Amazon's Document Request for OTC Pain Relievers: GCC, PPPA and ISO 17025

The email arrives a few weeks after launch. Amazon's Product Compliance team needs documents for your ibuprofen listing or the ASIN comes down: label images of every side of the package, a General Certificate of Conformity, and ISO 17025 lab test reports to three regulations most sellers have never read. The request is standard for ingestible OTC pain relievers, and it is answerable, but only by a brand that already has the records. It is not a request you can satisfy by writing something new.

This guide walks through what Amazon asks for, what each cited regulation actually covers, which active ingredients trigger the child-resistant packaging requirement and at what quantities, and the records stack that should exist before the first unit ships.

What the request says

For ingestible OTC pain relievers, Amazon's compliance request asks for:

• Label images of all sides of the product.
• A General Certificate of Conformity (GCC).
• ISO 17025 laboratory test reports to 16 CFR 1700 (the Poison Prevention Packaging Act regulations), 21 CFR 201 subpart C (drug labeling) and 21 CFR 207 subpart C (drug listing and the NDC).

Documents go through Account Health, under Product Compliance. The request sits on top of Amazon's general Drugs and drug paraphernalia policy, which allows OTC drugs only when they comply with FDA requirements, carry a Drug Facts panel, are sealed in the original manufacturer packaging and are not expired.

Each of the three regulations is a different subject, from a different agency in one case, and a lab report that covers one does not cover the others. Take them in turn.

16 CFR 1700: who needs child-resistant packaging

The Poison Prevention Packaging Act is a CPSC statute, not an FDA one. 16 CFR 1700.14 lists the substances that must be in child-resistant packaging, and for OTC drugs the list works by active ingredient and quantity per package. Among the entries relevant to pain and allergy products:

• Oral aspirin.
• Acetaminophen, above 1 g per package.
• Ibuprofen, 1 g or more per package.
• Naproxen, 250 mg or more per package.
• Diphenhydramine, above 66 mg of base per package.
• Lidocaine, above 5 mg per package, and dibucaine.
• Minoxidil, above 14 mg per package.
• Iron, 250 mg or more of elemental iron per package.
• Methyl salicylate, tetrahydrozoline, naphazoline, oxymetazoline and xylometazoline, in their listed quantities.
• Fluoride products, including mouth rinses, at listed quantities.

The thresholds are per package, which is why a 200 mg ibuprofen bottle of 100 tablets (20 g) is squarely regulated while a two-tablet travel sachet may not be. Seeing one of these actives on a listing is a cue to check the threshold, not a verdict on its own.

For a regulated package, two documents follow. The packaging itself must be tested to the protocols in 16 CFR 1700.15 and 1700.20, which is the child-resistant packaging test report. Then, under 15 USC 2063 and 16 CFR Part 1110, the product must be covered by a General Certificate of Conformity that cites the rule, identifies the product and the test basis, and names the responsible parties. The GCC is the brand's certificate, issued on the strength of the test report. A contract manufacturer's test report alone does not satisfy a request for a GCC.

21 CFR 201 subpart C: the label

Subpart C of Part 201 is where the Drug Facts format lives, in 21 CFR 201.66. A labeling test report here is essentially a documented review that the panel carries, in order, the active ingredient with amount and purpose, Uses, the Warnings sub-headings the product needs (including the overdose line for anything ingested), Directions, Other information and Inactive ingredients. The content and the common defects are covered in the Drug Facts panel guide.

The "label images of all sides" request is the companion to this report. Amazon wants to see the panel the report describes, plus the principal display panel with the NDC, net contents, expiration date and lot number. Send photographs of the actual shipping package, not artwork files.

21 CFR 207 subpart C: the NDC

Part 207 subpart C covers drug listing. A report under it confirms that the product has been listed with FDA in electronic SPL format before marketing (21 CFR 207.41), that the NDC on the package is the one assigned in that listing, and that the labeler code belongs to the firm whose name is on the label. Private-label brands are the usual casualty here: the product is listed under the manufacturer's labeler code while the brand's name is on the box. The NDC guide explains labeler codes, establishment registration and the June and December listing updates.

The records behind the certificate

Amazon's three named regulations are the visible part. A brand that can answer the request comfortably is one that holds the underlying drug records, because the certificate and the test reports rest on them:

• Certificate of Analysis per lot: identity, strength and purity (21 CFR 211.165).
• Batch production and control records per lot (21 CFR 211.188), held by the manufacturer and available to the brand on request.
• Stability data supporting the expiration date (21 CFR 211.166). This is also the basis for any claim that the product is exempt from expiration dating under 211.137(h), though Amazon requires the date regardless.
• Tamper-evident packaging specification and the label statement that identifies the feature (21 CFR 211.132). Dermatologics, dentifrices, insulin and lozenges are exempt; an oral tablet is not.
• Monograph conformance memo: the active, strength, dosage form, Uses, Warnings and Directions checked against the applicable monograph or order under 21 CFR 330.1. A product sold under an approved application keeps the approved labeling instead.
• Serious adverse event SOP and records. Under 21 USC 379aa the firm named on the label submits each serious adverse event report to FDA within 15 business days of receipt and keeps records for six years; the label must carry a domestic address or phone number for those reports (21 USC 352(x)).
• The manufacturer's establishment registration (FEI) and OMUFA facility-fee status, plus the brand's own labeler code assignment.

Copy issues the same review catches

A document request opens the listing to a human, and the human reads the page. Three things in pain reliever copy tend to come up:

Comparisons to branded drugs. "Compare to the active ingredient in Advil" is a permitted, truthful comparison under the FTC's comparative advertising policy (16 CFR 14.15), as long as it is accurate. "Works better than Tylenol" is a superiority claim that needs evidence. "Identical formula", "the same as Zyrtec" or "generic version of Claritin" claim equivalence beyond the active ingredient, and a monograph product is not a generic of an NDA product. Using the brand name in the title as if it were the product name implies an affiliation the brand owner has not given.

Expert endorsement and establishment claims. "#1 doctor recommended" needs a current, reliable survey of the relevant physician population. "Clinically proven" needs competent and reliable scientific evidence, generally well-controlled human clinical testing. "Pharmacist recommended" and "hospital brand" follow the same logic under the FTC's Health Products Compliance Guidance. "Formulated with pharmacists" is fine; "temporarily relieves minor aches and pains", the monograph indication itself, is fine.

Products that cannot be listed at all. Pseudoephedrine and ephedrine are scheduled listed chemical products under the Combat Methamphetamine Epidemic Act (21 USC 830(e)), sold by mail order only with logbook, quantity and self-certification controls a marketplace listing cannot meet, and Amazon prohibits them. Phenylpropanolamine was withdrawn from OTC marketing in 2000. A combination cold product with any of the three is a do-not-list, whatever the rest of the listing looks like.

FBA and the expiration date

One more operational item travels with ingestible OTC products. The expiration date must be printed on the unit and the carton, and on arrival at a fulfillment center the remaining shelf life has to cover the time to consume the product plus 90 days, commonly stated as at least 105 days at check-in. Inventory is removed as it approaches expiry. The expiration-dated-product attribute on the listing drives this handling, which is one reason Amazon treats the attribute as required.

Before the email arrives

For a fictitious brand, Ridgeline Relief, launching a 500-count acetaminophen bottle, the pre-launch folder looks like this:

1. Child-resistant packaging test report to 16 CFR 1700.15/1700.20, and the GCC issued on it.
2. Labeling review of the Drug Facts panel against 21 CFR 201.66, with photographs of all package sides.
3. Drug listing confirmation showing the NDC under Ridgeline's own labeler code.
4. COA, batch records, stability data and tamper-evident specification from the manufacturer.
5. Monograph conformance memo and the adverse-event SOP.
6. Listing copy checked for comparisons, endorsement claims and anything the Uses do not cover.

Items 1 through 5 are what Amazon's request is really asking about. Item 6 is what the reviewer notices while reading the rest. Verid8 covers the page side of this for the OTC category: it reads the label images and every listing field, checks the actives against the PPPA list so the GCC question comes up before launch rather than after, flags comparative and endorsement claims with the FTC reason, and tracks which required documents are on file for each product.

A compliance request is only a crisis when it asks for something that does not exist. For a brand with the records, it is a week of attaching files.