How to Read a Certificate of Analysis (and Vet Any Vendor)

For research and educational purposes only. Nothing in this guide constitutes medical advice.

Last updated: July 2026

---

Every compound guide in this library points back to this page for a reason: sourcing isn’t a secondary consideration in peptide research, it’s the decision everything else depends on. The best protocol, the most careful titration schedule, and the most precise dose math in the world produce nothing useful if the compound in the vial isn’t what the label says it is. This guide covers exactly how to verify that it is — in enough practical detail that you can actually do it, not just understand the theory.

Why This Matters More Than It Might Seem To

There is no centralized authority verifying that research peptides sold anywhere are actually what they claim to be. No government agency tests these products before they reach a researcher. No mandatory quality standard exists. No recall mechanism activates when something goes wrong. That absence of oversight isn’t a minor gap — it’s the single fact that shapes everything else about how this market behaves.

Because there’s no enforcement floor, there’s enormous variance in vendor quality. Some hold themselves to rigorous standards. Others treat the lack of oversight as an opportunity, because cutting corners lowers costs and raises margins, and the researcher who can’t tell the difference pays the price. This isn’t a cynical take — it’s just how unregulated markets work. A professional-looking website and a PDF that resembles a Certificate of Analysis cost almost nothing to produce. Genuine third-party testing costs real money and effort. The gap between those two things is invisible unless you know exactly what to check.

To put a number on what real testing actually costs: independent analytical testing of a single compound batch — HPLC purity analysis plus mass spectrometry identity confirmation — typically runs $350 to $950 USD, depending on the lab and scope of testing. A vendor carrying fifteen compounds who tests every production batch is spending real money on documentation alone before a single order ships. That cost shows up somewhere — either in the price you pay, or in a vendor’s decision not to test at all. When a vendor’s prices sit meaningfully below the market average with no explanation, the missing testing budget is often exactly where that gap comes from.

What Can Actually Go Wrong

This isn’t theoretical. Documented, real-world failure modes in this market include:

The wrong compound entirely. Independent mass spectrometry testing has identified vials where the contents bore no chemical resemblance to the label — a vial labeled as one peptide containing something else entirely. This is the worst case, and it does happen.

Severe underdosing. HPLC testing has identified products labeled at 98% purity actually testing at 60%, 40%, or lower. Every dose calculation made from that vial becomes wrong the moment the labeled concentration doesn’t match reality — not slightly off, fundamentally unreliable.

Contamination. Bacterial endotoxins, residual solvents, heavy metals, and microbial contamination have all been documented in research peptide samples through independent testing. For anything intended for injection, this isn’t a quality footnote — endotoxin contamination specifically can cause fever, inflammation, and serious adverse reactions.

Degradation in transit. Peptides are sensitive molecules. Poor handling, extended time in customs, or improper storage anywhere in the supply chain can degrade a compound before it reaches you — sometimes without any visible sign that anything is wrong.

A result from a compound that’s mislabeled, underdosed, or contaminated isn’t a disappointing research finding. It’s noise. It tells you nothing about the compound you thought you were researching.

What a Legitimate COA Actually Contains

A Certificate of Analysis is a laboratory’s report documenting the testing performed on a specific production batch. A complete, meaningful COA contains all of the following — not most of them, all of them:

A named, independent laboratory. The lab should be a separate company, not an in-house department run by the vendor selling the product. In-house testing has an obvious conflict of interest that third-party testing doesn’t. The lab should have a real, searchable public presence — a website, contact information, and (ideally) a public verification database.

HPLC purity testing, stated as a specific percentage. High-Performance Liquid Chromatography measures what proportion of a sample is the target compound versus impurities or degradation products. Reputable vendors target 98% or higher. A COA that says “purity: high” or “pharmaceutical grade” without a specific number and a named method isn’t a COA — it’s marketing copy on lab letterhead.

Mass spectrometry identity confirmation. HPLC tells you how pure something is; mass spectrometry tells you what it actually is, by comparing the molecular weight and fragmentation pattern against the known profile of the target compound. A COA with purity data and no identity confirmation is only telling you half the story. Both together make a complete COA. Either alone doesn’t.

A batch-specific lot number. The COA should be tied to the specific production batch you’re actually receiving — not a single generic document reused indefinitely across every restock, regardless of whether the underlying supply, manufacturing, or storage conditions changed between batches.

Independent online verification. The single most useful and most underused check available to you. Reputable labs maintain public, searchable databases of completed tests, tied to a unique code printed on the COA — Janoshik Analytical calls theirs a “Task number”; other labs use their own equivalent unique keys. If a COA’s results can’t be independently confirmed against the issuing lab’s own database, you have no way to know whether the document reflects real testing at all.

How to Actually Verify a COA, Step by Step

Here’s the practical walkthrough — the part that actually matters more than knowing the theory above.

1. Identify the lab and check it’s real. Search the lab name. Does it have a genuine website? Is it contactable? Is its report format consistent with what other vendors in the space post from the same lab?

2. Find the lab’s own verification system and use it. This is the step most people skip, and it’s the one that actually catches fraud. Look for a unique code on the COA — a report number, task number, or verification key — and enter it directly on the lab’s own website. If the results shown there match the document the vendor gave you, the COA is genuine. If the code doesn’t resolve, returns different results, or doesn’t exist in the lab’s system at all, that’s not a minor inconsistency — treat the entire document as unverified.

3. Confirm the vendor information matches. The vendor name, account identifier, or contact details on the COA should match the vendor you’re actually buying from. A COA displaying a different company name or logo suggests it may have been sourced from somewhere else and presented as the current vendor’s own testing — a genuine document, testing a different vendor’s batch entirely.

4. Match the lot number to your actual product. The lot number on the COA should also appear on your product label or order documentation. If a vendor can’t tell you the lot number of what you received, or it doesn’t match any COA they can provide, that’s a direct problem worth pursuing before you use the product.

5. Check the test date. A COA should show when the sample was actually tested — not when the report was generated or the product was listed for sale. Testing more than six to twelve months old relative to your order is worth a direct question to the vendor. A two-year-old COA tells you nothing reliable about the batch shipping today.

6. Read the purity result and the chromatogram. Confirm the purity percentage and that it’s specifically attributed to HPLC. The COA should include a chromatogram — the graph the HPLC analysis produces. A single sharp, clean peak indicates a pure compound; multiple unexplained peaks indicate something else is present and warrants a closer look.

7. Confirm identity, not just purity. Find the mass spectrometry section and confirm it shows an observed molecular weight matching the expected weight for the compound in question. No identity section at all means the COA is incomplete, regardless of how good the purity number looks.

8. If available, check the vial photo. Some labs photograph the submitted vial as part of their documentation, and the image sometimes appears in the COA or the lab’s own verification record. Vial cap colors are consistent within a manufactured batch — if the lab’s photo shows a silver cap and the vial in your hand has a blue one, you’re not looking at the same batch, whatever the paperwork says.

The Labs Worth Knowing

Janoshik Analytical is widely treated as the community-default, “gold standard” testing lab for research peptides. Its public verification system works off a unique Task number printed on every report, resolving to a permanent, vendor-uneditable record on Janoshik’s own servers — which is precisely the kind of independent verification that makes a COA trustworthy rather than just professional-looking.

Freedom Diagnostics is another established, genuinely independent lab with its own search-code verification system, working on the same basic principle: a unique identifier on the document that you can check directly against the lab’s own records rather than taking the vendor’s word for it.

Testides is another independent lab used in the research peptide space, offering HPLC purity and mass spectrometry identity testing, with expanded options such as endotoxin screening available for vendors who request it. It’s the lab Aethon Labs uses for its own testing — which is exactly why we’d encourage you to apply the same verification steps in this guide to our own COAs rather than take that on faith. A vendor that’s comfortable being checked is generally one worth doing business with.

A handful of other labs — including Chromate, MZ Biolabs, and TrustPointe — operate similar independent, code-verifiable testing services and are increasingly cited in the community alongside the labs above.

Worth knowing as a live example of why “a named lab” isn’t automatically the end of your due diligence: community auditors have specifically raised transparency concerns about at least one other commonly-cited testing service, questioning how consistently its lab assignments and methodology are disclosed compared to labs like Janoshik that publish a fully open, permanent, independently searchable record for every single test. The lesson isn’t “only trust these two specific labs forever” — testing infrastructure in this space continues to evolve — it’s that a lab’s name alone doesn’t substitute for actually checking whether its verification system is genuinely independent, permanent, and usable by you directly, rather than something the vendor could edit or selectively share after the fact.

Deceptive Practices to Watch For

Falsified or altered documents. PDFs are trivially easy to modify — a purity percentage changed, a date updated, a vendor name substituted, all in under a minute with widely available software, producing something that looks identical to a genuine COA to anyone who doesn’t cross-reference it. The only real defense is independent verification on the issuing lab’s own website, every time.

Someone else’s genuine COA. A variation on the above: a real COA, for real testing, that actually belongs to a different vendor’s batch — presented as though it belongs to the vendor you’re buying from. Checking that the vendor name and contact information on the COA matches who you’re actually purchasing from catches this in seconds.

The recycled COA. The single most common deceptive practice in this market: posting one genuine COA — often from an early batch — and reusing it indefinitely across every subsequent restock, whether or not those restocks came from the same supplier or were tested at all. The tell is in the date and lot number. If a COA hasn’t been updated in over a year, ask directly when the most recent batch was tested and request the corresponding document. A vendor operating honestly provides it without friction.

In-house testing dressed up as independent. Language like “in-house quality assurance,” “internal testing protocols,” or “QC-verified” is not equivalent to third-party analysis. The tell is the absence of a named external lab anywhere on the document — if it’s on the vendor’s own letterhead with no outside lab named, it’s not an independent COA no matter how professional it looks.

Purity without identity. A COA showing only an HPLC purity result, with no mass spectrometry identity confirmation, is half a document presented as a whole one. A high purity number feels reassuring even when it’s only confirming that whatever’s in the vial is pure — not that it’s the right compound.

No lot number on the product at all. A product with no lot number can’t be traced to a specific production batch, which means it can’t be meaningfully connected to any COA regardless of what documentation the vendor shows you. This isn’t always deliberate — sometimes it’s just poor practice — but either way, it leaves you with no way to verify anything.

Suspiciously perfect numbers. Real analytical testing produces real variance. A vendor whose COAs consistently show 99.9%+ purity across every compound, every batch, over an extended period should raise some skepticism — genuine testing is often excellent, but rarely uniformly perfect. Numbers that look too clean can reflect selective publication of favorable results rather than complete, transparent reporting.

Beyond the COA: Evaluating the Vendor as a Whole

A COA is necessary, but it’s not the entire picture. A few other signals worth weighing:

Where inventory is actually held and fulfilled from. A vendor operating from domestic inventory and shipping domestically is offering a meaningfully different (and, depending on your jurisdiction, lower-risk) service than one drop-shipping from overseas.

Transparency about sourcing standards. A vendor who can describe their supplier vetting process — what they require from manufacturers, how they handle quality concerns — is operating at a level of openness most vendors in this space don’t bother with. The absence of any stated sourcing practice isn’t neutral; it’s a gap worth noting.

Community track record. The research peptide community has built its own informal verification infrastructure over time — forums, testing initiatives, collective tracking of vendor reliability. This is imperfect information, but it’s real information. Apply skepticism in both directions: a strong historical reputation is still worth checking against current documentation, and a negative report from the past may or may not reflect current practice.

Responsive, technically competent support. A vendor who can actually answer specific questions about their testing, their suppliers, and their lot numbers is operating differently than one who deflects or gives generic answers. Willingness to engage substantively with quality questions is itself a signal worth weighing.

Common Myths, Addressed

“A professional website means a legitimate vendor.” A polished website and a convincing-looking COA cost very little to produce. Professionalism is not the same signal as verifiable testing — the two can look identical from the outside and mean completely different things underneath.

“If a COA exists at all, the product is probably fine.” Existence isn’t verification. A COA that can’t be independently confirmed against the issuing lab’s own database tells you almost nothing more than no COA at all — it just looks more reassuring while doing it.

“A COA from six months ago is basically current.” Not necessarily. What matters is whether it corresponds to the specific batch you’re actually receiving, not how recently it was generated relative to today. A recent-looking COA reused across unrelated restocks is exactly the recycled-COA problem described above.

Common Questions

How long does verifying a COA actually take? Once you know what to look for, checking the lab’s public database against the document you were given typically takes under five minutes. It’s genuinely one of the highest-value five minutes you can spend in this entire process.

What if a vendor refuses to provide a lot number or verification code? Treat that refusal itself as a meaningful answer. A vendor operating honestly has no reason to withhold information that costs them nothing to share and that a legitimate document should already contain.

Is a vendor automatically untrustworthy if their COA is a year old? Not automatically, but it’s a direct reason to ask a specific question: has this exact batch been retested since, and can you see that documentation? A reasonable vendor will have an answer. One who deflects has told you something too.

Do I need to verify every single vial I ever purchase from the same vendor? At minimum, verify the lot number on each new batch against a corresponding, dated COA — even from a vendor you’ve used before and trust. Supply sources, manufacturing conditions, and quality can all shift between batches in ways a vendor’s overall reputation doesn’t capture.

Before You Order — A Verification Checklist

• Confirmed the testing lab is a named, independent, third-party company
• Located the lab’s own online verification system and found the report code on the COA
• Verified the COA’s results directly on the lab’s website — not just visually inspected the document
• Confirmed the vendor name and contact information on the COA matches who you’re buying from
• Matched the lot number on the COA to the product label or order confirmation
• Checked the test date is reasonably current relative to the batch you’re receiving
• Confirmed both an HPLC purity percentage and a mass spectrometry identity result are present
• Asked the vendor directly about anything that didn’t check out cleanly

Want this as a printable checklist? Download it from the resources section.

Where to Go From Here

• Our Reconstitution and Storage Guide
• The Canadian Regulatory Landscape, Explained
• Every compound guide in this library links back here — see any individual compound’s “Where to Go From Here” section

---

This guide reflects practices and information available as of publication and will be updated periodically as the testing and vendor landscape evolves. It is provided for research and educational purposes only, does not constitute medical, legal, or financial advice, and is not a substitute for your own direct diligence. Aethon Labs does not intend for any compound discussed on this site to be used for human consumption.

AETHON LABS — Tested. Documented. Delivered.