Active monitoring7 regulatory sources
EU cosmetic regulation, up to date, inside your software.
BD-API watches CosIng, DG SANTE, SCCS, Safety Gate, EUR-Lex, IFRA and ECHA, and delivers every change to your system — signed, versioned, traceable.
- 33,623
- CosIng ingredients
- 2,385
- annex substances
- 7
- sources watched
- SHA-256
- signed deliveries
Look up any ingredient in the EU database
Latest substances prohibited in the EU
weekly sync- Triphenyl PhosphateProhibited · Ref. 1767 · 06 May 2026
- Multi-walled Carbon Tubes (synthetic graphite in tubular shape) with a geometric tube diameter range ≥ 30 nm to < 3 μm and a length ≥ 5 μm and aspect ratio > 3:1, including Multi-Walled Carbon Nanotubes, MWC(N)TProhibited · Ref. 1752 · 15 Jan 2026
- reaction mass of 1,3-dioxan-5-ol and 1,3-dioxolan-4-ylmethanolProhibited · Ref. 1753 · 15 Jan 2026
- Silver (nano) [1 nm < particle diameter ≤ 100 nm] Silver (massive) [particle diameter ≥ 1 mm]Prohibited · Ref. 1727 · 15 Jan 2026
- Perboric acid (H3BO2(O2)), monosodium salt trihydrate [1] Perboric acid, sodium salt, tetrahydrate [2] Perboric acid (HBO(O2)), sodium salt, tetrahydrate [3] Sodium peroxoborate, hexahydrate [4] Sodium perborate [5] Sodium peroxometaborate; sodium peroxoborate [6] Perboric acid, sodium salt [7] Perboric acid, sodium salt, monohydrate [8] Perboric acid (HBO(O2)), sodium salt, monohydrate [9] Trimethyl borate [10]Prohibited · Ref. 1397 · 15 Jan 2026
Live regulatory watch
Every change reaches your system as a signed webhook sha256 ✓
Six engines track SCCS, DG SANTE, Safety Gate, EUR-Lex, IFRA and ECHA in parallel. The events below are what those engines caught this week — the same feed your system would receive as a signed, versioned delivery.
Request accessLatest substances prohibited in the EU
weekly sync- Triphenyl PhosphateProhibited · Ref. 1767 · 06 May 2026
- Multi-walled Carbon Tubes (synthetic graphite in tubular shape) with a geometric tube diameter range ≥ 30 nm to < 3 μm and a length ≥ 5 μm and aspect ratio > 3:1, including Multi-Walled Carbon Nanotubes, MWC(N)TProhibited · Ref. 1752 · 15 Jan 2026
- reaction mass of 1,3-dioxan-5-ol and 1,3-dioxolan-4-ylmethanolProhibited · Ref. 1753 · 15 Jan 2026
- Silver (nano) [1 nm < particle diameter ≤ 100 nm] Silver (massive) [particle diameter ≥ 1 mm]Prohibited · Ref. 1727 · 15 Jan 2026
- Perboric acid (H3BO2(O2)), monosodium salt trihydrate [1] Perboric acid, sodium salt, tetrahydrate [2] Perboric acid (HBO(O2)), sodium salt, tetrahydrate [3] Sodium peroxoborate, hexahydrate [4] Sodium perborate [5] Sodium peroxometaborate; sodium peroxoborate [6] Perboric acid, sodium salt [7] Perboric acid, sodium salt, monohydrate [8] Perboric acid (HBO(O2)), sodium salt, monohydrate [9] Trimethyl borate [10]Prohibited · Ref. 1397 · 15 Jan 2026
The real problem
The risk is not technical. It is regulatory, economic and reputational.
A substance permitted yesterday can be restricted tomorrow. If your database does not reflect that, your team may certify, review or validate with stale information. In compliance, “I didn’t know” is not enough.
- 01
The EU publishes a change
A new SCCS opinion, an annex amendment or a CosIng update.
- 02
Your database falls behind
Your software keeps validating against a version that no longer represents the current regulatory state.
- 03
The risk surfaces late
It only appears at audit time, in an urgent reformulation or in a commercial decision made with incomplete information.
Hidden cost
The problem is not downloading an XLS. The problem is detecting the change, understanding its impact, versioning it, delivering it with evidence and being able to explain it months later.
Benefits for your operation
Update your regulatory database before a change becomes an incident.
BD-API turns database updates and regulatory news into actionable deliverables: data ready to integrate, traceable alerts and evidence so your team can decide with backing.
Free searchable CosIng database — the same one your software consumes via API. Try the search →
CosIng database always current
You receive snapshots and SQL patches so your system works with up-to-date CosIng data, with no dependency on sporadic manual reviews.
Classified SCCS and DG SANTE alerts
Every SCCS opinion and DG SANTE update arrives with substances, CAS numbers and critical dates extracted, classified by impact and ready to prioritise.
Safety Gate / RAPEX on your radar
Alerts on cosmetic products withdrawn or non-compliant in the EU, with brand, batch and substance involved for immediate action.
EUR-Lex ahead of the rest
EU legal acts — amending regulations, implementing decisions — captured via SPARQL before they appear in other feeds.
IFRA Standards cross-matched to your ingredients
Restriction, prohibition and specification amendments from the fragrance industry’s own standard, matched by CAS number against your CosIng data — deterministic diff, no AI in the loop.
ECHA SVHC and CLP tracked by content-hash diff
New Candidate List entries and Annex VI harmonised classification updates, flagged the moment the underlying register changes.
Audit-ready traceability
Every change is documented with source, version, changelog and integrity hash: concrete evidence to explain what changed and when.
Lower operational cost, fewer surprises
Your team stops chasing scattered PDFs, XLS files and bulletins; it gets the time back to assess impact, reformulation and business decisions.
From official source to internal decision. Without chasing PDFs or XLS files by hand.
From detection to delivery, every change is classified, versioned and ready to plug into your regulatory operation.
01
Multi-source watch
Seven sources monitored in parallel — CosIng, DG SANTE, SCCS, Safety Gate (RAPEX), EUR-Lex, IFRA and ECHA — with detection, deduplication and historical persistence per source.
02
Source-specific analysis
EU publications are routed through a dedicated AI analyser per source that reads the underlying document and extracts substances, CAS numbers, critical dates, affected annexes and an executive summary. IFRA and ECHA changes go through structured diff engines.
03
Traceable, granular delivery
Initial snapshot, SQL patches signed with SHA-256, changelog, transactional email and HMAC-signed webhook. Premium allows granular per-source subscription.
| Source | What it captures | Method | Signal |
|---|---|---|---|
| CosIng | Ingredient inventory and Annexes II–VI | Versioned diff + signed SQL patch | law |
| DG SANTE | Official publications and communications | Source-specific AI analysis | law |
| SCCS | Scientific opinions on substances | Source-specific AI analysis | watch |
| Safety Gate | Cosmetic product alerts (RAPEX) | Source-specific AI analysis | prohibited |
| EUR-Lex | Legal acts via SPARQL | Source-specific AI analysis | law |
| IFRA | Changes in IFRA Standards | Structured diff engine | restricted |
| ECHA | SVHC candidate list + harmonised CLP | Structured diff engine | restricted |
The technology behind BD-API
Independent flows that keep data, alerts, integration and resilience under control.
BD-API runs on FluxorHub.com infrastructure and delivers verifiable updates to the client platform. If one flow slows down, the others keep working: the local database never depends on a permanent connection to validate.
Official source
Official EU CosIng (.xls)
Regulatory input monitored and versioned before it touches any client system.
BD-API engine
- Scheduled sync with CosIng EU
- Diff Engine
- Incremental patch.sql
- changelog.json + meta.json
Delivery to the client
Controlled integration
The platform calls /api/versions/check at the frequency it chooses, downloads the patch if there is a new version, verifies SHA-256 and applies everything in a single PostgreSQL transaction.
Operational result
Up-to-date regulatory database, automatic rollback if anything fails and clear evidence of every change.
Full API reference: CosIng API
Plans that adapt to your operation
Licence per installation. No hidden costs. Operational requests included.
Standard
For software that needs to stay current with the regulation in force.
- CosIng version check on demand (up to daily)
- SHA-256 verification + incremental SQL patches
- SCCS and DG SANTE alerts in raw format
- HMAC-signed webhook and transactional email
- Email support
Premium
For operations that need multi-source regulatory watch with AI analysis and enriched proactive alerts.
- CosIng version check on demand (up to daily)
- Multi-source watch: DG SANTE, SCCS, Safety Gate, EUR-Lex, IFRA and ECHA
- Professional source-specific AI analysis with executive summary, criticality and dates
- Granular subscription: activate only the sources you need
- Enriched webhook with extracted data + HTML email
- Detailed changelog per version + priority support
Frequently asked questions
What a Responsible Person asks before trusting a regulatory database
Does BD-API replace the regulatory officer?+
No. BD-API delivers data, alerts and traceability so the Responsible Person can decide with better information. The final interpretation stays with the qualified team.
What problem does it solve for a certification body?+
It reduces the risk of reviewing or certifying products against an outdated CosIng database. The value is not the API itself — it is the confidence before signing off.
Does the client installation depend on the internet to validate ingredients?+
No. The client keeps a local PostgreSQL database and validates offline. BD-API is used to receive snapshots, patches and regulatory updates.
What does it cover today?+
CosIng Annexes II–VI with 2,385 substances monitored, 32,675 ingredients catalogued and 5 annexes covered. We add multi-source watch over DG SANTE, SCCS, Safety Gate (RAPEX) and EUR-Lex, professional source-specific AI analysis, granular per-client subscription, SQL patches with SHA-256, changelog, transactional email and HMAC-signed webhook. The full playbook for monitoring EU cosmetic regulation →
What happens if Safety Gate or EUR-Lex are temporarily unreachable?+
The circuit breaker isolates the failing source, persists the failure and retries automatically with an adaptive cooldown. The other sources keep running normally; when AI is unavailable, the notice arrives in raw format so no events are lost.
Can I activate only SCCS without Safety Gate or EUR-Lex?+
Yes. Subscription is granular per client and per source: every client chooses which engines to listen to. You can activate only SCCS, add Safety Gate later or combine them as suits you.
Request licence
Fill in the form and we will get in touch to activate your access to the service.