What Is a Certificate of Analysis?

A certificate of analysis is a test report for one specific batch of material. Somebody made a quantity of something, took a small sample out of it, ran some measurements on that sample, and wrote down what the measurements found. The page that comes out the other end is the certificate. That is genuinely the whole idea.

There are more technical explanations of these documents around, written for people who already run laboratories and already know what a chromatogram is. This is not one of those. This is the version for somebody who has just seen the words "COA available" on a page, has no idea what is being offered, and would rather not pretend otherwise.

By the end of this you should be able to open one, understand roughly what you are looking at, know which single line on it matters most, and — just as usefully — know the long list of questions it was never built to answer.

What is it, in everyday terms?

Picture a bakery. On a Tuesday morning it mixes one big tub of dough and turns it into four hundred loaves. That single making-session is a batch. Somebody takes two loaves off the rack, weighs them, checks the crumb, measures the salt, and writes the results on a form. That form describes Tuesday's four hundred loaves. It says nothing whatsoever about Wednesday's.

A certificate of analysis works exactly like that form. Three words carry most of the meaning, so it is worth defining them where they sit. A batch is one making-session. A sample is the small amount taken out of the batch to be tested. A test is a single measurement made on that sample, using a named piece of equipment and a named method.

Which gives us the sentence this whole article turns on. A certificate is a document about a batch — not about the seller, not about the substance in general, and not about the container in front of you unless the two batch numbers match. People often read one as a seal of approval, the way you read a hygiene rating in a restaurant window. That is the wrong shape entirely. A hygiene rating is about the establishment. A certificate is about one tub of dough on one Tuesday.

Who writes one, and who pays for it?

This part is rarely spelled out, and it changes how much a certificate is worth. There are broadly three arrangements, and they are not equally strong.

• The manufacturer tests its own material and writes its own certificate. This is the most common arrangement by a wide margin, and the cheapest. The results may be perfectly accurate. They are also self-reported, in the way a shop's own claim about its own opening hours is self-reported.
• A separate testing laboratory is paid to run the tests and issue the certificate. That laboratory is a different organisation from the seller, with its own name and its own reputation to lose. This is the arrangement usually described as third-party or independent testing.
• A buyer pays a laboratory directly to test material they already hold. This is much rarer, costs real money, and is the only version in which the person relying on the result is also the person who commissioned it.

It is worth sitting with the middle case, because the word "independent" does a lot of quiet work there. A third-party laboratory is independent in the sense that it is a separate company. It is not independent in the sense of having no relationship with the seller — the seller chose it and paid it. That is still a real improvement on self-reporting, for a structural reason rather than a moral one. The laboratory has many other customers and no particular stake in this one batch.

Some laboratories go further and hold accreditation, meaning an outside body has assessed them against a published standard and keeps reassessing them. The international standard for this is ISO/IEC 17025, which sets requirements for staff competence, equipment calibration, method validation and reporting 1. That is a stronger claim than simply being a separate company.

One thing is worth being blunt about, because it surprises people. For material sold for laboratory research rather than as a medicine, none of this is compulsory. Producing a certificate is voluntary. Using an outside laboratory is voluntary. Accreditation is voluntary. Every certificate you see exists because somebody chose to pay for it.

What does a certificate usually report?

Certificates vary in layout and detail, but a fairly standard set of lines turns up on most of them. Here is that set, with what each line is actually trying to say.

Two pieces of equipment show up constantly, and you do not need to understand either one to read a certificate. HPLC — high performance liquid chromatography — is a machine that pushes a mixture through a packed column so its components come out separately and can be measured one at a time. Mass spectrometry weighs molecules very precisely, which is how it answers the identity question. When a certificate names a method beside a number, that is a good sign. A number with no method beside it is a claim rather than a measurement.

It is also worth knowing that identity, purity and content are treated as genuinely separate tests in formal specifications, rather than three ways of saying the same thing 2. A certificate that reports only one of them has answered only one of the questions, however confidently it is laid out.

What can a certificate not tell you?

This is the half of the subject that almost never gets written down, and it matters more than the half that does. A certificate has a defined edge, and outside that edge it says nothing at all.

• It cannot tell you anything about the container in front of you, unless the batch identifiers match. A certificate for a different batch is a document about somebody else's material.
• It cannot tell you that anything is safe. Safety in a person is established by trials in people, not by a purity figure. No measurement on a certificate substitutes for that.
• It cannot tell you material is sterile or free of bacterial residue, unless those specific tests appear on it. Purity and sterility are unrelated questions with unrelated methods.
• It cannot tell you the document itself is genuine. A certificate is usually a file, and files can be copied, edited or reused across unrelated batches.
• It cannot tell you what happened after the sample was taken. Material sits in warehouses and spends weeks in transit. The certificate describes a moment that has already passed.
• It cannot tell you the sample was representative. If a batch was mixed unevenly, the top of the drum and the bottom are not the same material.

None of that is a reason to ignore certificates. It is a reason to read them for what they contain rather than for what their presence implies. And the gap between those two things is not hypothetical. When researchers have tested peptide products obtained outside the regulated supply chain, they have repeatedly found that the amount of material in a container did not match the label 3. A 2024 study bought products from online sellers that asked for no prescription and found bacterial endotoxin — a substance released from bacteria that the immune system reacts to strongly — in tested containers 4.

Those studies examined seized or deliberately purchased samples, so they cannot tell you how common any of it is across a whole market. What they do establish is narrower and still worth carrying: the gap between a label and its contents is real, documented, and measured by named groups using published methods.

Why the batch number matters, and where to find the document

Everything above funnels down to one line on the page. Of all the things printed on a certificate, the batch number is the one that decides whether the rest of it means anything.

Here is why. Every other figure on the document is a claim about some quantity of material. The batch number is the only thing that says which quantity. Take it away and the purity figure, the identity result and the test date are all floating free — accurate, perhaps, about something nobody can now identify.

Think of it as the difference between a set of exam results with a name at the top and the same set of results with the name torn off. Not one mark has changed. What they establish has collapsed completely, because nobody can say whose they are.

So a certificate with no batch number is not a slightly weaker certificate. It is a document that cannot be attached to anything. And a certificate whose batch number does not match the container it arrived with is describing different material, however impressive its numbers look.

Which raises the practical question of where these documents actually live. Usually in one of four places. Some sellers publish certificates as downloadable files on each product page. Some keep a library organised by batch. Some send one on request by email. Some pack a printed copy in with the shipment.

When you have one in front of you, the sequence is short and needs no chemistry at all. Find the batch number on the document. Find the batch number on the container. Check that they are the same string of characters, not merely similar ones. Check the dates, so you know the document is not describing a run from two years ago. Then look at what was actually measured — and, more revealingly, at what was not.

That is the honest use of a certificate of analysis. It is a piece of evidence about a defined quantity of material, produced by somebody at a particular moment, with a clear edge to what it covers. Read inside that edge it is genuinely informative. Read as a badge, it turns into a decoration — and the entire reason the document exists is that it was meant to be the opposite of one.