ISO 17025 for Supplement Testing, Explained

If you have ever asked a contract lab whether they can test your supplement and heard them say "yes, we are ISO 17025 accredited," you might have wondered what that actually means and whether it matters. It does. ISO/IEC 17025 is the single most important credential a testing laboratory can hold for supplement work. This article explains what the standard requires, how accreditation works under it, and why it matters for your brand whether you sell on Amazon, through retail, or direct-to-consumer.

What ISO 17025 actually means

ISO/IEC 17025 is titled "General requirements for the competence of testing and calibration laboratories." The short version: it is a quality management and technical competence framework that proves a lab can produce valid, reliable test results.

It is not a government regulation. It is an international standard published by ISO (International Organization for Standardization) in partnership with IEC (International Electrotechnical Commission). Labs do not get "ISO 17025 certified" -- they get accredited to ISO 17025 by an accreditation body after an on-site assessment.

The current version is ISO/IEC 17025:2017. The 2017 revision shifted the standard toward risk-based thinking and gave labs more flexibility in how they structure their quality systems while strengthening requirements around impartiality and confidentiality.

What the standard requires a lab to do

ISO 17025 covers two big buckets: management requirements and technical requirements.

Management requirements mirror a lot of what you would see in ISO 9001. The lab must have a documented quality policy, a quality manual, controlled documents and records, internal audits, management reviews, and a corrective action process when something goes wrong.

Technical requirements are where it gets real for supplement testing. The lab must:

• Use validated or verified methods. If they are running USP <2232> for heavy metals by ICP-MS, they must prove the method works in their hands.
• Maintain equipment calibration and traceability. Every balance and pipette has a calibration chain traceable to national standards (NIST in the US).
• Demonstrate proficiency through testing. Labs must participate in proficiency testing programs (PT) where they test blind samples and their results are compared against other labs. If they fail a PT round for a specific method, they must investigate and correct it.
• Prove staff competence. Analysts must be trained, qualified, and periodically re-evaluated.
• Ensure measurement uncertainty. For quantitative tests like HPLC potency assays, the lab must calculate and report the uncertainty of their measurement. A result of 500 mg per serving plus or minus 25 mg is not the same as "about 500 mg."

How accreditation works

Accreditation is not a one-and-done event. An accreditation body sends assessors to the lab's facility for an initial on-site assessment that typically lasts two to five days depending on the lab's scope. Assessors review the quality system documents, watch analysts run methods, check calibration records, and verify that the lab is doing what it says it does.

After initial accreditation, the lab undergoes surveillance audits -- usually annually. Every four years there is a full reassessment. If the lab adds new methods to its scope, those must be assessed too.

A lab's scope of accreditation lists the specific methods, analytes, matrices, and detection ranges the lab is accredited for. A lab can be accredited for lead in dietary supplements by ICP-MS but not accredited for pesticides by GC-MS/MS. Always check the scope.

Key concept: a Certificate of Analysis (COA) is only covered by the accreditation if the specific test appears on the lab's scope. If a lab runs an unaccredited method and puts it on the same COA as accredited work, the COA must clearly distinguish which results are accredited and which are not.

Who the accreditation bodies are

ISO 17025 accreditation is granted by recognized accreditation bodies (ABs). These ABs are themselves assessed through mutual recognition arrangements, primarily ILAC (International Laboratory Accreditation Cooperation) and APAC (Asia Pacific Accreditation Cooperation). An ILAC MRA signatory accreditation means the lab's results are recognized across borders.

Major ABs for supplement testing:

When a lab says "we are ISO 17025 accredited by A2LA," the "by A2LA" part matters. It tells you who verified their competence. A self-claimed "ISO 17025 compliant" lab with no accreditation body backing it has not been independently assessed.

How to verify a lab is actually accredited

This step is fast and free. Every accredited lab has an accreditation certificate with a unique number. Go to the accreditation body's website and search the directory.

For A2LA: search the A2LA directory at a2la.org/directory. Type in the lab name or certificate number. The search result will show the lab's scope, accredited methods, and certificate status (active, suspended, withdrawn).

For ANAB: use anab.ansi.org/accreditation/directory.

For UKAS: ukas.com/find-an-organisation.

Red flags when checking:

• The lab's name on the certificate does not match the name on the COA. Acquisitions and name changes happen, but an active certificate must match.
• The certificate is expired. Accreditation typically lasts two years with annual surveillance.
• The specific method you need (e.g., USP <2021> microbial enumeration) is not on the scope.
• The lab is "affiliated" but the certificate belongs to a parent company whose scope does not include the work being done at the local facility.

If a lab will not give you their accreditation certificate number or their accreditation body, walk away.

⚠️ Note

A lab saying "we follow ISO 17025 guidelines" is not the same as being accredited to ISO 17025. Only an accreditation body can grant accreditation. Self-declaration means nothing.

Why Amazon, the FDA, and retailers want it

Amazon's supplement compliance policy requires testing from ISO/IEC 17025 accredited laboratories. The policy document specifies that COAs must come from an accredited lab for identity, potency, heavy metals, and microbiology. If you submit COAs from a non-accredited lab during a compliance review or a reinstatement after a listing suspension, Amazon will reject them.

The FDA does not explicitly require ISO 17025 in 21 CFR 111. However, 21 CFR 111.75(a)(2) requires that testing methods be "scientifically valid." Using an ISO 17025 accredited lab is the most defensible way to demonstrate scientific validity. FDA inspectors routinely ask to see the lab's accreditation status and may question results from non-accredited facilities.

Large retailers including Walmart, Costco, and Whole Foods increasingly require third-party testing from accredited labs in their supplier quality agreements. Even if you are not in retail today, planning ISO 17025 testing from the start avoids expensive retesting when a buyer asks.

For more on testing requirements that intersect with accreditation expectations, see our guide on 21 CFR 111 testing requirements.

What ISO 17025 does not cover

Accreditation is a lab competence standard. It does not:

• Guarantee that your product is safe or compliant. A lab can be fully accredited and produce a result showing a contaminant above limits. Accreditation means the result is technically valid, not that it is passing.
• Replace GMP compliance for your own facility. ISO 17025 applies to the testing lab, not to your manufacturing operation. Your GMP status is separate.
• Make every method on a COA automatically accredited. You must verify scope.
• Cover interpretation of results. An accredited lab reports the number. Whether that number means your product complies with Prop 65 or Amazon's limits is a separate regulatory question.

How ISO 17025 connects to your testing workflow

When you launch a new supplement, the testing workflow typically looks like this:

1. Raw material identity testing on receipt (21 CFR 111.70)
2. In-process testing if applicable
3. Finished product testing before release (21 CFR 111.75)
4. Stability testing to support shelf life
5. Ongoing retain sample testing per your SOPs

Every one of those steps benefits from an ISO 17025 accredited lab. Identity testing confirms you received what you paid for. Potency testing confirms your label claim. Heavy metals and microbial testing confirm safety. Stability testing confirms your expiration date. If any of those results come from a non-accredited lab, you lose the defensibility that accreditation provides during an inspection or an Amazon compliance review.

For guidance on finding the right lab, see our how to find a supplement testing lab guide.

Quick Reference

Lab Category Matching

Real Methods Explained

What Sample to Send

Finished product samples in final packaging following the lab's chain-of-custody procedure. Raw material samples in clean, labeled containers with batch/lot numbers. Typical sample quantity: 50-100 g or 10-20 capsules/tablets per test panel. Confirm with the lab before shipping.

Expected Turnaround Time

Accreditation Notes

Always check: (1) certificate is active and not expired, (2) the specific methods you need are on the lab's scope, (3) the accrediting body is an ILAC MRA signatory, and (4) the COA clearly marks which results are within scope. If you are selling on Amazon, the lab must hold ISO/IEC 17025 accreditation from a recognized body. ANAB, A2LA, PJLA, UKAS, NATA, and DAkkS are all ILAC MRA signatories.

Price Ranges

Country/Region Targeting

ISO 17025 accreditation is recognized globally through ILAC MRA signatories. For US market products, A2LA or ANAB accreditation is most common. For EU/UK market products, UKAS or DAkkS accreditation is preferred. For products sold across multiple regions, confirm that the lab's accreditation body is an ILAC MRA signatory so results are accepted internationally.

FAQ

Q: Is ISO 17025 required by the FDA for supplement testing?

The FDA does not explicitly require ISO 17025 accreditation in 21 CFR 111. However, 21 CFR 111.75(a)(2) requires that test methods be scientifically valid. Using an ISO 17025 accredited laboratory is the most widely accepted way to satisfy this requirement. FDA inspectors frequently ask about the lab's accreditation status. If you cannot demonstrate that your testing lab is competent, your test results may be considered unreliable during an inspection.

Q: Can a lab be ISO 17025 accredited for some tests but not others?

Yes. Accreditation is scope-specific. A lab may be accredited for ICP-MS heavy metals analysis but not for HPLC potency testing. The lab's scope of accreditation lists exactly which methods, analytes, and matrices are covered. If you need a COA where every result is defensible, confirm that every method the lab runs for you appears on their scope. Results from non-accredited methods must be clearly distinguished on the COA if it also contains accredited results.

Q: How long does ISO 17025 accreditation last and how often is it renewed?

Initial accreditation typically involves a multi-day on-site assessment followed by a decision from the accreditation body within 30 to 90 days. After accreditation is granted, the lab undergoes surveillance audits approximately annually with a full reassessment every four years. Accreditation certificates usually list a validity period of two years, but the accreditation remains active as long as the lab passes its surveillance audits and maintains compliance.

Q: What is the difference between ISO 17025 and ISO 9001?

ISO 9001 is a generic quality management system standard applicable to any organization. It focuses on processes, customer satisfaction, and continuous improvement. ISO 17025 includes all the quality management elements of ISO 9001 plus technical competence requirements specific to testing and calibration laboratories. A lab with only ISO 9001 certification has not been assessed for technical competence. A lab accredited to ISO 17025 has been assessed for both management and technical competence. For supplement testing, ISO 17025 accreditation is what you need. ISO 9001 alone is insufficient.

Q: How much does ISO 17025 testing cost compared to non-accredited testing?

ISO 17025 accredited testing typically costs 15 to 30 percent more than the same methods run at a non-accredited lab. However, the price difference is insignificant compared to the cost of rejected test results during an FDA inspection, a failed Amazon compliance review, or a retailer refusing your product. For a full finished product panel (identity, potency by HPLC, heavy metals by ICP-MS, and microbial testing), expect $600 to $1,800 from an accredited lab versus $400 to $1,200 from a non-accredited one. Rush service typically adds 50 to 100 percent surcharge regardless of accreditation status.

Get lab testing quotes →