COA Requirements & Testing for Supplement Brands
A certificate of analysis is the only document standing between what your label claims and what is actually in the bottle. Most founders never learn to read one until something goes wrong.
Short answer
A valid certificate of analysis names the testing laboratory, the lot or batch number it applies to, the test method used for each result, the specification range, and the measured result against that range. If any of those five are missing, it is a summary sheet rather than a COA and it will not help you if a claim is challenged. For a botanical supplement you want identity and potency on every active — usually by HPLC or UPLC against a marker compound — plus heavy metals, microbial limits, and residual solvents on extracted inputs. Test the finished product, not only the incoming raw materials, because blending, compression, and storage all change what is in the unit. The most common failure is accepting the raw material supplier's COA as evidence about your finished product; they are different documents answering different questions, and only one of them describes what your customer swallows.
What has to be on a certificate of analysis?
Five fields make a COA a quality document rather than a marketing artifact. Require all five.
- Testing laboratory. Named, with accreditation where it exists. "Tested in-house" is a fact, not a disqualification, but you should know which it is.
- Lot or batch number. A COA describes one lot. A COA with no lot number describes nothing traceable.
- Test method. HPLC, UPLC, ICP-MS, plate count. A result without a method cannot be compared to another result.
- Specification range. What the material is supposed to be, agreed in advance.
- Measured result. What it actually was, against that range.
The tell: a document that gives you a list of ingredients and the word "Pass" is not a certificate of analysis. It is a summary someone typed. Ask for the underlying report.
Which tests does a botanical supplement actually need?
Identity
Confirms the material is the species you ordered. This matters more in botanicals than almost any other category, because adulteration and misidentification are real and long-documented problems in the herbal supply chain — substituting a cheaper related species, or bulking an extract with something inert.
Identity is answered by the method, not by the paperwork. Ask whether the factory runs an identity test on your active or accepts the supplier's word for it.
Potency and standardization
Confirms the concentration of the marker compound you are paying for and claiming on the label. If your label says a standardized extract at a given percentage, potency testing is what makes that claim survivable. HPLC and UPLC are the usual chromatography methods for botanicals: they separate the mixture and quantify each compound in it.
Contaminants
Non-negotiable for plant material, which concentrates whatever was in the soil and the process.
- Heavy metals — lead, arsenic, cadmium, mercury — typically by ICP-MS.
- Microbial limits, including total plate count, yeast and mould, and specified pathogens.
- Residual solvents for solvent-extracted materials.
- Pesticide residues where the botanical or the market requires it.
Finished product testing
The one most often skipped and the one that matters most. Raw material COAs tell you what went in. Finished product testing tells you what is in the unit your customer opens, after blending, compression or encapsulation, and time in a warehouse. Those are not the same number, and the gap between them is exactly what an overage is supposed to cover.
Raw material COA vs finished product COA
| Raw material COA | Finished product COA | |
|---|---|---|
| Answers | Is this ingredient what the supplier says it is | Is the product what my label says it is |
| Issued by | The ingredient supplier, or a lab they used | Your manufacturer, or an independent lab |
| Covers | One lot of one input | One batch of the finished unit |
| Accounts for processing loss | No | Yes |
| Useful if a claim is challenged | Partially | Yes |
| Commonly supplied by default | Yes | Often only on request |
If a manufacturer offers only the first column, you do not have evidence about your product. Ask what finished-product testing is included, what it costs if it is not, and who bears the cost when a batch falls outside specification.
What to establish before production, not after
- Which tests run on every batch versus periodically, and who decides.
- Whether testing is in-house, by the raw material supplier, or by an independent lab.
- Where the specification ranges came from, and whether you agreed to them.
- What happens commercially when a lot fails — rework, rejection, who pays.
- How long retained samples are kept and whether you can request one.
- Whether you receive COAs automatically with each batch, or have to ask each time.
Sending a retained sample to an independent lab before your first full production run is inexpensive relative to a recall, and it establishes early whether the documentation you are being given describes the product you are actually receiving.
Frequently asked questions
Can I just use my supplier's COA on my website?
You can publish it, but understand what it proves. A raw material COA is evidence about an ingredient lot, not about your finished product, and a customer or regulator asking whether your product contains what the label claims is asking a question the raw material COA does not answer. Publish finished-product results if you want the document to do the work you intend it to do.
How often should finished product be tested?
At minimum on the first production batch and then on a defined schedule agreed with your manufacturer. Every batch is the conservative answer and the one to default to for a product making specific potency claims. Periodic testing can be defensible for a stable, simple formula, but the schedule should be written down before production rather than decided retrospectively.
What does third-party tested actually mean on a label?
Less than most people assume, because the phrase is not defined or policed. It could mean an independent accredited lab tested every finished batch for identity, potency and contaminants, or it could mean a supplier's lab tested one raw material once. If you intend to use the phrase, be ready to say exactly which. If you are evaluating a manufacturer who uses it, ask them to.
How does Formulaite help with testing documentation?
By making the specification explicit before manufacturing rather than after. Actives are defined at input weight and finished dose with overages stated, which is what a finished-product specification range has to be built from, and the regulatory screening flags where a claim will require evidence you do not yet have. That turns testing from a thing that happens to you into a plan you brief a factory against.
Related founder resources
Define the specification before you need to defend it
Formulaite fixes your actives at input weight and finished dose, screens the claims your formula has to support, and produces the documentation a manufacturer and a lab both work from.