Vetting domestic private label for a new brand : MoCRA questions?

Hey everyone, I'm working on a bootstrapped skincare launch and I'm a bit overwhelmed by the new MoCRA compliance requirements for 2026.

For those of you working with small US labs (MOQs under 50), how are you verifying their safety substantiation data before you buy? I've talked to a few labs that seem a bit hand-wavy about the new FDA listing requirements.

Also, any specific US labs you've found that are actually organized with their digital documentation? I'm trying to stay lean on the first run but don't want a compliance nightmare in 6 months. Thanks!