Selling a lipstick or lip gloss in the EU means proving the product is safe to swallow as well as safe to wear, and that single fact is what makes a CPSR for lipstick different from one for a face cream or body lotion. Because lip products sit on the mucosal border of the mouth, a real portion of every application is licked, kissed or eaten away over the course of a day, so the safety assessor cannot treat the skin as the only route of exposure. Oral (ingestion) exposure has to be built into the toxicological calculations on top of the usual dermal ones, and that changes which colorants you may use, how strictly heavy-metal traces are scrutinised, and how much evidence your supplier documents have to carry.
This guide walks indie brand founders, small manufacturers and importers through the parts of the Cosmetic Product Safety Report that are specific to lip products under Regulation (EC) No 1223/2009: the positive list of colorants in Annex IV, the technically unavoidable heavy metals in mineral pigments, the “may contain” labelling convention for shade ranges, and the flavour, microbiological and stability points a competent assessor will insist on. The aim is to help you order the right testing and gather the right paperwork the first time, rather than discovering gaps after a rejected notification.
Key takeaways
- Lip products require the safety assessor to add oral (ingestion) exposure to the usual dermal calculation, because a share of every application is swallowed — this raises the bar for the margin of safety.
- All colorants must appear on the positive list in Annex IV of Regulation (EC) No 1223/2009, and many carry field-of-application restrictions that exclude them from products touching the lips or mucous membranes.
- Lead, arsenic, cadmium, mercury and antimony are prohibited as ingredients but occur as technically unavoidable traces in mineral pigments; authorities expect these heavy metals kept as low as technically achievable, evidenced by pigment certificates and finished-product testing.
- The “may contain [+/-]” convention lets one label cover a shade family, and one CPSR can often cover several shades — but a materially different pigment system may need reassessment.
- Flavour and fragrance need IFRA documentation, and even low-water products still need microbiological and stability checks plus a justified PAO.
Why lip products are assessed differently: oral exposure
For most cosmetics the safety assessor estimates how much product reaches the skin, how much of each ingredient could be absorbed, and compares that systemic dose against a safe reference level to derive a margin of safety. Lip products break the “skin only” assumption. Lipstick, gloss, balm and liner are worn on a highly permeable, constantly moving surface, and a measurable fraction is transferred to food, drink and cutlery or simply swallowed. The SCCS Notes of Guidance provide default daily exposure values for lip products that reflect this ingestion, and the assessor uses ingestion-relevant figures alongside the dermal ones when calculating exposure.
In practice this means an ingredient that would be perfectly acceptable in a leave-on face product can fail in a lip product, because the combined dermal-plus-oral dose pushes the margin of safety too low. It also means impurity profiles matter more: a trace contaminant that is negligible on the skin becomes relevant once you assume part of it is eaten daily over years of use. If you want the underlying mechanics of how any of this is evaluated, our overview of what a CPSR is and how it works sets out the two-part structure of the report and the role of the safety assessor.
Colorants: the Annex IV positive list and field-of-application limits
Colour is the whole point of most lip products, and colorants are the most tightly controlled ingredient class in the Regulation. Only substances listed on the positive list in Annex IV of Regulation (EC) No 1223/2009 may be used to colour a cosmetic in the EU — if a pigment or dye is not on that list, it is not permitted, full stop. Each entry in Annex IV also carries a field-of-application indication showing where the colorant may be used: some are cleared for all cosmetics, some only for rinse-off products, and some are explicitly not allowed in products that may come into contact with mucous membranes.
Because lips are a mucosal surface, that last category is where lip formulators most often go wrong. A colorant that is fine in a rinse-off shampoo or a nail lacquer may be prohibited in a lipstick. The assessor checks every colour additive in your formula against its Annex IV entry and its Colour Index (CI) number, confirms it is authorised for lip use, and verifies any purity criteria attached to the entry. Getting the shade you want sometimes means substituting a compliant pigment before the formula is even finalised, which is far cheaper than reformulating after assessment.
Note: “Natural” or “organic” positioning does not exempt a colorant from Annex IV. Plant-derived and mineral colours must still appear on the positive list and respect their field-of-application restrictions; the origin of a pigment has no bearing on whether it is legally usable on the lips.
Heavy metals: prohibited ingredients, unavoidable traces
Lead, arsenic, cadmium, mercury and antimony are all prohibited as intentional ingredients under the Regulation. Nobody adds them to a lipstick — but they turn up anyway as trace contaminants of the mineral pigments, fillers and micas that give lip products their colour and shimmer, because these raw materials are mined and refined from natural ore. The Regulation recognises this reality: Article 17 allows the presence of a prohibited substance only where it is technically unavoidable under good manufacturing practice and the product remains safe. That is a narrow allowance, not a loophole.
“Technically unavoidable and safe” is exactly where oral exposure bites hardest. Regulators treat lip products as a worst-case scenario for heavy metals precisely because they are ingested, so the expectation is that traces are kept as low as technically achievable. Several national authorities — Germany’s in particular — publish recommended maximum trace levels for heavy metals in cosmetics that assessors use as reference points; we describe these qualitatively here rather than quoting figures, because the values are revised over time and differ by metal. What matters for you is the evidence trail: your assessor will expect both pigment supplier certificates stating measured heavy-metal content and, for lip products especially, heavy-metal testing of the finished product to confirm the levels in the actual formula.
| Heavy metal / concern | Why it matters in lip products | Evidence the assessor wants |
|---|---|---|
| Lead | Cumulative toxin; ingestion route means repeated daily intake is assumed, so trace levels are scrutinised closely. | Pigment CoAs with measured lead content; finished-product testing kept as low as technically achievable. |
| Arsenic | Contaminant of mined mineral pigments and fillers; toxic by ingestion at low doses. | Supplier specifications and a Certificate of Analysis on the batch or finished product. |
| Cadmium | Associated with certain colour pigments and micas; accumulates with chronic oral exposure. | Raw-material declarations plus finished-product heavy-metal panel. |
| Mercury | Strictly controlled; even trace ingestion is a concern for a leave-on, swallowed product. | Supplier attestation of absence/traces; confirmatory testing where the pigment risk profile warrants it. |
| Antimony | Can occur in mineral colorants; relevant once an ingestion fraction is assumed. | Pigment certificates and, where appropriate, inclusion in the finished-product test panel. |
Warning: A pigment supplier’s certificate covering heavy metals in the raw material is not the same as knowing the level in your finished product. Concentration, mixing and the ratios of several pigments all shift the final figure, and for lip products regulators expect the finished-product number. Budget for a finished-product heavy-metal test rather than relying on raw-material certificates alone.
“May contain [+/-]” and when one CPSR covers a shade family
Lip ranges are built on shade variation, and the Regulation accommodates this with the “may contain” convention. Where a brand produces several shades from a common base and varies only the colorants, the ingredient list may declare those colorants after the words “may contain” or the symbol “[+/-]”, so a single label artwork can serve the whole shade family instead of printing a separate INCI list per shade.
The same efficiency can extend to the CPSR: one safety report can often cover a shade family when the only difference between shades is the proportion of colorants already assessed and cleared, and when the total colorant load stays within the range evaluated. The judgement is the assessor’s. If a new shade introduces a colorant that was not in the assessed set, shifts the pigment system enough to change the heavy-metal or exposure profile, or adds an effect pigment with a different impurity signature, that variant needs reassessment rather than a free ride under the existing report. We cover the decision logic in detail in our guide to when a separate CPSR is required for cosmetic variants — worth reading before you plan a large shade launch.
Flavour, fragrance, microbiology and stability
Flavour and fragrance
Many lip products carry a flavour (vanilla, mint, fruit) or a light fragrance, and these are ingested along with the base. The assessor needs an IFRA certificate for the fragrance or flavour compound confirming it is used within IFRA standards for the relevant product category, plus the allergen breakdown so that any fragrance allergens above the labelling threshold are declared. Flavour raw materials should be suitable for use on the lips; documentation from the supplier stating this is part of the file. The same ingestion logic that governs pigments applies here — a flavour dose is partly swallowed. Our article on fragrance safety in a CPSR explains how IFRA certificates and allergen data feed the assessment.
Microbiological limits and stability
Anhydrous or low-water lip products — classic bullet lipsticks and oil glosses — carry a lower microbiological risk than water-based formulas, but “lower” is not “none”, and the assessor still expects microbiological data appropriate to the product. A finished-product microbiological test, or a documented justification for why the water activity makes growth implausible, belongs in the file; where testing is needed our microbiological testing service covers it. Stability and compatibility testing then confirm the product survives real-world conditions: lipsticks are prone to fat bloom (a dull surface film) and sweating (oil beading out) if the wax system is unstable, and gloss can separate. Stability results underpin the Period After Opening (PAO) or the durability date you print on the pack, so the number is defensible rather than a guess.
The documents your assessor will ask for
Lip products generate a longer evidence list than most categories, and assembling it before you order the report saves time and money. Expect to provide the full quantitative formula with INCI names and CI numbers; pigment and colorant specifications confirming Annex IV status and field-of-application clearance for lip use; supplier certificates and a Certificate of Analysis covering heavy-metal content, backed by finished-product heavy-metal testing; IFRA certificates and allergen data for any flavour or fragrance; microbiological results or a justified waiver; and stability and compatibility data supporting the PAO. Sourcing a robust Certificate of Analysis for the finished batch is often the missing piece for lip products specifically, because of the heavy-metal question.
If you are assembling a file for the first time, our checklist of the documents needed to order a CPSR maps the general requirements, and the guide to how to get a CPSR walks through the sequence from formula to signed report. Gaps in this paperwork are the single most common reason a lip-product assessment stalls.
Note: The safety assessor cannot sign off a heavy-metal position on assumption. If the finished-product test data is absent, the report is either delayed or issued with caveats — neither of which helps you notify and sell. Order the testing early so results arrive before, not after, the assessment.
Bringing it all together
A lipstick or lip gloss is a small product with an outsized compliance footprint, because the moment part of it is swallowed the assessment gains a whole extra dimension. Oral exposure raises the stakes on every pigment choice; Annex IV governs which colorants you may use and whether they are cleared for the lips; the prohibited heavy metals demand both supplier certificates and finished-product testing kept as low as technically achievable; and flavour, microbiology and stability each add their own documentation. Handle these deliberately and one well-scoped CPSR can cover a whole shade family; handle them loosely and you risk reassessment, delay or an unsafe product on the market.
Lexora’s Cosmetic Product Safety Report service is built for exactly this: an EU-qualified safety assessor works through your lip formula, colorant list and test data, factors in oral exposure, and issues a report you can rely on for CPNP notification. Pair it with finished-product heavy-metal and microbiological testing where needed, and read our guide to separate CPSRs for variants before you scale a shade range so your reporting strategy fits your product roadmap from the start.
Frequently asked questions
Why does a lipstick need a different CPSR from a face cream?
Because a lipstick is partly ingested, the safety assessor must add oral (ingestion) exposure to the usual dermal calculation. That combined dose changes the margin of safety, tightens which colorants are usable, and raises the scrutiny on heavy-metal traces compared with a leave-on product that stays on the skin.
Are heavy metals allowed in lipstick at all?
Not as deliberate ingredients — lead, arsenic, cadmium, mercury and antimony are prohibited. They are tolerated only as technically unavoidable trace contaminants of mineral pigments, and only if the product remains safe. Regulators expect traces kept as low as technically achievable, evidenced by supplier certificates and finished-product testing.
Can one CPSR cover a whole range of lipstick shades?
Often yes, when the shades share a base and differ only in the proportion of colorants that have already been assessed and cleared. A new colorant, a materially different pigment system, or a changed heavy-metal or exposure profile can trigger the need for reassessment of that variant.
Do I need to test the finished product for heavy metals, or is a supplier certificate enough?
For lip products you should test the finished product. A pigment supplier’s certificate tells you about the raw material, but concentration and the mix of several pigments change the level in the actual formula — and because lip products are ingested, assessors expect the finished-product figure.
What does the “may contain” or “[+/-]” on a lip product label mean?
It is a labelling convention that lets one ingredient list cover several shades. Colorants that appear in some shades but not others are declared after “may contain” or the symbol “[+/-]”, so a single artwork serves the shade family instead of a separate INCI list per shade.
Do anhydrous lip products still need microbiological testing?
They still need microbiological data, even though anhydrous and low-water formulas carry a lower risk. The file should contain either a finished-product microbiological result or a documented justification that the low water activity makes microbial growth implausible, alongside stability data supporting the Period After Opening.
