RPvault

Idea

A compliance vault for indie beauty brands that turns MoCRA into a checklist instead of a consultant invoice. RPvault is a self-serve web app for cosmetic and personal-care brands under $1M in revenue selling on Shopify, Amazon, and Faire. It runs the small-business exemption check, holds safety substantiation documents, tracks the 15-business-day adverse event clock and the FDA biennial facility renewal, and spits out the retailer-ready compliance packet that wholesale buyers now ask for before they'll stock a brand.

Market gap

The Modernization of Cosmetics Regulation Act (MoCRA) added real, ongoing federal obligations to a category of business that mostly has none: facility registration, product listing, safety substantiation records, and mandatory adverse event reporting within 15 business days. FDA's first-ever biennial renewal deadline for facilities that registered in 2024 lands July 1, 2026, and it recurs every two years after that (Wiley, "Time Flies! Cosmetic Manufacturing Facilities are Due for FDA Registration Renewal"). By February 2026, FDA reported more than 15,000 active facility registrations and more than 1 million active product listings (Spakinect, citing FDA's Feb 11, 2026 Cosmetics Constituent Update), and that count keeps climbing as enforcement tightens.

The twist that makes this a software gap, not just a paperwork gap: most indie brands (under $1M average annual US sales) qualify for the small-business exemption from facility registration and product listing, but that exemption does not cover safety substantiation, adverse event handling, or the US contact requirement on labels. Indie perfumers and small-brand founders keep discovering this the hard way ("the small business exemption is narrower than most people think, and the parts it doesn't cover are exactly the parts most indie perfumers assume they can ignore" - Karen Gilbert, Online Perfume School). On top of the federal floor, retailers and marketplaces are now setting their own bar: Amazon requires compliance documentation for cosmetics in specific categories, and platform account enforcement moves faster than FDA enforcement for most brands, since a suspension can shut off revenue before a federal audit ever would (eFulfillmentService, "FDA Cosmetics Compliance: MoCRA Guide for Ecommerce Brands").

Existing tooling splits into two camps that both miss this exact customer: (1) per-filing consultants who charge for a one-time registration and disappear (no ongoing deadline tracking, no retailer packet), and (2) enterprise QMS platforms built for manufacturers with dedicated quality departments, priced and implemented for a scale far above a 2-person kitchen-brand team. Nobody is selling a $49-a-month answer to "am I actually exempt, and what do I hand Faire when they ask."

Total Addressable Market (TAM)

Bottom-up, US-only:

• Shopify hosts 33,842 stores in its Make-Up & Cosmetics category (storeleads.app) and 77,894 active stores in its Skincare category (bootleads.com). Assumption: roughly 40% of these overlap (a skincare brand commonly also lists SPF, tinted, or lip products), so unique Shopify cosmetic/personal-care stores are roughly 67,000 (raw sum reduced by the overlap assumption).
• Assumption: about 55% of created Shopify stores are actively trading rather than dormant test stores, giving roughly 37,000 active US cosmetic/personal-care Shopify brands.
• Assumption: adding sellers who operate on Amazon and Faire only, without a Shopify storefront, adds roughly 30% more, for a TAM of roughly 48,000 US brands that are legally on the hook for MoCRA's safety substantiation and adverse-event rules regardless of their registration-exemption status.
• Blended ACV at a $49-99/month range, weighted toward the entry tier: $840/year.
• TAM: ~48,000 brands x $840 = ~$40.3M ARR.

SAM: brands established enough to sell wholesale or through Faire/Amazon (i.e., they already face a retailer asking for compliance proof), estimated at 25% of the TAM count. SAM: ~12,000 brands x $840 = ~$10.1M ARR.

SOM: a realistic 3% penetration of SAM within two years of launch, in line with early-stage vertical SaaS adoption rates. SOM: ~360 brands x $840 = ~$302K ARR.

Supporting context on category size: NielsenIQ data shows indie brands (independently owned, under $300M revenue) now hold 32% of the $125 billion US beauty and personal-care market, up from 29% a year earlier (Beauty Independent, "NIQ: Indie Beauty Hits 32% Of U.S. Beauty Market").

Monetization strategy

Subscription SaaS, billed monthly or annually, per brand. The product is the insurance policy against a blocked marketplace listing or a missed 15-day reporting window, not a nice-to-have dashboard, so willingness to pay tracks directly to "can I keep selling on this channel." Revenue also grows with the regulatory calendar: every brand hits the biennial renewal and every new product hits the 120-day listing clock, both of which are natural in-app upsell and retention moments.

Pricing strategy

• Starter - $49/month: single brand, exemption calculator, safety substantiation vault, adverse-event countdown tracker, product listing tracker, email reminders. This is the anchor: cheaper than a single per-filing consultant engagement ($849 facility + $200/product per fdaregistrationassistance.com pricing) and priced to be a no-brainer next to that.
• Growth - $99/month: everything in Starter plus the auto-generated Retailer Compliance Packet PDF export and the AI compliance chat assistant. This is the entry point most paying customers land on, since the retailer packet is the feature that pays for itself the first time a Faire or wholesale buyer asks for it.
• Facility - $199/month: adds guided FDA biennial renewal workflow with document prep for the Cosmetics Direct submission and multi-facility tracking, for brands that manufacture in-house or co-pack under their own registration.

Lead magnet

A free, 2-minute "MoCRA Small Business Exemption Calculator": founder answers revenue and product-category questions (eye area, injectable, ingestible, or appearance-altering-over-24-hours products disqualify the exemption) and gets an instant, personalized answer on exactly which of the four MoCRA obligations still apply to them, delivered with a plain-English explanation, not a legal memo. This targets the precise confusion documented across indie beauty press ("this will likely raise the barrier to entry for emerging beauty founders" - Brittany Lo, Beia, via Beauty Independent) and captures the founder at the exact moment they're searching for an answer instead of paying a consultant for one.

Social proof that the problem exists

1. Beauty Independent surveyed indie beauty founders directly on MoCRA's impact: Yve-Car Momperousse (Kreyol Essence) says it "becomes another administrative task that someone must own," to the point she hired an innovation director partly to handle it; Mundi Gattis (Clean Mundi) cites label-update costs her small team has to absorb alongside everything else. https://www.beautyindependent.com/how-indie-beauty-brands-believe-mocra-will-impact-their-business/
2. Karen Gilbert's indie-perfumer-focused guide states plainly that "the small business exemption is narrower than most people think, and the parts it doesn't cover are exactly the parts most indie perfumers assume they can ignore," a direct signal that the exemption itself is a recurring point of costly confusion. https://www.karengilbert.co.uk/mocra-compliance-what-indie-perfumers-need-to-know
3. eFulfillmentService's ecommerce-focused MoCRA guide documents that marketplace enforcement (Amazon requiring compliance documentation for cosmetics categories) now moves faster and hits harder than FDA enforcement for most small brands, turning platform compliance into an urgent, revenue-blocking issue rather than a background legal risk. https://www.efulfillmentservice.com/2026/05/mocra-fda-cosmetics-compliance-ecommerce/
4. Beautymatter's coverage of indie brands describes founders as effectively "lost in regulation," with a rare dedicated forum created specifically because small brands have no direct channel to the rule-makers and no consistent source of clarity. https://beautymatter.com/articles/lost-in-regulation-a-rare-forum-for-indie-brands-to-meet-the-rulemakers

Competitors

• Registrar Corp: full-service FDA compliance consultancy offering MoCRA facility registration, US agent services, and broad regulatory support, priced and delivered as professional services engagements rather than ongoing software.
• QT9 Software: cloud QMS (quality management system) with a MoCRA module, built for manufacturers that already run formal quality departments; strong on document control, heavy for a 2-3 person brand team.
• Worldover: MoCRA compliance module bundled with EU CPNP (Cosmetic Product Notification Portal) filing support, aimed at brands already operating in multiple international regulatory regimes.
• CosmaComply: an early-stage, AI-assisted MoCRA platform aimed at cosmetic manufacturers generally; still nascent (hosted on a default Vercel subdomain as of this writing) and not positioned around the retailer-packet or exemption-calculator use case.
• Per-filing consultants (e.g., FDA Registration Assistance): charge roughly $849 per facility registration plus $200 per product listing, a one-time transactional model with no ongoing deadline monitoring or retailer-facing deliverable.

What competitors offer now

Consultants file your registration and send an invoice; they don't track your next adverse-event clock or hand you a document a Faire buyer will accept. Enterprise QMS platforms (QT9, Worldover) manage document control and audit trails well, but assume a company already has a quality or regulatory function to operate the software, plus onboarding effort that doesn't fit a founder who is also running production and customer service. None of the current tools center the specific artifact a small brand actually needs on a Tuesday: "here is the one PDF that proves I'm compliant, please stock my product."

What can be done differently to attract customers

Lead with the free exemption calculator and rank for the exact confused, high-intent searches indie founders are already running ("am I exempt from MoCRA," "do I need to register with FDA for my skincare line"). Convert that traffic into paying accounts the moment a brand needs the Retailer Compliance Packet, since that's the artifact tied directly to a sale (getting into Faire, Amazon, or a boutique's shelf) rather than an abstract legal obligation. Distribute through the two channels that already touch this exact audience: a Shopify App Store listing (33,842+ cosmetics stores already there) and referral partnerships with the contract manufacturers and formulators indie brands already use, who get asked for compliance documents constantly and would rather point brands at a tool than become the compliance department themselves.