TL;DR: Most compliance documentation failures at the OEM stage are not caused by missing certificates — they are caused by version mismatches, scope gaps, and unvalidated test parameters that only surface during customs clearance or retailer audits.
TL;DR: In our document control process, we track an average of 14 active compliance documents per SKU across food-contact, chemical substance, and transport categories — and version drift is the failure mode we catch most often during our pre-shipment QC-Doc review.
Where Compliance Documentation Actually Breaks Down: Version Drift and Scope Gaps #
The document looks valid. The test date is recent. The certificate number checks out. And still the shipment gets held.
This is the scenario we see most often when a new brand partner comes to us after a failed import or a rejected retailer onboarding. The failure is almost never a missing document. The failure is a document that covers the wrong substrate, the wrong colorant system, or an earlier product revision that no longer matches the physical goods being shipped.
Version drift is the root cause in roughly two-thirds of the compliance failures we’ve worked through during our pre-shipment QC-Doc review. The mechanism is straightforward: a formulation or material substitution happens mid-production (a paper mill switches coating chemistry, a laminate supplier changes adhesive grade), the change is logged internally, but the compliance documentation is not retested and reissued against the new specification. The CoA on file still references the original material lot. The Declaration of Conformity still cites the original test report number. Customs or the retailer’s compliance team pulls the test report, checks it against the current material spec sheet, and the lot numbers don’t match.
Scope gaps are the second failure mode. A migration test conducted under EU Regulation No 10/2011 for a PE laminate food pouch covers the specific food simulants and temperature conditions tested — not every use condition your end customer might apply. If the test was run at 40°C for 10 days (simulant D1, fatty foods) but the product brief specifies a retort application at 121°C, the document scope is wrong. The certificate exists. The certificate is useless.
The table below maps the three most common failure categories we process through our internal QC-Doc review, the detection point, and the typical consequence:
| Failure Category | Detection Point | Typical Consequence |
|---|---|---|
| Version drift (material substitution, no retest) | Customs clearance / retailer audit | Shipment hold, forced retest, 15–30 day delay |
| Scope gap (wrong simulant, wrong temperature) | Retailer compliance portal rejection | Full repeat migration test, 3–6 week turnaround |
| Signatory authority mismatch (unsigned, wrong entity) | FDA or EU border inspection | Rejection, potential product recall flag |
The signatory issue deserves a note. Under FDA 21 CFR Part 1.227, the importer of record bears responsibility for food facility registration accuracy. A Letter of Guarantee signed by a trading company that is not the actual manufacturer of the food-contact component does not satisfy traceability requirements. We issue all food-contact declarations under UGI Printing & Packaging’s entity name and registered facility address — not through intermediaries.
Root Cause Analysis: Three Failure Scenarios That Repeat #
Material substitution without triggered retest. A foil-laminate coffee bag had passed WVTR testing at ≤1.5 g/m²/day (38°C, 90% RH, per ASTM E96 Method B) and migration testing under EU 10/2011. Midway through a production run, the laminate adhesive was upgraded by the supplier for improved bond strength. The WVTR performance was unchanged. The migration profile was not — the new adhesive system included a photoinitiator not present in the original test. Our QC-Doc team flagged this during our incoming material review against the AVL (Approved Vendor List) change log. The brand had not been notified of the supplier change. Had this shipped, the migration certificate on file would have been technically invalid for the goods delivered.
What to check: any update to the Approved Vendor List for film, adhesive, or coating suppliers within the document validity window should automatically trigger a re-evaluation flag in your compliance tracking system. The threshold we apply internally is: any formulation change at ≥1% by weight of total laminate construction triggers mandatory resubmission for migration testing.
Certificate coverage limited to a subset of components. A folding carton for a cosmetic brand held an FSC Chain of Custody certificate covering the outer paperboard. The UV varnish applied to the outer surface was sourced from a supplier without a REACH compliance declaration covering Substances of Very High Concern (SVHCs) above the 0.1% w/w threshold required under REACH Article 33. The FSC certification was valid. The SVHC declaration gap was only caught during a German retailer onboarding audit — not before.
Our corrective protocol (internally referenced as the CPL-03 component-level compliance matrix) requires every applied material — inks, varnishes, adhesives, tapes, foam inserts — to have its own SVHC declaration, not just the primary substrate. This catches gaps that a substrate-level CoC document will never surface.
Expiry date mismanagement under multi-SKU production. Migration test certificates under EU 10/2011 carry an implicit validity linked to material specification stability, not a fixed calendar expiry. But many brands and customs teams treat them as 2-year or 3-year fixed documents. When a retailer portal flags a certificate issued 38 months ago, the default assumption is “expired” — even if no material changes occurred. The practical problem: the retest takes 4–8 weeks and costs $800–$2,400 depending on simulant count and contact conditions. We recommend brands maintain a rolling 12-month document review cycle rather than waiting for a port-of-entry flag.
Does One Test Certificate Cover All the Components in My Packaging? #
No — and that assumption is the single most predictable source of compliance failure we see in new project briefs.
A migration certificate for a laminate film does not cover the printed ink layer applied on top of it. An FSC CoC for paperboard does not extend to adhesive tapes or foam inserts. Under EU 10/2011 and FDA 21 CFR 176/177, each food-contact material layer in direct or functional-barrier contact must be independently documented. If your packaging has 4 material layers, you need compliance documentation for each. The total document set for a complex flexible pouch can run to 11–16 individual documents across migration, SVHC, food-contact conformity, and transport testing categories.
For cosmetic packaging subject to EU Regulation 1223/2009, the responsible person obligation adds a further layer: the packaging material safety assessment must be part of the Product Information File. The certificate alone is insufficient.
Specification Notes for Brand Partners #
When you brief us on a packaging project requiring compliance documentation, the most useful information you can provide upfront is: (1) the end-use country or trade zone, (2) the product category and contact condition (food, cosmetic, pharmaceutical, dry/wet/fatty, temperature range), and (3) whether any retail channel has specific portal requirements (Walmart Supplier Portal, Amazon Dangerous Goods, EU GPSR).
The most common brief gap we encounter is an undefined food simulant condition. Brands brief us on “food-safe packaging” without specifying aqueous, fatty, or alcoholic contact conditions. EU 10/2011 uses five simulants (A through E) and the selection depends on food type and contact duration — a single certificate may not cover all conditions your product needs. When this is unresolved at brief stage, it typically adds one sample iteration and 3–4 weeks to the compliance documentation timeline.
Our standard compliance documentation timeline for a new SKU requiring migration testing, SVHC declaration, and FSC CoC is 25–35 working days from material confirmation. Expedited migration testing (single simulant, room temperature contact) can be reduced to 15–18 working days. Full retort or high-temperature food-contact conditions require 35–50 working days minimum due to test duration requirements.
Frequently Asked Questions #
What is the most common reason a compliance document gets rejected at customs?
Signatory entity mismatch — the name on the declaration does not match the manufacturer of record registered with the customs authority. This is the fastest-to-fix failure type if caught before shipment, and the most expensive to resolve after goods have landed.
How often should migration test certificates be renewed if no material changes have occurred?
It depends on the market and the retailer. EU import inspections do not enforce a fixed certificate expiry, but retailer compliance portals often apply internal rules of 24–36 months from test date. Our recommendation is to schedule a document review at 24 months regardless — if nothing has changed in the material specification, a manufacturer’s attestation of continued compliance (with reference to the original test report) is often acceptable to European importers without a full retest. US retailers under FDA oversight take a similar practical position for low-risk dry-contact packaging.
Can a single Letter of Guarantee cover all SKUs in a product line?
Only if all SKUs use identical material constructions with no variation in substrate, ink, coating, or laminate. In practice, even a color change between SKUs can involve a different ink pigment load, which may require a separate declaration if the ink supplier’s compliance letter is pigment-specific. We issue SKU-level documentation by default and batch multi-SKU coverage only when the full material specification is confirmed identical across all variants.
Our supplier already has ISO 9001 certification — does that satisfy food-contact compliance requirements?
No. ISO 9001:2015 certifies a quality management system. It says nothing about whether the materials being managed are safe for food contact. It is frequently cited in supplier declarations as a proxy for compliance — it is not. Food-contact compliance requires substance-specific testing or a traceable compliance declaration from each material supplier in the chain. ISO 9001 can support the documentation management system around compliance, but it does not substitute for it.
Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.
