Your private-label partner must not only hold the right certificates but also demonstrate chain-of-custody and documented compliance for finished products.