Yeast and Mold Testing for Cosmetics: What the Microbial Limits Actually Mean

Most cosmetic brands run a total aerobic count before releasing a batch. Fewer run a proper yeast and mold count. And almost none can tell you which Sabouraud Dextrose Agar formulation their contract lab is using, or whether the incubation conditions have been validated specifically for their product matrix. That gap — between running some microbial test and running the right microbial test under validated conditions — is where most cosmetic microbial failures originate.

The Modernization of Cosmetics Regulation Act (MoCRA), signed December 29, 2022, changed the legal landscape for cosmetic safety in the US for the first time in 86 years. Among its core requirements: brands must maintain adequate safety substantiation for every finished product they sell. Documented microbial testing — including yeast and mold enumeration — is an expected component of that substantiation. The era of “we do some testing” as a defense is effectively over.

Why Yeast and Mold Deserve Their Own Separate Count

Most discussions of cosmetic microbiology lead with bacteria — Pseudomonas aeruginosa, Staphylococcus aureus, Escherichia coli. These are the organisms that dominate FDA warning letters and recall notices, and for good reason. But yeast and mold present a different risk profile that a bacteria-focused program misses entirely.

Yeast and mold are grouped in cosmetic microbiology under Total Yeast and Mold Count, or TYMC. They thrive under conditions most bacteria don’t favor — cooler temperatures, lower water activity — and they grow significantly more slowly. Standard bacterial enumeration protocols (30–35°C, 3–5 days) will suppress or completely miss many fungal species. If your lab reports a single total plate count and stops there, you don’t have a TYMC result. You have a partial picture.

From a consumer harm standpoint, these organisms are not benign. Candida albicans can cause mucosal and cutaneous infections in immunocompromised users. Aspergillus species produce mycotoxins. Penicillium strains are implicated in allergic contact dermatitis. For eye area products — eye creams, mascaras, eyeshadow — any detectable C. albicans is a disqualifying finding under internationally accepted microbial limits. A passing bacterial result with an untested TYMC is not a safety clearance.

How an ISO 17025 Accredited Cosmetic Testing Laboratory Measures TYMC

The method used by ISO 17025 accredited cosmetic testing laboratories for TYMC is drawn from USP <61> (Microbiological Examination of Nonsterile Products: Microbial Enumeration Tests), aligned in part with ISO 21149 for aerobic enumeration and adapted for fungal-specific conditions.

The process starts with sample preparation. A 10-gram or 10-mL aliquot of finished product is suspended in a validated neutralizing solution designed to overcome any antimicrobial activity from the formulation’s preservative system. This neutralization step is one of the most technically consequential points in the entire protocol. Use an inappropriate neutralizer and you’ll either incompletely inactivate the preservative — generating a false pass — or introduce cytotoxicity that kills the target organisms before they can grow, generating a false fail. For products with high phenoxyethanol, paraben, or benzalkonium chloride loads, this step almost always requires a formal method suitability study documented in the lab’s quality records.

From the neutralized sample, serial dilutions are plated onto Sabouraud Dextrose Agar (SDA), the standard fungal enumeration medium. Plates incubate at 20–25°C for a minimum of 5 days — routinely extended to 7 days to capture slow-growing mold species like Aspergillus and Penicillium. After incubation, colonies are counted manually. Distinct morphologies — colony color, surface texture, sporulation patterns — are noted, because a mixed-mold contamination looks fundamentally different from a single-species yeast overgrowth, and that distinction affects both the significance of the result and the root-cause investigation.

The final value is reported in colony-forming units per gram or milliliter (CFU/g or CFU/mL), separately from the Total Aerobic Microbial Count (TAMC). These are two distinct numbers on the certificate of analysis, and both must appear.

What the Acceptance Criteria Actually Say — and Where They Leave Gaps

There is no single universal TYMC limit for cosmetics in the US. Which limit applies depends on your target market, product category, and the specific requirements of your customer or retail channel.

The most widely referenced standard for finished cosmetic microbial limits is ISO 17516:2014 (Cosmetics — Microbiology — Microbiological Limits):

• Non-eye area products: TYMC ≤ 100 CFU/g or mL
• Eye area products, children’s products, and products used on mucous membranes: No detectable Candida albicans; TYMC held to more stringent criteria, generally ≤ 10 CFU/g or mL

The PCPC (Personal Care Products Council, formerly CTFA) guidelines for the US market align broadly with these figures.

But here’s the nuance that consistently catches brands off-guard: the FDA has not codified specific numeric TYMC limits into cosmetic regulation. What FDA evaluates under the FD&C Act is whether a product is adulterated — contaminated with a pathogenic microorganism, or manufactured under conditions likely to render it injurious to health. That’s a substantially fuzzier standard than a clear pass/fail number, and it places the burden of demonstration squarely on the brand.

Under MoCRA, “adequate” safety substantiation is no longer undefined. The documentation must exist, must be maintained, and must be available for FDA records requests. A CoA from a non-accredited testing facility carries different evidentiary weight than results from an ISO 17025 accredited lab — and that difference matters when an inspector is in your facility asking to see your data package.

The Preservative Efficacy Connection Most Brands Miss

TYMC at release tells you the microbial burden in a finished product at one point in time. It does not tell you how that product will behave over its shelf life, or whether the preservative system will hold under real-world consumer use. That requires a separate study: Preservative Efficacy Testing (PET), also called Challenge Testing.

In a PET study, the finished product is deliberately inoculated with standardized challenge organisms — including Candida albicans (ATCC 10231) and Aspergillus brasiliensis (ATCC 16404) — at defined challenge levels of approximately 1 × 10⁵ to 1 × 10⁶ CFU/g or mL. The product is then monitored at defined intervals over 28 days (or 14 days for validated rapid modified methods) to determine whether the preservative system reduces or controls those populations against acceptance criteria.

For CTFA Category 1 products — eye area, mucous membranes — the criterion is a 3-log reduction in yeast and mold within 14 days of inoculation, with no increase at day 28. For Category 2 products (non-eye area), no increase beyond the initial inoculation level through day 14 is required.

The practical implication is significant. A product with 50 CFU/g of yeast at release looks perfectly acceptable against ISO 17516 limits. But if the preservative system is marginal — perhaps because the pH drifted during scale-up, or a natural antioxidant ingredient is chelating the preservative molecule — that count can reach 10,000 CFU/g within 60 days of manufacture. A release TYMC and a PET study answer different questions. Both are needed, and conflating them is a common gap in cosmetic quality programs.

What Amazon and Major Retailers Now Require

The regulatory landscape is reinforced by retailer requirements that have become increasingly detailed since 2023. Amazon’s Consumables Quality Program for personal care products commonly requires that CoAs submitted for category approval, or in response to a product quality review, include:

• Total aerobic microbial count (TAMC)
• Total yeast and mold count (TYMC)
• Specified pathogen testing: P. aeruginosa, S. aureus, C. albicans at minimum
• Results issued by an ISO 17025 accredited laboratory

That last requirement — ISO 17025 accreditation from an ILAC-recognized body such as A2LA or Perry Johnson Laboratory Accreditation (PJLA) — is not a formality. It means the lab’s methods, calibration systems, equipment qualification, and analyst competency have all been independently audited against an international standard. For a brand navigating an Amazon review or responding to an FDA inquiry, that’s not a bureaucratic distinction. It’s the difference between data that stands up and data that gets questioned.

Three Questions to Ask Before Submitting Cosmetic Samples for Microbial Testing

If you’re a cosmetic or personal care brand reviewing your microbial testing program, these are the three questions worth directing at any cosmetic testing laboratory before you ship your first sample.

1. Does your TYMC method include a validated neutralizer suitability study for our formulation type? If the answer is “we use a standard buffered dilutant,” ask for specifics. Complex preservative systems — particularly those combining phenoxyethanol with organic acids — require validated neutralizer combinations, and that validation data should be available in the lab’s method file.

2. What is your exact incubation temperature and duration for TYMC enumeration? The correct answer is 20–25°C for a minimum of 5 days, extended to 7 days for product categories where slow-growing molds are a documented concern. If a lab runs yeast and mold plates under the same 30–35°C conditions used for bacterial enumeration, the TYMC results are not methodologically sound — and that affects the evidentiary value of the CoA.

3. Are TAMC and TYMC reported as separate, independently enumerated values on the certificate of analysis? Some labs issue a single “Total Plate Count” and nothing else. For ISO 17516 compliance and for any MoCRA safety file, these must be distinct values with their own acceptance criteria applied and documented.

These aren’t adversarial questions. They’re the baseline for a testing program that holds up under scrutiny — from an Amazon quality team, a major retailer’s supplier audit, or an FDA records request that lands eighteen months after your product launch.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA Cosmetic Audit Preparation and MoCRA Compliance Strategy — Aurora TIC guides cosmetic and personal care brands through FDA inspection readiness, safety substantiation documentation, and regulatory filing under MoCRA.
• Cosmetic and Personal Care Microbial Testing in Canada — Androxa provides ISO 17025 accredited microbiology testing for cosmetic brands entering the Canadian market under Health Canada requirements.
• Microbial Limits Testing for Cosmetic Raw Materials — Ayah Labs supports ingredient-level supplier qualification, including TYMC and specified organism testing for cosmetic raw material inputs.