§ 01 The layers
Three claim layers, three risk profiles
The skincare install separates three claim layers. The marketing layer (homepage, blog, About copy) is the highest-risk surface for FDA exposure but the lowest-leverage for AI-engine citation. The PDP copy layer is the moderate-risk, moderate-leverage surface. The structured-data layer (metafields, schema, Knowledge Base FAQs) is the lowest-risk and highest-leverage surface for AI citation. Treat the three differently or all three drift into the same compromised middle.
The marketing layer is where most regulatory exposure originates. Homepage hero copy that says "reverses sun damage" or "treats melasma" is the textbook FDA-drug-classification trigger5, and it is also the surface that drives the least AI-engine citation because the engines parse PDP-level detail more reliably than homepage poetry. The install moves the strong claims off the marketing layer entirely — homepage carries cosmetic claim language ("designed for sun-exposed skin," "supports a more even tone") and the credential evidence sits one click deeper.
The PDP copy layer is where the brand earns the right to make specific claims. The Shopify Catalog optimization doc3 recommends comprehensive descriptions with relevant specifications; for skincare, the recommended PDP body says what the product is (cosmetic), what it contains (INCI ingredients with concentrations), and what category of effect it's designed for (cosmetic claims), then references the structured-data layer for the credential evidence. The structured-data layer is where peer-reviewed citation, dermatologist consultancy, and clinical-study references live — as schema additionalProperty, metafields, or Knowledge Base FAQ answers.
§ 02 The FDA line
Cosmetic claim vs drug claim — the FDA line in practice
FDA's cosmetic-vs-drug line is intended-use-based, not ingredient-based. A product with the same niacinamide concentration can be a cosmetic if the intended use claim is 'supports an even-looking skin tone' and a drug if the intended use claim is 'treats hyperpigmentation'. The line runs through the words the merchant chooses on the PDP, not through the chemistry. Cosmetic language stays in 'structure or function' territory; drug language enters 'cure, mitigate, treat, or prevent disease' territory.
The FDA's published guidance5 defines cosmetics as products "intended to be applied to the human body for cleansing, beautifying, promoting attractiveness, or altering the appearance" without affecting body structure or function. The intended-use evidence comes from product labels, marketing copy, advertising, and consumer perception. A skincare PDP that says "evens skin tone" stays in cosmetic territory. The same PDP saying "treats melasma" crosses into drug territory and triggers FDA premarket-approval requirements that no independent skincare merchant on Shopify is going to satisfy.
The install scans every PDP, every collection description, every Knowledge Base FAQ, and every metafield for language that crosses the line. Common patterns that trigger reclassification: "treats," "cures," "reverses," "FDA-approved alternative to," disease names paired with verbs of remediation ("treats acne," "reverses melasma," "cures rosacea"), and clinical-language phrases borrowed from drug marketing ("clinically proven to treat..."). The cosmetic-safe substitutions are usually one-word changes: "treats" becomes "supports," "reverses" becomes "improves the appearance of," "cures" becomes "designed for."
§ 03 Catalog enforcement
Shopify Catalog's 'sensitive content' line
Shopify Catalog requirements exclude products with 'sensitive content, such as mature content', without enumerating the full list of triggering language. In practice, audits surface the same patterns in skincare: explicit drug-classification claim language, before-after imagery without clear cosmetic framing, and copy that implies pharmaceutical-grade efficacy. The Catalog enforcement layer sits on top of the FDA layer — a PDP can satisfy FDA cosmetic-classification rules and still trip Catalog enforcement if the language reads as therapeutic to Shopify's review systems.
The Catalog requirements doc1 is the operative reference, and the install treats it as the more conservative line. Where FDA permits "improves the appearance of fine lines," Catalog has been observed to flag "erases wrinkles" — both can read as cosmetic to a human reviewer but only one stays inside both lines reliably. The install's claims-language scan checks against the conservative line, not the FDA-permissible line, because Catalog enforcement is faster and more programmatic than FDA enforcement.
§ 04 Policies
Policy fields AI agents actually read
Shopify's AI optimization doc says policies should be kept 'complete and up-to-date' so AI agents can reference accurate return and other policy information. For skincare, four policy surfaces matter most: the return policy (open-bottle exclusions, patch-test recommendations, fragrance-sensitivity exchanges), the shipping policy (temperature-sensitive product handling, expedited timing for fresh-formulation products), the ingredient disclosure policy (full INCI listing on every PDP), and the clinical-evidence policy (where the brand discloses what studies support which claims).
The return policy is the highest-leverage skincare policy for AI citation. AI shopping agents are frequently asked questions like "What's the return policy for this product?" or "Can I return an opened serum?", and the engines surface the answer from the policy page. A skincare brand whose return policy actually addresses open-bottle returns, patch-test exchanges, and fragrance-sensitivity allowances will be cited more cleanly than one with a generic "30-day return" policy. The shipping policy matters next, especially for fresh-formulation or temperature-sensitive products where the AI agent needs to surface shipping timing and packaging detail.
The ingredient-disclosure and clinical-evidence policies are skincare-specific add-ons. Most generic Shopify policy templates don't include them; the install adds both. The ingredient-disclosure policy commits the brand to full INCI listing on every PDP and references the metafield structure that delivers it. The clinical-evidence policy commits the brand to disclosing what evidence supports specific claims (a peer-reviewed citation index, dermatologist consultancy disclosure, or an explicit "the following claims are cosmetic and not evaluated by FDA" footer). Both are AI-readable surfaces that compound credential signals.
§ 05 Knowledge Base
Knowledge Base FAQs as the credentialing surface
The Shopify Knowledge Base app is the most under-used skincare credentialing surface. FAQs are stored as metaobjects under Content > Metaobjects, derived from policies and store settings, or created manually with 1-2 sentence answers. For skincare, the manual-FAQ pipeline is where the brand carries the credential signals the engines weight most — the formulator's name and credentials, the clinical studies referenced, the dermatologist consultancy, the peer-reviewed publications behind specific ingredient claims.
The Knowledge Base managing-FAQs doc4 documents the manual FAQ pattern: question plus 1-2 sentence answer, stored as a metaobject, available to the AI agents Shopify routes through Knowledge Base. Auto-generated FAQs derive from store settings (language, customer account, shipping and delivery, return rules) and carry generic store information. The manual FAQs are where the credential and clinical-evidence detail lives. Question: "What clinical evidence supports the 10% niacinamide concentration?" Answer: "Niacinamide at 10% has been studied in peer-reviewed dermatology literature including [DOI reference]; our formulation was developed with [named dermatologist consultant]." The AI agents have access to that answer when a buyer asks the engine an ingredient question, and the answer is the credential signal that puts the brand into the co-citation set.
