By Paul Bakhtiar, MBA, Founder of Helios Consultants

Short answer. One product can legitimately carry several certificates: the manufacturer’s release certificate for the bulk lot, an independent lab report commissioned by the distributor, a new certificate for a repackaged or relabeled lot, and one for each production lot. Each must reference its own lot number. Certificates for one lot that disagree, or one certificate reused across lots, are the problem.

What this means for your clinic. When a supplier sends more than one certificate, don’t pick the best-looking one. Sort them by lot number and issuer, check that each points at its own lot, and keep the whole set in the lot file. Read together, the set is the evidence.

What are the legitimate reasons a product has more than one certificate?

A product is a line; a lot is one production run of it. Certificates attach to lots, not products, so a product made ten times has at least ten certificates, and each lot can carry more than one. That is where the clinic’s guide to verifying peptides starts: one certificate of analysis for a whole product line is a warning, not a convenience.

Four kinds are normal, and they answer different questions.

ICH Q7 is the source of that list. Section 11.40 has an authentic certificate issued for each batch on request, and 11.42 has it list every test with its acceptance limits and numerical results.

Section 11.43 has it dated and signed by the quality unit, with the original manufacturer’s name, address and phone number. ICH Q7 is written for makers and distributors of active pharmaceutical ingredients; the series cites it as the benchmark a legitimate supplier meets.

The independent report exists because a maker’s certificate is the maker’s word. 21 CFR 211.84(d)(2) lets a manufacturer accept a supplier’s report of analysis only if it runs its own identity test and validates the supplier’s results at intervals. Part 211 binds drug manufacturers; it is cited here as the benchmark a legitimate supplier meets, not as a clinic obligation. Manufacturer COA vs Third-Party Lab Report: What’s the Difference? compares the two.

What must a repackager’s or distributor’s certificate show?

Here multiplicity most often goes wrong, because the reissuing company is not the company that made the lot. ICH Q7 11.43 has a repacker’s certificate carry the repacker’s own name, address and phone number and a reference to the original manufacturer’s name.

Section 11.44 goes further for certificates issued by or for repackers, agents or brokers. They name the laboratory that performed the analysis, with its address and phone number. They reference the original manufacturer’s name and address and the original batch certificate, and a copy of that original is attached.

So a distributor’s certificate that names no lab and no original manufacturer, and arrives without the original attached, is missing three things. Section 17.20 closes the loop: agents, brokers, distributors, repackers and relabelers keep all authentic certificates, including the original manufacturer’s, in the traceability record for every lot they handle. What Should a Peptide Certificate of Analysis Show? lists every field a certificate needs, whoever issues it.

How do you read a set of certificates for one product?

The full certificate set on EV-14 covers one product across several lots. Reading it is a sorting job before it is a judgment.

Sort every document by lot number first; one with no lot number goes in its own pile, because it can’t be attached to any lot.

Within each lot, order by issuer: manufacturer’s release certificate, independent report, then any distributor’s certificate.

Check that each document names its lot exactly as the others do, character for character.

Put the dates in order: made, then tested, then reported. Test Date, Report Date, and Batch Date: What’s the Difference? explains the normal gaps.

Compare results across the lot’s documents. Two labs can differ a little on purity, never on identity, product name or lot number.

Where a distributor’s certificate exists, find the original it references and confirm the copy is attached.

Write down what is missing. A lot with a release certificate and no independent report is a gap for the supplier to close before release.

What hierarchy does Helios keep on file?

The Helios certificate set follows the order the table gives, kept per lot. The original manufacturer’s certificate comes first, because step 1 of the standard identified that manufacturer in writing before the first order. The independent laboratory report for the same lot sits beside it, because step 2 requires both before shipment. A distributor’s certificate, when there is one, is filed third with the original it references.

Each document carries the lot number it is filed under, so a reader can move from the vial label to the manufacturer’s batch number without leaving the file.

When does more than one certificate mean trouble?

Multiplicity is a problem only when the documents stop agreeing with each other or with the lot. Four patterns cover most cases.

Two certificates for one lot that disagree. Purity results a few tenths of a percent apart are normal between labs. A different identity result, product name or lot number is not.

One certificate reused across lots. The tell is a shared report number, results identical to the last decimal, or one test date on lots made months apart. ISO/IEC 17025, clause 7.8.2.1, requires each report to carry a unique identification (NIST crosswalk, clause 7.8), so one report number on two lots means one is borrowing it.

A certificate with no lot number. Sometimes called a stock or typical certificate, it describes the product in general and covers nothing you received.

A distributor’s certificate with nothing behind it. No lab named, no original manufacturer, no original attached.

Any of these holds the lot in quarantine until the supplier produces the missing document or the lab confirms the one in question. How Often Should a Clinic Re-Verify a Supplier’s COAs? covers how often to repeat the check once a supplier has passed it.

How Helios does it

Under the Helios verification standard, step 1, supplier qualification, identifies the original manufacturer of each product and the testing lab in writing before the first order; the record is the supplier file (EV-06). Step 2 requires the manufacturer’s COA plus an independent laboratory report for the exact lot before shipment; the record is the COA set (EV-14). A document that names no lot number doesn’t satisfy step 2, whoever issued it. Helios Consultants LLC describes all seven steps in how Helios verifies every lot. If you want help setting this up in your clinic, book a consultation.

Related questions

What Should a Peptide Certificate of Analysis Show?

Test Date, Report Date, and Batch Date: What’s the Difference?

Manufacturer COA vs Third-Party Lab Report: What’s the Difference?

How Often Should a Clinic Re-Verify a Supplier’s COAs?

Sources

ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, sections 11.4 and 17.20. View source

21 CFR 211.84, Testing and approval or rejection of components. eCFR. View source

ISO/IEC 17025:2017 clause 7.8, Reporting of results, crosswalk. NIST. View source

Educational content for licensed professionals. Not legal or medical advice. No product is offered for sale on this page.