COAs and Third-Party Testing: Why They Matter

a certificate of analysis, or COA, is a lab report for a specific lot of material. it says what was tested, by what method, and what the result was. that is all it is, and that is why it is valuable: it is the one document in this industry that is not marketing.

for a peptide business, per-lot third-party COAs do more work than almost any other single investment. they support your regulatory position, they satisfy processors and platforms, they are your first line of defense in a liability claim, and they are the only way you actually know what you are shipping. this article covers what to test, how to read the result, and where the industry cuts corners.

general information only, not legal advice. testing requirements vary by product category and jurisdiction, and your counsel should confirm what applies to you specifically.

what a COA proves and what it does not

a COA proves that on a given date, a specific lab, using a specific method, measured a specific result on a specific sample. that is a narrow claim, and its usefulness depends entirely on the integrity of each of those elements.

• —it does not prove anything about a different lot.
• —it does not prove anything about safety or suitability for any use.
• —it does not prove the sample tested is representative unless sampling was done properly.
• —it does not mean much if the lab has a financial relationship with the manufacturer.
• —it does not stay true forever, since degradation is real and storage matters.

the honest framing is that a COA is evidence of diligence and a snapshot of quality, not a guarantee. operators who oversell what a COA means end up making claims they cannot support, which is its own compliance problem.

the tests that actually matter for peptides

the specific panel depends on the compound and what you are selling it for, but the common elements look like this.

1. 1.identity confirmation. mass spectrometry is the usual approach, confirming the molecular weight matches the expected compound. without identity, purity is meaningless.
2. 2.purity. high performance liquid chromatography is the standard, typically reported as a percentage of total peak area. this tells you how much of the material is your target compound versus related substances.
3. 3.water and residual solvent content where relevant, since lyophilized material carries moisture and manufacturing residues that affect actual peptide content.
4. 4.peptide content or net peptide, which differs from chromatographic purity and is often the number that actually matters for potency.
5. 5.heavy metals and elemental impurities, where the manufacturing process or source material warrants it.
6. 6.microbial and endotoxin testing where the product's nature makes contamination a meaningful risk.

the distinction between HPLC purity and net peptide content trips up a lot of buyers. a lot can be 99 percent pure by HPLC and still contain a lower percentage of actual peptide by mass, because water and counterions make up the rest. suppliers who report only the flattering number are telling you something about how they operate.

how to read a COA without being fooled

• —check the lab name and confirm it is independent of the manufacturer. an in-house report is a manufacturing record, not third-party testing.
• —check that the lot number on the COA matches the lot number on the vial you actually received.
• —check the test date and make sure it is recent relative to your lot's manufacture.
• —look for the actual chromatogram and spectra, not just a summary table. a COA with no underlying data is an assertion.
• —check that methods are named specifically, not described as proprietary.
• —be suspicious of round numbers and suspiciously identical results across lots. real testing produces variation.
• —check for a signature, a report number, and lab contact details you could actually call.

a PDF with a logo is not a COA. a COA has a lab, a lot, a method, a chromatogram, and a person who would answer the phone about it.

why publishing them is a business decision, not just a compliance one

many operators keep COAs behind an email gate or provide them only on request. publishing them openly, linked from each product page and organized by lot, does several things at once.

• —it signals good faith to regulators, which matters in a category where intent is the central question.
• —it materially helps payment processor underwriting and periodic review.
• —it differentiates you commercially in a market where buyers are actively suspicious.
• —it creates a durable record that you can point to years later if a lot is ever questioned.
• —it disciplines your supply chain, because a supplier who knows results will be public behaves differently.

WayyLess turned $4.3M in spend into $19.1M in revenue at 4.45 blended ROAS. spending at that level requires a payment stack that never blinks, and published testing is one of the things underwriters weigh when deciding whether to keep a merchant at scale.

building a testing program that holds up

1. 1.write a specification for each product: identity method, minimum purity, net peptide minimum, and any contaminant limits.
2. 2.make that specification contractual with your supplier, so out-of-spec material is a breach rather than a negotiation.
3. 3.test every lot, independently, before it is released for sale. not the first lot. every lot.
4. 4.keep retention samples from each lot in appropriate storage.
5. 5.maintain lot traceability from supplier through 3PL to the individual order, so a recall is executable.
6. 6.publish the COA and keep the archive live even after a lot sells out.
7. 7.define what you do when a lot fails, in writing, before it happens.

that last item is the one that separates real programs from theater. a testing program you would override under revenue pressure is not a testing program. decide the failure protocol while nothing is on the line.

the liability angle

if something goes wrong and you end up defending your business, the questions will be: did you know what you were selling, did you verify it independently, did you keep records, and did you act on bad results. a complete per-lot COA archive with a documented spec and a documented failure protocol answers all four.

the absence of testing answers them too, in the worst possible way. a business that never tested and sold a contaminated lot is not defending a mistake. it is defending a choice.

questions to ask a supplier before you buy

1. 1.which independent lab tests your material, and can i contact them?
2. 2.will you provide identity, HPLC purity, and net peptide content per lot?
3. 3.can i see the chromatograms, not just the summary?
4. 4.what is your process when a lot fails spec?
5. 5.can you support lot traceability and a recall if one is ever needed?
6. 6.will you contract to a written specification?

a supplier who is uncomfortable with those six questions has told you everything you need to know.