Korean ODM Delivery Documents Indie Founders Must Demand at Ship-Out
By the ALTA MEET editorial team | K-beauty ODM consulting
A first-time indie K-beauty founder we worked with last spring signed her purchase order, wired the deposit, and then sat for fourteen weeks while the Korean ODM ran her 5,000-unit production. The unit cost was good. The samples were beautiful. She felt fine until the morning the freight forwarder emailed: Your shipment is at the port in Incheon, ready to load. Please confirm document handover.
She did not know what documents to ask for. She emailed her ODM contact and got a single PDF: a Certificate of Analysis showing one viscosity number, one pH number, one microbial total plate count. Nothing else. No KGMP certificate. No batch record. No MSDS. No Certificate of Free Sale. No regulatory letter to back her MoCRA filing.
She called us. We told her to halt loading. It took eleven additional days to get the missing files. The ODM was not malicious; they had simply never been asked.
This post is the six-document checklist we wish every indie K-beauty founder had pinned to their first ODM brief. None of these are exotic. All of them are normal asks of a serious Korean ODM partner. Without them, you cannot prove your product is safe, you cannot file MoCRA correctly, you cannot get into Sephora or Credo or even most independent e-tailers, and you cannot defend yourself if a customer files a complaint.
Why the document handover is the moment indie founders feel exposed
For most indie K-beauty founders, the Korean ODM relationship is asymmetric. The ODM has run thousands of batches. They know what a clean batch record looks like. They know what an FDA agent will demand at customs. They know which documents a U.S. retailer will request before they accept a vendor application.
You probably do not. You will not know the difference between a KGMP audit certificate that is still valid versus one that lapsed nine months ago. You will not know that an ISO 22716 certificate from a third-party registrar reads differently from one issued by the Korea Foundation for Quality. You will not know that a Korean Certificate of Free Sale must be issued by the Korean Cosmetic Association or by an MFDS-recognized chamber, not by the ODM itself.
Korean ODMs do not volunteer this. It is not bad faith. It is workflow. Their account managers ship hundreds of POs a year. The default document package they hand over is whatever the prior client asked for. If your prior client was a Korean domestic chain, your package looks like a domestic Korean handover. If your prior client was a French distributor, your package looks like a CPNP-ready handover. If you do not specify, you get the default, and the default is rarely enough.
The fix is to specify the document package in the brief, anchor the language in the PO, and verify each file before you authorize loading. That sequence (brief, PO, verify) is the only sequence that puts you on equal footing.
Document 1: Certificate of Analysis (CoA), Per Batch
The Certificate of Analysis is the lot-level proof that the batch you are about to receive meets the specification you and the ODM agreed to. It is the single most important document in the package because it is the only one that ties a physical pallet to a chemical and microbiological identity.
A clean Korean ODM CoA in 2026 generally includes:
The product name, batch number, and date of manufacture
The batch size (units produced) and the fill volume per unit
The expiry date or period-after-opening (PAO) symbol
Physical specifications: appearance, color, odor, pH, viscosity, specific gravity
Microbiological specifications: total aerobic count, yeasts and molds count, and the absence of pathogens (typically Pseudomonas aeruginosa, Staphylococcus aureus, Candida albicans, Escherichia coli, per ISO 17516:2014 Category 1 or 2 limits)
Active concentration verification for any actives you specified in the brief (niacinamide percentage, retinyl ester percentage, vitamin C derivative percentage, plant extract concentration, etc.)
Heavy metals and impurity testing if the formula contains any restricted ingredient under EU Regulation 1223/2009 or KFDA
A signature line for the QC manager and a date of release
What indie founders should spot:
A CoA dated before the batch was produced. This happens. It is a copy-paste error in some ODM accounting systems. Reject the CoA and ask for a re-issue.
Microbial limits stated as "pass" without numerical results. A Korean Foundation for Quality–compliant CoA shows the actual colony counts (CFU/g or CFU/mL) and the threshold. "Pass" with no number is a generic template; ask for the lab data sheet.
No actives concentration verification. If your brief specified 5% niacinamide and the CoA does not state the assay result, the ODM either did not test or is not sharing. Either way, ask.
A pH outside the spec range. Korean ODMs sometimes ship batches that drifted half a pH unit during the 8-hour fill. If the spec says 5.0 to 5.8 and the CoA shows 6.1, do not authorize loading until you understand what changed. A drifted pH on a vitamin C product can shorten shelf life by two months.
A missing PAO or expiry date. EU CPNP, KFDA, and MoCRA all require a determined period of safety. The CoA should reference the stability study that justifies the PAO. If the founder asked for a 24-month shelf life and the CoA shows a 12-month PAO, the ODM is telling you something the brief did not.
We recommend reading every CoA against the spec sheet you signed in the brief and circling each discrepancy. Most indie founders need fifteen minutes per CoA. If the ODM ran a 4-SKU production, the founder reads four CoAs. The reading discipline is what builds the muscle for later batches.
Document 2: Plant-Level KGMP or ISO 22716 Certificate
The CoA tells you what the batch is. The plant-level certificate tells you whether the plant that made it is qualified to make it at all.
There are two main certificates that matter for Korean cosmetic ODMs in 2026:
KGMP (Korean Good Manufacturing Practice) is administered by the MFDS in Korea and applied to cosmetic facilities through an MFDS-recognized inspection. KGMP is conceptually similar to FDA cGMP but written specifically for cosmetic plants. A KGMP-certified plant has been audited against a documented list of facility, equipment, personnel, sanitation, and document-control standards.
ISO 22716:2007 is the international cosmetic Good Manufacturing Practice standard. It contains seventeen sections covering personnel, premises, equipment, raw materials and packaging materials, production, finished products, quality control laboratory, treatment of out-of-specification product, wastes, subcontracting, deviations, complaints and recalls, change control, internal audit, documentation, and the management system. Certification is typically issued by an accredited third party such as SGS, TÜV SÜD, DQS, Intertek, the Korea Foundation for Quality, or B2BCERT, and the certificate is valid for three years with annual surveillance audits.
What indie founders should demand at delivery:
A scanned PDF of the current KGMP certificate (or its MFDS-equivalent functional-cosmetics quality assurance system certificate, depending on product category)
A scanned PDF of the current ISO 22716:2007 certificate from the third-party registrar
The certificate number, the issue date, the expiration date, and the registrar's signature
The plant address listed on the certificate (this address must match the plant address listed on the CoA and on your PO)
A common indie founder failure is to accept a certificate without checking the issuance date and the registrar. We have read certificates dated 2017 that the ODM was still presenting in 2024. The certificate had not been renewed. The registrar's website confirmed it had lapsed. In one case the ODM had moved plants and the certificate was for the old plant. The fix in each case was a same-week conversation with the ODM and a re-issued certificate from the new audit.
We also recommend cross-checking the registrar against the pre-PO due diligence we describe in our vetting guide, because if you only verify the certificate at ship-out you have already paid the deposit.
Document 3: Batch Manufacturing Record
The batch record is the ODM's internal log of how this specific lot of your specific product was produced. ISO 22716 Section 6 requires production to be performed in accordance with established procedures, and Section 15 requires those procedures and their execution to be documented.
A complete batch record in 2026 covers:
The master formula reference and version number
The raw material lot numbers used for each ingredient
The weights or volumes dispensed and any in-process reconciliation
The processing parameters that mattered (mixing rpm, heating ramp, holding time at a given temperature, homogenizer speed, vacuum cycle if used)
In-process QC checks during the batch (visual checks, pH at the kettle, viscosity at the kettle, microbial swab if used)
The fill line setup, the fill weight tolerance, and the labeling line setup
Any deviation from the master batch instruction, signed and dated by the QC manager
A signed batch release record
Indie founders rarely receive the full batch record at ship-out, and we generally do not ask for the full 30-to-60-page document. What we ask for is a batch manufacturing record summary (one to two pages) that confirms the master formula version, lists raw material lot numbers, summarizes processing parameters, and notes any deviations.
This summary matters for three reasons. First, it lets you reconcile what was made against what you ordered: did the ODM use the version of the formula you signed off on, or did they swap a preservative? Second, raw material lot numbers let you investigate later if you receive a stability complaint a year out: was that complaint tied to a specific batch of a specific raw material? Third, deviation notes are the early warning that future batches might drift: if the ODM logged "fragrance added at 65°C instead of 55°C", you want to know.
We also strongly recommend asking the ODM to retain the full batch record for the FDA's required period. MoCRA does not yet finalize cGMP requirements, but the FDA's expected approach mirrors the ISO 22716 standard and typically requires batch records to be retained for at least one year past the product's expiration date. Korean ODMs we work with retain batch records for five years as a default.
Document 4: Material Safety Data Sheet (MSDS), GHS-Formatted
The Material Safety Data Sheet (also called Safety Data Sheet, SDS) is the chemical-safety dossier for the finished product. It is required by anyone who handles the bulk product or the filled product in commerce: your freight forwarder, your customs broker, your warehouse, your retailer, your fulfillment center. GHS-formatted SDSs follow a standardized sixteen-section layout that is harmonized across the EU, the U.S., Japan, Korea, China, and Brazil.
A finished cosmetic MSDS in 2026 typically includes:
Product identification and supplier identification
Hazard identification (most finished cosmetics will be "not classified as hazardous", but flammable products like alcohol-based mists, aerosol sunscreens, or essential-oil-heavy serums may carry a hazard class)
Composition and ingredient information (typically by INCI name with concentration ranges)
First-aid measures
Firefighting measures
Accidental release measures
Handling and storage
Exposure controls and personal protection
Physical and chemical properties
Stability and reactivity
Toxicological information
Ecological information
Disposal considerations
Transport information (UN number if applicable, packing group, transport hazard class for aerosols and flammable liquids)
Regulatory information
Other information including revision date
What indie founders should spot:
An MSDS dated more than two years before your ship date. Ingredient hazard classifications change. If the ODM is handing you an MSDS from 2022 in 2026, ask for a current revision. Korean MSDSs are typically refreshed annually.
An MSDS that is not GHS-formatted. Some older Korean ODMs still issue domestic-format Korean MSDSs that follow the previous Korea Occupational Safety and Health Agency template. For export shipments, you need the GHS sixteen-section format, which Korea adopted under MoEL's GHS implementation.
Missing transport classification for alcohol or aerosol products. A toner with 40% denatured alcohol is a flammable liquid Class 3 in transport. An aerosol sunscreen mist is UN 1950. If the MSDS shows "not regulated for transport" on a high-alcohol or aerosol product, the document is wrong; reject it. Customs will hold a flammable cosmetic with an incorrect MSDS and your customs broker will charge you a re-classification fee.
English-only or Korean-only. For US import, you need an English MSDS. For Korean domestic handling, you need a Korean MSDS. Most serious Korean ODMs issue both as a bilingual document.
Document 5: Certificate of Free Sale (CFS)
The Certificate of Free Sale is a sovereign attestation that your product is legally sold in its country of origin. For Korean-manufactured cosmetics, the CFS is typically issued by the Korean Cosmetic Association (KCA), an MFDS-recognized chamber, or, less commonly, by the MFDS directly through a notarized process.
The CFS is required by many import markets. Latin America, the Middle East, parts of Southeast Asia, and some EU customs offices request it at first import. It is not strictly required for U.S. import under MoCRA, but several U.S. retailers and most international retailers will ask for it during vendor onboarding. Whole Foods, Credo, Bluemercury, and Galeries Lafayette all routinely request a CFS for any imported cosmetic vendor.
A clean Korean CFS in 2026 includes:
The product name and the brand owner name (this should match your brand, not your ODM, when you are the brand)
The product type per KFDA classification (general cosmetic vs functional cosmetic)
The KFDA notification number if it is a functional cosmetic
The manufacturer name and address
A statement that the product is legally marketed in Korea
The issuing body (KCA or chamber), the signatory's name, the date of issue, and a unique CFS number
Two indie founder pitfalls:
First, brand owner versus ODM. If your CFS lists the ODM as the brand owner, the document is technically valid for the ODM but does not back your brand in vendor onboarding. You want the CFS issued in your brand's name with the ODM listed as the manufacturer. This requires you to have your brand registered as the holder-of-record with KFDA, which is a step many indie founders skip because they assume the ODM will hold the registration for them. The ODM will hold it for them, but the CFS reads accordingly.
Second, CFS validity. Most CFSs are dated and have an implicit validity period of one to two years. Some retailers require a CFS issued within the last six months. If your CFS is from a production run sixteen months ago, you may need a re-issue for the next vendor onboarding. Ask the ODM to confirm the CFS will be re-issued upon request for at least the first three years of the relationship.
Document 6: Regulatory Dossier Letter
The regulatory dossier letter is the catchall name for the documents that back your registration filings in your target markets. The exact letters depend on where you are launching.
For U.S. launch under MoCRA:
A signed MoCRA Responsible Person acknowledgment from the ODM stating that the listed facility is registered with FDA and that the ODM will support adverse event reporting if needed. ALTA MEET typically drafts this letter for indie founders to send to the ODM for signature.
A facility registration number from the ODM (the FDA-issued FEI number after registration).
An English INCI list and label proof that matches the filing.
A safety substantiation summary backing the brand's safety claim. This often references the stability study and the ICH Q1A(R2) and ISO 11930 protocols we cover in our stability testing guide.
For EU launch under Regulation (EC) No 1223/2009:
A Cosmetic Product Safety Report (CPSR) Part A and Part B signed by a qualified safety assessor (typically an EU-based toxicologist or pharmacist)
A Product Information File (PIF) reference, kept by the EU-based Responsible Person
A CPNP notification receipt with the notification ID
An RP letter from the ODM or from a contracted EU RP service confirming who carries the safety responsibility
For UK launch:
An SCPN (Submit Cosmetic Product Notification) receipt
A UK-based Responsible Person letter
For Korea domestic sale (if your brand also sells in Korea):
The MFDS general or functional cosmetic notification number
I'm Liz, I run ALTA MEET from Manhattan, NYC × Seoul. The six-document package is what separates an indie K-beauty brand that survives the first MoCRA inspection from one that gets a customs hold on the second container. If you are partway through a Korean ODM relationship and not sure whether your delivery document package is complete, grab 15 minutes free with Liz and we will read your documents alongside you.
This is the document layer most indie founders underestimate, partly because the ODM does not volunteer it and partly because U.S. retailers do not always ask for it until vendor onboarding. The retailers that will eventually ask (Sephora, Ulta, Credo, Whole Foods, Bluemercury) will not let you launch on their shelves without it. The MoCRA enforcement window for non-small-business brands is increasing every quarter. The path of least resistance is to demand all six documents on the first PO and reuse the template forever.
What to do when the documents do not show up
The most common failure mode we see is not the ODM refusing to provide a document. It is the ODM agreeing to provide it and then quietly missing the ship date. The dock loads, the container moves, and the founder is mid-air on a transatlantic when they realize the CoA never arrived.
The fix is a written precondition in the PO. We use language like:
Loading shall not be authorized until Brand has received and acknowledged the following documents in PDF: (1) Certificate of Analysis for each finished SKU, (2) current ISO 22716 certificate, (3) batch manufacturing record summary, (4) GHS-formatted Material Safety Data Sheet, (5) Certificate of Free Sale issued by KCA or recognized chamber, (6) Regulatory Dossier Letter package as defined in Annex B. Documents shall be transmitted via email no later than 5 calendar days prior to ETD. Late or missing documents shall trigger an automatic 7-day shift in ETD without penalty to Brand.
This single paragraph is the difference between a frantic ship-week and a calm one. Korean ODMs respect written PO terms more reliably than verbal asks. If you do not have legal counsel for your first PO, the language above plus a clear Annex B listing all six documents is the lift you need.
A second backstop: ask your freight forwarder to require the documents at booking. Many freight forwarders will not issue the booking confirmation without the MSDS and the CoA. This shifts enforcement from you (a single indie founder) to your forwarder (whose business depends on document compliance). Most Korean freight forwarders are already in this rhythm with mid-tier and tier-one ODMs.
Timing: ask in the brief, lock in the PO, verify at ship
Indie founders sometimes ask us when the right moment is to bring up the document package. The answer is the brief, the PO, and the ship date, in that order.
In the brief, mention the document package as part of the partnership expectations. Listing the six documents in the brief sets the conversation. ODMs that bristle at the list are often ODMs that have weak documentation discipline, which is itself a vetting signal.
In the PO, list the documents by name with delivery dates and consequences. We commonly attach an Annex B to the PO that specifies the exact contents of each file. The negotiation room here is small. If you are paying a $30,000 production invoice, asking for the document package is not asking for a favor; it is a normal commercial expectation.
At ship-out, verify each document before authorizing loading. Read them. Do not assume. We have seen ODMs send a re-cycled CoA from a prior batch because the new batch was still in QC. We have seen ISO 22716 certificates clipped from a different plant in the same group. We have seen MSDSs that listed the wrong fragrance compound. Verification is the discipline that closes the loop.
If you would like to compare what your current ODM is sending against the package above, the 9-line ODM quote negotiation guide we published earlier this week shows where to put the document language in your PO.
Key Takeaways
The Korean ODM document handover is the moment indie K-beauty founders feel most exposed because the default package is not designed for U.S. or EU import, and the ODM will not volunteer the missing files.
Six documents matter on every PO: Certificate of Analysis per batch, plant-level KGMP or ISO 22716 certificate, batch manufacturing record summary, GHS-formatted MSDS, Certificate of Free Sale from KCA or recognized chamber, and a regulatory dossier letter sized to your launch market.
The Certificate of Analysis should show actual microbial counts, actives concentration verification, and a pH inside the brief-spec range; "pass" without numbers is a red flag.
KGMP and ISO 22716 certificates have expiration dates. Verify the certificate is current and that the plant address on the certificate matches the PO.
The Certificate of Free Sale should be issued in your brand's name with the ODM listed as the manufacturer, not the other way around.
The regulatory dossier letter package depends on the launch market: MoCRA RP letter for the U.S., CPSR plus CPNP receipt for the EU, SCPN receipt plus UK RP letter for the UK, KFDA notification number for Korea domestic.
Write the document expectations into the PO as a precondition for loading authorization. This single clause has saved more first-time indie K-beauty launches than any other line we have helped draft.
Verify each document on its own merits at ship-out. Do not skip the reading discipline. Fifteen minutes per CoA buys you years of clean retailer onboarding.
The cluster of regulatory documents you need has shifted under MoCRA, the EU 2026 allergen disclosure update, and Korea's continued KFDA functional cosmetic guidance. Re-check your document package every twelve months.
Frequently Asked Questions
Do I need a Certificate of Free Sale to import Korean cosmetics into the U.S. under MoCRA?
Not strictly. MoCRA does not require a CFS at customs. However, most U.S. retailers (Sephora, Credo, Bluemercury, Whole Foods, several DTC fulfillment partners) request it during vendor onboarding. If you plan to sell only through your own Shopify and Amazon, you can defer the CFS request. If you plan to be on shelf within the first eighteen months, request it on the first PO.
My Korean ODM sent me a single "ISO 22716" PDF that is six years old. Is that acceptable?
Probably not. ISO 22716 certificates are valid for three years with annual surveillance audits. A six-year-old certificate is expired unless the ODM has been re-certified and has the current certificate in hand. Ask for the current certificate and the registrar's name, then verify the registrar on the registrar's website. The Korea Foundation for Quality, SGS, TÜV SÜD, DQS, and Intertek all publish their certified facility lists publicly.
How long should the ODM retain the full batch record?
ISO 22716 does not set a specific retention period. FDA guidance for cosmetics under MoCRA is still being finalized, but mirrored against ISO 22716 and 21 CFR Part 211 practice, indie founders should expect their ODM to retain the full batch record for at least one year past the product's expiration date. Many Korean ODMs we work with retain batch records for five years as a default. If you anticipate a U.S. retailer audit or an FDA inquiry, the batch record retention period is the document trail that backs your safety substantiation, so we recommend asking the ODM in writing to confirm retention practice as part of the PO.
What does "Responsible Person" mean for an indie K-beauty brand under MoCRA?
The MoCRA Responsible Person is the entity whose name and contact appear on the product label. For most indie K-beauty brands sourcing from a Korean ODM, the brand is the Responsible Person, not the ODM. The Responsible Person is required to register the facility (the Korean ODM plant), list the product, maintain safety substantiation, and report serious adverse events to FDA within fifteen business days. The ODM signs a supporting letter acknowledging its facility registration and committing to support adverse event investigation, but the legal Responsible Person under MoCRA is the brand.
Can I get the MSDS in English from a Korean ODM?
Yes, every ODM we work with issues a bilingual GHS-formatted MSDS in Korean and English by default for export shipments. If your ODM only offers a Korean-language MSDS, that is a signal of weak export workflow; ask for the English version. For European launch, you may also need a country-specific language version (French, German, Spanish, etc.) per Article 19 of EU Regulation 1223/2009.
What happens if I sign a PO without specifying the document package?
The ODM defaults to whatever their account manager hands to the prior client of the same size. Sometimes that is fine. Often it leaves you short on the regulatory letter package. The simplest fix is to send an Annex B addendum to the existing PO before ship-out. Korean ODMs we work with typically accept document addenda without an order-value change as long as the documents are within their standard issuance scope.
Is the Certificate of Free Sale the same as the MFDS Functional Cosmetic Notification?
No. The MFDS Functional Cosmetic Notification is the Korean domestic registration for a cosmetic that makes a functional claim (whitening, anti-wrinkle, sunscreen, hair loss, etc.) under Article 4 of the Korea Cosmetic Act. It applies inside Korea. The Certificate of Free Sale is a separate export-facing document that attests the product is legally marketed in Korea. A product can have both, one, or neither, depending on its claims and its sales footprint.
Working With ALTA MEET
If you have read this far and realized your current Korean ODM handover is missing two or three of the six documents, you are in good company. Most indie K-beauty founders we work with arrive at ALTA MEET partway through their first or second production run, document package half-complete, MoCRA filing date approaching, and a retailer onboarding request sitting in their inbox.
We have helped over a hundred indie K-beauty brands close the document gap with their Korean ODM partners in 2025 and 2026. We can read your current document package alongside you, mark the gaps, draft the language for your next PO addendum, and translate any Korean-only files into export-ready English versions.
If you want to spend fifteen minutes reading your documents together, book your free 15-min K-Beauty manufacturing gut-check with Liz. The first call is free, the second one is paid, and the document review is something we do regularly.
If you would like more on the upstream sourcing decisions that determine which documents you end up needing in the first place, the KFDA vs FDA vs EU cosmetic safety standards explainer covers the regulatory floor your documents have to satisfy in each market.
Reviewed for accuracy by ALTA MEET's formulation consulting team. This article reflects 2026 Korean ODM document practices observed across boutique, mid-tier, and tier-one partners during the past fourteen months.
References
ISO 22716:2007, Cosmetics, Good Manufacturing Practices (GMP), Guidelines on Good Manufacturing Practices (17-section framework, three-year certificate validity, annual surveillance)
ISO 17516:2014, Cosmetics, Microbiology, Microbiological Limits (Category 1 and Category 2 limits)
ICH Q1A(R2), Stability Testing of New Drug Substances and Products (accelerated 40 °C / 75 % RH, 3 months)
ISO 11930:2019, Cosmetics, Microbiology, Evaluation of antimicrobial protection of a cosmetic product
Regulation (EC) No 1223/2009, EU Cosmetic Regulation (CPNP, CPSR, PIF, RP, Article 19 language)
Modernization of Cosmetics Regulation Act of 2022 (MoCRA), Public Law 117-328 (facility registration, product listing, adverse event reporting, safety substantiation, RP framework)
KFDA Cosmetic Act, general vs functional cosmetic notification
Korea Cosmetic Association (KCA), Certificate of Free Sale issuance
MoEL GHS Implementation in Korea, sixteen-section SDS format
FDA Cosmetics Importers guidance (2026)
