Methodology 4 min read
Reading a Certificate of Analysis: How to Catch the Tricks the Industry Plays
A sharp guide to reading a peptide Certificate of Analysis, with specific call-outs of the tricks the supplement industry plays. What real testing actually looks like, what to demand, and what to walk away from.
Last reviewed: May 2026
Most peptide buyers will be told that the supplier’s products are “lab-tested,” “cGMP grade,” and backed by a Certificate of Analysis. Most peptide buyers will then be shown a single PDF that proves none of that. The supplement industry has perfected the appearance of quality testing without the substance of it. This is the guide to telling the difference.
The good news: it is not that hard. Real Certificates of Analysis have specific features that fake or weak ones do not. Once you know what to look for, the bad ones become obvious.
What a real Certificate of Analysis is
A Certificate of Analysis (COA) is a document produced by a testing laboratory that states the results of specific tests performed on a specific batch of a specific product. The key word in that sentence is “specific.” A real COA is tied to a specific batch number that matches the lot number on the vial in your hand. A real COA is dated to the actual testing date, not just a static document hosted on a website. A real COA is produced by an independent third-party laboratory, with the lab’s name and accreditation visible.
If any of those three pieces is missing or fudged, the document is not really a Certificate of Analysis. It is a marketing asset.
The tricks to watch for
The static COA on the homepage. A supplier shows a single COA document linked from the product page. The COA is real, but it is from a 2022 batch. The vial in your hand is a 2026 batch. The 2022 COA does not tell you anything about your specific product. Real suppliers provide per-batch COAs available on request, with the batch number on the COA matching the lot number on your vial.
The COA from the supplier’s own internal lab. Some suppliers run testing in-house and produce documents that look like COAs but are not from independent third-party laboratories. Internal testing is fine as a quality-control step. It is not a substitute for independent verification. Real COAs name the testing laboratory and the lab is not the same entity as the supplier.
The “purity above 98%” claim with no test methodology stated. Real purity testing uses HPLC (high-performance liquid chromatography), and the COA reports the actual chromatogram or at least the percentage with the method noted. A purity claim without a method specified is a marketing claim, not a test result.
The missing endotoxin and microbial tests. A peptide intended for injectable research use needs more than purity testing. It needs endotoxin testing (typically reported in EU/mg, with USP-grade material below 5 EU/mg) and microbial contamination testing. COAs that report only purity without these contamination tests are incomplete.
The mass spec absence. HPLC tells you what fraction of the sample is the labelled compound. Mass spectrometry confirms that the molecule is actually what the label says it is. A 99% pure mystery compound is not what you want. Real COAs include both HPLC purity and mass spec identity confirmation.
The expired-or-undated COA. Some products will have a COA, but the document is from a year ago and the vial in your hand has an unstated production date. Without knowing when the testing happened relative to the product you have, the COA tells you nothing about current product quality.
What a complete COA actually contains
The fields a real COA should have:
- Product name and chemical structure
- Specific batch / lot number that matches the vial
- Date of manufacture
- Date of testing
- Name and accreditation of the testing laboratory (not the supplier)
- HPLC purity result with chromatogram
- Mass spectrometry identity confirmation
- Endotoxin testing result in EU/mg
- Microbial contamination test results (typically negative for specific pathogens)
- Heavy metals screening (lead, cadmium, mercury, arsenic) via ICP-MS
- Expiry or retest date
- Authorised signature from the testing lab
If three or more of these are missing, you do not have a complete COA.
How to actually use a COA
Most suppliers do not display per-batch COAs publicly because the documents change with every batch. The right approach is to email and request the COA for the specific batch number on your vial. A serious supplier will provide it, often as a PDF, within hours. A non-serious supplier will either not respond, send you the same outdated document, or claim the COA is “proprietary.”
The supplier response to a COA request is itself diagnostic. The quality of the document matters. The willingness to provide it matters as much.
What NuroCore does on this
NuroCore Labs commits to per-batch independent COAs available to verified buyers on request, by emailing [email protected] with the order number. The testing lab is named on the document. The standard test panel includes HPLC purity with chromatogram, mass spec identity confirmation, endotoxin in EU/mg, microbial contamination, and heavy-metal screening. The COA is dated to the actual testing date and the batch number matches the lot on the vial.
This is the operational standard the catalogue is built on. Our supplier-selection guide covers what to look for more broadly across UAE operators.
The honest framing
The COA conversation is one place where the supplement industry has traded substance for appearance more thoroughly than almost any other quality-control conversation. Real testing exists. Real COAs exist. The proportion of consumer-facing peptide products with real per-batch independent COAs is meaningfully smaller than the proportion that claim to have them.
If you are buying peptides at any frequency, learning to read a COA properly is the single highest-leverage quality-control skill you can acquire. It pays for itself the first time it makes you walk away from a bad product.