A plain-English walkthrough of every section of a COA — what the numbers mean, how to spot red flags, and what retailers and regulators actually look for.
A Certificate of Analysis (COA) is a document issued by a testing laboratory that reports the results of analytical tests performed on a specific batch of a product or raw material. It is the primary quality document in the dietary supplement, cosmetic, and food industries.
A COA is not a guarantee of safety. It is a snapshot of one batch, tested at one point in time, by one laboratory, using one set of methods. Understanding what it does and does not tell you is the difference between using it as a compliance tool and treating it as a rubber stamp.
Below is a representative COA structure with the key sections labeled. The annotations explain what to look for in each field.
ND means "not detected" at the method's detection limit — always ask what that limit is.The issuing laboratory's name, address, and accreditation status should appear on every COA. ISO 17025 accreditation means the laboratory has been independently assessed for technical competence and measurement traceability. It is the international standard for testing laboratories.
What to verify: Look for an accreditation number and the name of the accreditation body (A2LA, NVLAP, Perry Johnson Laboratory Accreditation). You can verify accreditation status directly on the accreditation body's website.
Every COA must uniquely identify the sample tested. The lot or batch number on the COA must match the physical product. The date of testing matters for time-sensitive specifications (e.g., microbiology results are only valid for a defined period after testing).
What to verify: Lot/batch number matches physical label. Date tested is recent enough to be valid for your intended use. Quantity tested is representative of the batch.
The method column tells you how the test was performed. Named methods (USP <232>, AOAC 999.10, EPA Method 3051A) are standardized and reproducible. "In-house method" without further specification is a yellow flag — ask for the method validation data.
Common methods to recognize: ICP-MS (heavy metals), HPLC-UV/MS (potency/identity), USP <61>/<62> (microbiology), GC-MS (residual solvents, pesticides), ELISA (allergens, mycotoxins).
The specification is the acceptance criterion — the limit the result must meet. The result is the actual measured value. Always read both. A result of 0.08 ppm for lead against a specification of ≤ 0.5 ppm is a clear pass. A result of 0.49 ppm against the same specification is technically a pass but warrants closer attention — it is close to the limit and leaves no margin for measurement uncertainty.
Measurement uncertainty: Accredited labs report results with an associated uncertainty (e.g., ± 0.02 ppm). A result of 0.49 ± 0.02 ppm against a 0.5 ppm limit may not actually be a pass when uncertainty is considered.
| Test | What It Measures | Typical Method | Why It Matters | Status |
|---|---|---|---|---|
| Identity / Assay | Is the ingredient what it claims to be? At what potency? | HPLC, IR, DNA barcoding | Adulteration and mislabeling are the most common supplement violations. A 95% curcuminoid extract must actually contain 95% curcuminoids. | Required |
| Heavy Metals (Pb, Cd, As, Hg) | Concentration of toxic metals in µg/g (ppm) | ICP-MS / USP <232> | Botanical ingredients accumulate metals from soil. California Prop 65 sets strict limits. Amazon requires heavy metal testing for supplements. | Required |
| Total Aerobic Count (TAC) | Total bacterial load in CFU/g | USP <61> | Indicates overall microbial contamination. Limits vary by product type: oral supplements typically ≤ 10,000 CFU/g. | Required |
| Yeast & Mold | Fungal contamination in CFU/g | USP <61> | High yeast/mold counts indicate poor manufacturing hygiene or improper storage. Limit typically ≤ 1,000 CFU/g for oral supplements. | Required |
| Pathogen Testing | Absence of Salmonella, E. coli, Staph. aureus | USP <62> | Pathogens in supplements cause illness and FDA enforcement actions. Must be absent in a defined sample size (typically 10g or 25g). | Required |
| Pesticide Residues | Agricultural chemical residues in ppm | GC-MS/MS, LC-MS/MS | Botanical ingredients may carry pesticide residues from cultivation. EU MRLs are significantly stricter than US limits. | Recommended |
| Mycotoxins | Fungal toxins (aflatoxins, OTA) in ppb | ELISA, LC-MS/MS | Grains, nuts, and some botanicals are susceptible to mycotoxin contamination. FDA limits aflatoxins to ≤ 20 ppb in food. | Recommended |
| Residual Solvents | Solvent residues from extraction processes | GC-HS / USP <467> | Required for extracts produced using organic solvents. ICH Q3C classifies solvents by risk; Class 1 solvents must be absent. | Recommended |
| Stability Testing | Potency and physical characteristics over time | ICH Q1A guidelines | Required to support expiration date claims. Without stability data, an expiration date is not defensible. | Recommended |
| Preservative Efficacy (PET) | Effectiveness of preservative system against microbial challenge | USP <51>, ISO 11930 | Required for cosmetics and liquid supplements. Demonstrates the product resists microbial growth during consumer use. | Cosmetics |
Amazon requires third-party COAs from ISO 17025-accredited or cGMP-certified laboratories for dietary supplements. The COA must cover: identity, potency, heavy metals (Pb, Cd, As, Hg individually), and microbiology (TAC, yeast/mold, pathogens). Amazon may request COAs at any time and can suspend listings if documentation is inadequate. Supplier-issued COAs are not accepted — the testing must be performed by an independent third party.
Under 21 CFR Part 111, dietary supplement manufacturers must establish specifications for every component and finished product, and must verify that those specifications are met before release. The regulation requires that testing be conducted by a qualified laboratory and that records be maintained for at least one year beyond the product's shelf life. FDA inspectors will review COAs during facility inspections and can issue 483 observations or warning letters if documentation is inadequate.
Prop 65 requires businesses to provide a clear warning before knowingly exposing Californians to chemicals on the Prop 65 list. For supplements, lead is the most commonly triggered chemical. The Maximum Allowable Dose Level (MADL) for lead is 0.5 µg/day — significantly stricter than the USP <2232> oral PDE of 250 µg/day. A COA showing lead at 0.4 ppm in a 1,000 mg capsule may pass USP limits but still trigger a Prop 65 warning requirement. Brands distributing in California need to calculate consumer exposure from the COA result, not just check pass/fail against the specification.
EU cosmetics require a Cosmetic Product Safety Report (CPSR) that includes stability data, microbiological quality specifications, and preservative challenge test results. The COA from the testing laboratory is a key component of the Product Information File (PIF) that must be maintained for 10 years after the last batch is placed on the market. The responsible person must be able to provide the PIF to competent authorities upon request.
Qalitex Laboratories works with supplement brands, cosmetic companies, and Amazon sellers to design testing programs that meet their specific compliance requirements. ISO 17025 accredited. 48-hour turnaround on standard panels.
Talk to Our Lab Team →