Quality Records

What a Certificate of Analysis Can—and Cannot—Tell You

How to read the sample, method, specification, result and scope before treating a certificate as proof.

What a Certificate of Analysis Can—and Cannot—Tell You

This article is general educational information and is not personal medical advice.

A certificate of analysis can be valuable. It can also be used as a decorative object that asks the reader to trust the word “tested” without showing what was tested, how it was tested or which lot the result belongs to.

The document becomes useful when its scope remains visible.

What a certificate usually represents

A certificate of analysis, often shortened to CoA, typically reports specified test results for a defined sample. Depending on the material and document, it may include:

  • product or material name;
  • lot or batch identifier;
  • sample or report identifier;
  • tests performed;
  • methods or method references;
  • acceptance specifications;
  • observed results;
  • dates;
  • laboratory or issuing organization;
  • review or approval information.

The exact format varies. The meaning depends on the connection between the document, the sample and the finished product.

Start with the identity of the sample

Before reading the result, establish what the laboratory actually received.

Ask:

  • Is this a raw material, in-process sample or finished product?
  • Is the product name unambiguous?
  • Is the lot number present?
  • Does the lot match the product in question?
  • Who collected or submitted the sample?
  • Was the sample representative of the lot?

A report can be genuine and still be irrelevant to a different lot or a different stage of production.

Read the specification beside the result

A number without an acceptance criterion is difficult to interpret.

The result is what the test reported. The specification is the defined acceptance range or limit. A useful record presents them together and makes the units clear.

“Pass” is less informative than a result shown against its specification. A pass/fail statement may still be appropriate, but the underlying method, limit and measured value should remain available where they can lawfully and responsibly be published.

The method matters

Different methods can measure different things, have different detection limits and perform differently in different matrices.

A document should identify the method or a traceable method reference. The reader should also know whether the laboratory is competent for that method and sample type.

ISO/IEC 17025 is an international standard addressing the competence, impartiality and consistent operation of testing and calibration laboratories. Accreditation can increase confidence in a laboratory’s systems and scope, but it does not mean that every possible test performed by that laboratory is automatically covered. The accreditation scope still matters.

One certificate does not describe the whole quality system

A CoA can report results. It does not by itself prove:

  • that every unit in the lot is identical;
  • that the sample was collected without bias;
  • that the formulation matches every label statement;
  • that manufacturing controls were followed;
  • that deviations were resolved appropriately;
  • that the product is effective;
  • that every possible contaminant was tested;
  • that a result from one lot applies to another lot;
  • that long-term stability has been established;
  • that every marketing statement is justified.

Those questions require other records and controls.

“Third-party tested” is incomplete

The phrase can sound reassuring while leaving the important details unanswered.

A more useful disclosure states:

  • which laboratory performed the work;
  • whether it was independent from the manufacturer;
  • which sample and lot were tested;
  • which tests were performed;
  • which methods and specifications applied;
  • when the work occurred;
  • what the result showed;
  • what the document does not cover.

Independence is relevant, but an independent laboratory can still receive an unrepresentative sample or use a method outside the relevant accreditation scope. Third-party status is not a substitute for a complete chain of custody and an appropriate method.

Testing should be relevant to the product

There is no universal test panel that answers every quality question for every supplement.

The appropriate checks depend on factors such as:

  • ingredient identity;
  • dosage form;
  • known contaminant risks;
  • microbiological risk;
  • manufacturing process;
  • stability;
  • target market;
  • finished-product specifications.

Testing everything imaginable is not the same as controlling the risks that actually matter. A defensible program explains why a test was selected and how the result fits the release decision.

The release decision is broader than the certificate

FDA dietary-supplement CGMP requirements describe a broader production and quality-control system, including specifications, master manufacturing records, batch production records and quality-control review.

A finished-lot release should therefore connect at least:

  1. approved formula and label;
  2. component and product specifications;
  3. production and packaging records;
  4. deviations and corrective actions where relevant;
  5. test or examination results;
  6. quality review and release status.

The CoA may be one part of that chain. It is not the chain itself.

A practical certificate checklist

Before treating a CoA as useful evidence, look for:

  • Sample: What exactly was tested?
  • Lot: Which batch does it belong to?
  • Method: How was the test performed?
  • Specification: What result was required?
  • Result: What was measured, in which units?
  • Laboratory: Who performed the work, and is the relevant scope clear?
  • Date: When was the sample tested and the report issued?
  • Scope: Which quality questions remain outside this document?

If the certificate cannot be connected to the finished lot, its value to the customer is limited.

What this article does not establish

This article does not determine whether a specific certificate, laboratory or product is adequate. That requires review of the complete document, accreditation scope where relevant, sampling, methods, specifications and the wider production record.

Sources and further reading