Peptide Verification
How Can You Check a COA Directly With the Testing Lab?
Learn how to contact a testing lab independently, verify a report’s details, and document its reply.
Short answer. Contact the laboratory named on the certificate using contact details you look up independently, never the ones printed on the certificate, and ask it to confirm the report number, lot number, test date and results. Many labs run public verification portals; a portal match is good, a written confirmation from the lab is better. File the confirmation with the lot.
What this means for your clinic. Make the lab check a standing line on the receiving record, done for every lot on the day it arrives, not a reaction to a certificate that looks odd. It takes one email, and until the reply is in the file, the lot stays in quarantine.
Why is the lab, not the supplier, the check?
Because the supplier is the party being checked. The certificate comes from the supplier and describes the supplier’s product, so asking the supplier whether it is genuine asks the one party with a reason to say yes. That is why the clinic’s guide to verifying peptides treats the lab’s own record as the third leg of the match between vial, certificate and lab.
It is also how forgeries work. The easiest fake certificate of analysis is a real one: a genuine report from a real laboratory, copied, with the lot number or the product changed. The logo, layout and signature are all authentic. Only the lab can tell you whether the report in your hand is the report in its files.
The standards already put the lab’s name on the page for this purpose. ICH Q7, section 11.44, says a certificate issued by or on behalf of an agent, broker or repacker should show the name, address and telephone number of the laboratory that performed the analysis. ISO/IEC 17025, clause 7.8.2.1, requires every test report to carry the lab’s name and address, a unique identification for the report, the dates the work was performed, the date of issue and the identity of the person who authorized it (NIST crosswalk, clause 7.8). Those fields are what you take to the lab.
How do you find the lab and what do you send?
Read the lab’s name off the certificate and nothing else. The phone number, email address, web address and QR code printed on it are all under the control of whoever produced the document, and a forged certificate will route you to a helpful stranger.
Find the lab independently. Start with the public directories of the US accreditation bodies (A2LA, ANAB, PJLA and IAS) or, for a lab abroad, with the ILAC signatory search to reach its national body’s directory. The directory entry gives you the lab’s address and often its website; from there, use the lab’s general or quality contact. A lab that claims accreditation and appears in no directory is a finding in itself: How Do You Check a Lab’s Scope of Accreditation (and Why It Matters More Than the Logo)?
For a lab that claims no accreditation, use a search engine to reach its published contact page, and never a contact name the supplier gives you.
Send the report number, the lot number, the sample description as printed, the test date and the result you are relying on, with a copy of the certificate.
Ask four questions: did the lab issue a report with this number; for this lot and sample description; on this date; with these results. If the lab will speak only to its client, ask the supplier to have the lab send the confirmation to you directly, from the lab’s own address, rather than forwarding it.
File the reply with the lot: the date, the name of the person at the lab, what was confirmed, and the email itself. That is the verification note.
Wording matters in step 5. Asking whether the report is genuine invites a yes. Asking whether report 4471 in the lab’s system shows this lot, tested on this date, at this result, invites the lab to look, and a lab that looks will say when the answer is no.
Portal or written confirmation: which is better?
Many labs now run a public lookup page where a report number returns the report as the lab holds it. Use it, through an address you reached from the directory or the lab’s own site, never through the QR code on the certificate, which can point to a look-alike page. Compare every field with the paper in your hand, because a recycled certificate can carry a real report number attached to a different lot.
| Portal match | Written confirmation | |
|---|---|---|
| What it shows | A report with that number exists on the lab’s site, with these fields | A named person at the lab states the report, lot, date and results match its records |
| What it can’t show | Any field the portal doesn’t display, or what the lab has learned about the report since | Anything about the link between the sample and your vial (next section) |
| Record to file | A dated screenshot showing the address bar and the matching fields | The email, from the lab’s own domain, with the date and sender |
| Best used | On receiving day, for every lot | On receiving day where offered, and always when there is no portal or a field disagrees |
Written confirmation is better because it is a record made by the lab, not by you, and a reviewer years later can read it without an argument about what a screenshot proves. Where both exist, file both.
What can the lab confirm, and what can’t it?
The lab can confirm that it issued the report, that the report describes the sample it was sent, that the tests were run on the dates stated and that the results are as printed. It cannot confirm that the sample came from your lot. Clause 7.8.2.1 requires the report to say that the results relate only to the item tested (NIST crosswalk, clause 7.8), and that sentence is the lab being honest about the limit. Who drew the sample, from which vial, is a chain of custody question the lab can’t answer.
The only check that reaches your vial is a test on your vial: Should a Clinic Send a Received Lot for Confirmatory Testing, and How? ICH Q7, section 7.31, asks a manufacturer to check the reliability of certificates at regular intervals; the lab confirmation is the routine check, and confirmatory testing is the periodic one.
Two answers end the check early. A lab that cannot find the report number, or finds it against a different lot, product or result, has told you what you needed to know; the lot stays in quarantine and a deviation record is opened, as How Can You Tell If a Peptide COA Is Real or Fake? describes. Silence from the lab is treated the same way until it ends; it is not a confirmation.
How Helios does it
Under the Helios verification standard, step 4 (lab confirmation) has the testing lab confirm the report number, lot and results for each lot, reached through independently found contact details, and the reply is filed as the confirmation record (EV-03). The same step places confirmatory testing on a schedule, and its other records are the confirmatory report (EV-21) and the testing invoices (EV-16). Helios Consultants LLC describes step 4 with the other six in how Helios verifies every lot. If you want help setting this up in your clinic, book a consultation.
Related questions
How Can a Clinic Verify the Exact Batch of a Peptide It Receives?
How Do You Check a Lab’s Scope of Accreditation (and Why It Matters More Than the Logo)?
How Can You Tell If a Peptide COA Is Real or Fake?
How Do You Document COA Verification So It Holds Up With a Board, Insurer, or Auditor?
Sources
ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, sections 7.31 and 11.44. View source
ISO/IEC 17025:2017 clause 7.8, Reporting of results, crosswalk. NIST. View source
A2LA Directory of Accredited Organizations. A2LA. View source
ANAB Directory of Accredited Organizations. ANAB. View source
ILAC MRA signatory search. ILAC. View source
Educational content for licensed professionals. Not legal or medical advice. No product is offered for sale on this page.