How to read a certificate of analysis (COA)
A certificate of analysis reports what a lab found in one sample: whether it is the right substance, how pure it is, and how much active ingredient it holds. The single most useful check is whether the certificate can be verified with the issuing lab - if it cannot, treat the numbers as a claim, not a fact.
Last updated: 8 July 2026
What a certificate of analysis actually is
A COA is a laboratory's written result for one specific sample, not a seal of quality for a whole product line. It ties three things together: a sample identifier, the tests that were run, and the values found. A vendor can hold a genuine COA for one batch and still ship you something different.
A trustworthy COA names the analytical method (for example HPLC or LC-MS), the date the sample was received and reported, and a task or report number you can look up later. If a certificate hides all of these, it is describing nothing you can check.
Purity, identity and mass: the three numbers that matter
Three figures carry the weight: identity (is it the substance claimed?), purity (what share of the sample is the target peptide?), and mass or content (how many milligrams of active ingredient are actually there?). A high purity number means little if the identity was never confirmed.
Purity is not safety: it says how much of something else the lab found, not whether the substance is safe for you. Mass matters too, because an underfilled vial quietly changes your real dose. A telling forgery sign is purity that reads the same on every batch - a real HPLC result always varies a little.
HPLC and LC-MS: what each can and cannot show
HPLC separates and quantifies; mass spectrometry (LC-MS/MS) confirms the molecule by its mass. In plain terms: HPLC tells you how much and how pure, while MS tells you it is actually the right peptide. The strongest COAs use both, because either one alone leaves a gap.
An HPLC-only report can show a clean, pure peak that is the wrong compound entirely. A mass-spectrometry confirmation closes that gap by matching the peptide's exact mass, which is why serious labs list the instrument and the transition they measured.
The red flags of a forged certificate
Some tells are easy to spot once you know them. None is proof on its own, but together they are a strong signal to stop and verify:
- A free-email contact (outlook.com, gmail.com) instead of an address at the lab's own domain.
- A "verify" link that leads to a 404, or no verification path at all.
- A lab website registered only days before the report was issued.
- The lab's address turns out to belong to a different, real laboratory.
- Purity that never varies, or a signature that is a nickname rather than a named person.
Can you verify it?
The strongest signal a COA can carry is issuer-side verification: a QR code, or a task number plus a unique key, that you enter on the issuing lab's own website. If the lab confirms the report, no vendor could have forged it.
Janoshik, a widely used testing lab, prints a QR code and a unique key on each report and hosts a public verification page. That is the model to insist on. When a certificate offers no way to confirm it with the lab, treat its numbers as a claim, not a fact.
- Find the issuing lab. Note the lab name, its domain, and its contact. A free-email contact or a domain registered days ago is a warning.
- Check the method. Look for HPLC and, ideally, LC-MS. A report with no named method tells you little.
- Read purity and mass together. Purity alone is not enough; the milligrams of active ingredient decide your real dose.
- Scan for red flags. Uniform purity, a borrowed address, a 404 verify link, a nickname signature.
- Verify with the lab. Use the QR code or task number plus key on the issuing lab's own site. No verification path means no confirmation.