Can AI Write a Cosmetic Safety Report? What an Assessor Signs

Not the part that matters legally. In the EU and the UK, the safety assessment in a cosmetic product safety report must be carried out and signed by a person with a recognised qualification, such as pharmacy, toxicology or medicine. AI can prepare the ingredient tables and paperwork around it, which saves the assessor time.

That split is the whole answer, and it is worth being exact about because the market has filled up with offers of instant AI-written reports. A report with no named, qualified signatory in Part B is a document, not a compliant safety assessment. What a small skincare brand can do is arrive at the assessor with a clean, checked package, and that is where the money and the delay both go.

Follow me on Instagram@sagnikteaches

The two halves of the report, and who may write each

EU cosmetics law (Regulation (EC) No 1223/2009, Annex I) splits the report into two parts. The UK keeps its own version of the same regulation, and its government guidance for sellers describes the same two-part report, with Part A supplied by the responsible person and Part B by a qualified safety assessor. Check the current text there and in any other market you sell to.

Connect on LinkedInSagnik Bhattacharya

Part A, safety information, is the evidence. It has ten sections: the quantitative and qualitative composition (with chemical name, INCI name and CAS number where possible); physical and chemical characteristics and stability; microbiological quality, including the preservation challenge test result; impurities, traces and packaging; normal and reasonably foreseeable use; exposure to the product; exposure to each substance; the toxicological profile of each substance; undesirable effects and serious undesirable effects; and other information on the product, such as studies with human volunteers.

Subscribe on YouTube@sagnikteaches

Part B, safety assessment, is the judgement. It has four parts: the assessment conclusion; labelled warnings and instructions of use; the reasoning behind both, with margins of safety discussed; and the assessor's credentials and approval, meaning name, address, proof of qualification, date and signature.

The qualification is set out in Article 10: a diploma or other formal qualification awarded after a university course of theoretical and practical study in pharmacy, toxicology, medicine or a similar discipline, or a course recognised as equivalent. The product information file that contains the report is kept for ten years after the last batch is placed on the market (Article 11). Both facts come from the regulation's own text.

So the rough split looks like this. Part A is mostly gathering, tabulating and checking documents, which AI is good at. Part B is professional judgement with a signature and personal accountability, which it cannot supply.

What AI can prepare, job by job

The pattern is consistent: AI assembles, a person decides. If you are earlier than this, and still choosing ingredients, the tutorial on AI in cosmetic formulation covers the stage before the report exists.

Building the ingredient table the assessor will want

Most of the assessor's early time goes on tidying a founder's formula sheet into a table that can be assessed. Do that part yourself, with AI, and you save a chunk of the invoice. The aim is one row per ingredient, in descending order of percentage, with the identifiers an assessor needs to look up data.

Columns that work: ingredient trade name, INCI name, CAS number, supplier, percentage in the finished formula (w/w), function (emollient, humectant, preservative and so on), and a "documents held" column listing the specification, safety data sheet and any certificate of analysis you have.

Here is a prompt for a hand cream, with a fictional formula:

I am preparing a file for a cosmetic safety assessor. Below is my formula sheet and a list of the supplier documents I hold.
Build a table with these columns: trade name, INCI name, CAS number (only if it appears in a document I pasted; otherwise write NOT PROVIDED), supplier, % w/w, function, documents held.
Rules:
- Sort by % w/w, highest first.
- The percentages must sum to 100.0. If they do not, show the sum and the difference, and do not adjust any number.
- Do not supply an INCI name or a CAS number from memory. If a trade name is not in my documents, mark the row CHECK.
- After the table, list every ingredient that has no safety data sheet or specification in my list.

[paste formula sheet]
[paste document list]

What comes back is illustrative, but typical:

This table tells you something before the assessor sees it: the percentages add up to 90.80, not 100. A good run of this prompt will say so rather than quietly pad it. In this illustration the founder had left out a 9.2 per cent thickener-and-oil premix, which is exactly the sort of gap that costs a week if it is found halfway through an assessment. The two rows marked CHECK are also real work: the emulsifier blend has no document at all, so a request goes to the supplier for its composition.

An invented CAS number that nearly went into the file

The prompt above says "do not supply a CAS number from memory" for a reason. Chat tools will gladly fill an empty cell with a number that looks right. A CAS Registry Number has up to ten digits in three hyphen-separated parts, the last digit being a check digit, and a real number copied from the wrong substance passes both a casual glance and the check-digit test.

Picture how it goes wrong. A founder asks for the composition table without that rule, and the tool completes every row. One preservative gets a CAS number that belongs to a different chemical, a cleaning solvent. Nobody notices until the assessor looks the number up and finds toxicology data for the wrong substance, which would otherwise have flowed straight into the margin-of-safety work. The cost is a day of back-and-forth and a loss of trust in the rest of the table.

Three habits prevent it. Make "NOT PROVIDED" the only legal value for anything absent from your documents. Check every CAS number and INCI name against the supplier's own specification, not against the AI or a web page. And if you let the AI suggest identifiers at all, label the column "suggested, unverified" and strike it before the table goes to anyone. The INCI list check tutorial covers the same discipline for the names printed on the pack.

Exposure and margin of safety, the sum the assessor signs off

This section shows you what the assessor is doing, so that you can read the report, and so that you do not mistake the arithmetic for the assessment. The assessment depends on two choices that need expertise: which exposure assumptions apply and which no-effect level is right for each substance.

The standard chain for a leave-on product used on skin works like this. First, a daily exposure for the product type. The Scientific Committee on Consumer Safety's Notes of Guidance (12th revision at the time of writing) give hand cream an estimated 2.16 g of product a day, which their exposure table expresses as 32.70 mg per kilogram of body weight a day, worked out from the study participants' own body weights rather than the 60 kg default used elsewhere in the guidance. Check the current edition for the figure that applies to your product type. Second, the systemic exposure dose (SED) of a substance, in milligrams per kilogram of body weight a day:

SED = daily exposure to the product (mg per kg of body weight) x concentration of the substance x fraction absorbed through the skin.

Third, the margin of safety (MoS): MoS = systemic NOAEL / SED, where the NOAEL is the highest dose with no observed adverse effect in a suitable study, usually an oral one, which the assessor adjusts for how much of an oral dose is actually absorbed. The guidance treats a MoS of at least 100 as indicating that the ingredient is safe for that use.

Try it on the hand cream, with invented toxicology. Preservative A is in the formula at 0.5 per cent. Say its fraction absorbed through the skin is 50 per cent and its systemic NOAEL is 50 mg/kg a day.

• Daily exposure to the hand cream: 32.70 mg per kg of body weight.
• Exposure to A on the skin: 32.70 x 0.005 = 0.1635 mg/kg a day.
• Absorbed, which is the SED: 0.1635 x 0.5 = about 0.082 mg/kg a day.
• MoS = 50 / 0.082 = about 612. That is well above 100.

Now a failing case. Say Ingredient B sits at 2 per cent, with full absorption assumed, and a NOAEL of 5 mg/kg a day. The SED is 32.70 x 0.02 x 1 = 0.654 mg/kg a day, and the MoS is 5 / 0.654 = about 7.6. That is far below 100, so the assessor would ask for the percentage to come down, for better absorption data, or for the ingredient to go. This is a decision for them, because the right NOAEL, the right absorption value and whether the ingredient is allowed at all (the EU lists prohibited and restricted substances, colourants, preservatives and UV filters in its annexes) are matters of expertise.

AI is useful for the sum itself once the assessor gives you the inputs. Ask it to produce a table of SED and MoS per ingredient, show its working, and flag anything below 100. Then check two rows with a calculator. Ask for a worked line, not just an answer: chat tools are poor at multi-step arithmetic and they will round, drop a unit, divide by body weight a second time when the figure is already per kilogram, or use 70 kg where the guidance uses 60, without telling you. The tutorial on why AI is bad at maths explains why.

The supplier documents each ingredient should come with

An assessor cannot work from a trade name. The pack of documents decides how quickly the job moves. AI helps you keep track: paste your ingredient list and ask for a status table with one row per ingredient and one column per document type, marking each as held, requested or missing.

• Specification or technical data sheet: identity, purity and typical use levels.
• Safety data sheet: handling hazards, which helps but is not a cosmetic toxicology file.
• Certificate of analysis for the batch you are using, where relevant.
• Allergen declaration for fragrance and flavour compositions, listing the declarable allergens and their levels.
• Statement on impurities and heavy-metal limits for mineral and botanical ingredients.
• Nanomaterial statement where a supplier uses small particles.
• Compliance letter that the ingredient is permitted for cosmetic use and conforms to the restrictions that apply.

Beyond ingredients, the assessor will want the finished-product evidence: stability results, the preservation challenge test, microbiological results, packaging specification and any patch tests or consumer-use data. The preservation challenge test and stability study take weeks, so book them early; they are the usual hidden delay. Read the lab report yourself for obvious problems, such as the test date being after your first sale.

Briefing the assessor so the work takes less of their time

Sending a tidy package changes both the cost and the turnaround. Ask for a fixed-fee quote if you can, and ask what is included, since pricing varies and depends on the number of formulas and variants. Hand over the following in one go:

1. The cleaned ingredient table, totals to 100, with sources for each identifier.
2. The document tracker, with missing items listed and chased.
3. A one-page product brief: what it is, who it is for, where on the body, how often, how much, the claimed benefits, and any warnings you plan to print.
4. The planned variants (fragrances, colours, pack sizes) so the assessor can say which are covered.
5. Stability, microbiology and challenge-test results.
6. The draft label, with INCI list and claims, so warnings and claims can be checked against the conclusion.

A short drafted brief for a hand cream might read: "Leave-on hand cream, applied to both hands about twice a day, roughly 2 g a day in total. Adults only. Not for use on broken skin. Claims: moisturises for 24 hours (consumer use test attached). Variants: unscented, and with fragrance at 0.3 per cent. Pack: 75 ml tube." Writing it forces you to settle questions the assessor would otherwise ask, one at a time, by email. The skincare claims tutorial helps you check a claim like the 24-hour one against the evidence you actually hold.

It is also worth asking the assessor how they handle data protection and confidentiality for your formula, as the formula is a trade secret. And ask before uploading anything to a public chat tool. Keep exact formulas out of consumer chats unless your plan's data terms are acceptable; use the ingredient names and percentages only in the package you send to the assessor, and read the data controls on the plan you use first.

When the report must be reopened

The report is a record of one formula in one pack for one use. These events mean the assessor should look again:

• A change to any ingredient or its percentage, including a switch of supplier for the same ingredient name.
• A new fragrance or colour.
• A different pack material, for example from glass to plastic, which can change impurities and stability.
• A new claim or a new intended user group, such as marketing to children.
• New data on an ingredient, or a change in the permitted lists.
• Serious undesirable effects reported by customers.

The EU rules also require the report to be kept up to date as new information appears after launch. Build a simple change log into your formula sheet, with a date and a line on what changed, and ask the AI to compare two versions of the formula and list every difference. It is a quick way to catch the "we swapped the glycerin supplier in spring" change that nobody told the assessor about.

How to judge a safety report offer

Because AI-written documents are cheap, some sellers offer an instant report at a very low price. Four checks cut through the marketing:

• Is there a named person in Part B, with a stated qualification and a signature? If not, it fails the basic test.
• Does the report discuss your formula, with your percentages and your pack, or is it a generic template with your product name inserted?
• Does it show margins of safety per ingredient with sources for each no-effect level?
• Does the seller ask for stability and challenge-test results, or is the report produced without them?

If the answers are no, you have bought paper rather than a safety assessment, and it will not help if a customer reaction brings an authority to your door. For other jobs where AI helps a small brand without crossing into signed judgement, see six jobs a small skincare brand can delegate.

A four-week plan from formula to signed report

1. Week 1: clean the formula sheet, build the ingredient table with AI, fix the totals, and send document requests for every ingredient marked CHECK or with no specification.
2. Week 1 to 3: book stability and preservation challenge testing as soon as a pilot batch exists.
3. Week 2: request quotes from two or three assessors with the same brief, and compare what each includes (revisions, variants, a call to explain the report).
4. Week 3: hand over the full package. Answer the assessor's questions in a single shared list rather than by scattered emails.
5. Week 4: read the draft report. Check the label against the warnings in Part B, the ingredient list against the composition, and every variant against the scope. Then file the signed report with the rest of the product information file.

Timings depend heavily on lab turnaround, which is outside your control. If you want help deciding which parts of your product file to automate and which to hand to a professional, that is part of my AI implementation consultation, and a 1:1 call can be booked here. This tutorial is not legal advice; confirm requirements with a qualified adviser for each market you sell in.

Questions skincare founders ask about safety reports

Can I sign my own cosmetic safety report?

Only if you personally hold the qualification the rules ask for: a university-level degree or equivalent in pharmacy, toxicology, medicine or a similar discipline. Most founders do not, so they use an assessor. The qualification is checked on the assessor's credentials page in the report, which must carry a name, address, proof of qualification, date and signature.

Is a report generated by an AI tool and sold as a CPSR acceptable?

Not unless a qualified assessor has reviewed it and put their name and credentials to Part B. The rules require a person with the stated qualification to carry out the safety assessment. A document with no named, qualified signatory leaves you exposed if an authority asks for the file.

Do I need a new report for every product?

Each formula needs its own assessment, though variants that differ only in fragrance, colour or pack size can sometimes be handled together. Whether a variant counts as the same formula is the assessor's call. Ask before you assume, and tell them about every planned variant at the start.

How long do I need to keep the report?

Under the EU rules the product information file, which includes the safety report, is kept for ten years after the last batch is placed on the market. UK government guidance gives the same ten-year period. Check the rules in any other market you sell in.

What if I sell in several markets?

Build the file to the strictest standard among them, then ask an adviser how it maps to each market. Rules differ on who may assess safety, what must be notified and how long records are kept. A file that meets the EU requirements usually gives you most of what another market asks for, but confirm that rather than assuming it.

Further reads

• Cosmetic Label Requirements: A US, UK and EU Checklist Using AI — Label rules that must match the safety assessment.
• Importer Product Compliance Checklist: AI Flags Missing Documents — A broader compliance checklist for goods you import.
• Eco-Friendly Claims on Skincare Packaging: Check AI Copy — Keep green claims on packaging honest.
• Cosmetic Product Photography With AI: Textures and Honest Colour — Show textures and colours truthfully in photos.
• Skincare Replenishment Emails: Time Refill Reminders From Orders — Time refill reminders from order history.
• AI for Beauty Brands: Product Copy, Photos and Customer Questions — A worked product page for a small beauty brand: AI drafts the copy, photos and replies, and a claims check keeps every line provable.
• Candle Warning Labels: An AI Draft and a Pre-Print Checklist — A pre-print checklist for AI-drafted candle warning labels: rules by market, fragrance allergens, wording, durability and sign-off.
• AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.

Sources: the text of Regulation (EC) No 1223/2009 (Article 10, Article 11, Annex I Parts A and B), as published in the EU's official journal; UK government guidance on making cosmetic products available to consumers (updated 2 November 2026); the Scientific Committee on Consumer Safety Notes of Guidance, 12th revision (exposure table and margin of safety); CAS's description of the CAS Registry Number. All checked 5 November 2026. Worked figures are illustrative.