How to verify a Certificate of Analysis is genuine: report numbers, laboratory contact, lot matching and the signs of a copied report

Two different questions#

Our guide to reading a Certificate of Analysis explains what the purity figure, the mass-spectrometry result and the chromatogram mean. Those are questions about content. This page is about provenance: was this report issued by the laboratory it names, for the lot it names, and is the lot it names the one you received? A report can be internally flawless and still answer none of those.

What ties a report to a lot#

In a regulated laboratory, every test record must identify the sample, the method, the standards used, the raw data, the calculations and the person who reviewed the result; the FDA's laboratory-records rule for drug manufacturing sets this out in detail, and accredited testing laboratories follow equivalent requirements under ISO/IEC 17025.^[1][2] Research-peptide vendors are not drug manufacturers, but the laboratories that test for them usually are accredited or operate to those standards, and the same identifiers are what make a report checkable:

• A report or sample number assigned by the laboratory, not by the vendor. This is the number the laboratory can look up.
• The client's sample description as submitted: the compound name and the lot or batch number the vendor supplied.
• The date received and the date of analysis. A report dated before the lot could have existed is describing something else.
• The laboratory's name, address and, where accredited, its accreditation body and certificate number.
• A signature or reviewer name. Accredited laboratories require review of results before release.

The lot number on the report must match the lot number printed on the vial. A report that carries no lot number, or a lot number that matches nothing on the label, cannot be connected to the material and should be treated as a general description of the product rather than a test of it.

Confirming with the laboratory#

Most independent laboratories will confirm, on request, whether a report number is theirs and whether the lot and client on it match what they issued. They will not usually share the report itself with a third party, because the client owns it, and they will not share raw data. The question to ask is narrow: "Is report number X, for sample Y, a report you issued to client Z?" A yes answers the provenance question. A no, or a laboratory that has no record of the number, is decisive the other way.

Some laboratories publish a verification page where a report number can be entered directly. Where one exists, the vendor's listing should link to it; where it does not, the laboratory's general contact address from its own website (not from the report, which could be altered) is the route.

Accreditation, and what it does and does not tell you#

ISO/IEC 17025 accreditation means an accreditation body (in the United States, organisations such as A2LA or ANAB, operating under the ILAC mutual recognition arrangement) has assessed the laboratory's competence, methods and record-keeping for a defined scope of tests.^[2][3] Accreditation bodies publish directories of accredited laboratories and their scopes, which makes two checks possible: that the laboratory named on the report exists and is accredited, and that the test reported (for instance HPLC purity of synthetic peptides) is within its accredited scope.

Accreditation does not verify any particular report. A real laboratory's name can appear on a document it never issued. The directory check establishes that the laboratory is real; the report-number check establishes that the document is.

Patterns that reused or altered reports share#

None of these proves fabrication on its own. Several together are a strong signal.

Upstream certificates: a common and legitimate confusion#

Many vendors buy peptide in bulk from a synthesis manufacturer that supplies its own certificate for the bulk batch. That certificate is real and often accredited, but it describes the bulk material before it was shipped, stored, weighed and filled into the vendor's vials. It is not a test of the vial. A vendor that presents a manufacturer's certificate as its COA is not necessarily being deceptive, but the buyer should know which document they are looking at. The distinguishing features are the client name on the report (the vendor, or the manufacturer?) and the batch size, which for a bulk certificate is usually grams rather than milligrams.

A checklist#

1. Lot number on the report matches the lot number on the vial.
2. Report carries a laboratory-assigned report number, dates and a reviewer.
3. Laboratory appears in an accreditation directory, with peptide analysis in scope.
4. Laboratory, contacted through its own website, confirms the report number and lot.
5. Figures differ from lot to lot (identical figures across lots are a warning).
6. Report describes the vendor's finished lot, not a manufacturer's bulk batch.
7. Expected mass is stated and the measured mass is shown against it.

Renuvia publishes each lot's report in the COA library with the laboratory's report number, so that the laboratory check above can be done directly; until a lot's report is issued the library shows it as pending rather than carrying a figure from any other source. The quality page describes the testing arrangement.