Buyer's guide

How to read a supplement Certificate of Analysis (COA)

By Gleb Nilov, PA-C · Updated July 2026

A Certificate of Analysis is the lab document that tells you whether what's on the label is actually in the bottle — and how to check it yourself.

The short answer

A Certificate of Analysis (COA) is a lab report that verifies a supplement's identity, potency, and purity for a specific manufacturing lot. To read one, confirm four things: the ingredient is what the label says (identity), the amount matches (potency), contaminant tests passed (heavy metals, microbes, and for fish oils, rancidity), and the lot number on the COA matches the lot number on your bottle.

A COA is only meaningful when it's tied to your lot and, ideally, comes from independent third-party testing rather than the seller alone. That lot match is the single most-skipped check — and the easiest way a good-looking document ends up describing a different batch than the one in your hand.

What a COA actually is

A Certificate of Analysis is a document from a testing laboratory that reports what a specific batch of product contains. Each manufacturing run gets its own lot number, and a real COA is tied to one lot — not to the product in general. That distinction matters, because two bottles of the same product from different lots can test differently.

A COA is a verification tool, not a marketing claim. It doesn't tell you what a supplement will do for you. It tells you whether the contents match the label and whether the batch passed the purity tests the lab ran. That's the whole job: authenticity and quality verification.

The four things to check on any COA

  • Identity — Does the document confirm the ingredient is what the label says it is? Labs verify this so a bottle labeled one botanical isn't quietly a cheaper substitute. Mislabeling is not rare: a JAMA study of 30 immune-health supplements sold on an online marketplace found 17 were inaccurately labeled.
  • Potency — Does the measured amount of the active ingredient match the label amount? A COA lists the tested value so you can compare it against what's claimed. Under-dosing and over-dosing are both quality failures a COA can surface.
  • Contaminant testing — Did the batch pass tests for heavy metals (lead, arsenic, cadmium, mercury), microbial contamination, and residual solvents? For fish and omega-3 oils, look for an oxidation or rancidity measure — a George Washington University study found roughly 45% of tested omega-3 supplements exceeded recommended oxidation limits, meaning the oil had gone rancid.
  • Lot match — Does the lot number printed on the COA match the lot number stamped on your bottle? This is the check most people skip. A pristine COA for lot A tells you nothing about the bottle in your hand if that bottle is lot B.

How third-party testing works

There's an important difference between a brand testing its own product and an independent lab testing it. Third-party means an outside organization — with no stake in selling the product — runs or certifies the testing. That independence is what makes the result harder to game.

  • NSF — Tests products against label claims and screens for contaminants; NSF Certified for Sport additionally screens for substances banned in athletics. An NSF mark means the finished product and the facility were reviewed, not just a single sample.
  • USP — The U.S. Pharmacopeia Verified mark indicates the product contains the listed ingredients at the listed strengths, doesn't contain harmful contaminant levels, and was made under good manufacturing practices.
  • IFOS — The International Fish Oil Standards program tests fish-oil products specifically for potency, purity, and oxidation (rancidity), and publishes lot-level results.

A seal on the label is a starting point. The stronger signal is a batch-specific COA you can actually read, ideally from independent testing, that matches the lot you own.

Why provenance — where the bottle came from — matters

A COA verifies a batch, but you also want confidence that the bottle traveled a clean path from manufacturer to you. Counterfeit and diverted products are a documented problem: investigators have found fakes that copied real lot numbers onto the packaging so the outside looked legitimate while the contents were not. A copied lot number can even make a genuine-looking COA appear to apply.

This is why sourcing channel matters. Some brands explicitly do not authorize sales through open online marketplaces, because once a product leaves the authorized chain, no one can vouch for how it was stored or whether it's authentic. A closed-loop path addresses this directly: product shipped direct from the brand, batches subjected to blind third-party testing, and storage in climate-controlled, NSF-cGMP-compliant facilities. The point isn't a promise about how a supplement makes you feel — it's a verifiable answer to a narrower question: is this the authentic product, handled correctly, and can you check the paperwork?

Putting it together when you shop

  • Ask whether a COA is available for the specific lot you're buying — not a generic sample document.
  • Read all four sections: identity, potency, contaminants, and the lot number.
  • Prefer independent third-party testing (NSF, USP, IFOS) over seller-only testing.
  • For omega-3s, confirm an oxidation/rancidity value is reported and within range.
  • Consider the sourcing channel: authorized, direct-from-brand paths preserve the chain a COA depends on.
See My Pricing — Free

I'm a PA-C and this is my own Fullscript® dispensary — I may earn a portion of sales. Similar products are available from other retailers. Full disclosure

Common questions

Answered

What is a Certificate of Analysis (COA)?

A COA is a lab document that reports what a specific manufacturing lot of a supplement contains — verifying the ingredient's identity, its potency versus the label, and whether it passed contaminant tests. It's a verification tool, not a health claim.

What should I look for on a supplement COA?

Check four things: identity (the ingredient is what the label says), potency (the amount matches), contaminant testing (heavy metals, microbes, and rancidity for oils), and the lot number matching the bottle you own. The lot match is the most commonly skipped check.

What's the difference between in-house and third-party testing?

In-house testing is done by the brand selling the product; third-party testing is done or certified by an independent organization with no stake in the sale. Independent testing is harder to game, which is why programs like NSF, USP, and IFOS carry more weight.

What do NSF, USP, and IFOS actually verify?

NSF tests finished products and facilities against label claims and for contaminants (with a Certified for Sport tier for banned substances). USP Verified confirms listed ingredients, strengths, contaminant limits, and good manufacturing practices. IFOS tests fish oils specifically for potency, purity, and oxidation, publishing lot-level results.

Why does the lot number matter so much?

A COA describes one specific batch. If the lot number on the document doesn't match the lot stamped on your bottle, the paperwork may describe a different batch entirely. Counterfeiters have even copied real lot numbers onto fake packaging, so matching the lot is essential to trusting the document.

Why does where I buy a supplement affect authenticity?

Once a product leaves the brand's authorized channel, no one can vouch for how it was stored or whether it's genuine — and some brands don't authorize open-marketplace sales for this reason. A closed-loop path (direct-from-brand, blind third-party testing, climate-controlled NSF-cGMP facilities) preserves the chain a COA relies on.

More guides

Get the one-page checklist + your member pricing →

Get verified access — free

A free account, my member pricing, and a supply chain you can trace.

See My Pricing — Free

Free account. No card required.