Every cosmetic export deal eventually comes down to a folder of documents: CFS, COA, SDS, INCI list, GMP evidence, halal certificate, testing reports. This guide explains each one — what it proves, who issues it in Malaysia, and when an importer will ask for it.
Disclosure: This article is published by ORIZI Group and refers to our own manufacturing experience, services and capabilities. External factual claims are supported by the cited sources.
Quick Answer
The core document set for exporting cosmetics from Malaysia is: a Certificate of Free Sale issued by NPRA for notified products; a Certificate of Analysis from the manufacturer’s quality-control lab; a Safety Data Sheet prepared by the manufacturer; the full INCI ingredient list; GMP evidence such as an ISO 22716 certificate; a JAKIM halal certificate where the market expects it; a Certificate of Origin from MITI or an approved chamber of commerce; and product testing reports — microbiological, heavy-metal and stability at minimum. Which of these a given shipment needs depends on the destination country and the importer.
Key Takeaways
- Documents split into three families: issued by the regulator (CFS), issued by certification bodies (GMP, halal), and produced by the manufacturer and its labs (COA, SDS, specifications, testing reports).
- The Certificate of Free Sale only exists because the product was first notified with NPRA — notification is the upstream step everything else hangs on.
- A COA is batch-specific; a product specification is permanent. Importers need both, and confusing them delays clearance.
- Testing is not one report: microbiology, heavy metals, stability — and for some products preservative-efficacy and SPF tests — are separate pieces of evidence.
- Ask the importer for their document checklist before production; some documents (like a CFS) take time to obtain and cannot be backdated onto an already-shipped batch.
Scope of This Guide
This guide covers the export documentation for cosmetics, skincare, personal care and fragrance products manufactured in Malaysia, as of September 2026, and who issues each document on the Malaysian side. Destination-side filings (foreign notifications and registrations) are covered in our companion reference, cosmetic export requirements by country.
The Document Set at a Glance
| Document | Who issues it in Malaysia | What it proves |
|---|---|---|
| Certificate of Free Sale (CFS) | NPRA | The product is notified and freely sold in Malaysia |
| Certificate of Analysis (COA) | Manufacturer’s QC laboratory | A specific batch met its specification |
| Safety Data Sheet (SDS/MSDS) | Manufacturer (GHS-format) | Safe handling, storage and transport information |
| INCI ingredient list | Manufacturer (formulation record) | Full composition in international nomenclature |
| Product specification | Manufacturer | The permanent quality standard each batch is tested against |
| GMP evidence (ISO 22716) | Accredited certification body; NPRA also publishes a public GMP manufacturer list | The factory operates a certified cosmetic GMP quality system |
| Halal certificate | JAKIM | Ingredients and manufacturing meet halal requirements |
| Certificate of Origin (COO) | MITI (preferential) or an approved chamber of commerce (non-preferential) | The goods were manufactured in Malaysia; unlocks trade-agreement duty rates |
| Testing reports | Manufacturer’s lab and accredited external labs (SAMM-accredited under Standards Malaysia) | Microbiological safety, heavy-metal limits, stability and product-specific performance |
| Commercial documents (invoice, packing list, HS code) | Exporter / manufacturer | Customs classification and clearance |
Certificate of Free Sale (CFS): The Regulator’s Document
A Certificate of Free Sale is an official statement that the product is legally sold in its country of manufacture. For Malaysian cosmetics, the CFS is issued by NPRA (the National Pharmaceutical Regulatory Agency) — and only for products that have completed Malaysian cosmetic notification. That ordering matters: notification first, CFS second. Importers and foreign regulators use the CFS as evidence that the product is not something rejected at home and being dumped abroad.
Two practical notes from our project work. First, a CFS names the product and notification holder specifically — a brand owner planning multiple markets should plan CFS applications alongside the launch calendar. Second, a CFS is supporting evidence, not market approval: the destination’s own notification or registration still applies.
Certificate of Analysis (COA) vs Product Specification
A Certificate of Analysis reports the actual test results of one manufactured batch — appearance, pH, viscosity, microbial counts and whatever else the specification defines — signed off by the manufacturer’s quality-control laboratory. The product specification is the permanent yardstick those results are judged against. An importer’s quality team wants the specification once, and a COA with every shipment. When a customs officer or regulator queries a shipment, the COA for that batch is usually the document that answers it.
Safety Data Sheet (SDS/MSDS)
The SDS is a standardised (GHS-format) document describing composition hazards, safe handling, storage, transport classification and emergency measures. The manufacturer prepares it. For most rinse-off and leave-on cosmetics the SDS is unremarkable paperwork — but for alcohol-based products like perfume it does real work: it carries the flammability classification that freight forwarders and airlines use to decide how the product may ship. (That story is told in our guide to sea vs air freight.)
GMP Evidence and the Halal Certificate
GMP evidence answers the question “is this factory competently run?” — usually an ISO 22716 certificate (the international cosmetic GMP standard) from an accredited certification body, reinforced in Malaysia by NPRA’s public listing of GMP-compliant cosmetic manufacturers. Within ORIZI Group, cosmetics are manufactured by Dr Orizi (M) Sdn. Bhd., which holds ISO 22716 certification and appears on NPRA’s public list; verification links are on our certifications page.
The halal certificate, issued by JAKIM in Malaysia and verifiable on the MYeHALAL portal, certifies both ingredients and manufacturing controls. For Muslim-majority destinations it can decide whether a retailer lists the product at all — and in Indonesia, halal assurance for cosmetics is being phased in as a legal requirement, which moves this document from “commercially useful” toward “mandatory”.
Product Testing: What the Reports Actually Cover
“Testing report” is a family of documents, not one:
- Microbiological testing — total counts and specified pathogens, against ASEAN Cosmetic Directive limits. Every batch of susceptible products is tested; importers routinely ask for representative reports.
- Heavy-metal testing — lead, arsenic, mercury and cadmium against regulatory limits; usually run at accredited external laboratories.
- Stability and compatibility testing — accelerated and real-time studies showing the formula stays safe and intact over shelf life, including in its actual packaging. This is the study that also answers whether the product survives a tropical sea container.
- Preservative efficacy (challenge) testing — for water-containing formulas, evidence the preservative system actually defends the product; expected in EU Product Information Files.
- Performance testing where claimed — SPF testing for sunscreens at specialised labs being the clearest example: claim it, prove it.
External tests are run at laboratories accredited under SAMM (the Laboratory Accreditation Scheme of Malaysia, administered by the Department of Standards Malaysia) so results are recognised by foreign regulators and buyers.
Certificate of Origin and Customs Documents
The Certificate of Origin proves the goods were made in Malaysia. The preferential version — issued through MITI — is the one with money attached: it lets the importer claim reduced duty under Malaysia’s trade agreements (ASEAN, RCEP and bilateral FTAs). The non-preferential version, issued by approved chambers of commerce, satisfies buyers or banks that simply need origin evidence. Alongside it travel the commercial invoice, packing list and HS code classification — unglamorous documents that cause a disproportionate share of customs delays when they disagree with each other.
How We Run the Document File in Practice
Based on ORIZI Group’s manufacturing experience, the difference between a smooth export project and a stalled one is rarely whether documents can be produced — it is whether the importer’s exact checklist was confirmed before production. Our working rule on export-oriented projects: get the destination checklist in writing at the quotation stage, map each line to its issuer (NPRA, JAKIM, MITI, lab or ourselves), and time the long-lead items — CFS and halal certification — against the shipping date. The full folder is assembled once and then maintained per batch, so the second shipment is paperwork-trivial.
Frequently Asked Questions
Who issues the Certificate of Free Sale for Malaysian cosmetics?
NPRA — the National Pharmaceutical Regulatory Agency — for products that have completed Malaysian cosmetic notification. The notification must exist first.
Is a COA the same as a testing report?
No. The COA certifies one batch against the product specification, using selected routine tests. Testing reports (stability, challenge test, heavy metals, SPF) are standalone studies, mostly done once per product rather than per batch.
Do all export markets require a halal certificate?
No — it is legally required territory mainly in Muslim-majority markets (with Indonesia phasing in mandatory halal assurance) and commercially expected in others. But because retrofitting halal onto an existing formula is disruptive, brands targeting any Muslim market usually certify from the start.
What testing do importers most commonly ask for?
Microbiological and heavy-metal reports, plus stability evidence. EU-bound products effectively need a full safety dossier (the Product Information File), which folds these plus a safety assessment into one file.
Can ORIZI Group prepare these documents?
Yes. Dr Orizi (M) Sdn. Bhd. prepares COAs, SDSs, specifications and INCI documentation in-house, arranges accredited external testing, holds ISO 22716 and JAKIM halal certification, and applies for CFS and notification-linked documents through NPRA processes as part of export project support. The exact set is confirmed against your destination before production.
Sources & References
- NPRA — Cosmetic regulation and notification in Malaysia
- NPRA — Public list of GMP cosmetic manufacturers
- JAKIM — MYeHALAL verification portal
- Ministry of Investment, Trade and Industry (MITI) Malaysia
- Department of Standards Malaysia (SAMM laboratory accreditation)
- European Commission — Cosmetics sector (PIF and safety requirements)
Update History
September 2026 — First published.
Building your export document file? Send us your importer’s checklist and destination market, and we will map every line to its issuer and timeline before you commit to production — start at our export OEM manufacturing page or contact us.
