What ISO 17025 Accreditation Actually Means When You're Choosing a Supplement Testing Lab

Every month, we review COAs submitted to our team that were generated by labs displaying ISO 17025 certificates prominently on their websites — but with no documented method validation for the specific analytes shown. The accreditation was real. The data’s defensibility? Considerably less certain.

That gap matters. It costs brands money in re-testing, creates friction with retailers running vendor audits, and occasionally lands companies in genuinely difficult positions during FDA inspections. ISO/IEC 17025 is the international standard for testing and calibration laboratory competence, administered in the US through ILAC-recognized bodies like A2LA (American Association for Laboratory Accreditation) and Perry Johnson Laboratory Accreditation (PJLA). Understanding what it actually requires — and doesn’t automatically guarantee — is one of the most practically useful things a supplement or cosmetics brand can know about testing.

What ISO 17025 Actually Requires from a Testing Lab

The current version — ISO/IEC 17025:2017 — is organized around three interconnected requirements: technical competence, management system integrity, and impartiality. The technical competence section (Clause 7) is where the rubber meets the road for supplement and cosmetic brands.

Under Clause 7.2, labs must formally validate every test method they use. For a dietary supplement potency assay, that validation must demonstrate:

• Specificity and selectivity: the method correctly identifies and quantifies the target analyte in the actual product matrix — not just in a clean solvent standard
• Linearity across the working range: at a minimum, six calibration levels spanning the concentration range the lab expects to encounter
• Recovery rates: for quantitative supplement assays, recovery should fall within 80–110% across at least three fortification levels in the target matrix
• Precision: within-run variability (repeatability) should typically be ≤5% RSD for most potency assays; between-run reproducibility is separately documented
• Measurement uncertainty: Clause 7.6 requires labs to calculate and report a numerical uncertainty budget for every quantitative result

That last point surprises a lot of brands. A properly accredited lab doesn’t just give you “42 mg per serving.” It gives you “42 mg ± 3.1 mg per serving” — a value with a documented uncertainty that tells you how much confidence to place in that number. If your COA shows clean single-point values with no uncertainty range, no method reference number, and no validation documentation available, ask why.

The Scope of Accreditation: The Document Most Brands Never Ask to See

Here’s the part that the marketing materials almost never explain: every ISO 17025-accredited lab maintains a published Scope of Accreditation listing exactly which methods are covered — specified by analyte, matrix type, and method reference (AOAC, USP, EPA, or in-house validated).

Accreditation is scoped, not universal. A lab can hold active A2LA accreditation for heavy metals in protein powder matrices by ICP-MS while running a vitamin B12 HPLC assay that’s technically outside their accredited scope. Both results may appear on the same COA. Only one is ISO 17025-backed.

This creates real complications in several contexts.

Amazon’s testing program: Amazon’s third-party testing requirements increasingly specify COAs from accredited labs with method references. A result outside the lab’s accredited scope may not satisfy program requirements — regardless of the lab’s letterhead or certificate.

Prop 65 defensibility: Supplement and cosmetic brands selling into California under California Health and Safety Code § 25249.10 need analytically defensible data to support their exposure assessments. Method validation documentation is central to that defensibility.

FDA inspection readiness: Under 21 CFR Part 111, manufacturers must document their basis for product specifications. If that documentation relies on COA data from a lab whose methods were never validated for your specific matrix, you have a gap — and FDA investigators are trained to find it.

A2LA and PJLA both publish searchable online databases where you can verify any lab’s current Scope of Accreditation before sending a single sample. It takes about five minutes and is one of the most useful things you can do before establishing a new lab relationship.

ISO 17025 vs. GMP: Why Brands Confuse These (and Why It’s Expensive)

This confusion comes up constantly. A contract manufacturer tells a brand that their products have been “GMP-tested,” and the brand assumes that means the analytical data is also ISO 17025 quality. It doesn’t — and the two frameworks address entirely different problems.

FDA 21 CFR Part 111, the dietary supplement GMP regulation, requires manufacturers to verify product identity, purity, strength, and composition through testing. But Part 111 doesn’t specify what analytical quality system the testing lab must operate under. A GMP-compliant manufacturer can use an in-house lab that has never conducted a formal method validation. The regulation requires testing to happen; it doesn’t require the testing to meet ISO 17025’s technical rigor.

ISO 17025, by contrast, is entirely about measurement quality. It cares about how you measure, not what you’re making.

The practical consequence: a supplement can be manufactured under full GMP compliance and tested with unvalidated methods. You’ll have manufacturing records that satisfy FDA’s expectations for process control. But if a label claim is challenged — by FDA, the FTC, a retailer’s quality team, or a plaintiff’s attorney — the analytical basis for that claim needs to hold up under scrutiny. An ISO 17025-validated method with documented uncertainty and proficiency testing data holds up. An in-house result from an unvalidated procedure often doesn’t.

For brands building a compliance posture that can withstand real pressure, the combination is GMP manufacturing plus independent ISO 17025-accredited testing. Each does something the other can’t.

What Good Method Validation Actually Looks Like

Not all validation documentation is created equal. A complete method validation package for a dietary supplement potency assay should run 15–40 pages and include: linearity plots across at least six calibration levels, spike recovery data from three fortification levels in the actual product matrix, within-run and between-run precision data expressed as %RSD, a limit of quantitation (LOQ) determination, and a measurement uncertainty budget calculated per EURACHEM/CITAC CG 4 guidance or equivalent.

A one-page validation certificate with no underlying data isn’t a validation package — it’s a summary of one, and you should request the underlying data if the result is going to carry compliance weight.

A few specific things worth verifying:

Matrix-matched validation: Was the method validated in your product matrix or in a clean solvent standard? Botanical extracts, high-fat matrices, and colored delivery forms can substantially suppress or enhance analytical signal. A vitamin C assay validated in aqueous solution may perform quite differently in a gummy matrix with added colorants and excipients.

External proficiency testing: ISO 17025:2017 Clause 7.7 requires labs to monitor their ongoing performance through proficiency testing (PT) programs. For dietary supplement testing, relevant PT providers include AOAC Research Institute, LGC Standards, and FAPAS. Ask your lab which programs they participate in for your specific analytes. A lab that can point to consistent acceptable PT performance is demonstrating real-world method competence, not just paper compliance.

Calibration standard traceability: Every quantitative result ultimately traces back to a calibration standard. Under ISO 17025, that standard must be traceable to a national or international measurement standard — NIST for most US laboratories. “House standards” with no documented traceability chain create a metrological gap that undermines regulatory defensibility.

How to Actually Evaluate a Testing Lab Before You Commit

The practical checklist we walk brands through before they establish a new lab relationship:

1. Request the current Scope of Accreditation and confirm your specific analytes and product matrices are explicitly listed — not just inferred
2. Ask for a sample method validation summary for the assay you need, looking specifically for linearity data, spike recovery results, and measurement uncertainty budgets
3. Verify external proficiency testing participation for your target analytes, and ask to see recent PT summary results
4. Ask what the typical measurement uncertainty is for your specific analysis — a lab operating under genuine ISO 17025 rigor can answer this with a specific value
5. Confirm sample turnaround commitments and whether high-volume periods affect those timelines

A lab that answers all five fluently, with documentation readily available, is demonstrating the kind of technical depth ISO 17025 is designed to ensure. A lab that hedges on any of them is telling you something.

Most brands don’t run into trouble because they made a deliberate decision to use poor analytical data. They get into trouble because they operated on assumptions — that “accredited” means comprehensive, that GMP testing covers the same ground as ISO 17025 testing, that a professional-looking COA means a validated method was used. Those assumptions are understandable. They’re also exactly the ones that tend to surface at the worst possible moments.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA Audit Readiness and 21 CFR Compliance Strategy — Aurora TIC helps regulated manufacturers prepare for FDA inspections, validate software systems, and navigate 21 CFR requirements.
• Raw Material Testing and Supplier COA Verification — Ayah Labs provides contract testing and supplier qualification services for ingredient buyers sourcing globally.
• Health Canada NHP Testing and Canadian GMP Compliance — Androxa supports Canadian supplement brands with NHP product licensing and accredited third-party testing.