Supplement Certificate of Analysis: What It Should Show and How to Read One
A certificate of analysis is the lab report behind the amounts on your label. If you file it without reading it, a short or contaminated batch can reach Amazon with your name on it.
Short answer
A supplement certificate of analysis (COA) is a lab report for one specific lot. It should name the product and lot number, each test performed, the method, the specification limit and the actual numeric result, plus the lab, report date and approval. Good COAs cover identity, potency against the label, heavy metals and microbes. FDA's cGMP rule requires methods, limits and actual results on supplier COAs you rely on.
What a Certificate of Analysis Is and Who Issues It
A certificate of analysis (COA) is a document that reports lab test results for one specific lot of an ingredient or finished product, compared against the specifications that lot was supposed to meet. FDA's cGMP compliance guide (cGMP means current Good Manufacturing Practice, the federal rule for how supplements are made) describes a COA as a document from the supplier of a component that records certain characteristics of that component (FDA: cGMP Small Entity Compliance Guide). In practice, brands see COAs from three places.
Ingredient suppliers send a COA with each lot of raw material they ship to your manufacturer. Your manufacturer issues a COA for each finished batch of your product, based on its own lab or a contract lab. Independent labs issue COAs when you or an Amazon-authorized testing company send them a sample. These three are not interchangeable, and mixing them up is the most common way a brand ends up relying on the wrong report.
A COA is evidence about one lot, not a guarantee about your brand. BSCG, a testing and certification company, puts it this way: a specification sheet lists what ought to be in a product, while lab testing documents what is actually there (BSCG: How to read a supplement COA, Sept 2026). BSCG sells testing and certification, so it has a stake in brands testing more, but the distinction holds up. For how COAs fit into choosing a plant, read our guide to vetting a supplement manufacturer.
Raw Material COAs vs Finished Product COAs
The cGMP rule at 21 CFR 111.75 sets different rules for the two. For each dietary ingredient, the manufacturer must run at least one appropriate test or examination to verify identity before using it, unless FDA grants an exemption by petition. A supplier's COA cannot stand in for that identity test.
For other components, and for other specifications such as purity, the manufacturer may rely on a supplier's COA, but only if it first qualifies the supplier by confirming the supplier's results with its own tests, keeps documentation of that qualification, periodically re-confirms the COA, and has quality control approve the basis. The COA itself must include a description of the test methods used, the limits of the tests, and the actual results. A COA without those three items does not meet the rule's conditions for reliance.
For finished batches, 111.75(c) requires the manufacturer to verify that the product meets its specifications for identity, purity, strength, composition and contaminant limits, using a sound statistical sampling plan or testing every batch. Those specifications come from 21 CFR 111.70, which requires the manufacturer to set them for every product. The finished product COA is how that verification shows up on paper.
What a Supplement COA Should Show
No federal form dictates how a finished product COA must look. The fields below combine the cGMP rule's three must-haves for supplier COAs with the checklist BSCG publishes for judging whether a COA is usable (BSCG, Sept 2026). If a COA is missing any of them, ask for the full lab report.
Identification
Product name, SKU if available, lot or batch number and a sample description. The lot must match the bottles you are selling.
Lab and requester
The testing lab's name and address, who requested the test, and whether the lab is independent, in-house, the supplier's or the manufacturer's.
Dates
Sample received, testing completed, report issued, and any retest or expiration date. BSCG suggests extra review for COAs older than six months.
Test, method, specification and result
For every line: what was tested, how (method name or a reference such as a USP chapter), the acceptance limit, and the actual numeric result with units.
Detection limits
The limit of detection or quantitation for results reported as not detected or below a limit. A result of not detected only means nothing was found above what that lab can measure.
Approval
An authorized signature or electronic approval and a report number. Draft reports can change and should not be treated as final.
Which tests belong on a finished product COA. BSCG lists identity, potency or label claim, microbial load, heavy metals, pesticides and residual solvents as routine, with banned-substance screening for sports products. Not every product needs every test. Botanicals, powders and moisture-sensitive formulas need closer microbial review, and plant, mineral and marine ingredients need closer heavy metals review. Your manufacturer's specifications should say which tests apply to your product, and the COA should report against those specifications.
Potency against the label. FDA judges labeled amounts using the rules in 21 CFR 101.36, which point to the nutrient tolerances in 101.9(g). Added vitamins and minerals must be at least 100% of the labeled amount. Naturally occurring ones must be at least 80%. The same class rules apply to other dietary ingredients such as botanicals, and reasonable excesses are acceptable under cGMP. So a potency result of 92% of a labeled added vitamin is a problem, even if the COA marks it pass against a loose internal spec. Our Supplement Facts panel guide explains how those labeled amounts are set.
How to Read a Supplement COA in Eight Steps
Match the lot first
Put a bottle next to the COA. The product name and lot number must match exactly. A perfect COA for a different lot tells you nothing about the inventory you are about to ship.
Check who tested it
Independent lab, manufacturer's lab, or the ingredient supplier? Look for ISO/IEC 17025 accreditation, the international standard for the competence, impartiality and consistent operation of testing labs, and check that the test is within the lab's accredited scope.
Confirm it is a finished product COA
If every line is about a single raw ingredient, it is a supplier COA. You still need finished product results for your blend.
Read each result against its specification
Do not stop at pass. Compare the number to the limit and to your label. Watch units: mg, mcg, ppm, ppb, CFU/g and percent are not interchangeable.
Check potency against the label tolerance
Added vitamins and minerals at 100% or more of the label, naturally occurring at 80% or more. A low result today can drop further by the end of shelf life.
Convert heavy metals to a daily amount
Multiply the result in micrograms per gram by the grams per serving and the maximum servings per day on your label. Compare that daily number to the limit your specification uses.
Look at the detection limits
A not detected result is only useful if the lab's detection limit, converted to a daily amount, sits below your limit. Ask the lab for the limit of quantitation in your product type.
Check the date and approval
Final, signed, dated, with a report number. If anything looks edited, cropped or partial, ask the lab to confirm the report directly.
COA Red Flags That Should Stop a Shipment
Pass with no numbers
A page of pass marks without methods, limits and actual results does not meet the cGMP rule's conditions for relying on a supplier COA, and tells you little about a finished product.
Lot number does not match
Or no lot number at all. Each COA covers only the lot it names.
Results with no units or detection limits
BSCG gives the example of a lead result of under 1 ppm from an unnamed method. At a 30-gram serving taken twice a day, that detection limit could hide up to 60 micrograms a day, twelve times the USP benchmark.
Out-of-spec result, released anyway
In a June 2024 warning letter, FDA cited a manufacturer whose quality control released a batch made with a component whose COA showed an out-of-specification result, and the component was used before it was tested (FDA warning letter, June 2024).
Only the supplier's raw material COA
No finished product data for your blend. The identity of each dietary ingredient also has to be tested by the manufacturer, not taken from the supplier's paper.
Edited, cropped or draft reports
Amazon's policy says documents must be authentic, unmodified and not computer or AI-generated. Ask the lab to confirm any report that looks altered.
If you find one of these, do not argue with the manufacturer about the document. Ask for the full lab report, and if the gap is real, send retained samples from that lot to an independent ISO/IEC 17025 accredited lab before the inventory ships. Our list of questions to ask a supplement manufacturer includes how to ask for COAs up front, so this does not become a surprise after you have paid.
What Amazon and Its Testing Providers Look For
As of October 2026, you do not send your COA to Amazon yourself. Amazon's direct product validation page says sellers no longer submit documents directly. You submit a test request form in Account Health and send existing documents or samples to an authorized testing, inspection and certification (TIC) provider, which reports to Amazon. Results from an accredited lab that is not on Amazon's list must be validated by an authorized provider (Amazon: Direct product validation). Amazon's US list for dietary supplements names eight providers: Certified Laboratories, Cotecna, Eurofins, Intertek, Merieux NutriSciences, NSF, SGS and UL. Amazon updates the list monthly in Seller Central.
Amazon's dietary supplements policy asks every supplement for a current cGMP certificate from an accredited third party. Products for bodybuilding, joint health, sexual enhancement, sports nutrition and weight management must also be tested for heavy metals and microbes, possibly pesticides, label amounts within the 101.36 and 101.9(g) tolerances, and known adulterants under NSF/ANSI 173. So for those five categories, expect the testing provider to look for those exact tests, with numbers, on the finished product. Documents must be authentic and unaltered, images must show the product is the same one tested, and a failed test or failed document review deactivates the listing right away.
Amazon's policy does not state how old a COA can be. BSCG's suggestion of extra review past six months is a reasonable internal rule, and SGS, one of the authorized providers, says verification is required every year for each ASIN, or sooner if the formula, label or manufacturing site changes. Our Amazon supplement testing requirements page covers timelines and published cost ranges, and our Amazon dietary supplement policy page covers the listing rules.
When to Get Help and When to Do It Yourself
Do it yourself
Reading a COA is a skill any founder can learn with the eight steps above. If you have one or two SKUs outside Amazon's five testing categories and a manufacturer that sends full lab reports, you do not need to pay anyone to review them.
Get a quality professional
If results are borderline, the method looks wrong for your product type, or the manufacturer will not share full reports, bring in a quality consultant or an independent lab. That is a lab and quality question, not a marketing one.
Get a regulatory attorney
For questions about whether a short result makes a product misbranded, or what to do about inventory already sold, talk to a regulatory attorney.
How Evolve helps. We are not a lab. Our work starts where the lab report ends: making the Amazon listing match it. Inside a brand management plan we check that your title, bullets, images and A+ content match the label and the COA amounts, keep TIC deadlines on the calendar, and rebuild listings after a verification issue. Plans run from Brand Support at $750 a month for 5 hours to Full Brand Management at $3,600 a month for 40 hours, paid upfront and month to month. One-time listing optimization is $495 per listing, and you can start with a free Amazon listing audit. Every price is on our pricing page.
If you want us to compare a COA, your label and your current listing for mismatches, email Ian at [email protected] or call or text 719-257-3557. See how we work with supplement companies on the brand management for supplement brands page, or browse the supplement brand marketing hub for the rest of the guides.
Where These Facts Come From
eCFR: 21 CFR 111.75, Determining whether specifications are met
ecfr.gov · Open source →
eCFR: 21 CFR 111.70, Specifications you must establish
ecfr.gov · Open source →
eCFR: 21 CFR 101.36, Nutrition labeling of dietary supplements
ecfr.gov · Open source →
FDA: Small Entity Compliance Guide, Dietary Supplement cGMP
fda.gov · Open source →
FDA: Warning letter to a supplement firm, Dec 23, 2025
fda.gov · Open source →
FDA: Warning letter to a supplement manufacturer, June 12, 2024
fda.gov · Open source →
Amazon Seller Central: Dietary supplements policy
sellercentral.amazon.com · Open source →
Amazon Seller Central: Direct product validation (TIC services)
sellercentral.amazon.com · Open source →
BSCG: How to read a supplement COA, results and red flags (sells testing)
bscg.org · Open source →
BSCG: Heavy metals in supplements and applicable limits (sells testing)
bscg.org · Open source →
OEHHA: Lead, Proposition 65 safe harbor levels
oehha.ca.gov · Open source →
SGS: Amazon verification services for dietary supplements
sgs.com · Open source →
ISO: ISO/IEC 17025 testing and calibration laboratories
iso.org · Open source →
About the Author
Ian Smith
Founder, Evolve Media Agency
Ian has run Evolve Media Agency since 2017 and has sold on Amazon since 2015. He and Megan run brand management, launches, PPC and in-house photo and video for Amazon, Shopify and TikTok Shop brands, including supplement brands, from Colorado. Questions about this page go straight to him at [email protected].
Common Questions
What is a certificate of analysis for supplements?
Who issues a supplement COA?
What should be on a supplement COA?
How old can a COA be for Amazon?
Can I send my manufacturer's COA directly to Amazon?
What does ND mean on a COA?
What are the biggest red flags on a supplement COA?
Can Evolve review my COA?
Make the Label, the Lab Report and the Listing Agree
Book a free 30-minute call and bring your COA, label and ASIN. We will show you where Amazon is likely to find a mismatch.
Rather email? Write Ian at [email protected]. Call or text 719-257-3557. Watch our YouTube channel, grab the free Ecom Profit Box guides, or join the newsletter.
Want Ian to Look at Your Brand?
Tell us what you sell and where you are stuck. Ian replies within one business day, and you get an email right away with a link to book a free 30-minute call.
- Brand management, PPC, listings, launches and content
- Amazon, Shopify and TikTok Shop brands
- A real reply from Ian, not a sales bot
Rather talk now? Call or text 719-257-3557 or pick a time on Calendly.