How to read a peptide certificate of analysis

Short answer: a certificate of analysis, or COA, is a lab document that reports which tests were run on one specific batch of a product and what results those tests returned. For a peptide, a COA worth trusting should confirm identity by mass spectrometry, purity by HPLC, and, for anything meant to be injected, sterility and bacterial endotoxin levels, with every result tied to a batch number and an accredited outside lab. The catch is that a COA only proves what it actually measures, the document itself is trivial to copy, reuse, or fabricate, and even a flawless COA does not make a “research use only” peptide safe to put in your body. This page explains how to read one and where the traps are.

What is a certificate of analysis?

A certificate of analysis is a batch-specific test report. It names the substance, a lot or batch number, the date, the lab that ran the tests, and, for each test, the method used, the acceptance limit, and the measured result. The word “batch-specific” is the whole point: a real COA describes the exact lot in front of you, not the vendor’s product line in general. If a document has no batch number, no test methods, and no lab identity, it is marketing, not a COA. And a COA is only ever as good as the tests it lists, so the useful skill is knowing which tests belong on it and reading whether they are actually there.

What tests should a peptide COA include?

For a synthetic peptide, two analyses do most of the work, and they answer different questions. Peer-reviewed work on characterizing synthetic peptides describes using reverse-phase HPLC to determine “homogeneity, stability, identity, content, and purity,” and electrospray LC–MS/MS “to confirm the mass of the peptide and to verify the amino acid sequence” (reference standards for synthetic peptide therapeutics, PMC). Read that as a division of labor:

• Identity, by mass spectrometry. Mass spec measures the molecular weight and can confirm the amino acid sequence, answering “is this actually the peptide the label claims?” HPLC alone cannot tell you that.
• Purity, by HPLC. High-performance liquid chromatography separates the sample into peaks and expresses the target as a percentage of total detected area; the same source notes that “all detectable impurities… are measured and subtracted from 100% to assign purity.” A “99% pure” line means 99% of what the method detected was the target, and the remainder is related impurities and other detectable contaminants.

The key point for a reader: identity and purity are not the same claim. A sample can be highly pure and still be the wrong molecule, or the right molecule at low purity. A COA that reports only a purity percentage, with no mass-spec identity, has answered “how clean” but skipped “clean of what.”

What about sterility and endotoxin for injectables?

Anything intended to be injected raises two more questions that HPLC and mass spec do not touch: is it sterile, and is it free of bacterial toxins. These are separate tests, and passing one does not cover the other. Sterility testing looks for viable microorganisms; the bacterial endotoxins test looks for lipopolysaccharide fragments shed by gram-negative bacteria, which can cause fever and worse even when no live organism remains. As one lab summary puts it, a preparation that passes sterility is not automatically free of endotoxins. FDA’s guidance on the bacterial endotoxins specification treats endotoxin limits as a core release criterion for parenteral products (FDA, “The Bacterial Endotoxins Specification – Points to Consider”), and the endotoxins test itself is a compendial method (USP Bacterial Endotoxins). A COA for an injectable that reports identity and purity but shows nothing on sterility or endotoxin has left the two questions that matter most for injection safety unanswered. And even a COA that covers all of these describes the batch as it was tested, not the vial after a warm shipping route or months in the fridge, where a peptide keeps degrading regardless of what the certificate said, a separate axis we cover in peptide storage and handling.

Third-party testing versus in-house testing

Who ran the tests changes how much weight the COA carries. An in-house COA is produced by the same company selling the product, which has an obvious incentive in the result. A third-party COA comes from an independent, ideally accredited, laboratory that has no stake in the sale. Independence is not a guarantee of honesty, but it removes the most direct conflict of interest, and an accredited lab operates under documented methods and quality controls that an unnamed “our lab” does not. When a COA names a real, findable testing laboratory and a batch number you can cross-check, you can at least attempt verification. When it says only “third-party tested” with no lab named, there is nothing to verify. Treat “tested” as a claim that needs a name and a document behind it, which is exactly the habit our guide to telling whether a peptide vendor is legit is built around.

How can a COA be misleading or faked?

A certificate of analysis is a document, and documents can be edited, so the ways it can mislead are worth naming plainly:

• Reused for the wrong batch. A COA is valid only for the lot it tested. Vendors often post one COA and ship many later batches that were never tested, so the document may be genuine but unrelated to your vial.
• Cherry-picked tests. Showing only a flattering HPLC purity number while omitting mass-spec identity, sterility, or endotoxin is not a lie in what it prints, but it is a lie in what it leaves out.
• Fabricated or edited. A PDF can be altered in minutes. Purity figures, lab names, and letterheads can all be invented, and a “lab” that exists only as a logo cannot be checked.
• Real lab, meaningless scope. Even an authentic report can test a sample the vendor supplied rather than a random unit off the shipping line, so it certifies a specimen, not what arrives at your door.

None of these require sophistication to pull off, which is why a COA is a starting point for questions, not a stamp of safety. The right response to a COA is to ask what test, which batch, whose lab, and can I confirm any of it independently: the same discipline behind our BPC-157 buyer’s guide.

What do buyers say about testing?

Buyer discussions show both why COAs matter and how rarely they get read closely. Our Community Insights summaries for this site, drawn from public posts on X in mid-July 2026, include TB-500 buyers warning that products sold as TB-500 are often full-length thymosin beta-4 rather than the short fragment, and that the difference is routinely glossed over. That is precisely the question a mass-spectrometry identity result answers, because a full-length protein and a short fragment have very different molecular weights; a purity percentage alone would not catch it. In MOTS-c threads, by contrast, users credit particular suppliers with quality while offering no purity or testing detail at all. These are anecdotes, not lab findings, but the pattern is the useful part: the claims buyers argue about are identity claims, and identity is the line most often missing from a COA.

Does a clean COA make a peptide safe?

No, and this is the part the analytical detail can distract from. A COA speaks only to what a lab measured on a sample; it says nothing about how the product was handled since, whether you are a good candidate for it, or what the evidence says it does. Most peptides sold online also carry a “research use only” label, which FDA defines as a narrow category for products “in the laboratory research phase of development” that may not be represented for clinical use (FDA guidance on research-use-only products). FDA has rejected that label as a shield when the same sellers describe human dosing, treating those products as unapproved new drugs, as in its March 2026 warning letter to an online peptide seller. A certificate cannot change what the label says about who stands behind the product.

That is why we treat COA literacy as a defensive skill, not a shopping shortcut. Knowing how to read one helps you see through a bad source faster and ask better questions of a good one. The fuller version of accountability runs through a licensed provider and pharmacy who answer for identity, dosing, and sterility, which is a different transaction from reading a PDF and clicking buy.

Status: Most peptides sold online, including BPC-157 and TB-500, are not FDA-approved; some are sold by telehealth providers as a compounded prescription. See the peptide status explainer for each one.

Educational information only, not medical advice. Analytical descriptions here are drawn from the peer-reviewed and compendial sources cited above; FDA statements are sourced to the primary FDA record and are accurate as of October 12, 2026; community themes summarize public posts and are not evidence.