A Certificate of Analysis is one of the few documents in the beauty and ingredient world that can actually tell you what's in a product rather than what a brand wants you to believe is in it. It's a lab report, tied to a specific batch, listing what was tested and what the results were. The catch: most people who see one skip straight to the purity number, miss the more important questions, and treat a reassuring-looking PDF as proof of quality it doesn't actually provide.
Here's the honest reframe: a COA is a traceability record, not a brochure — and reading it well is less about the headline purity figure than about knowing what was tested, by whom, and what the document quietly leaves out. This guide walks through how to judge one, what it can and can't prove, and the red flags that separate a real analytical record from paperwork designed to calm an uncritical buyer. It sits alongside our grading methodology and our guide to reading beauty claims as part of seeing past marketing.
A Certificate of Analysis is a document issued by a testing laboratory (or a manufacturer's quality-control department) after analysing a sample. It reports results for a specific batch or lot against a set of acceptance criteria — essentially, lab-verified evidence that what's on the label matches what's in the container, for that production run. A COA for one batch says nothing about a different batch or shipment. Think of it as a passport for a specific batch: it should be traceable back to the exact product in front of you, not a floating template reused across orders.
A COA can look dense, but each part is doing a specific job:
| Section | What it tells you | What to check |
|---|---|---|
| Identity block | Which product/batch this record belongs to | Product name, a batch/lot number that matches the label, and analysis/manufacture dates. Vague here = the whole document is hard to trust |
| Purity / assay | How much of the claimed ingredient is present, and how clean it is | Measured by HPLC, expressed as a % (the target peak vs all peaks). Note: this is peptide/organic purity — it says nothing about water, salts, or non-tested contaminants |
| Identity confirmation | That it's actually the right compound | Ideally confirmed by mass spectrometry (MS). This matters because purity ≠ identity — a compound can read "pure" and still be the wrong molecule |
| Contaminants | Safety-relevant impurities | Heavy metals (lead, mercury, arsenic, cadmium — by ICP-MS, in ppm or "not detected") and microbial testing are the cosmetically relevant ones |
The single most useful mental correction: purity and identity are not the same thing. A high HPLC purity figure only tells you the main peak dominates — mass spectrometry is what confirms the peak is the molecule it's supposed to be.
Not all COAs carry the same weight. An in-house COA is generated by the manufacturer's own lab; a third-party COA comes from an independent laboratory. Both can be valid, but third-party testing is generally more credible because it removes the conflict of interest in a company grading its own product. The stronger signs are a named, independently verifiable testing lab (ideally ISO 17025-accredited) — one you could look up or contact using details you found yourself, not just the ones printed on the document. A COA from a lab you can't independently verify isn't meaningfully "third-party" at all.
This is where most people are misled — a clean-looking certificate can still leave major questions open:
| A COA does... | A COA does NOT... |
|---|---|
| Report the tests that were performed | Report anything about tests that weren't run |
| Cover the specific batch tested | Guarantee other batches or future shipments |
| Confirm purity of the main analyte | Prove the sample is free of untested contaminants |
| Provide a snapshot at the test date | Account for later degradation from poor storage |
So a certificate can show a strong purity result and still be incomplete: if it says plenty about purity and nothing about contamination, it may not be reassuring at all for your purpose. The stronger question isn't "is there a COA?" — it's "which analytes were tested, by what method, and what was left out?"
Some signals should make you distrust a COA immediately:
| Red flag | Why it matters |
|---|---|
| No batch/lot number, or a mismatch with the label | The COA can't be tied to the actual product — it could belong to anything |
| No named, verifiable testing lab | No external accountability for the numbers |
| In-house testing only | Less independence; more room for optimistic reporting |
| Vague purity ("just >95%", no method or exact value) | Insufficient — and "purity by weight" or TLC instead of HPLC is far weaker |
| Identical COAs across different batches | Same data on different batch numbers suggests fabricated documents |
| Implausibly perfect purity (99.9% every batch) | Analytical variation makes flawless results across all batches unlikely |
| Altered or edited-looking documents | Any sign of tampering voids trust |
| Refusal to provide a COA at all | For any quality-conscious supplier, a disqualifying sign |
Reading a COA is a sequence, not a scavenger hunt for the purity line. Confirm the document even belongs to the product (identity), check that the main ingredient was measured properly and against a standard (purity/assay), see whether identity was actually confirmed (MS), and note what safety testing was — and wasn't — included (contaminants). The biggest mistake is treating every COA as equally informative: some are genuine analytical records, others are just enough paperwork to reassure someone who won't read them closely. Treat the certificate like a passport, not a brochure — and ideally ask for it before you buy, not after.
Some COAs — particularly for research or injectable products — also report endotoxin (LAL) and sterility testing. These parameters exist because injecting a substance carries risks that applying a cream doesn't, and they belong to a medical or research context that falls outside cosmetic skincare entirely. This guide covers the cosmetic-verification use of a COA; it does not address how to evaluate, source, dose, or use any injectable or research compound, which are matters for qualified professionals. If you've encountered COAs in that context, the key point here is simply how to read the document critically — not a recommendation to use anything.
Vallydia is built on judging ingredients by evidence rather than marketing — and a COA is one of the few tools that lets you check a quality claim directly:
This supports our concern-first guide to choosing skincare.
What is a Certificate of Analysis? It's a document issued by a testing laboratory (or a manufacturer's quality-control department) that reports the results of tests run on a specific batch of a product, against set acceptance criteria. In practice, it's lab-verified evidence that what's claimed on the label matches what's actually in the container — for that particular production run. A COA typically confirms things like the ingredient's identity, its purity, and sometimes contaminant levels such as heavy metals or microbial content. The important nuance is that it's batch-specific: a certificate for one lot tells you nothing about a different batch or shipment, so it functions as a traceability record tied to the exact product in front of you.
What should I look for first on a COA? Not the purity number, even though that's where most people jump. Look first at the identity block: the product name, a batch or lot number that matches the label on your product, and the relevant dates. This confirms the certificate actually belongs to what you have, rather than being a generic template reused across orders. Only once you've established that the document is traceable does the purity and testing data become meaningful. A COA with a vague or missing identity section is hard to trust no matter how good the purity figure looks, because you can't be sure it describes your product at all.
Does a high purity percentage mean a product is good? Not on its own. A purity figure — usually measured by HPLC — tells you the main component dominates the sample, but it has two big limitations. First, purity is not identity: a compound can read as highly "pure" and still be the wrong molecule, which is why mass spectrometry is needed to confirm what it actually is. Second, purity typically reflects only certain (organic) impurities and says nothing about contaminants that weren't tested for, such as heavy metals or microbial content unless those were separately assessed. So a strong purity number is reassuring only alongside confirmed identity and a clear picture of what else was — and wasn't — tested.
What's the difference between third-party and in-house testing? An in-house COA is produced by the manufacturer's own quality-control lab, while a third-party COA comes from an independent testing laboratory. Both can be legitimate, but third-party testing is generally considered more credible because it removes the conflict of interest inherent in a company assessing its own product. The stronger indicator is a named, independently verifiable laboratory — ideally one with recognised accreditation — that you could look up or contact using information you found yourself, not only what's printed on the certificate. A COA attributed to a lab you can't independently verify doesn't really provide the objectivity that makes third-party testing valuable.
What are the biggest red flags on a COA? Several. A missing batch/lot number, or one that doesn't match your product, means the certificate can't be tied to what you actually have. No named or verifiable testing laboratory means there's no external accountability for the results. Vague purity claims ("just >95%" with no method or exact figure), or purity stated by weight or a weaker method rather than HPLC, are insufficient. Identical data appearing on COAs with different batch numbers suggests fabricated documents, and implausibly perfect purity on every single batch is statistically unlikely given normal analytical variation. Any sign the document has been altered, or a supplier refusing to provide a COA at all, should end your trust in it.
What can't a Certificate of Analysis tell me? A COA only reports the tests that were actually performed, so its silence is as important as its data. A clean purity result says nothing about contaminants that weren't tested for. It covers only the specific batch that was sampled, not other batches or future shipments. And it's a snapshot from the test date — it can't account for degradation caused by poor storage or handling afterwards. This is why the more revealing question isn't simply "is there a COA?" but "which analytes were tested, by what method, and what was left out?" A certificate that says a lot about purity and nothing about contamination scope may be incomplete for what you need it to prove.
Do I need to understand COAs for regular skincare? For most mass-market skincare you won't see a COA, and you don't need one — but the literacy is increasingly useful. As more brands and ingredient sellers publish COAs as a transparency signal, knowing how to read one lets you judge whether that signal is meaningful or just reassuring-looking paperwork. It's especially handy for evaluating quality or authenticity claims and spotting fakes, which shares logic with knowing how to identify a counterfeit product. The same critical mindset — check identity and traceability first, understand what each test does and doesn't prove, and notice what's missing — applies whether you're reading a certificate or simply reading an ingredient label.
This is a neutral, educational verification reference from Vallydia. It concerns the quality and authenticity of cosmetic ingredients and is not medical advice. Endotoxin and sterility testing, and any use, sourcing, dosing, or evaluation of injectable or research compounds, fall outside cosmetic skincare and are matters for qualified professionals — no such guidance is provided here.
Full evidence breakdown: Vitamin C (L-Ascorbic Acid) · how we grade.
Vallydia sells its own cosmetic serums, and some ingredients discussed here belong to the same categories as those products. Assessments are drawn from the published evidence by the method we publish, and applied to our own ingredients on the same terms — our copper-peptide serum is graded no more kindly than the peptides it competes with. We disclose the interest so you can weigh it.
Brand and trade names appearing in these articles are the property of their respective owners and are used only to identify the product or ingredient under discussion. Their appearance implies no affiliation with, or endorsement by, the proprietor. Where we judge a claim, we are judging the published evidence for that claim — not making a statement about the company that makes it.
A neutral reference and a lawful-lane shop. Information for those who seek it — never promotion.
This site provides neutral scientific reference and sells only products lawful in your region. Nothing here is medical advice, a recommendation, or an offer to supply unapproved medicines. No dosing or administration is published for research compounds. Cosmetic peptides per Regulation (EC) 1223/2009. Unapproved injectable peptides are neither sold nor advertised in the EU (Directive 2001/83/EC, Title VIII). © 2026 Vallydia.