The certificate of analysis (COA) is the document that links a research peptide to a chemical identity and a purity claim. Not every COA carries equal weight. Vendors structure their disclosure practices in meaningfully different ways, and where a vendor sits in the transparency hierarchy tells you how much independent verification you're actually working with. The framework below is one described by vendor-analysis sites including PeptideBenchmark.
The Four Disclosure Tiers
PeptideBenchmark and the broader vendor-analysis community describe a rough hierarchy of COA access, running from fully public to entirely absent. PeptideBenchmark distinguishes "Public Docs" (publicly inspectable but vendor-hosted) from "Gated COA," where the certificate layer appears only after login. These tiers aren't standardized across the industry. The names below reflect common usage rather than any single official taxonomy.
| Tier | What you see | Key limitation |
|---|---|---|
| Public / on-page | Full COA (HPLC trace, mass spec, purity %) viewable without an account, often by lot number | None specific to access — quality still depends on the testing lab |
| Gated / account | COA downloadable after registration or on request | Document may exist and be legitimate, but the friction removes casual public scrutiny |
| Third-party linked | Vendor links out to an independent lab's published result (e.g., a Janoshik report hosted on the lab's own server) | Strongest signal when the lab published independently and the lot numbers match |
| None / internal only | No COA provided, or vendor claims testing without documentation | Buyer cannot verify the claim at all |
Tier placement guarantees nothing in either direction. A top-tier vendor may run a captive in-house lab with limited independence. A gated vendor may share thorough documentation the moment you ask. The tier describes access, not accuracy.
What a COA Should Contain
A meaningful COA for a synthetic peptide reports two things: identity confirmation, usually by mass spectrometry, which verifies molecular weight; and purity, usually by HPLC, which separates and quantifies components. Reputable contract manufacturers publish technical guidance on these standards. Bachem's quality-control guide notes that analytical HPLC with UV detection around 210–220 nm is the standard purity method, while ESI-MS and MALDI-TOF-MS confirm molecular weight. The United States Pharmacopeia (USP) publishes reference standards and compendial methods for approved peptide drugs, describing the accepted analytical approaches. Researchers sometimes treat these as a benchmark for what rigorous testing looks like, even though research-grade vendors aren't required to meet pharmaceutical standards.
A COA that reports only a single figure ("99% purity") with no named testing method, lot number, or lab identity gives a reader no way to verify or reproduce the result. Lot traceability, the ability to match a COA to a specific production batch, is the minimum that allows any external audit of the claim.
Third-Party Testing and Independent Verification
The strongest transparency signal, in the frameworks used by PeptideBenchmark and Finnrick, is an independently published third-party result where the testing lab holds the original data. Two distinct roles get conflated here and are worth separating.
Analytical labs such as Janoshik run the HPLC and mass-spec themselves and publish results on their own servers. Janoshik maintains a publicly searchable database at public.janoshik.com, so a report can be checked by batch ID without involving the vendor at all. Aggregators such as Peptigrity don't operate a lab. They collect user-submitted COAs from independent labs into a searchable database and use them to score shops. Peptigrity states its database holds several thousand tests drawn from dozens of verified labs. Finnrick likewise publishes its own large body of vendor test results and A–E ratings. When a vendor's product shows up in any of these with a matching lot number, the result exists outside the vendor's control.
That last point is what matters. A vendor-supplied COA, even a genuine one, comes from a party with a commercial interest in the result. External replication doesn't eliminate all risk, but it adds at least one independent data point. VialAudit is one example here. It describes itself as an independent research desk that ships samples under an alias to labs blind to the vendor, and grades vendors on independently obtained results rather than self-reported COAs.
How to Apply the Framework
If you're evaluating a vendor, four questions form a practical checklist. Can you access the COA without creating an account? Does the COA name the testing lab and method? Does the lot number on the COA match the lot number on the product label? Is there any third-party result for this vendor's products on an independent platform? Vendors that score well on all four are, in principle, more auditable than those that don't. None of this constitutes a safety endorsement. Research peptides are sold for research use and are not approved for human consumption; the COA framework applies to chemical identity and purity verification in a research context.
Sources
- PeptideBenchmark — vendor transparency scoring and COA tier taxonomy
- Finnrick — aggregated vendor ratings and independent test results
- Janoshik Analytical — independent third-party peptide testing, publicly published results
- Peptigrity — aggregated third-party lab-test database and shop trust scoring
- VialAudit — independent vendor audits and purity grading
- United States Pharmacopeia (USP) — Peptide Standards — reference standards and analytical methods for peptide identity and purity
- Bachem — Quality Control of Amino Acids & Peptides — manufacturer guidance on HPLC and mass-spectrometry analytical standards