Three acronyms cause more confusion in cosmetic compliance than almost any others, and brands routinely mix them up when a retailer, importer or marketplace asks for “your safety documents”. Understanding CPSR vs PIF — and how both differ from an SDS — is the difference between handing over exactly what is required and either over-sharing the wrong file or, worse, discovering you are missing the one document the law actually demands. They are not interchangeable, they are not alternatives, and one of them sits physically inside another.
This guide separates the Cosmetic Product Safety Report (CPSR), the Product Information File (PIF) and the Safety Data Sheet (SDS): what each one is, the legal instrument behind it, who prepares it, when it is required, and how they relate. By the end you will know which documents your finished cosmetic genuinely needs — and which one you probably do not.
Key takeaways
- The CPSR is the signed safety conclusion (Annex I, Parts A & B of Regulation (EC) No 1223/2009); the PIF is the full master dossier that contains the CPSR; the SDS is a CLP/REACH chemical-hazard document that is generally not required for a standard finished cosmetic.
- Think of nesting, not choosing: the CPSR lives inside the PIF, and the PIF is what the Responsible Person keeps and shows to authorities.
- Every cosmetic placed on the EU market needs both a CPSR and a PIF — there is no “one or the other”.
- An SDS becomes relevant to a cosmetics business for raw materials, or when a product is a chemical mixture classified as hazardous under CLP (nail products, solvents, certain aerosols), not for the finished cosmetic itself.
- Ask three questions: is it a cosmetic, who holds the PIF, and does anything I sell trigger CLP? The answers tell you exactly which files you need.
Three documents brands mix up
The confusion is understandable: all three are “safety paperwork” and the acronyms sound interchangeable. But they live under different regulations. The CPSR and the PIF both come from the EU Cosmetic Products Regulation (EC) No 1223/2009 and apply to finished cosmetic products; the SDS comes from chemicals law — the CLP Regulation (EC) No 1272/2008 and REACH — and applies to hazardous substances and mixtures. The key is that they are not alternatives: the CPSR is a component of the PIF, and the SDS usually is not part of your cosmetic story at all. See them as a hierarchy, not a menu, and the “which do I need?” question mostly answers itself.
What a CPSR actually is
The Cosmetic Product Safety Report is the formal safety assessment of your product. Its structure is fixed by Annex I of Regulation (EC) No 1223/2009 and it has two parts. Part A is the safety information — the quantitative and qualitative formula, physicochemical and microbiological characteristics, impurities, packaging, exposure data and the toxicological profile of each ingredient. Part B is the assessment itself: the reasoned safety conclusion, the labelling warnings and precautions, and the assessor’s reasoning and credentials.
Crucially, Part B must be signed off by a qualified safety assessor — a person holding a diploma in pharmacy, toxicology, medicine or a similar discipline, as required by Article 10. You cannot write your own CPSR unless you hold that qualification. It is the evidence-based verdict that a product is “safe for human health”, not the archive around it. For the deeper mechanics, our CPSR explained guide walks through each Annex I heading.
What a PIF actually is (and how the CPSR fits inside it)
The Product Information File is the master dossier for your product, required by Article 11. It is not a single document but a structured collection of everything demonstrating the product’s compliance, kept at the address of the Responsible Person and made available to the competent national authority for ten years after the last batch was placed on the market.
Article 11 says the PIF must contain: a description of the product; the CPSR (yes — the whole safety report sits inside the PIF); the manufacturing method and a statement of compliance with Good Manufacturing Practice; proof of the claimed effect where the claim justifies it; and data on any animal testing. So when someone asks whether they need “a CPSR or a PIF”, the honest answer is both, because one is nested inside the other. For a full breakdown of what belongs in the file, see our guides to cosmetic PIF requirements and PIF preparation for cosmetics.
Note: The PIF is never submitted anywhere. It is held at the Responsible Person’s EU address and produced only on request during market surveillance. This is distinct from CPNP notification (Article 13), which is an active submission to a central EU database before you place the product on the market.
What an SDS is — and when it applies to cosmetics
A Safety Data Sheet is a completely different animal — a workplace and supply-chain document governed by REACH (Annex II) and the CLP Regulation (EC) No 1272/2008, structured in 16 standard sections covering hazard identification, composition, first-aid, handling, storage, transport and disposal. Its purpose is to tell professional users and emergency responders how to handle a hazardous substance or mixture safely — not to prove a product is safe for a consumer to put on their skin.
Here is the key point for cosmetics: a finished cosmetic product is explicitly outside the scope of the SDS obligation. Finished cosmetics in their final consumer form do not require an SDS. So when do you actually encounter one as a cosmetics business? In two situations:
- Raw materials. Your ingredient suppliers must provide an SDS for the substances and mixtures they sell you — fragrance oils, surfactants, actives, preservatives. You collect these, and they often feed useful toxicological data into your CPSR, but they describe the raw material, not your finished product.
- Products that are also CLP-classified mixtures. A minority of cosmetic-adjacent products can be classified as hazardous under CLP — certain nail products, solvent-based removers or some aerosols. Where a product is placed on the market as a hazardous mixture, CLP obligations (an SDS for professional supply, plus a Poison Centre Notification and UFI) apply alongside the cosmetic rules.
For the full anatomy of the document, read what is a Safety Data Sheet (SDS).
Warning: Do not confuse an ingredient supplier’s SDS with your product’s safety documentation. An SDS for a fragrance oil tells you how to handle the neat oil in a factory — it does not discharge your obligation to hold a CPSR and PIF for the finished cosmetic. Treating a stack of supplier SDSs as “our safety file” is one of the most common — and most serious — compliance mistakes we see.
CPSR vs PIF vs SDS at a glance
The table below sets the three documents side by side across the dimensions that matter, including the relationship line that most comparisons leave out.
| Dimension | CPSR | PIF | SDS |
|---|---|---|---|
| Purpose | Proves the finished cosmetic is safe for human health under normal and reasonably foreseeable use. | Master compliance dossier for the product, evidencing that all obligations are met. | Communicates hazards and safe-handling of a dangerous substance/mixture to professional users and responders. |
| Legal basis | Reg. (EC) No 1223/2009, Annex I (Parts A & B); Article 10. | Reg. (EC) No 1223/2009, Article 11. | REACH (Annex II) and CLP Reg. (EC) No 1272/2008. |
| Who prepares it | A qualified safety assessor (pharmacy/toxicology/medicine or equivalent). | Compiled and kept by the Responsible Person. | The substance/mixture supplier or manufacturer (chemist/regulatory specialist). |
| When it’s required | Before placing any cosmetic on the EU market — always. | Before placing any cosmetic on the EU market — always; kept for 10 years. | Not for a standard finished cosmetic; needed for raw materials and CLP-classified hazardous products. |
| What it contains / relationship | Annex I safety information plus the signed assessment. Sits inside the PIF. | Product description, the CPSR, GMP statement, proof of claims, animal-testing data. Contains the CPSR. | 16 standardised hazard, handling and transport sections. Separate from the cosmetic dossier; supplier SDSs may inform the CPSR. |
Which documents does your product need?
Reduce the whole question to three checks and you will not go wrong. Keeping clear which party owns which file — the Responsible Person the PIF, the assessor the CPSR conclusion inside it, your suppliers their raw-material SDSs — is half of staying audit-ready.
1. Is it a cosmetic?
If your product meets the Article 2 definition of a cosmetic — a substance or mixture intended to be applied to the external parts of the body, teeth or mucous membranes mainly to clean, perfume, change appearance, protect or keep them in good condition — then it needs a CPSR and a PIF, full stop. Borderline products can fall under medicinal or biocidal rules instead; if you are unsure, our guide on cosmetic vs medicinal vs biocide classification helps you place it correctly.
2. Who holds the PIF?
Both the CPSR and PIF are legally the responsibility of the Responsible Person — an entity established in the EU. A non-EU brand cannot hold a valid PIF itself; it appoints an EU Responsible Person who compiles and keeps it. This is a compliance role, not just a mailing address.
3. Does anything you sell trigger CLP?
Collect the SDS for every raw material as a matter of course. Then ask whether any finished product is itself a CLP-classified hazardous mixture. If yes, add the SDS (for professional supply) and Poison Centre / UFI obligations on top of your cosmetic documentation. If no — which is the case for most creams, cleansers, serums and balms — the finished product needs no SDS.
Bringing it all together
The three documents are not competitors — they are a hierarchy. Your PIF is the master file, the CPSR is the safety chapter within it, and the SDS lives in a different regulatory world, relevant to your raw materials and, occasionally, to a CLP-classified finished product. If you remember only one thing: a cosmetic always needs a CPSR and a PIF, and rarely needs an SDS.
If you already hold some of these files but are not sure they hold together — that the CPSR is current, the PIF is complete under Article 11, and nothing has been mistaken for something it is not — a structured second opinion is the efficient way to close the gaps. Lexora’s PIF Review service checks your dossier against the Regulation and flags what is missing before an authority does, and if the safety report itself needs building or refreshing, our CPSR service covers the Annex I assessment end to end.
Frequently asked questions
Is a CPSR the same as a PIF?
No — the CPSR is part of the PIF. The Cosmetic Product Safety Report is the signed safety assessment (Annex I of Regulation (EC) No 1223/2009), while the Product Information File (Article 11) is the wider dossier that contains the CPSR alongside the product description, GMP statement, claims evidence and animal-testing data. You need both; one is nested inside the other. See our cosmetic PIF requirements guide for the full contents.
Do I need a Safety Data Sheet for my finished cosmetic?
Generally no. A finished cosmetic in its consumer form is outside the scope of the SDS obligation, which comes from REACH and the CLP Regulation. You will hold SDSs for your raw materials, and a small set of products that are also classified as hazardous mixtures under CLP (some nail and solvent products, certain aerosols) can require one — but a standard cream, cleanser or serum does not.
Can I use my ingredient suppliers’ SDSs instead of a CPSR?
No. Supplier SDSs describe how to handle raw materials safely in a professional setting; they do not assess whether your finished product is safe on skin. Only a CPSR, signed by a qualified safety assessor, discharges that obligation. They are useful inputs to the CPSR’s toxicological profile, but not a substitute for it — read what a CPSR is to see the difference.
Who is legally responsible for holding the PIF?
The EU Responsible Person. Under Article 11 the PIF must be kept at the Responsible Person’s EU address and made available to the national authority for ten years after the last batch is marketed. Non-EU brands cannot hold a compliant PIF themselves and must appoint a Responsible Person to compile and maintain it.
Where does the CPSR physically sit — is it submitted anywhere?
The CPSR sits inside the PIF, and neither is submitted to a database. The PIF is held privately by the Responsible Person and shown only on request during market surveillance. The separate step of notifying the product on the CPNP portal (Article 13) is what happens before you place a cosmetic on the market; the PIF and its CPSR stay with you.
