How a Certificate of Analysis Actually Gets Read

A Certificate of Analysis, commonly abbreviated as CoA, is a document issued by a laboratory that records the results of testing performed on a specific batch of a product. In the dietary supplement industry, a CoA travels with a batch from raw ingredient through finished product, serving as the primary documentary record of what was measured, when, and by whom.

Reading a CoA is not simply a matter of checking whether results say "pass." The document encodes a set of decisions — which tests were run, which methods were used, what the acceptance criteria were set to, and who set them — and each of those decisions shapes what the CoA can and cannot confirm about the product inside the container.

What a CoA Records and How Each Row Is Generated

A standard CoA is organized as a table of specifications. Each row names a test parameter, states the specification (the acceptable range or limit), reports the result actually measured, and indicates whether that result fell within the specification. The simplest CoAs cover identity, potency, and basic physical characteristics. More detailed documents add microbial limits, heavy metals, residual solvents, and contaminant screens.

Identity testing establishes that the ingredient is what it is claimed to be. For a botanical ingredient, this typically involves techniques such as high-performance thin-layer chromatography (HPTLC) or DNA barcoding, which produce a chemical or genetic fingerprint compared against a reference standard. For isolated nutrients — a specific vitamin form, an amino acid — identity may be confirmed through infrared spectroscopy or wet chemistry. The method matters because different techniques have different sensitivity to adulteration or substitution.

Potency testing measures the concentration of the marker compound or active constituent in the batch. For a botanical extract, the marker is often a compound chosen because it is reliably measurable, not necessarily because it is the sole driver of any effect. For an isolated nutrient, potency is measured directly against a certified reference standard. The result is expressed as a quantity per unit — milligrams per gram of extract, or international units per tablet — and compared against the label claim or internal specification.

Contaminant testing occupies a separate section of the CoA. Heavy metals — lead, arsenic, cadmium, mercury — are measured by techniques such as inductively coupled plasma mass spectrometry (ICP-MS). Microbial limits testing checks total aerobic count, yeast, mold, and the presence or absence of specific pathogens. Residual solvent testing becomes relevant for extracts produced using organic solvents; understanding how solvents are used in botanical extraction helps explain why this section appears on CoAs for certain herbal products but not others.

Each result is generated against a stated analytical method — often a compendial method from the United States Pharmacopeia (USP), the Association of Official Analytical Chemists (AOAC), or an in-house validated method. The method reference is itself informative: a compendial method has published performance criteria; a proprietary method may or may not have been independently validated.

The Labs, Manufacturers, and Oversight Bodies Behind the Document

A CoA can be generated by one of three parties: the ingredient supplier, the finished-product manufacturer, or an independent third-party laboratory. The identity of the issuing lab is one of the first things a quality professional checks, because it determines the independence of the data.

Supplier CoAs accompany raw ingredients when they arrive at a manufacturing facility. They represent the supplier's own testing and are considered first-party documents. Under FDA current Good Manufacturing Practice (cGMP) regulations for dietary supplements — codified at 21 CFR Part 111 — a finished-product manufacturer is required to verify incoming ingredient CoAs rather than accept them at face value. That verification may involve confirmatory identity testing, full retesting, or a documented risk-based decision to rely on the supplier's data under specific conditions.

Third-party CoAs are issued by laboratories with no commercial relationship to the manufacturer or supplier. Accreditation under ISO/IEC 17025 is the standard marker of a laboratory's technical competence; it means the lab has demonstrated to an accrediting body that its methods are validated and its results are reproducible. An ISO/IEC 17025-accredited lab's CoA carries more evidentiary weight than an unaccredited in-house document, though accreditation itself does not specify which tests must be run.

Third-party certification programs — such as those operated by NSF International, USP, or Informed Sport — layer an additional review on top of individual CoAs. These programs audit manufacturing facilities, review CoAs, and conduct their own confirmatory testing. As explained in more detail in the context of how dietary supplements are regulated in the U.S., no supplement is FDA-approved before it reaches the market; certification seals are voluntary and represent private-sector quality assurance, not a government pre-market approval.

The FDA's role at the CoA level is indirect: cGMP regulations require that manufacturers establish specifications, test against them, and document results — but the agency does not review or approve CoAs before products are sold. Enforcement occurs after the fact, through inspections, warning letters, and recalls.

Where CoA Interpretation Breaks Down or Produces Unexpected Results

The most common misreading of a CoA is treating a "pass" result as a comprehensive safety or efficacy endorsement. A CoA only reports on the parameters that were actually tested. If heavy metals were not included in the test panel, the CoA is silent on heavy metals — it does not confirm their absence. A document with ten passing rows and no heavy-metals row is not evidence that heavy metals are absent; it is evidence that they were not measured.

Specification-setting is a second source of confusion. Specifications on a CoA are set by the manufacturer or, for compendial ingredients, by a pharmacopeial standard. A product can pass every specification on its own CoA and still fall short of a stricter external standard. Potency specifications, in particular, are often written with a tolerance range — a label claim of a given amount may allow results anywhere within a defined percentage above or below that value. Whether that tolerance is tight or wide is not apparent from a "pass" notation alone.

Batch specificity is another limitation that is frequently overlooked. A CoA documents one batch, identified by a lot number. Testing on lot 001 does not predict results for lot 002, even from the same manufacturer and formula. Variability in raw material sourcing, extraction conditions, and blending can produce meaningful differences between lots. This is particularly relevant for botanical ingredients, where the concentration of marker compounds can shift with plant origin, harvest season, and processing — factors relevant to understanding why what a botanical extraction method actually changes matters to the final number on the page.

Finally, the CoA does not speak to bioavailability. A potency result confirms the measured concentration of a compound in the product; it does not confirm how much of that compound the human body will absorb or how absorption varies by formulation, food matrix, or individual physiology. Those are separate questions requiring separate evidence.

What the CoA Shows on a Label or Certification and What It Does Not

Supplement labels are not required to display CoA data directly. The CoA is a manufacturing and quality document, not a consumer-facing label element. What a label must include — under FDA regulations — is a Supplement Facts panel with declared ingredient amounts, a list of other ingredients, and the manufacturer's or distributor's contact information. The CoA sits behind that label as the internal record supporting the label claims, but consumers do not routinely see it at point of sale.

Some manufacturers publish CoAs on their websites or provide them on request, and this practice has grown in response to consumer demand for transparency. A published CoA is only as informative as its scope: a document showing only identity and potency for a single ingredient in a multi-ingredient product does not cover the full formulation. Lot-number matching is essential — a CoA posted online is only relevant to a product if the lot number on the CoA matches the lot number on the container in hand.

Third-party certification seals printed on a label indicate that the certifying organization has reviewed CoA data and conducted independent testing, but each program certifies different things. One program may focus on label-claim accuracy and contaminant limits; another may emphasize banned-substance screening for athletic use; a third may audit manufacturing processes more broadly. The seal identifies which program was satisfied, not a universal standard.

What a CoA cannot show, regardless of how thorough it is, is post-manufacture stability across the full shelf life. A CoA is a snapshot of the batch at the time of testing. Potency may degrade over time depending on storage conditions, packaging, and the stability profile of the specific compounds involved. Expiration dating is based on stability studies conducted separately from the CoA testing process, and those studies vary in rigor across manufacturers.

A Certificate of Analysis is a structured record of what was measured on a specific batch at a specific point in time, and its value is proportional to the scope of testing, the independence of the laboratory, and the rigor of the specifications against which results were compared — none of which are visible from a single "pass" notation.

Note: This explains how supplements work. This statement has not been evaluated by the Food and Drug Administration. This information is not intended to diagnose, treat, cure, or prevent any disease, and it is not a substitute for advice from a physician, pharmacist, or registered dietitian.