What Your COA Must Include to Pass Amazon's Third-Party Lab Requirements

Amazon has pulled tens of thousands of supplement listings over the past few years — and a significant share of those removals weren’t triggered by dangerous products or fraudulent labels. They were triggered by COA submissions that didn’t hold up to documentation review. Not fake products. Not harmful ingredients. Just paperwork that didn’t meet the platform’s standards.

That distinction matters more than most brands realize. You can spend months developing a formula, sourcing clean ingredients, and building a listing with strong reviews, and then watch it disappear because your certificate of analysis was missing an accreditation number or listed test results as “Pass” instead of actual measured values. The product was fine. The document wasn’t.

We review COAs regularly at Qalitex — both as the issuing lab and when clients share reports they’ve received from other labs and aren’t sure about. Here’s what we consistently find missing, and what Amazon’s compliance review is actually looking for.

Why So Many COAs Get Rejected

“COA” isn’t a standardized term. There’s no universal template, no regulatory body that dictates a required format. A certificate of analysis from one lab might run three pages with method citations, uncertainty ranges, and detection limit disclosures. From another lab, it might be a single-page summary with a stamped “Compliant” and little else. Amazon’s compliance team sees both every day — and they’re rejecting the latter with increasing frequency.

For Canadian brands, Androxa provides Health Canada and NHPD-compliant testing services across Canada.

For raw material and ingredient-level verification, Ayah Labs specializes in contract testing and supplier qualification.

For EU market entry and European regulatory compliance, Care Europe provides expert consulting from Paris.

Amazon’s supplement compliance requirements (published in Seller Central’s product safety and compliance section) specify that COAs must come from ISO/IEC 17025-accredited laboratories. That’s the non-negotiable baseline. ISO 17025 is the international standard for testing and calibration labs — it means the lab’s methods have been independently audited, its equipment is calibrated on documented schedules, and its results are traceable to recognized reference standards. Without that accreditation, the COA doesn’t even enter the conversation.

But accreditation alone doesn’t guarantee acceptance. We’ve seen COAs from fully accredited labs get rejected because the document failed to surface the right information clearly enough. The reviewers on Amazon’s compliance team are working from structured checklists. If your document doesn’t make their job easy, it won’t pass.

What the COA Actually Needs to Show

Think of a COA submission as telling a story: who made this product, what’s in it, who tested it, how they tested it, and what they found. Amazon’s reviewers need to follow that narrative without guesswork. Here’s what that looks like in practice.

Product identification that matches the listing exactly. The product name on the COA must match what’s being sold — not approximately, not abbreviated, exactly. If your Amazon listing reads “Ultra Omega-3 Fish Oil 1200mg Softgels,” that phrase needs to appear on the COA. “Ultra Omega 3 Fish Oil” without the hyphen can still trigger a manual review flag. Include the UPC, ASIN, or both if they’re available on your documentation.

Lot/batch number and manufacturing date. Amazon requires traceability back to a specific production run. If your contract manufacturer provides a COA but omits the lot number, that’s a problem you need to resolve at the manufacturing level — you can’t paper over it at the lab stage.

Testing dates within an acceptable window. Amazon typically requires COA results dated within 12 months of submission, though products with shorter shelf lives may face a tighter window. Don’t submit a COA from 2023 for a product you’re listing in 2026. We’ve seen this more times than we’d like — brands sitting on old lab reports assuming they’ll work indefinitely.

Specific analytes with numeric results, not pass/fail. This is where the majority of COAs fall short. Listing “Heavy Metals: Pass” tells Amazon’s reviewers nothing useful. The COA needs to show actual detected levels — lead at 0.08 ppm, arsenic at 0.02 ppm, cadmium at 0.04 ppm, mercury below 0.01 ppm — alongside the specification limits and the reference method used. At Qalitex, we run heavy metals panels by ICP-MS, which achieves detection limits in the parts-per-trillion range and covers the full scope required under USP <2232> for elemental impurities in dietary supplements.

Methodology references. This is an insider detail that separates a defensible COA from a weak one. Stating “tested per AOAC 2016.02” or “microbial enumeration per USP <61> and USP <62>” signals that the lab is following validated, recognized procedures — not proprietary or undocumented methods. Reviewers increasingly expect to see these citations, and their absence raises questions about the lab’s rigor.

Lab identification and accreditation details. The issuing lab’s full legal name, physical address, accrediting body (A2LA, Perry Johnson Laboratories, PJLA, etc.), and accreditation certificate number should all appear on the document. Amazon’s compliance reviewers cross-reference accreditation numbers against public accreditation directories. If the lab’s certificate has lapsed, or was issued under a different DBA name than what appears on your COA, that discrepancy will surface.

Authorized signature or issuing authority. A COA should carry a signature from a responsible individual — a lab director, quality manager, or equivalent. An unsigned, auto-formatted PDF without any named authority raises obvious questions about document authenticity.

Getting the Scope Right: What to Test For

One of the most common questions we get: “What analytes do I actually need on my COA?” The answer depends on product category, ingredients, and target market — but for most dietary supplements sold on Amazon, the minimum credible test package covers four areas.

Identity. Confirming that the ingredient is what you say it is. For botanicals, this increasingly means HPTLC (High-Performance Thin-Layer Chromatography) fingerprinting matched against a reference standard — a simple visual or organoleptic check won’t satisfy informed reviewers for products like ashwagandha, turmeric, or elderberry.

Potency and label claim verification. If your label states “500mg Vitamin C per serving,” the COA should verify that the measured value falls within an acceptable range of that claim. Under 21 CFR Part 111, manufacturers are responsible for ensuring product meets label specifications, and the COA is the documentary evidence of that verification.

Heavy metals. Lead, arsenic, cadmium, and mercury at minimum, with numeric results and specification limits. FDA’s guidance on heavy metals in dietary supplements and USP <2232> are the primary reference frameworks here.

Microbiology. Total aerobic plate count, total yeast and mold, E. coli, and Salmonella at minimum, per USP <61> and <62> criteria for dietary supplements.

Protein powders warrant additional scrutiny because of the well-documented nitrogen-spiking problem — cheap amino acids like glycine or taurine added to inflate total protein readings. Amazon’s compliance reviewers know about this. Including amino acid profile testing by HPLC, rather than relying solely on total nitrogen by Kjeldahl, demonstrates a level of analytical rigor that stands out. And for proprietary blends, ingredient presence still needs to be confirmed — listing “Adaptogen Blend 500mg” without individual weights doesn’t reduce the testing obligation.

The Failure Patterns We See Repeatedly

After reviewing hundreds of COA submissions, a few failure modes repeat with predictable regularity.

The manufacturer’s in-house QC document submitted as a third-party COA. Amazon requires testing by an independent third-party lab — one with no financial relationship to the manufacturer. An internal quality control document from your contract manufacturer, even if it’s formatted like a COA with a logo and test tables, doesn’t qualify. We’ve had clients submit these in good faith, genuinely not realizing the distinction. The platform’s reviewers are trained to spot it.

Lapsed accreditation. ISO 17025 accreditation certificates expire, typically annually or biennially. A lab that was accredited in 2023 may not have maintained that status. Before submitting, verify the lab’s current accreditation through the accrediting body’s public searchable database — most (including A2LA) make this information freely available online.

Testing the bulk ingredient instead of the finished product. The COA should reflect testing of the finished product as sold — in its final packaging, from the actual production lot. Testing a raw material before encapsulation doesn’t tell you what ended up in the bottle after blending, tableting, and filling. Reviewers understand formulation manufacturing well enough to ask.

Incomplete panels for the product type. Submitting a COA with identity and heavy metals but no microbiology for a powdered product, or omitting potency verification for a vitamin product making label claims, leaves obvious gaps. Reviewers work through structured checklists. Obvious gaps get flagged every time.

A Pre-Submission Check Worth Running

Before any client submits a COA to Amazon, we recommend a quick self-audit against these six checkpoints — the most common remediation items we encounter:

1. Is the lab’s accreditation number visible on the document and currently valid?
2. Does the product name on the COA match the Amazon listing character-for-character?
3. Are all test results dated within 12 months of the submission date?
4. Are results reported as numeric values with specification limits, not just pass/fail?
5. Are testing methods cited by recognized reference (USP, AOAC, ISO)?
6. Is there a named, authorized signatory on the document?

If your COA clears all six before you get to anything else, you’re already ahead of a large portion of submissions that come through Amazon’s review queue. At Qalitex, our issued COAs include full methodology citations, accreditation details in the report header, detection limit disclosures, and a named signatory — because that’s what ISO 17025 requires of us, and because we’ve seen too many clients lose listings over documentation gaps that should have been caught before the document left the lab.

Where This Is Headed

Amazon’s documentation standards for supplements aren’t arbitrary friction. They’re a market response to a documented quality problem — multiple independent investigations have found that a meaningful percentage of protein and herbal supplements on major e-commerce platforms contain undeclared contaminants or fail to meet label potency claims. Platforms that host these products face reputational and regulatory exposure.

That pressure is only increasing. Health Canada has been tightening its natural health product licensing and post-market surveillance requirements in parallel with FDA activity. The EU’s expanded food supplement notification framework is raising testing documentation expectations for sellers in European markets. If anything, Amazon’s current COA standards are a preview of where third-party documentation requirements are heading across multiple jurisdictions.

Get the documentation right now — not because the platform is watching, though it is — but because a COA that can withstand independent scrutiny is evidence that your product actually meets the specifications on your label. That’s what the document is supposed to represent in the first place.