TL;DR: Compliance documentation for bakery and dry food packaging fails not at the material level but at the traceability chain — a Declaration of Compliance without lot-traceable test data is worthless at a port of entry.
TL;DR: FDA 21 CFR 176.170 requires that food-contact paperboard extractives not exceed 0.5 mg/in² under aqueous migration conditions — a threshold our incoming material audit checks against every production lot.
The Specification That Actually Triggers Import Holds — Migration Limits vs. Barrier Declaration #
Most packaging briefs we receive specify “food-safe material” and list a surface coating type. That is not a compliance specification. The parameter that determines whether a dry bakery carton clears US Customs, EU border inspection, or a retailer’s own supplier audit is the specific migration limit (SML) of each regulated substance in the substrate and ink system — tested under conditions that simulate actual food contact.
For dry bakery goods (cookies, crackers, cereal bars, pasta), the relevant contact conditions under EU Regulation 10/2011 Annex V are simulant E (dry simulant, Tenax) at 40°C for 10 days. This is not interchangeable with aqueous or fatty food simulants. A test report generated using simulant A (water) for a product that is a dry biscuit is technically non-compliant, even if the numbers look clean. We flag this during our pre-production document review — what we call the FC-02 food contact material check — because replacing a test after tooling is cut adds 18–25 working days to a project.
Under FDA 21 CFR 176.170, the extractives limit for food-contact paperboard in aqueous and fatty applications is 0.5 mg/in² (approximately 77.5 mg/dm²). For dry food contact specifically, the test protocol uses heptane as a solvent simulant and the threshold remains at 0.5 mg/in². This is the number that matters at a US port inspection — not the coating weight or the board grade.
ASTM D4754 governs the two-sided liquid extraction test method most laboratories use to quantify paperboard extractives for FDA compliance purposes. Request test reports citing this method specifically. A report that states “compliant with FDA food contact requirements” without citing the test method and reporting the actual extractive value in mg/in² is not auditable.
One parameter that most briefs completely omit: total primary aromatic amine (PAA) content from printing inks. Under EU Regulation 2023/2055, certain azo colorants that can cleave to release PAAs are prohibited in food-contact printed packaging. The SML for regulated arylamines under EU 10/2011 is 0.01 mg/kg food (which, for dry food, means 0.01 mg/kg Tenax). Our water-based flexo inks for bakery carton lines are sourced from suppliers who provide PAA-specific test data — not just a generic ink safety declaration.
Supplier Qualification — What to Request and What the Response Tells You #
When qualifying an OEM packaging supplier for bakery or dry food cartons, the document request sequence matters. Ask for these in order, and evaluate the response turnaround as much as the documents themselves.
Step 1: Request the full Declaration of Compliance (DoC) for the food-contact substrate. The DoC should name the specific regulation it covers (EU 10/2011, FDA 21 CFR 176.170, or GB 4806.8-2016 for China), list the regulated substances in the material, and state the tested migration values or confirm they are below the detection limit. A DoC that says only “this material is suitable for food contact” is a legal non-document — it commits the issuer to nothing. Turnaround on a proper DoC should be under 3 working days if the material is already in the supplier’s approved vendor list. Longer than 5 days usually means they are generating it retroactively.
Step 2: Request the underlying test reports, with lot numbers. This is where qualification separates serious suppliers from compliant-on-paper ones. The test report should reference the lot or batch of material tested, the laboratory accreditation (ISO/IEC 17025 is the relevant standard), and the test date. If the test date is more than 24 months old and the supplier has not requalified since a formulation or substrate supplier change, the data does not cover current production.
Step 3: Ask for the mineral oil compliance position. Mineral oil saturated hydrocarbons (MOSH) and mineral oil aromatic hydrocarbons (MOAH) migration from recycled paperboard into dry food is one of the most actively enforced issues in EU retail right now. Germany’s BfR Recommendation XXXVI and the draft EU regulation on MOSH/MOAH set a MOAH SML effectively at zero (0.5 mg/kg in food, with 0 mg/kg as the target). A supplier using recycled board without a functional barrier layer cannot meet this for inner-pack dry food applications. Our own solution for this category is a PE or EVOH functional barrier laminate on the inner ply, with MOSH/MOAH migration tested to below 0.15 mg/kg in Tenax under our FC-02 protocol.
Step 4: For export to China, request GB 9685-2016 compliance. This standard governs additive substances in food-contact packaging materials. Chinese customs authorities have been actively testing imported packaging since 2022, and the additive positive list differs from EU and FDA lists — a substance fully compliant under EU 10/2011 may not appear on the GB 9685 positive list and is therefore non-compliant for China market.
Cost-Performance Trade-offs in Compliance Documentation #
Full third-party migration testing through an ISO/IEC 17025-accredited laboratory runs roughly USD 400–900 per test condition per material stack. For a bakery carton with a printed inner surface, outer varnish, and a window patch, complete EU 10/2011 documentation covering all three material elements costs USD 1,200–2,500 in laboratory fees alone, before engineering time.
The cheaper path is supplier-chain DoCs: the board supplier provides a DoC, the ink supplier provides an ink compliance letter, and the converter assembles them into a compliance file. This is widely accepted and legally defensible under EU 10/2011’s Article 16 traceability chain requirement — provided each DoC correctly reflects the actual materials used in production, not a generic grade. The cost delta against full finished-article migration testing is significant: chain DoCs cost roughly 80–90% less but require tighter supplier qualification upfront.
Where the cheaper route fails: when a retailer requires finished-article migration testing as a condition of supplier approval (Walmart, Carrefour, and several German discounters do this), or when a new substrate or ink is introduced mid-production run without triggering a re-qualification. We track substrate and ink supplier changes under our internal material change control log (MCC-01), and any change that affects food-contact surfaces automatically requires a DoC update before the next production run.
The counterargument for full migration testing: for high-volume, long-lifecycle bakery lines where you expect 3–5 years of continuous production, investing USD 2,000–3,000 in comprehensive finished-article testing at the start eliminates retailer audit friction for the product’s entire shelf life. For short-run seasonal packaging, chain DoCs are the correct choice.
Technical Deep-Dive: Market-by-Market Compliance Requirements for Bakery Dry Food Cartons #
The regulatory landscape across the US, EU, and China is not harmonised, and the gaps are specific enough to affect material sourcing decisions before a job is briefed to production.
| Parameter | EU Market | US Market | China Market |
|---|---|---|---|
| Primary food-contact standard | EU Regulation 10/2011 (plastics); BfR Recommendations (paper/board) | FDA 21 CFR 176.170 (paperboard), 21 CFR 175.300 (resinous coatings) | GB 4806.8-2016 (paper/board), GB 9685-2016 (additives) |
| Migration test simulant for dry food | Simulant E (Tenax) at 40°C / 10 days | Heptane extraction; 0.5 mg/in² extractives limit | Simulant IV (n-heptane) per GB 31604.1 |
| MOSH/MOAH position | Active enforcement; MOAH target 0 mg/kg in food | No federal regulation; retailer-driven | Not yet separately regulated; monitored |
| Ink system requirement | Positive list substances only; PAA SML 0.01 mg/kg | GRAS or prior-sanctioned substances; no positive list for inks | GB 9685 additive positive list applies |
| DoC / traceability requirement | Article 16, EU 10/2011; full traceability chain | No mandatory DoC; test-based compliance | DoC required per GB 4806.1-2016 general rules |
| Recycled content restrictions | Functional barrier required if MOSH/MOAH risk | No federal restriction; retailer-driven | No current restriction; under review |
| Max heavy metal sum (inks/coatings) | 100 mg/kg per EU Directive 94/62/EC Annex II | Not federally regulated for packaging inks | GB 9685 lists cadmium, lead limits individually |
Compliance requirements for bakery and dry food paperboard packaging across three major export markets. Regulatory positions current as of mid-2025; always verify against the latest published version of each standard.
The detail that causes the most rework in our experience: EU and China both require a formal Declaration of Compliance, but the content requirements differ. China’s GB 4806.1-2016 requires the DoC to state the applicable product standards, the scope of use (food type, temperature, contact duration), and the name of the manufacturer. EU 10/2011 Article 16 requires the DoC to identify the regulation, the conditions of use, and the substances present with their migration values or a statement that they fall below the SML. A document written for EU compliance will not satisfy Chinese customs without amendment — and vice versa.
One variable we are still tracking across our supplier base: the MOSH/MOAH position for board grades sourced from Southeast Asian mills. Our dataset covering European and Chinese virgin and recycled board grades is solid, but our incoming lot data for Thai and Vietnamese board is limited to 14 lots over the past 8 months. The risk profile is lower for virgin kraft grades, but we are not yet drawing conclusions on recycled grades from those origins.
Specification Notes for Brand Partners #
When you brief us on bakery or dry food carton packaging, the most useful information is not the box dimensions — it is the food contact configuration. Specifically: is the printed surface in direct contact with food, indirect contact (separated by an inner liner or bag), or non-contact (outer print only)? Each configuration requires a different compliance documentation stack, and quoting without knowing this means we will likely need to revise the material specification mid-sampling.
The gap we see most often in incoming briefs is the absence of a destination market list. “Food-safe” as a brief instruction is not actionable — a carton that clears FDA 21 CFR 176.170 for US retail may require additional MOSH/MOAH barrier treatment and a supplementary DoC for a German supermarket, and a completely separate GB 4806.8 compliance file for China. Getting the market list upfront allows us to align material selection and documentation in the first sample iteration rather than the third.
Our standard sampling timeline for a bakery carton with food-contact compliance documentation is 20–28 working days from brief confirmation to physical samples with accompanying DoC package. This extends to 35–40 working days if new substrate grades or ink systems require fresh laboratory testing rather than existing compliance data. Supply of your inner product weight, moisture content, and expected shelf life helps us confirm whether a barrier coating is needed — and which one.
What migration test simulant should we specify for a dry cookie carton destined for EU retail?
Simulant E (Tenax) at 40°C for 10 days is the correct condition under EU 10/2011 Annex V for dry foods. If your carton will also be used for slightly fatty products like shortbread or croissants, simulant D2 (vegetable oil) may also apply — confirm the food category with your compliance consultant before requesting the test.
Our current carton supplier provides a “food-safe certificate” — is that sufficient for EU market entry?
A certificate without a specific regulation reference, tested migration values, and lot-traceable test data does not satisfy EU 10/2011 Article 16. It may pass a superficial supplier audit but will not hold up at a retailer like Lidl or Aldi that conducts its own migration testing on incoming packaging.
Does FDA require a formal Declaration of Compliance for dry food cartons sold in the US?
FDA does not mandate a DoC document by name, but compliance with 21 CFR 176.170 is a legal requirement, and the FDA expects manufacturers to be able to demonstrate it through test data and formulation records. The DoC is the practical vehicle for that demonstration — and any US retailer with a formal supplier programme will require it.
What is the MOSH/MOAH risk for our dry bakery carton if we use recycled board?
Recycled paperboard can contain mineral oil residues from previously printed materials. Without a functional barrier layer (PE laminate or EVOH-based coating), MOSH/MOAH can migrate into dry food at levels exceeding EU guidance thresholds. For EU retail, recycled board in direct or indirect food contact without a functional barrier is a compliance risk we would not recommend accepting.
How long does compliance documentation remain valid if we continue ordering the same carton?
DoCs linked to supplier-chain declarations remain valid as long as the materials and formulations have not changed. Any substrate grade change, ink supplier change, or coating formulation update requires a new DoC before the next production run. Our MCC-01 material change log tracks this automatically for all active packaging programmes — but if you are sourcing from a supplier without a formal change control process, you should request a written notification clause in your supply agreement.
Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.
The simulant mismatch issue cost us a full retest cycle on a shortbread tin liner we sourced from a mill in Düsseldorf — the supplier had Tenax data on file but it was run at 60°C for a different client’s application, not the 40°C / 10-day condition Annex V actually requires for dry bakery contact. We didn’t catch it until the FC-02 equivalent review, which was already 3 weeks into tooling.
The heptane extractives limit holds at 0.5 mg/in² for paperboard, but if your carton uses a resinous coating that triggers 21 CFR 175.300 instead of 176.170, the test protocol shifts and heptane alone doesn’t cover you — we had a cereal bar launch delayed 6 weeks in 2022 because the converter’s DoC cited the wrong CFR section and the retailer’s QA team (a major club store) caught it before we did. Worth flagging which CFR applies before you even request the migration report, not after.
We had a dry cereal bar carton line — 80,000 units destined for a UK retailer — that sailed through our internal FC-02 equivalent review because the supplier submitted a perfectly clean test report. Problem was the migration testing had been run against simulant A, not Tenax, and nobody caught it until the retailer’s technical team flagged it during a routine supplier audit in Q3 2022. Full production hold, retest took 23 working days, and we missed the planogram reset window by two weeks.
Switching to a pre-validated barrier paperboard grade (we used Iggesund Invercote with an existing 176.170 test dossier) cut our compliance documentation lead time by about 3 weeks on a cracker sleeve project — which at our contract manufacturer’s $200/day line-hold rate was roughly $2,800 saved before we even touched tooling.
The MOSH/MOAH point catches people off guard more than anything else in this space — we had a UK retailer reject a cookie tray liner in 2022 not because it failed any regulatory threshold but because their own supplier code required a MOSH analytical certificate that our mill in Poland simply didn’t generate as standard.
The lot-traceability point is what actually trips us up most often. We had a Ningbo supplier submit a full DoC packet for a glassine-lined cracker sleeve in early 2023, technically correct paperboard, heptane extractives data within spec, but the test certificate referenced a batch number that predated their substrate mill switch by four months and they hadn’t flagged it. Took us two weeks to unwind the audit trail before we could even determine whether the new substrate needed a fresh 176.170 extraction run.
Does the 10-day Tenax protocol hold for corrugated secondary packaging where the fluting medium contacts the primary carton directly, or does the contact geometry get treated as indirect and excluded from the SML calculation entirely?
Seal failure on a candle gift set outer carton — reverse tuck end, 350gsm SBS from a Shanghai converter. We’d approved the board based on a DoC tied to a different caliper (the mill switched from 380gsm mid-run and didn’t flag it), and the thinner stock couldn’t hold the tuck lock geometry under the compression load of palletized transit. Roughly 4,200 units arrived at our 3PL in Düsseldorf with collapsed base tucks, product loose inside the shipper. The structural spec and the compliance spec were both technically on file, just for a board that wasn’t actually in the box.