Certification & Documentation Guide for Protective & Functional Packaging

What a Failed Audit Actually Looks Like #

A medical device company sourcing foam-in-place cushioning from a Shenzhen supplier passed initial qualification on sample approval. The COA looked clean: density within spec, compression deflection values listed, no red flags. Twelve months later, a customs hold in Rotterdam flagged the shipment because the MSDS did not reference the correct EU REACH regulation SVHC list version, and the foam’s chemical disclosure was based on a formulation that had been updated by the compounder six months prior. The documentation had not been updated. The hold cost four days and roughly €18,000 in demurrage and expediting fees — not because the material was out of spec, but because the paperwork reflected a product that no longer existed.

This is the failure mode we see most often. The material passes. The documentation fails. And the cost of a documentation failure at the border or at a customer audit is almost never proportional to the effort required to prevent it.

The root cause in that case was the same one we flag in our DVR-09 documentation verification protocol: no cross-reference requirement between the formulation revision log and the MSDS revision date. When a supplier switches compounders or resin grades, the product often performs identically — but the chemical composition, and therefore the regulatory disclosure, may change. Standard COA sign-off does not catch this.

The Parameters That Actually Predict Documentation Quality #

The question QC teams should ask is not “does the supplier have a COA?” — every supplier has a COA. The question is whether the documentation package is internally consistent and current.

Certificate of Analysis (COA): Every COA for protective and functional packaging should state the lot number, production date, material grade, and at minimum three tested parameters with their specification limits and actual measured values. For foam-based protective packaging, those parameters should include apparent density (kg/m³), compressive strength at 25% deflection (kPa), and, where applicable, surface resistivity (Ω/sq) for ESD-rated materials. A COA that lists only nominal values without actual measured results — common in lower-tier Chinese suppliers — is a conformance declaration, not a test record.

Technical Data Sheet (TDS): The TDS is where specification ranges live. When we evaluate a TDS, the first check is whether the published ranges are wide enough to make the COA values trivially passable. A TDS that specifies density as “15–80 kg/m³” for a foam intended for precision electronic cushioning tells you nothing useful. For VCI (vapor corrosion inhibitor) films, the TDS should state the corrosion inhibition period in months, the emission rate (mg/m²/day), and the applicable metal types — not just “multi-metal protection.”

Safety Data Sheet (MSDS / SDS): Under GHS aligned requirements, the SDS must be in the language of the destination market. A Chinese-language SDS submitted to a US or EU buyer is not compliant for worker safety or import documentation purposes. The SDS revision date must postdate any formulation change; if the supplier changed their PE resin source in Q2 and the SDS is dated Q1, that document is stale. For foam materials containing isocyanate residuals or blowing agents, Section 3 (composition) and Section 8 (exposure controls) are the two sections we verify first.

Third-Party Test Report: This is the document most often missing or fabricated in the Chinese supply base. A genuine third-party test report will name the testing laboratory, its accreditation body (CNAS in China, A2LA in the US, UKAS in the UK), the specific test method and version, the sample lot identifier, and the date of testing. Reports that reference ASTM International methods but list a test date three years prior to the current production lot are not valid for that lot — they are historical qualification data, not current conformance evidence.

The parameter we find most consistently absent from documentation packages is the test method version. Saying “tested per ASTM D1621” is insufficient. The correct citation is ASTM D1621-16 (or the current revision) with the specific test conditions: specimen size, strain rate, and whether result is at yield or at 10% strain. That distinction changes the reported value, and Chinese suppliers sometimes switch between method versions between lots without disclosure.

Decision Framework — Which Certifications Are Mandatory by Market #

The certification requirements for protective and functional packaging depend on the end-use market, the product being protected, and whether the packaging contacts the product directly. The framework below is how we advise buyers to structure their documentation requirements before issuing a purchase order.

EU market: For packaging in general industrial use, the primary regulatory framework is the EU Packaging and Packaging Waste Directive (94/62/EC) and REACH SVHC compliance. CE marking is not required for packaging itself (CE applies to the product, not the packaging), but REACH compliance documentation is mandatory for chemical-containing packaging materials above 0.1% w/w concentration thresholds. For ESD packaging entering the EU, RoHS Directive compliance of any electronic additives or conductive layers should be confirmed. For food-adjacent applications, EU Regulation 10/2011 on plastic food contact materials applies.

US market: FDA documentation requirements under 21 CFR apply when packaging contacts food or pharmaceutical products. For industrial protective packaging with no direct product contact, the FDA documentation requirement is not triggered — but TSCA (Toxic Substances Control Act) compliance for chemical composition becomes relevant for foam materials containing fluorinated compounds. ESD packaging sold into US defense or aerospace supply chains typically requires compliance with ANSI/ESD S541 and the supplier must be able to produce a test report referencing this standard with measured surface and volume resistivity values.

China domestic market: GB/T standards from SAC govern most packaging material specifications. GB/T 8942 covers soft foam performance, GB/T 10799 covers industrial foam sheet. The key practical point for overseas buyers sourcing from China for re-export: a supplier with GB/T certification only has been tested against Chinese tolerance ranges, which in several foam density and compressive strength categories are wider than ISO equivalents. This means a product that is GB/T compliant may not meet your engineering drawing.

Japan market: Japan’s Chemical Substances Control Law (CSCL) requires notification for new chemical substances, and JBRC (Japan Packaging Recycling) compliance documentation is relevant for packaging imports. Japanese buyers typically require Japanese-language SDS and, for ESD packaging, compliance with JEITA RC-0901B guidance.

If the packaging will be used across multiple markets, my recommendation is to build the documentation requirement around the most stringent single market rather than maintaining parallel documentation sets. In our experience advising clients with multi-market distribution, the effort of maintaining separate documentation sets per market leads to version control failures within 18 months. Standardize on EU REACH + ASTM/ISO methods as the baseline — most other markets accept this combination, and it eliminates roughly 60% of audit friction.

For qualification of a new Chinese supplier into a multi-market documentation framework, the minimum sample size we insist on before volume commitment is three consecutive production lots with full documentation packages, reviewed under our DVR-09 protocol. One lot tells you whether they can produce the paperwork when they’re trying. Three lots tells you whether they can sustain it.

Practical Guidance for Buyers #

When sourcing protective and functional packaging from China with documentation requirements, the first specification to request is not the COA — it’s the TDS with revision history. The TDS establishes the specification ranges against which the COA is evaluated, and a supplier who cannot produce a TDS with a documented revision date is operating without a specification control system. The COA is only meaningful if the TDS it references is current.

The specific risk scenario to watch for: a supplier who provides a third-party test report from an accredited lab but where the lot number on the report does not match the lot number on the COA or shipping documents. We have seen this pattern in roughly one in eight documentation packages from suppliers who have not been previously qualified. The test report is real, but it belongs to a different production run.

Before committing to volume, insist on third-party incoming inspection of the first three commercial lots, with hardness or density spot-testing against the COA values. For ESD packaging, surface resistivity should be checked per ASTM D257 on production samples, not qualification samples. If the supplier pushes back on independent incoming inspection, that response is more informative than any document they can provide.

For buyers managing documentation across ESD protective packaging and related sealing and thermal materials, aligning SDS revision control across categories is worth the upfront effort — version mismatches between material categories are a common audit finding that disproportionately affects mixed-material packaging assemblies.

FAQ

What is the difference between a COA and a third-party test report, and do I need both?
A COA is a self-declaration by the manufacturer; a third-party test report is issued by an independent accredited laboratory that tested the actual material. For low-risk industrial packaging, a supplier COA plus an annual third-party qualification report is often sufficient. For food contact, pharmaceutical, or defense applications, per-lot third-party test reports are the correct requirement — the COA alone does not satisfy most regulatory audits in those sectors.

How do I verify that a Chinese lab accreditation is genuine?
Check the CNAS (China National Accreditation Service) public register at cnas.org.cn. Enter the laboratory name and cross-reference the accreditation scope against the test methods cited in the report. A CNAS certificate number that doesn’t appear in the public register, or whose scope excludes the specific test method on the report, is a disqualifying finding. We log this as a Category A finding in our supplier documentation review — it triggers re-sampling at a different lab before any further qualification steps.

Our supplier says their foam packaging is “REACH compliant” — what documentation should I actually ask for?
Ask for a Declaration of Conformity that specifically states compliance with the current REACH SVHC Candidate List version and lists the substances checked. A generic “REACH compliant” statement with no referenced list version, no substance-specific confirmation, and no issuing date is not usable documentation. The SVHC list is updated twice yearly; a declaration that is more than six months old should be re-confirmed.

Is a Chinese-language SDS acceptable for my EU or US incoming inspection records?
No. For EU worker safety compliance and US OSHA Hazard Communication Standard requirements under 29 CFR 1910.1200, the SDS must be in the working language of the facility. A Chinese-language SDS satisfies Chinese regulatory requirements but does not satisfy either OSHA or EU workplace safety obligations. This is a compliance gap we see frequently — it’s not a technical failure, but it will generate a finding in any serious HSE audit.

Which certification matters more for ESD packaging: the surface resistivity value or the IEC standard compliance claim?
It depends on the application. For general electronics handling, a measured surface resistivity between 10⁵ and 10¹¹ Ω/sq per IEC 61340-5-1 is the functional requirement, and the measured value on a current test report is more useful than a compliance claim. For defense or aerospace supply chains, the compliance claim to a named standard (typically ANSI/ESD S541 or MIL-PRF-81705) matters because the procurement specification will reference it by name. Ask for both — the test value and the standard reference — and verify that the measured value falls within the standard’s specified range.

Published by sinoraw.com Technical Team | Request a sourcing consultation