How to Source Ingredients That Actually Pass Prop 65 Testing

I've seen the same thing happen to a dozen supplement brands: they spend months perfecting a formula, negotiate with a contract manufacturer, get their first production run, send it off for testing, and — bam — lead is at 1.2 mcg per serving. Cadmium at 5.8. Arsenic at 14.

And now they're scrambling. Do they scrap the batch? Reformulate? Hope nobody files a Prop 65 notice before they sell through inventory?

Here's the thing nobody tells you: you can't test your way out of dirty ingredients. If your rice protein is loaded with arsenic, no amount of finished-product Prop 65 testing is going to fix that. The problem started at sourcing, and that's where it has to be solved.

So let's talk about how to buy ingredients that will actually pass.

The High-Risk Ingredient List (Memorize This)

Some raw materials are almost always problematic. Others are almost never a problem. Here's who to watch, based on what I've seen in hundreds of lab reports.

Rice protein — Arsenic's favorite hiding spot.

Rice accumulates arsenic from soil and irrigation water more aggressively than almost any other crop. Brown rice protein is even worse than white — arsenic concentrates in the bran. A 30g serving of rice protein concentrate routinely tests at 15-40 mcg of inorganic arsenic. That's 1.5X-4X the Prop 65 NSRL of 10 mcg/day.

If you're building a plant-based protein, consider pea protein instead. Peas don't have the same arsenic uptake. Or if rice must be in the blend, keep it below 20% of the total protein and source from regions with documented low-arsenic soil (California-grown rice generally tests lower than rice from the southern US).

Cocoa and cacao — Cadmium central.

Cocoa trees (especially Criollo varieties) pull cadmium from volcanic soils. South American cacao — Peru, Ecuador, Colombia — consistently tests highest. West African cacao typically tests lower.

Dark chocolate and raw cacao powder concentrate this further because you're getting more of the cocoa solids per gram. A 5g scoop of raw cacao powder in a pre-workout or "superfood" blend can carry 3-8 mcg of cadmium all by itself.

Solution: source cocoa from West African origins, or spec cadmium limits in your purchase agreement. Some suppliers now offer "low-cadmium" cocoa lines specifically for the California market.

Greens blends — The everything problem.

Spinach, kale, chlorella, spirulina, wheatgrass, barley grass — they grow in dirt, and dirt has everything. Greens pull lead from soil, cadmium from phosphate fertilizers, and arsenic from irrigation water. A greens blend with 10+ ingredients is basically a heavy metal sampler platter.

The issue compounds: if each of 8 greens ingredients contributes 0.05 mcg of lead per gram, and your serving is 10 grams total, you're at 0.5 mcg just from the greens — and that's your entire lead budget for the serving.

Mineral supplements — The mining problem.

Calcium (from limestone/dolomite), magnesium (from mining or seawater), and zinc (from ore) can carry lead, cadmium, and arsenic from their geological source. "Natural" forms are often dirtier — chelated minerals and synthetic forms (like magnesium citrate or zinc gluconate) are typically cleaner because they go through purification steps that remove heavy metals.

Spices and herbs — Turmeric is the worst offender.

Turmeric root concentrates lead from soil. Cinnamon, ginger, ashwagandha, and black pepper can also carry significant lead and cadmium. If your product has a "proprietary blend" of 5+ herbs, each at small amounts, test them individually during sourcing — the cumulation across ingredients is what gets you.

How to Vet Suppliers (Before You Send a PO)

Most brands ask suppliers two questions: "What's the price?" and "What's the MOQ?" That's not vetting. That's shopping.

Here's what to ask instead:

1. "Can I see your heavy metal COA for the current lot?"

Not last year's spec sheet. Not the "typical analysis" from a brochure. The actual Certificate of Analysis for the specific lot you'd be buying, from an ISO 17025 accredited lab, showing lead, arsenic, cadmium, and mercury results.

If they can't produce this within 48 hours, walk away. Serious suppliers have this ready.

2. "Where was this grown/harvested, and when?"

Origin matters enormously. Rice from California tests different than rice from Louisiana. Cocoa from Ghana tests different than cocoa from Peru. A supplier who can't tell you the specific growing region either doesn't know or doesn't want you to know — neither is good.

3. "What's your heavy metal specification for this ingredient?"

Every quality supplier has an internal heavy metal spec — the maximum levels they'll accept before rejecting a lot. Ask what theirs is. If it's higher than 50% of the Prop 65 threshold for that metal (accounting for your serving size), you may have an issue.

4. "Can I send a sample to my own lab before committing?"

If they say no, that's a red flag. Reputable suppliers expect this — it's standard practice. Budget $100-200 for independent verification of any new ingredient before you cut a PO.

Building a Supplier Qualification Program

You don't need ISO certification or a 40-page SOP. You need a practical system you'll actually follow.

Tier your suppliers.

• Tier 1 (low risk): Synthetic vitamins, amino acids, processed isolates. Annual COA review is usually fine.
• Tier 2 (moderate risk): Mineral supplements, single-origin botanicals, fruit/vegetable powders. Require COAs per lot, spot-test 1 in 5 lots independently.
• Tier 3 (high risk): Rice protein, greens blends, cocoa products, multi-herb blends, marine-sourced ingredients. Require COAs per lot AND independent test every lot before production.

The COA trick most brands miss

A supplier's in-house COA is a starting point, not a finish line. Some suppliers use their own labs or preferred labs that may not be fully independent. Others report total arsenic when you need inorganic arsenic — those are very different numbers.

Always ask: was this tested at an ISO 17025 accredited lab? Is it a third-party lab (not owned by or affiliated with the supplier)? Does the arsenic number represent total or inorganic?

If you get vague answers, get your own test.

What to Put in Your Purchase Agreement

If you're serious about Prop 65 compliance, your raw material purchase agreements need teeth.

• Heavy metal rejection limits. Specify in writing: lead < X mcg/g, cadmium < X mcg/g, arsenic < X mcg/g, mercury < X mcg/g. Include that these are per Prop 65 safe harbor levels when adjusted to your finished product serving size.

• Right to test and reject. You get to independently test any lot and reject it if it fails your spec. Supplier covers return shipping and refunds or replaces.

• Consistency clause. If a supplier changes their source region, growing method, or processing facility, they must notify you before shipping — not after.

The "California-Ready" Ingredient Program

More suppliers are now marketing ingredients as "Prop 65 compliant" or "California-ready." Some of this is real — they've actually done the sourcing work and can back it up with data. Some of it is marketing.

Here's how to tell the difference: ask for the lot-specific heavy metal COA for the last three production lots, not just the most recent one. If all three are consistently below your thresholds, you're probably dealing with a supplier who actually controls their sourcing. If there's lot-to-lot variation of 2X or more, their supply chain isn't controlled.

FAQ

Q: Which ingredient should I test first if I can't afford to test everything?

Rice protein (arsenic), then cocoa/cacao (cadmium), then greens blends (lead). Those three ingredient categories account for more Prop 65 failures than everything else combined.

Q: Can I blend a "dirty" ingredient with a "clean" one to average down?

Technically you can dilute a bad ingredient with cleaner ones, but it's playing with fire. If your supplier changes their sourcing and the "dirty" ingredient gets dirtier, your finished product fails. Fix the ingredient, don't mask it.

Q: Are organic ingredients cleaner?

Sometimes yes, sometimes no. Organic certification doesn't limit heavy metal content — it regulates pesticides and farming practices. An organic rice protein can still be loaded with arsenic because arsenic is in the soil, not a sprayed pesticide. Test organic ingredients the same way you test conventional ones.

Q: What if I import ingredients from outside the US?

The testing requirements are the same regardless of origin. If anything, be more aggressive with imported ingredients — some source regions have no domestic heavy metal regulations at all. Always independently test imported lots before they enter production.

Q: How do I find suppliers who already do Prop 65 testing?

Ask during the RFQ process: "Do you provide lot-specific heavy metal COAs from ISO 17025 accredited labs?" If they say yes, ask to see one. If they say "we can get that" instead of "here it is," they don't routinely do it. Also, some trade shows (SupplySide West, Expo West) now have "Prop 65 compliant" pavilions or exhibitor filters — use them.

---

Stop guessing whether your ingredients will pass. LabQuotes gets you heavy metal COAs on raw materials before you ever place a purchase order. Send us a sample, we'll match you with an ISO 17025 accredited lab, and you'll have actionable data in 5-7 business days. No contract, no subscription — test what you need when you need it.

Test your raw ingredients →