ours included, can sign Part B: the signature is a legal act of professional judgement, and the regulation puts it in a named person's hands.

    Worldover for this

    CPSRs that update themselves

    Worldover assembles Part A from the formula, ingredient data and test results. Your safety assessor signs Part B. When composition or evidence changes, the draft re-assembles automatically.

    See cosmetic ERP software

    What's changed recently

    Two developments are driving most CPSR updates right now. Regulation (EU) 2023/1545 expands the individually labelled fragrance allergens from 26 to over 80 substances, which means reassessing fragrance allergen content and updating the safety assessment for every affected product: new products from 31 July 2026, existing products by 31 July 2028. And the Commission continues to revise ingredient entries in the Annexes, so a formula that was compliant at sign-off can drift out of compliance without any change on your side.

    The practical implication is that a cosmetic safety assessment isn't a document you finish. It's a position you maintain, and the cost of maintaining it is almost entirely the cost of knowing which products a given regulatory change touches.

    Keeping CPSRs current at scale

    A CPSR isn't a one-time document. It must be updated when the formulation changes, new toxicological evidence becomes available, an ingredient is restricted, or undesirable effects accumulate. For a brand with hundreds of SKUs, this is structural data work, not legal work. Worldover holds the composition, the ingredient toxicology and the test results once, and re-generates the Part A draft whenever a relevant change is detected, so the assessor's time goes on judgement, not on assembly.

    How much does a CPSR cost, and how long does it take?

    Assessors price per product, and the range is wide because the variable isn't the assessment, it's the state of your evidence. A straightforward rinse-off product with well-characterised raw materials and complete supplier dossiers is typically a few hundred pounds and turns round in one to two weeks. A leave-on product with novel actives, missing toxicological data, or a fragrance whose allergen breakdown has to be chased from the supplier can run into the low thousands and take six to eight weeks, most of it waiting.

    The cost driver worth managing is the chase. Assessors commonly report that the majority of elapsed time is spent requesting raw material specifications, allergen declarations, stability results and challenge test reports that the brand already owns but can't locate. Every one of those is a data-availability problem rather than a scientific one, which is why brands with the same portfolio can see a threefold difference in their annual safety assessment bill.

    What tests does a CPSR require?

    Regulation 1223/2009 doesn't prescribe a fixed test list. The assessor decides what evidence is needed for that product. In practice a standard pack contains:

    • Stability and compatibility. Accelerated and real-time stability, plus packaging compatibility, supporting the period after opening or the durability date.
    • Challenge test. Preservative efficacy to ISO 11930 for products at microbiological risk.
    • Microbiological quality. Total viable counts and specified organisms to ISO 17516 limits.
    • Raw material documentation. Specifications, certificates of analysis, allergen and impurity declarations, and toxicological profiles for each ingredient.
    • Claim substantiation. Where claims are made, the supporting evidence, governed by Regulation (EU) 655/2013.

    Animal testing is prohibited for cosmetic ingredients and finished products in the EU and UK, so the toxicological profile is built from existing data, read-across and validated alternative methods rather than new in-vivo studies.

    What this means for your software stack

    A CPSR requires a complete and up-to-date product record: formula, safety assessment inputs, INCI list, clinical and toxicological data, and stability results. Managing this across multiple SKUs and markets in disconnected systems is where teams fall behind.

    How Worldover manages the CPSR

    Worldover maintains a live CPSR-ready product record for every SKU: formula, safety assessment inputs, INCI list and test results in one place. When a formula changes, the record updates automatically, and Willow flags when a CPSR needs review based on formulation or regulatory changes.

    Assembling a CPSR without rebuilding it each time

    Part A of a CPSR is mostly data you already hold: composition, impurities, stability, microbiological quality, exposure. It becomes a project because that data is scattered. When the formulation, the raw material dossiers and the test results sit on one record, the safety assessor receives a pack rather than a request list. See cosmetics regulatory workflow platform for how that assembly works, and the Product Information File guide for the document the CPSR sits inside.

    Meet Willow

    The AI connective tissue that flows through the entire operating system.

    Meet Willow
    50+
    Enterprise customers across cosmetics, chemicals and supplements
    4 to 7
    Point systems typically retired, most within 6 months of go-live
    12 to 16 weeks
    To a live Phase 1, not a multi-year programme
    1 record
    Per substance, everywhere it appears

    See Worldover on your operation.

    Thirty minutes with one of our experts. Give us a few details and book straight into the calendar.

    1. Step 1Your details
    2. Step 2Choose a time
    3. Step 3Meeting booked

    Common questions

    What teams askus most.