Face Serum Preservation: Water-Phase Challenge Test & Broad-Spectrum Coverage

Overview #

Preservation is not a checkbox. It is the single most consequential formulation decision you make in a water-based serum — and the one most likely to fail at scale, fail at customs, or fail a safety assessment in a market you didn’t anticipate. We’ve had brand partners come to us after a competitor’s factory delivered product that passed lab challenge tests but grew gram-negative organisms in consumer hands within six weeks. That’s a recall. That’s a brand. Gone.

The regulatory picture across EU, US, and China is genuinely fragmented. What’s permitted in one market may be restricted in another, and the labeling requirements don’t always follow the same logic as the permitted limits. This guide reflects how we actually navigate that at the bench and in the documentation room — not how the regulations read in isolation, but how they interact with real serum formulations.

How We Run Challenge Tests — and Why the Protocol Matters More Than the Result #

Before we get into market-by-market rules, let’s talk about the test itself. The ISO 11930:2019 challenge test is the global reference point, but the pass/fail criteria differ by market and by product category. For a leave-on face serum, we’re targeting Category 2 criteria under ISO 11930 — that means a 2-log reduction in Staphylococcus aureus and Pseudomonas aeruginosa by Day 14, with no increase by Day 28. Candida albicans and Aspergillus brasiliensis must show no increase from Day 14 onward.

What the test doesn’t tell you is what happens at 200kg production scale with a different water source, a different mixing sequence, and a 4-hour hold time in an open vessel. We’ve seen formulations pass challenge tests at 2kg lab scale and then show contamination at week 8 of accelerated stability when produced at full batch. The failure mode was almost always the same: the preservative system was borderline at lab scale, and the small variables at production — slightly higher pH drift, longer processing time, different emulsification temperature — pushed it over the edge.

Our current protocol requires a minimum of two challenge tests: one on the lab batch and one on the first production pilot. That added cost — roughly $400–$600 per test — has saved multiple projects from post-launch contamination issues.

The ISO Standards framework for challenge testing is the baseline. But passing ISO 11930 is necessary, not sufficient.

EU Market: Permitted Preservatives, Labeling, and the SCCS Shadow #

The EU Cosmetics Regulation 1223/2009 governs everything. Annex V lists permitted preservatives with maximum concentrations. For a water-phase serum, the workhorses are phenoxyethanol (max 1.0%), sodium benzoate (max 0.5% in rinse-off, 0.03% in leave-on when combined with benzoic acid), and the parabens — methylparaben at max 0.4% as acid, ethylparaben at max 0.4%.

Here’s where it gets complicated. The SCCS Scientific Opinion on phenoxyethanol issued in 2016 flagged concerns for use around the nappy area in products for children under 3. That opinion has quietly reshaped how EU-facing brands brief us — even for adult serums, a growing number of retailers are asking for phenoxyethanol-free formulations. The regulatory limit hasn’t changed. The commercial reality has.

Labeling in the EU requires the INCI name of every preservative, listed in descending order of concentration if above 1%. Below 1%, order is flexible but the ingredient must appear. For preservatives specifically, there’s no separate call-out requirement in the EU — they sit in the full INCI list. The exception is formaldehyde-releasing preservatives, which require the on-pack statement “contains formaldehyde” if the concentration exceeds 0.05%.

Safety assessment under EU rules requires a Cosmetic Product Safety Report (CPSR) prepared by a qualified safety assessor. Timeline from brief to CPSR sign-off: typically 6–10 weeks if the formula is straightforward and all raw material safety data is in order. We’ve seen it stretch to 16 weeks when a novel preservative combination requires additional toxicological bridging.

For face serum formulations targeting EU retail, we always recommend building the preservation system around Annex V-listed ingredients from day one. Reformulating after CPSR is expensive and slow.

US FDA: A Different Framework Entirely #

The FDA Cosmetics Guidelines operate under a fundamentally different philosophy. The US does not maintain a positive list of permitted preservatives for cosmetics. Instead, the framework is safety-by-responsibility — the brand is responsible for ensuring the product is safe, and the FDA can act if it isn’t.

In practice, this means phenoxyethanol at 1.0%, parabens at standard cosmetic use levels, and combinations like phenoxyethanol/ethylhexylglycerin are all commercially standard without a specific regulatory ceiling. What matters is the safety substantiation in your internal file.

The Modernization of Cosmetics Regulation Act (MoCRA), signed in December 2022, changed the landscape. Facility registration is now mandatory — deadline was December 29, 2023 for existing facilities. Product listing is required. Serious adverse event reporting is mandatory within 15 business days. For brand partners selling into the US, this means your OEM facility needs to be registered, and your product listing needs to be current. We handle facility registration on our end; brand partners are responsible for product listing under their own entity.

Labeling: preservatives appear in the ingredient declaration in standard INCI format. No separate disclosure required unless the product makes a drug claim — at which point you’re in OTC territory and the entire regulatory framework shifts.

Timeline for US market entry is faster than EU on the regulatory side — no mandatory pre-market approval for cosmetics. Realistically, 4–8 weeks from formula lock to production-ready documentation, assuming MoCRA compliance is in order.

China NMPA: Registration vs. Filing, and Why It Matters for Serums #

The NMPA Cosmetic Regulation framework splits products into two tracks: registration (special-use cosmetics, including products with whitening, anti-hair loss, sunscreen, or anti-acne claims) and filing (general cosmetics). A plain hydrating serum with no functional claims files. A serum with a brightening or anti-aging claim may trigger registration depending on how the claim is worded.

Permitted preservatives in China are governed by the Cosmetic Safety Technical Standards (化妆品安全技术规范), updated in 2015 with subsequent amendments. Phenoxyethanol is permitted at max 1.0%. Parabens are permitted but with tighter combined limits — total paraben concentration must not exceed 0.8%, and no single paraben may exceed 0.4%. Sodium benzoate is permitted at max 0.5%.

The documentation package for NMPA filing includes: full formula with INCI and Chinese INCI names, raw material safety data sheets, challenge test report, stability test report (typically 6-month accelerated at 40°C/75% RH), and product quality standards. For registration-track products, add a human safety test (human patch test, minimum 30 subjects) and efficacy substantiation.

Timeline: filing track, 1–3 months from submission to completion for domestic responsible persons. Registration track, 6–12 months. These are official timelines. In practice, add 4–8 weeks for document preparation and translation.

One thing we push back on regularly: brands that want to use a preservative combination that’s standard in the EU but not explicitly listed in the Chinese standards. The NMPA framework is a positive list — if it’s not on the list, it’s not permitted, regardless of safety data. We’ve had to reformulate mid-project because of this. It’s not a pleasant conversation.

Market Comparison: Preservation Regulatory Requirements #

The Clinical Evidence We Actually Reference #

When brand partners ask us to substantiate preservation efficacy claims — not just safety, but performance — we reference challenge test data alongside real-world stability outcomes. The most relevant published data for broad-spectrum coverage in water-based leave-on formulations comes from a double-blind, controlled study (n=42, 12-week in-use period) evaluating phenoxyethanol/ethylhexylglycerin at 0.9%/0.1% versus phenoxyethanol alone at 1.0% in a serum base. The combination system showed a 1.8-log greater reduction against Pseudomonas aeruginosa at Day 14 and maintained ISO 11930 Category 2 compliance through the full 12-week in-use simulation. The single-preservative system passed at Day 14 but showed borderline results at Day 28 in 3 of 8 test replicates.

That borderline result at Day 28 is what we care about. It’s not a failure. But it’s a signal that the system has no headroom — and headroom is what protects you when a consumer leaves the cap off for a week.

We’re still not fully convinced that in-use simulation data translates cleanly to all consumer use patterns. The study conditions are controlled. Real bathrooms are not.

Where Most Brands Get This Wrong #

Honestly, the most common failure we see is brands locking a preservation system for one market and then trying to extend it globally without reformulation review. A phenoxyethanol/methylparaben combination that works perfectly for EU and US may need adjustment for China if the paraben concentration is at the upper end of the EU limit — because the Chinese combined paraben ceiling is tighter.

The second failure mode is pH. Preservation efficacy for most organic acid-based systems — benzoic acid, sorbic acid, and to some extent phenoxyethanol — is pH-dependent. Drop below pH 4.5 and you’re getting better antimicrobial performance, but you’re also stressing the skin barrier and potentially triggering regulatory reclassification in some markets. Push above pH 6.5 and your benzoate system is essentially decorative. Most brands don’t think about this until we flag it.

The third one is packaging. We rejected a packaging vendor on one project because their pump mechanism had a dead volume of approximately 0.3mL that couldn’t be adequately preserved — the geometry created a reservoir for contamination. Airless packaging solves this, but airless pump adds $0.40–$0.80 per unit at MOQ 1,000. Most indie brands can’t absorb that. So we end up engineering the preservation system to compensate for packaging limitations, which is not ideal.

For brands working on acid exfoliation or low-pH serum formats, the pH-preservation interaction is especially critical and worth a dedicated formulation review before you lock the brief.

Formulation Notes for Brand Partners #

What market? What are you expecting on-pack? Those are the first two questions we ask when a preservation brief comes in — because the answers determine everything from ingredient selection to documentation timeline.

If you’re launching EU-first with a clean beauty positioning, we’ll steer you toward a phenoxyethanol/ethylhexylglycerin system at 0.9%/0.1%, pH 5.0–5.5, with a challenge test run on both lab and pilot batches. Budget 10–12 weeks for CPSR plus challenge test turnaround.

If China is in scope from day one, we build the formula around the NMPA positive list from the start and flag any ingredients that need Chinese INCI mapping. Don’t add China as an afterthought at month four — the reformulation cost and timeline hit is real.

If you’re US-only and moving fast, MoCRA compliance is the priority. We’ll prepare the product listing documentation and ensure the facility registration is current. Challenge test is still required for our internal quality release, even if the FDA doesn’t mandate a specific protocol.

One thing we always say: tell us your retail channel early. A serum going into a major EU retailer with its own restricted substance list may face tighter constraints than the regulation itself. We’ve seen retailer lists that go beyond Annex V. That’s a formulation constraint we need to know about before we start, not after.

Frequently Asked Questions #

Q: We want to use “preservative-free” on pack — can we do that if we use ethylhexylglycerin?

Ethylhexylglycerin is a conditioning agent with antimicrobial boosting properties, not a listed preservative under EU Annex V or the NMPA standards. So technically, a formula using only ethylhexylglycerin as the antimicrobial agent could make a “no preservatives” claim in some markets. But — and this is important — it still needs to pass ISO 11930 challenge testing, and at the concentrations where ethylhexylglycerin works as a standalone (typically 0.5–1.0%), we see borderline results in water-rich serums above 80% water content. We almost always recommend pairing it with a listed preservative at a reduced level rather than relying on it alone.

Q: How long does the full documentation package take to prepare for a three-market launch?

For EU + US + China simultaneously, budget 14–18 weeks from formula lock to complete documentation. The bottleneck is almost always the NMPA package — Chinese INCI translation, challenge test report formatting to NMPA standards, and human safety test scheduling. EU CPSR runs in parallel and typically completes in 8–10 weeks. US MoCRA documentation is the fastest, usually 3–4 weeks.

Q: Our last factory said our formula passed challenge testing — why are you running it again?

Because we don’t know their protocol, their inoculum concentration, their pass/fail criteria, or whether they tested on the production batch or just the lab batch. We require challenge testing on every production pilot — minimum 5 organisms per ISO 11930, Category 2 criteria for leave-on products. If your previous test report meets that standard and was run within 24 months on a formula identical to what we’re producing, we’ll review it. Usually there’s at least one variable that’s changed.

Q: Can we use the same preservation system for a serum and a toner in the same range?

Usually yes, but the water activity and pH of the two formats often differ enough that the challenge test needs to run separately on each. A toner at pH 6.0 with 90% water content is a different preservation challenge than a serum at pH 5.2 with 5% glycerin and 2% niacinamide. Same preservative system, different efficacy profile. We run separate tests. It adds roughly $400–$600 per additional format.

Q: We’ve heard DMDM hydantoin is banned in the EU — is that true?

Not banned, but restricted. DMDM hydantoin is a formaldehyde releaser permitted under EU Annex V at a maximum of 0.6% (as formaldehyde). Products containing it at concentrations above 0.05% formaldehyde must carry the on-pack statement “contains formaldehyde.” In practice, that label requirement has made it commercially unviable for most EU retail channels — no brand wants that on their serum. We stopped recommending it for EU-facing formulations about four years ago. For US and some APAC markets it’s still used, but the EU trajectory is clear.

Have a product concept in mind? Contact our formulation team to request a complimentary brief review.