How to Verify a Peptide COA: Match the Lot, Report and Laboratory

How do you verify a peptide certificate of analysis?

Do four checks, in this order:

1. Lot match: the lot or batch number on your label is the one on the report.
2. Report authenticity: the issuing lab confirms that report ID, with the same results, through its own channel.
3. Lab check: the lab exists and performs this testing, and any accreditation claim covers the methods used.
4. Results read correctly: you know which results are identity, purity or quantity, and which tests were not done.

If any check fails or can’t be completed, record it as unverified. That is different from a failed result.

How do you match the current lot to the report?

• Read the lot or batch number on the physical label or packing slip, not just the product page.
• Find the same number on the COA. Watch for near-misses such as “BPC-2409A” vs “BPC-2409”.
• Check that the product name and nominal amount on the report match your vial (e.g. 10 mg vs 5 mg).
• Compare the test date to the lot’s manufacture or receipt date. A report dated long before the lot existed can’t describe it.
• Be cautious with “representative” COAs: one report shown for every lot, or a product page with no lot number at all. That is reference information, not evidence for your vial.

How do you check the report ID with the issuing lab?

• Find the lab’s official website yourself, by search or from our testing-facility directory. Don’t rely only on a link printed on the PDF.
• Use the lab’s own lookup tool if it has one. Many peptide testing labs publish one, e.g. Vanguard Laboratory, Krause Analytical, Testides Analytical and Aegean Labs (links go to our profiles, which cite each lookup page).
• Compare the lab’s record field by field: client name, sample description, lot, test date and each result.
• No lookup tool? Email the lab using the address on its own site and ask it to confirm the report ID. Some labs won’t disclose client results, so record what they did confirm.
• Red flags: the lab can’t find the ID, the results differ, the lab’s logo or address doesn’t match its website, or the PDF metadata shows recent editing.

What do identity, purity and quantity results mean?

Method validation matters. ICH Q2(R2) sets out the characteristics (specificity, accuracy, precision, range) that make an analytical result fit for purpose (ICH Q2(R2)). A COA that names no method, no reference standard and no acceptance criterion gives you very little to check.

Labeled example: reading a COA

• Lot: your vial must say BPC-2409A. BPC-2409 is a different lot.
• Report ID: confirm EXA-24-10871 on the lab’s own lookup page and compare every result.
• Results: 99.1% is purity, not dose. The vial measured 9.4 mg, not 10 mg. Identity “conforms” is a mass match, not a full structural proof.
• Gaps: endotoxin was not tested. That is unknown, not a pass or a fail.

What are the sampling limits of a COA?

A COA reports on the vial or vials the lab received. It describes the whole lot only if the sample was representative and the lot is uniform. In pharmaceutical manufacturing, sampling plans and testing frequency are defined under good manufacturing practice (21 CFR 211.165). Even there, a manufacturer may rely on a supplier’s COA only with at least a specific identity test of its own and periodic validation of the supplier’s results (21 CFR 211.84). One third-party test of one vial gives far less assurance than that.

Ask: was the sample taken by the supplier or by an independent party? How many vials were tested? Was the sample bought blind from retail stock?

Why is a COA not a human-use safety certificate?

A COA reports analytical results. It does not evaluate safety, dosing, sterility assurance, stability or clinical effect, and it is not regulatory approval. Pharmacies compounding under section 503A must also source bulk substances from FDA-registered establishments with a valid COA (FDA). That framework exists because a COA alone is not enough. Products sold for research use are not approved for human use, whatever their COA shows.

Accreditation also has limits. ISO/IEC 17025 accreditation recognises competence for a defined scope of methods (ISO). Check the accreditor’s own directory, for example A2LA (directory), or one of the signatories listed by ILAC (ILAC). Confirm that the certificate is current and that its scope includes the test on your report.

COA verification checklist

1. Lot/batch on the vial label = lot on the COA
2. Product name and nominal amount match
3. Test date is plausible for that lot
4. Lab found independently; contact details match its website
5. Report ID confirmed by the lab (lookup or email); results identical
6. Identity, purity and quantity each reported, with method named
7. Untested items noted as unknown, not passed
8. Accreditation claim checked against the accreditor’s current scope
9. Who sampled, and how many vials, is known or marked unknown
10. Saved copy of the report and lookup result with the date checked

On Peptide Ad Lab supplier profiles we separate supplier-provided COAs from lab-confirmed records and show the date we checked. See our ranking methodology and the testing-facility methodology. Companies publishing COAs should also read how to publish testing evidence without creating claims risk.

Sources

• ICH Q2(R2) Validation of Analytical Procedures (2023)
• 21 CFR 211.84, Testing and approval or rejection of components
• 21 CFR 211.165, Testing and release for distribution
• FDA, Bulk Drug Substances Used in Compounding Under Section 503A
• ISO, ISO/IEC 17025 Testing and calibration laboratories (page blocks automated access; cited for the standard’s scope)
• ILAC MRA signatories · A2LA accredited organization directory

Checked 19 October 2026; source links and the linked lab profiles rechecked 28 October 2026. Lab lookup pages are cited on each linked PAL profile.

Frequently asked