Product Safety for Small Businesses: A Startup's Guide to Certification in North America

The call we get most often from first-time lighting founders starts the same way: a container of fixtures is sitting at the port, a retailer or crowdfunding fulfillment date is three weeks out, and someone on the team just asked, "wait, are these actually UL listed, or just the driver?"

That question shows up late because it's an easy one to get backwards. A lot of LED drivers carry a UL Recognized Component Mark (the backwards "R" in a circle) and founders reasonably read that as "the electrical safety part is handled." It isn't. A Recognized Component Mark means that one component was evaluated to be built into a larger product; it says nothing about the finished fixture, which still needs its own Listing under the relevant UL standard (UL 8750 for LED equipment, UL 1598 or UL 2043 depending on the fixture type) evaluated as a complete system: housing, wiring, thermal performance, the works. We've had founders discover this the week a big-box retailer's vendor compliance team rejects their intake paperwork, which is a much worse week to discover it than the one where the product is still in CAD.

That mix-up is a good entry point into a broader problem: most "startup guide to certification" content treats certification like a single CPSC checkbox that applies the same way to a phone case and a light fixture. It doesn't. What actually blocks a lighting or electrical product from shipping in North America is a specific, learnable set of decisions, and most of them get made (correctly or not) well before a founder ever talks to a lab.

What "Mandatory" Actually Means for a Physical Product

The Consumer Product Safety Commission sets safety standards and has real enforcement authority, but for most electrical products it does not require a specific third-party certification mark before sale. The UL, CSA, or ETL mark on a fixture exists because retailers, electrical inspectors, and your own liability insurer require it, not because a federal statute names UL by number. In practice that distinction doesn't matter much: no serious retailer will take an unlisted electrical product, no electrician wants to install one, and most product liability policies exclude coverage for uncertified electrical products outright. So "not technically mandated by CPSC" and "will not ship" end up describing the same product.

The CPSC does have separate civil penalty authority for knowing violations of safety rules, and the caps on those penalties are substantial for a company of any size: currently $120,000 per violation, up to $17,150,000 for a related series of violations under the CPSA's civil penalty provision. But in our experience, the penalty schedule is rarely what actually hurts a startup. What hurts is the recall itself: the stop-sale, the retailer chargebacks, the insurance non-renewal, and the fact that a small brand's reputation often doesn't survive a safety recall the way a large one's does.

The Wireless Module Changes Everything

If your fixture or driver has no radio and no network connection, its compliance path is comparatively contained: UL/CSA/ETL for electrical safety, plus ICES-003 in Canada for unintentional electromagnetic emissions, handled through a declaration of conformity with no application filed and no representative appointed.

Add a Bluetooth mesh driver, a Zigbee control module, or a Wi-Fi commissioning chip, and the picture changes on both sides of the border. In the US, that's an intentional radiator, which puts you in FCC Full Certification (the most extensive of the FCC's three tiers), running $3,000-10,000+ depending on the number of bands and antenna configurations tested. That's meaningfully more than FCC Verification ($500-1,500, for basic devices with minimal RF emissions) or a Declaration of Conformity ($1,500-3,000, for more complex but non-radio devices). We've watched founders budget for the cheapest tier because that's the number they found first, then get quoted the real number once the lab actually looks at the schematic. Knowing which tier you're in before you finalize the BOM, not after, is the difference between a budget line and a launch delay.

The same radio also puts you into RSP-100 territory in Canada, which we've written about in detail elsewhere: any intentional transmitter gets an IC ID from ISED, and RSP-100 Section 4.1 requires a named Canadian Representative on file if your company address is outside Canada. That's a real, billable requirement for a connected fixture, not the phantom "ICES-003 representative" some providers try to sell alongside it, which doesn't exist as a requirement under ICES-Gen. If your fixture has both a radio and a network connection, you can end up needing RSP-100 for the radio and DC-01 for the terminal equipment side simultaneously, appointed separately by a provider happy to invoice you twice for one representative role.

Crossing the Border Adds a Second Certification, Not a Rubber Stamp

A US UL Listing and a Canadian CSA or cUL certification are not interchangeable, even though the underlying safety standards are often harmonized. Most labs that hold dual accreditation can test once and issue both marks, which is worth confirming before you pay for two separate test campaigns on the same product. What doesn't carry over automatically is anything specific to the Canadian market: bilingual labeling requirements, the Canadian Representative appointment for radio-equipped products, and, if applicable, the ICES-003 supplier obligations that sit with whoever is importing, distributing, or selling the equipment in Canada. None of that shows up if you only plan around the US market and treat Canada as an afterthought once US units are already selling.

The Certifications Nobody Requires, Until a Buyer Does

Energy Star ($2,500-5,000) and EPEAT ($3,000-7,000) are not legal requirements for a lighting product. They become requirements the moment a government agency, a university system, or a large commercial buyer puts them in a procurement spec, which happens constantly in the institutional and commercial lighting channels this firm's clients tend to sell into. The same is true of ISO 9001 ($5,000-15,000): no regulator requires it, but plenty of B2B buyers and larger retailers will not open a vendor account without it on file.

The useful question isn't "is this certification good to have." It's "which of our actual target buyers requires this as a condition of the sale, and does that buyer exist yet." A founder selling direct-to-consumer through Kickstarter has no real use for ISO 9001 in year one. A founder whose pipeline includes a national retailer's private-label program or a state institutional contract may find that ISO 9001 is a precondition they can't sell around, no matter how good the fixture is.

Budgeting for Certification Like It's Part of the Product, Not a Line Item After

A reasonable planning figure is 5-10% of development cost set aside for certification, and that figure should include renewal fees and the cost of re-testing after any design revision, not just the first pass. If you're building any in-house pre-compliance testing capability (useful for catching problems before you pay lab rates to find them), expect an initial investment in the $5,000-20,000 range with $2,000-5,000 in annual upkeep. That's rarely worth it before you have more than one product in active development; before that point, a single relationship with a full-service lab is usually the cheaper path.

The mistake we see most often is sequencing certification last, not underspending on it: finalizing the mechanical and electrical design, locking the BOM, placing a production order, and only then asking what the fixture needs to certify. Every one of the certifications above is easier and cheaper when the product is still a CAD file than when it's a container at the port.

Where We Come Down

Certification for a startup lighting or electrical product comes down to a small number of decisions that need to happen in the right order, most of them well before tooling. Get the UL/CSA/ETL Listing scoped for the finished product, not just the driver. Know whether your product has an intentional radio before you finalize the electronics, because that one design choice decides your FCC tier and pulls in RSP-100 the moment you sell into Canada. Treat voluntary certifications like ISO 9001 or Energy Star as sales tools tied to a specific buyer, not boxes to check preemptively. And build the certification budget into the product plan at the same stage as the thermal design and the BOM, not after the first production run is already committed.

That founder with the container at the port didn't have a bad product: the fixture passed every safety test once it was properly submitted. What cost them six weeks was treating the Recognized Component Mark on the driver as the finish line instead of the starting point. If you want that scoping conversation before your BOM is locked instead of after, our strategic business support team works through exactly this kind of certification sequencing with first-time founders. Ask that question about your own product now, while it still only costs you a phone call to answer.