世界65,000以上のラボ、さらに拡大中
Getting Started

Third-Party Supplement Testing: Why It's Non-Negotiable

28 min read Updated June 11, 2026

Everything you need to know before your label claims end up on a class-action lawsuit billboard.


Look, I'm gonna be straight with you — if you're selling supplements and your entire testing strategy is "the contract manufacturer said it's fine," you're playing Russian roulette with your brand. And the chamber's loaded.

I've spent way too many years watching brands get absolutely wrecked by things a $300 third-party test would've caught. Failed Amazon compliance checks. FDA 483 letters. That one angry Reddit thread where someone tested your "500mg Berberine" and found 11mg of actual berberine. (Yeah, that happens. A lot.)

So here's the deal. This guide is going to walk you through everything about third-party supplement testing — what it actually means, why you need it before you need it, how to read the paperwork without glazing over, and how to not get scammed by a "lab" that's really just a guy with a pH strip and a Gmail account.

Buckle up.


Part 1: First Party, Second Party, Third Party — No, It's Not a Wedding

What "Third Party" Actually Means

Let's kill the confusion right now, because people throw these terms around like confetti and half the time they mean different things.

First-party testing is you testing your own stuff. Your in-house QC lab, your own equipment, your own people. You're the manufacturer testing your own product. Nothing inherently wrong with it — I'll get into when it makes sense later — but let's not pretend it's independent.

Second-party testing is when someone with a vested interest in the transaction does the testing. Your contract manufacturer testing "their" batch before shipping it to you. Or your supplier sending you a COA they generated themselves. Is it useful? Sometimes. Is it independent? Oh, absolutely not. They literally made the stuff. They have every incentive to tell you it's perfect.

Third-party testing is when an organization with zero financial stake in your product tests it. They don't make it, they don't sell it, they don't get a cut if it passes. They get paid the same whether your product is pristine or a dumpster fire. That's the whole point.

Think of it like this: first-party is grading your own homework. Second-party is your friend grading it. Third-party is a proctor you paid who doesn't know you and doesn't care if you fail.

"Three circles labeled First Party, Second Party, and Third Party with arrows showing the relationship — self-testing, supplier-testing, and truly independent lab testing"

Why "But Our Manufacturer Tests Everything!" Is a Terrible Defense

I hear this one constantly. "Our contract manufacturer has an amazing QC lab." Cool story. So did the manufacturer who shipped a certain well-known sleep gummy brand a batch with 200% the labeled melatonin dose. Their in-house testing? Perfectly fine, nothing to see here. The third-party test the brand commissioned after customer complaints? Yeah, not so much.

Contract manufacturers are not evil — most are perfectly competent. But their incentives are not your incentives. They want to ship product and get paid. You want to not get sued and not get delisted. Those two things overlap, but they are not the same circle.


Part 2: Why You Actually Need This (Beyond "Because I Said So")

Regulatory Reality Check

The FDA doesn't pre-approve supplements. You know this. But what you might not know is that the FDA absolutely does enforce GMPs (21 CFR Part 111), and one of the core requirements is that you — the brand owner — are responsible for verifying that your finished product meets specifications.

Not your manufacturer. You.

Specifically, 21 CFR 111.75 says you need to verify that your finished product meets identity, purity, strength, and composition specs. And 111.123 says you need to confirm the identity of each dietary ingredient. The FDA doesn't explicitly say "you must use third-party testing," but when the inspector shows up and asks how you verified those things, "uh, the manufacturer sent us a COA" is not going to make their day.

"FDA 483 letter excerpt showing a citation for failure to verify finished product specifications — dense regulatory text with key phrases highlighted"

Retailers Are Getting Aggressive

Amazon is not messing around anymore. Their Compliance team now requires third-party testing documentation for a growing list of supplement categories. They'll ask for ISO 17025-accredited lab results, and if you can't produce them, your listing goes poof. No warning, no negotiation, just a blank page where your revenue used to be.

Walmart requires third-party testing through their approved lab network. Whole Foods has their own list of approved certifiers. GNC and Vitamin Shoppe both require third-party COAs as part of vendor onboarding.

The takeaway: if you want your product on real shelves — physical or digital — third-party testing stops being optional real fast.

Consumer Trust and That Thing Called the Internet

Consumers are savvier than they've ever been. They know what a COA looks like. They know what ISO 17025 means. They'll email your support team and ask for lab results, and if you say "that's proprietary information," they'll post the screenshot on Twitter and you'll spend a week doing damage control.

On the flip side, brands that post their COAs publicly — or at least make them easily available — build ridiculous amounts of trust. It's a competitive advantage that costs you a few hundred bucks per test. That's the cheapest marketing you'll ever buy.

The Liability Thing (a.k.a. The Scary Part)

If someone gets sick from your product, or your product doesn't contain what the label says, you're getting sued. In that lawsuit, the plaintiff's attorney is going to ask for your testing records. If your answer is "we don't have any," congratulations, you just made their case incredibly easy.

Third-party testing creates a paper trail of due diligence. It shows you did your homework. It might not prevent the lawsuit, but it'll sure help you survive it.


Part 3: ISO 17025 and Why "We Have a Lab" Means Nothing

What ISO 17025 Actually Is

ISO 17025 is the international standard for testing and calibration laboratories. It's not a certification that says "this lab is good at science." It's an accreditation that says "this lab has been audited by an independent accreditation body and demonstrated technical competence, impartiality, consistent procedures, and proper equipment calibration."

Getting ISO 17025 accredited takes 6-18 months and costs a significant chunk of money. Labs that go through it don't mess around — they've got documented SOPs for everything, regular proficiency testing, equipment calibration schedules, and an external auditor who shows up annually to make sure they're not cutting corners.

"Our Lab Is FDA Registered" and Other Things That Sound Impressive but Aren't

Let me translate some common lab marketing claims:

What They SayWhat It Actually Means
"FDA Registered"They filled out a form. That's it. The FDA does not "approve" or "certify" labs. Registration just means they told the FDA they exist.
"GMP Compliant"Anyone can say this. Unless there's a third-party audit backing it up, it's just words.
"State-of-the-art equipment"They bought a spectrometer. So did your local community college. Who calibrated it? Who maintains it? Who validates the methods?
"20 years of experience"The owner's been doing something in the supplement industry for 20 years. Could be anything. Could be packing boxes.
"ISO Certified"Certified to what? ISO 9001 is a quality management standard. It has nothing to do with technical lab competence. Only ISO 17025 matters for lab testing.

"Screenshot of ANAB accreditation search portal showing a lab listing with accreditation number, scope of accreditation, and expiration date"

How to Actually Verify a Lab's Accreditation (Don't Skip This)

You don't take a lab's word for it. You look it up yourself. Here's where to go:

Every one of these has a public directory. Search the lab's name. If they're not there, they're not ISO 17025 accredited. Period. No excuses.

Also, check their scope of accreditation. A lab might be accredited for environmental water testing but not dietary supplements. The scope document lists exactly what tests they're accredited to perform and what methods they use. If the test you need isn't on that scope, it's not an accredited test even if an accredited lab runs it.


Part 4: How to Read a COA Without Your Eyes Glazing Over

Alright, let's walk through a real COA. I'm going to annotate every section so you know exactly what you're looking at — because most people just scan for "PASS" and move on, which is how you miss the fact that the lab tested for salmonella using a method from 1997.

"Full annotated COA from a dietary supplement with callout boxes pointing to each section — header, methodology, results, limits, and footnotes"

The Header — More Important Than You Think

LABORATORY NAME:  [Accredited Lab Name]
ACCREDITATION:    ISO/IEC 17025:2017 | ANAB Certificate #AT-XXXX
REPORT NUMBER:    L2024-XXXXX-001
DATE REPORTED:    2024-06-15

What to look for:

  1. Accreditation reference. If there's no accreditation body listed (ANAB, UKAS, IAS, etc.) and no certificate number, red flag.

  2. Report number. Every legitimate COA has a unique, traceable report number. If a lab hands you a COA with no report number, how do you reference it later?

  3. Date. COAs expire. Well, technically they don't "expire," but a COA for a batch tested in 2019 tells you nothing about what's on your shelf right now.

Client and Sample Information

CLIENT:           Your Supplement Brand, LLC
SAMPLE ID:        SB-2024-BERB-500 (Client-Assigned)
LAB SAMPLE ID:    L24-3482
SAMPLE DESCRIPTION: Berberine HCL 500mg Capsules (Lot #B240511)
SAMPLE RECEIVED:   2024-06-10
SAMPLE CONDITION:  Acceptable — Intact, Room Temperature

What to look for:

  • Your company name should be on it. A generic COA with no client name is useless — it could be anyone's.
  • Lot number must match what's on your product. If they don't match, this COA is for a different batch.
  • Sample condition. If it says "damaged" or "temperature exceeded," the results might be garbage.

Test Results — The Meat of It

+-------------------------+----------+----------+---------+-----------+----------+
| TEST                    | METHOD   | RESULT   | LIMIT   | UNITS     | STATUS   |
+-------------------------+----------+----------+---------+-----------+----------+
| Berberine HCl (HPLC)    | USP <621>| 512.3    | 450-550 | mg/cap    | PASS     |
| Heavy Metals: Lead      | ICP-MS   | <0.05    | <=0.5   | ppm       | PASS     |
| Heavy Metals: Arsenic   | ICP-MS   | <0.05    | <=0.5   | ppm       | PASS     |
| Heavy Metals: Cadmium   | ICP-MS   | <0.05    | <=0.5   | ppm       | PASS     |
| Heavy Metals: Mercury   | ICP-MS   | <0.02    | <=0.1   | ppm       | PASS     |
| E. coli                 | USP <62> | Absent   | Absent  | /10g      | PASS     |
| Salmonella              | USP <62> | Absent   | Absent  | /10g      | PASS     |
| Total Aerobic Count     | USP <61> | <100     | <=1000  | CFU/g     | PASS     |
| Yeast & Mold            | USP <61> | <10      | <=100   | CFU/g     | PASS     |
+-------------------------+----------+----------+---------+-----------+----------+

Column-by-column breakdown:

  • TEST: What they're measuring. Should match what you asked for. If you asked for a full heavy metal panel and only see lead, someone cut corners.

  • METHOD: This is the analytical method used. This matters. Methods like USP <621> (HPLC assay), AOAC, or ISO methods are validated, peer-reviewed methods. If the method column says "In-House Method" or "Modified," that doesn't automatically mean it's bad, but you should ask questions. Modified methods need validation data to back them up. An accredited lab using a non-accredited method should note that on the COA.

  • RESULT: The number the lab got. "ND" means "not detected" but pay attention to the detection limit — "ND" at a limit of 10ppm is very different from "ND" at 0.01ppm.

  • LIMIT: The pass/fail threshold. Where did these limits come from? Are they your specs? USP monograph specs? California Prop 65 limits? A lab should be able to tell you what standard the limits are based on.

  • UNITS: mg per capsule? Per serving? Per gram? Make sure you understand what you're looking at.

  • STATUS: PASS or FAIL. But don't just scan this column — I've seen COAs where the result was technically within limits but the method was inappropriate for the matrix, making the result meaningless.

The Footnotes — Read Them Or Regret It

Every COA has footnotes, and most people skip them. Don't.

Common footnote red flags:

  • "Results relate only to the sample tested." Standard disclaimer, but it underscores the point: your entire batch isn't tested. The lab tested what you sent them.

  • "Method modified from USP <621>." Modified how? Modified why? Get the validation data.

  • "Subcontracted to [other lab]." Wait — your accredited lab sent your sample to someone else? Is the subcontracted lab also accredited? Did you know about this?

  • "Limit of Detection (LOD) = 0.5 ppm." If your limit is 0.5 and the LOD is also 0.5, the lab can't reliably detect anything at or below your limit. That's a problem.

  • Expired or withdrawn methods. Occasionally you'll see a method reference that's been superseded or withdrawn. This happens more than you'd think. Cross-check USP/NF or AOAC to make sure the method is current.

"Close-up of a COA footnote section with callout boxes highlighting 'Subcontracted to XYZ Lab,' 'Method modified,' and an expired USP reference"


Part 5: In-House QC vs. Third-Party Testing — Both Have a Job

A lot of brands think it's one or the other. It's not. Smart brands use both, just for different things.

In-House QC Testing: When It Makes Sense

In-house testing is fast and cheap per test (once you've bought the equipment). It's perfect for:

  • Routine process controls. Checking fill weights, hardness, disintegration, moisture — things you need to monitor constantly during production.
  • Identity testing of incoming raw materials. You should be ID-testing every lot of every ingredient before it goes into production. Doing that via third-party for every single raw material lot would bankrupt you.
  • Screening. Running quick assays to catch major problems before they get worse.

The key is that in-house testing works when you've got:

  • Proper equipment (maintained, calibrated)
  • Trained staff who know the methods
  • Documented SOPs
  • Regular proficiency testing

Most contract manufacturers doing in-house testing have... some of these things. Know which ones.

Third-Party Testing: When You Need the Big Guns

Third-party testing is for:

  • Finished product verification. This is non-negotiable. Your finished product should hit a third-party lab at least once per lot.
  • Heavy metals, pesticides, residual solvents. These require expensive instrumentation (ICP-MS, GC-MS/MS, LC-MS/MS) and serious expertise. Most in-house labs don't have these capabilities.
  • Stability testing. Real-time and accelerated stability studies should come from an independent lab if you're using them for shelf-life claims.
  • Anything you're putting on a label or in marketing. If you're claiming "500mg berberine" or "third-party tested for purity," that claim better be backed by an actual third-party test.
  • Responding to a problem. Consumer complaint? Competitor making claims? Get an independent test before you respond.
FactorIn-House QCThird-Party Lab
Cost per testLow (after equipment investment)$100-$800+ per test
Turnaround timeHours to 1-2 days5-14 business days
IndependenceNone — you're testing your own stuffFull — no financial stake
Regulatory credibilityAcceptable for routine monitoringRequired for finished product verification, retailer compliance
Defensibility in courtLow — opposing counsel will call it biasedHigh — independent, accredited results
Equipment capabilitiesLimited to what you boughtBroad — multiple instruments, multiple methods
Best forDaily checks, raw material ID, process controlFinished product verification, contaminant panels, stability studies, regulatory submissions
AccreditationRarely ISO 17025Should always be ISO 17025

The Ideal Setup (What I'd Do If It Were My Brand)

  1. In-house: Quick identity checks on every incoming raw material lot (HPTLC or FTIR are fast and relatively affordable).
  2. Third-party: Full finished product panel on every production batch — assay, heavy metals, micro.
  3. Third-party: Pesticide and residual solvent panels annually or upon change of supplier.
  4. Third-party: Stability testing for new products or reformulations.
  5. In-house: Daily physical testing (weight, hardness, disintegration, seal integrity).

That's not overkill. That's CYA.


Part 6: How Retailers Actually View Third-Party Testing

Amazon: The Algorithm Has No Mercy

Amazon's compliance requirements for supplements have gotten progressively stricter since 2021. Here's what they currently look for:

  • ISO 17025-accredited third-party COAs for finished product
  • Testing must match label claims (assay must show your ingredient is within spec)
  • Heavy metals testing
  • Microbial testing
  • Documentation must be less than 1 year old

They'll request this during listing creation, category approval, and randomly throughout the life of your listing. If you can't produce it, your ASIN gets suppressed. No warning, no appeal that works quickly. You're just... gone.

I've watched brands lose six figures in revenue because they couldn't produce a COA they should've had all along.

Walmart, Whole Foods, GNC — The Brick-and-Mortar Gauntlet

Physical retail is a different beast. Each major retailer has their own requirements:

  • Walmart: Requires testing through their approved third-party lab network. You don't get to pick the lab — they do.
  • Whole Foods: Requires certification through one of their accepted third-party certifiers (USP, NSF, UL, etc.) plus COAs.
  • GNC: Requires third-party COAs with every shipment. They'll reject entire pallets if paperwork isn't right.
  • Vitamin Shoppe: Similar to GNC — COAs required, and they'll do their own random testing too.

The common thread: none of them accept in-house manufacturer COAs. Every single one wants independent verification.

"Flowchart showing the retail compliance gauntlet — a supplement bottle navigating through checkpoints labeled Amazon, Walmart, GNC, Whole Foods, each with specific testing requirements"


Part 7: The Marketing Angle — "Tested by an Independent Lab" Actually Sells

This is the part most brands sleep on. You're already paying for the testing. You might as well use it.

Put the COA on your website. Put a QR code on your label that links to the lab results. Say "third-party tested" on your packaging (and have the paperwork to back it up).

Why? Because your competitors probably aren't doing this. Go look at the top 20 supplement brands in your category. How many of them publish actual lab results? Not marketing claims — actual PDFs from an accredited lab? Maybe two or three.

That's free differentiation. Consumers who compare products side by side — and there are more of them than you think — will gravitate toward the brand that's transparent about testing. It's not even a debate. Transparency beats claims every time.

One caveat: don't say "third-party certified" unless you've actually gone through a certification program (USP Verified, NSF Certified for Sport, etc.). "Tested" and "certified" are legally different things. The FDA and FTC both care about this distinction.


Part 8: How to Find and Vet a Third-Party Lab (Without Getting Burned)

Where to Look

Don't just Google "supplement testing lab" and pick the first result. Here's a better approach:

  1. Start with the accreditation directories. Go to ANAB, UKAS, IAS, or PJLA and search their databases for labs with dietary supplement scopes. This filters out 90% of the junk immediately.

  2. Ask for recommendations — but verify. Ask other brand owners which labs they use, then check those labs against the accreditation databases yourself. (Remember: just because someone else uses a lab doesn't mean it's good.)

  3. Check their website for red flags. If the website talks more about "customer service" and "fast turnaround" than about instrumentation, methods, and accreditation, keep looking.

  4. Talk to a human. Call the lab and ask specific questions:

    • "What method do you use for berberine assay?"
    • "Can I see your scope of accreditation for heavy metals testing by ICP-MS?"
    • "What's your typical turnaround time for a full supplement panel?"

    A real lab answers these questions easily. A paper-only lab gets evasive.

The Lab Vetting Checklist

Before you send anyone a sample (and a check), verify:

  • ISO 17025 accreditation — verified on the accreditor's website, not just a logo on the lab's site
  • Scope of accreditation covers dietary supplements and the specific tests you need
  • Methods listed on the scope match what the lab says they'll use
  • The lab actually has the instrumentation they claim (ask for a tour, virtual or in-person)
  • Turnaround time is realistic (7-10 business days is normal; "24 hours" is suspicious)
  • Pricing is transparent and not suspiciously cheap
  • They'll provide a sample COA (redacted) so you can see the format before you commit
  • They participate in proficiency testing programs (ask which ones)
  • They have experience with your specific product matrix (testing powders is different from testing gummies)

Part 9: What This Actually Costs

I'm going to give you real numbers. These aren't estimates from a brochure — these are what you should expect to pay a legitimate ISO 17025 lab in 2024:

Product TypeTypical PanelEstimated Cost
Single-ingredient powder (e.g., creatine)Assay + heavy metals + moisture$200-$350
Single-ingredient capsuleAssay + heavy metals + micro$300-$500
Multi-ingredient capsule/tabletMultiple assays + metals + micro$500-$900
Proprietary blendMultiple assays + metals + micro + pesticide screen$700-$1,200
GummiesAssay + metals + micro + residual solvents$400-$800
Liquids/tincturesAssay + metals + micro + ethanol content + residual solvents$500-$1,000
Sports nutrition (protein, pre-workout)Protein assay + amino acid profile + metals + micro + banned substance screen$800-$1,500
CBD/hemp productsCannabinoid profile + metals + pesticides + residual solvents + micro$500-$1,000

Additional costs to budget for:

  • Rush fees: 50-100% surcharge if you need results in 3-5 days instead of 7-10
  • Method development: $500-$2,000+ if the lab needs to develop or validate a method for a novel ingredient
  • Stability studies: $1,500-$5,000+ per condition (depends on duration and number of time points)
  • Sample prep for complex matrices: Some products require special extraction or digestion — can add $100-$300 per test

Is it cheap? No. Is it cheaper than getting delisted from Amazon or defending a lawsuit? Also no.

Why the "Cheap" Labs Are Cheap

If a lab quotes you $50 for a full supplement panel, they're cutting corners somewhere. Maybe they're:

  • Not actually running the tests (paper-only lab)
  • Using expired reference standards
  • Skipping calibration
  • Diluting samples to hit limits
  • Not maintaining their equipment

You get what you pay for in lab testing. The bargain lab might give you a piece of paper that says everything passed — but when Amazon's compliance team or a plaintiff's attorney scrutinizes it, that $50 COA is going to cost you a whole lot more than the $400 you "saved."


Part 10: Common Scams and How to Spot Them

The "Paper-Only" Lab

This is the most common scam, and it's maddening. A company sets up a professional-looking website, claims ISO 17025 accreditation, collects your sample and your payment, and then... doesn't test anything. They generate a COA full of passing results without ever opening your sample bottle.

How to spot it:

  • They can't show you their scope of accreditation
  • Turnaround is implausibly fast (same day or next day)
  • Results always pass, always within tight tolerances
  • They refuse a virtual tour of their facility
  • Google Maps shows their address is a UPS Store or residential building

The "We Tested It for That Other Brand" Routine

A lab tells you they tested a product "identical" to yours for another client, so your results should be the same. No. Absolutely not. Different batch, different manufacturing run, possibly different raw material supplier. This is laziness dressed up as efficiency.

Fake COAs

Yes, people photoshop COAs. They take a real COA from a legitimate lab, change the client name, change the results, and pass it off as their own.

How to protect yourself: every legitimate lab will verify a COA if you call them. Give them the report number and ask them to confirm it's real. If they can't find it, it's fake.

If you're a brand hiring a contract manufacturer who's providing third-party COAs, call the lab on the COA and verify it. I've seen manufacturers provide fake COAs to brands, and the brand had no idea until a retailer flagged it.

The "Accredited But Not for That" Switcheroo

A lab is ISO 17025 accredited — for environmental water testing. They tell you they can test your supplements "using the same great quality standards." Technically they can run the tests, but the results aren't from an accredited scope, which means retailers and regulators won't accept them. Check the scope.

The Perpetually Expiring Accreditation

A lab claims accreditation but their certificate expired six months ago. They'll say "we're in the renewal process" or "it's just paperwork." The ANAB/IAS/UKAS directory will tell you the truth. If the accreditation is expired, suspended, or withdrawn, walk away.


Part 11: FAQ — The Questions I Get Asked Constantly

Q: How often do I need to test? Every production lot. At minimum, finished product assay + heavy metals + micro for each lot number you produce. Some brands test every batch but composite multiple lots into one test — retailers are increasingly rejecting this approach. Test per lot.

Q: Do I need a new COA if I change nothing about the product? If it's a new production lot, yes. Same formula, same manufacturer, same everything — but it's a different batch of raw materials made on a different day. That's enough variables to require new testing.

Q: Can I use the contract manufacturer's third-party COA? If it's from an ISO 17025 lab, shows your company name, and matches your lot number — technically yes. But I still recommend you commission your own testing separately. Why? Because the manufacturer selected and paid the lab. That's a second-party relationship dressed as third-party. For the most defensible position, you should be the lab's client, not your manufacturer.

Q: What's the difference between a COA and a COC? COA = Certificate of Analysis (test results). COC = Certificate of Conformance (a statement saying "this product meets specifications"). A COC without an underlying COA is just a promise. Retailers and regulators want the COA.

Q: Do I need to test for every ingredient in a multi-ingredient product? You need to test for everything you make a label claim about. If your label says "500mg Berberine, 100mg Cinnamon Bark," you need assay results for both. For ingredients you don't make specific claims about, identity testing may suffice, but talk to your lab about what's appropriate.

Q: How long is a COA good for? A COA applies to a specific lot. It doesn't "expire" in the sense that the results become retroactively invalid, but it only applies to the lot it was generated for. New lot = new COA.

Q: What if I fail? Don't panic. Failing a test doesn't mean your brand is over. It means you caught a problem before it reached customers. Investigate the root cause (bad raw material? manufacturing error? formulation issue?), fix it, re-manufacture, and re-test. Document all of it. This process — find problem, investigate, fix, verify — is exactly what FDA inspectors want to see. It's called CAPA (Corrective and Preventive Action), and it's a core part of GMP compliance.


Part 12: Real Scenarios — How This Plays Out in the Wild

Scenario 1: The Amazon Wake-Up Call

A brand launched a turmeric supplement on Amazon. Sold great for eight months. Then Amazon Compliance sent the dreaded email: provide ISO 17025 third-party COAs for identity, purity, strength, and composition within 7 days.

The brand had never done third-party testing. They'd relied entirely on their contract manufacturer's in-house COAs. They scrambled to get a sample to a lab, but standard turnaround was 10 business days. They paid a 100% rush fee, got results on day 6, submitted on day 7.

The product passed. The listing stayed up. But they lost a week of sleep and paid double what they should have.

Lesson: Have your COAs before you need them.

Scenario 2: The Whole Foods Buyer Meeting

A brand walked into a Whole Foods buyer meeting with great packaging, solid margins, and a compelling story. The buyer asked one question: "Can I see your third-party COAs?"

The brand had them — ISO 17025 lab, per-lot testing, full panels. They handed over a folder. The buyer flipped through, nodded, and moved on to discussing shelf placement.

A competitor in the same meeting didn't have COAs. They said they'd "get them sent over." The buyer smiled and said they'd follow up. They never did.

Lesson: Third-party testing doesn't just protect you from bad outcomes — it actively opens doors.

Scenario 3: The Reddit Disaster

A consumer bought a popular nootropic supplement and decided to send it to an independent lab themselves. (Yes, consumers do this. Reddit communities like r/Nootropics and r/Supplements have been doing independent testing for years.)

The lab found the product contained 23% of the labeled ingredient amount. The consumer posted the COA on Reddit. It hit the front page. Within 48 hours, the brand's Amazon reviews were flooded with one-star ratings quoting the Reddit post. The brand issued a statement saying "we stand by our quality" — without releasing their own testing to refute the claim. The product never recovered.

Lesson: If you're not testing your product, someone else will. And they'll publish the results before you can say "class action."

Scenario 4: The FDA Inspection That Went Well

An FDA investigator showed up at a mid-size supplement brand's facility for a routine GMP inspection. They asked to see finished product testing records. The brand produced third-party COAs for every lot, organized by product, with traceability to raw material lots and production records.

The investigator reviewed them, asked a few follow-up questions about method validation, and moved on. The inspection resulted in a Form 483 with two minor observations unrelated to testing.

Compare that to the brand that couldn't produce any third-party testing records. Their 483 had an observation specifically citing failure to verify finished product specifications under 21 CFR 111.75. That observation triggered a Warning Letter six months later.

Lesson: The inspection you're prepared for is an inconvenience. The one you're not prepared for is a disaster.


Part 13: TL;DR — Your Third-Party Testing Action Plan

If you're staring at this 3,000-word monster and thinking "just tell me what to do," here you go:

  1. Find an ISO 17025 accredited lab — verify on ANAB/IAS/UKAS, not the lab's website.
  2. Commission a full panel on your next production lot — assay, heavy metals, micro at minimum.
  3. Make sure your company name and lot number are on the COA.
  4. Keep the COA accessible — you'll need it for Amazon, retailers, and (hopefully not) FDA.
  5. Test every lot going forward. This isn't a one-and-done thing.
  6. If you can afford it, test for pesticides and residual solvents too — it's one more thing you can say you've verified.
  7. Put the results on your website. Transparency is the cheapest marketing in supplements.

Need a Lab? Let's Talk

Finding the right lab is the hardest part of this whole process. There are hundreds of labs out there, they all claim to be the best, and sorting through them takes time you don't have.

That's what LabQuotes is built for. You tell us what you need tested, and we connect you with pre-vetted ISO 17025 labs that actually have the right scope, the right methods, and the right pricing. No paper-only labs. No expired accreditations. No nonsense.

Get matched with a lab →


Got a testing horror story? A COA that saved your brand? Drop it in the comments — I read every single one, especially the ones where things went sideways.

Ready to get your products tested?

Build a basket of the tests you need and compare quotes from ISO 17025–accredited labs in one place. Free to start.

Get lab quotes

More guides

Cost & Pricing

How Much Does Supplement Testing Actually Cost?

Amazon & Marketplace

Amazon Supplement Compliance: Don't Get Delisted

FDA & GMP

The "Oh Crap, The FDA Is Calling" Guide to 21 CFR 111 Testing Requirements

Getting Started

How to Find a Supplement Testing Lab — The Complete Guide

Test Methods

Heavy Metal Testing for Supplements: Methods, Costs, and What You're Actually Testing For

Test Methods

Shelf-Life and Stability Testing: How Long Does Your Supplement Actually Last?

Manufacturing

Contract Manufacturer Testing: Why 'They Handle It' Is the Most Dangerous Phrase in Supplements

Specialized

Sports Nutrition Banned Substance Testing: NSF, Informed Sport, and BSCG Explained

Getting Started

Supplement Testing for New Brands: What to Do First (Before You Waste Money)

Getting Started

How to Read a Certificate of Analysis: What the Numbers Actually Mean

Test Methods

Probiotic Testing: CFU Counts, Strain Verification, and Shelf-Life Stability

Specialized

CBD Testing: Potency, THC Limits, and the Tests That Keep Your Product Legal

Compliance

Importing Supplements: The Testing and Customs Documentation You Need to Clear the FDA

Manufacturing

Private Label Supplement Testing: Why Your Manufacturer's COA Isn't Enough

Compliance

Prop 65 Supplement Testing: Don't Wait for the Lawsuit Letter

Manufacturing

How to Source Ingredients That Actually Pass Prop 65 Testing

Compliance

California vs. Federal Supplement Testing: Why FDA Compliance Isn't Enough

Specialized

Mushroom Supplement Testing: Is It Actually Mushrooms or Just Grain Powder?

Getting Started

Your Supplement Failed Testing. Now What?

Selling Online

How to Use Your Test Results in Marketing (Without Getting an FDA Letter)

Selling Online

Amazon Supplement Reinstatement: How to Get Your Listing Back After a Compliance Removal

Specialized

Gummy Vitamin Testing: The Sticky Truth Nobody Tells You

Test Methods

Is Your Magnesium Glycinate Actually Magnesium Oxide? How to Test What's Really in the Bottle

Getting Started

How to Test Your Supplement Before Selling (First Batch Checklist)

FDA & GMP

Supplement Finished Product Testing: The GMP Release Checklist

Getting Started

Are Your Supplier's COAs Real? How to Verify Raw Material Testing

Compliance

5 FDA Supplement Regulations You're Probably Violating Right Now

Manufacturing

How to Switch Supplement Testing Labs Without Screwing Up Your Compliance

Getting Started

Do I Actually Need to Test My Supplements? The Honest Answer

Free Resources

21 CFR 111 GMP Compliance Checklist — Free PDF Download

Free Resources

State of Supplement Testing 2026 — Real Data From Thousands of Quotes

Free Resources

Free Supplement Specification & COA Templates

Selling Online

Amazon Supplement Approved Lab List — What Labs Amazon Actually Accepts

Selling Online

How to Upload a COA to Amazon Seller Central — Step by Step

Getting Started

Supplement Lab Comparison — Eurofins vs SGS vs Intertek vs ALS vs Independent Labs

Test Methods

Allergen & Gluten-Free Testing for Supplements — ELISA Methods

Ingredient Testing

Ashwagandha Testing: Withanolides, Root Auth, Heavy Metals

Ingredient Testing

B-Complex Supplement Testing: Simultaneous B-Vitamin Potency HPLC Panel

Ingredient Testing

Beetroot Nitrate Testing: Quantifying Active, Label Claims, Metals

Ingredient Testing

Berberine Supplement Testing: HPLC Purity, Adulteration, Identity

Test Methods

Botanical Identity Testing — HPTLC, Microscopy, DNA Barcoding

Specialized

Collagen Supplement Testing — Amino Acid Profile Verification

Ingredient Testing

Creatine Supplement Testing: Purity, Impurities by HPLC, and Creapure Verification

Test Methods

Disintegration & Dissolution Testing for Supplements — USP <2040>

Test Methods

DNA Barcoding Supplement Identity: Species Authentication by qPCR

FDA & GMP

DSHEA Explained for Supplement Brands

Ingredient Testing

Elderberry Supplement Testing: Anthocyanin Content, Identity, and Microbial Safety

Specialized

Electrolyte Powder Testing — Sodium, Potassium, Magnesium Verification

Test Methods

Ethylene Oxide Testing Supplements: EtO and 2-Chloroethanol by GC-MS

FDA & GMP

FDA Warning Letters for Supplements -- Testing Violations

FDA & GMP

Form 483 Response Guide for Supplement Companies

Ingredient Testing

Ginseng Testing: Ginsenoside Profile by HPLC, Species Authentication, and Pesticide Risks

Ingredient Testing

Glucosamine Chondroitin Testing: Potency and Adulteration Detection

Test Methods

Glyphosate Testing Supplements: LC-MS/MS Residue Detection, Claims

Amazon & Marketplace

GMP Certificate for Amazon -- Do You Need One?

Specialized

Greens Powder Testing — Heavy Metals, Pesticides, Nutritional Panel

Getting Started

How to Prepare Supplement Samples for Lab Testing — Shipping, Packaging, Chain of Custody

Test Methods

HPLC Potency Testing for Supplements — How It Works

Test Methods

ICP-MS vs AAS for Supplement Heavy Metal Testing — Which Method?

Ingredient Testing

Iron Supplement Testing: ICP-MS Potency, Form Verification, Disint

Getting Started

ISO 17025 for Supplement Testing, Explained

Getting Started

ISO 17025 vs Non-Accredited Labs: Why It Matters for Supplement Testing

Ingredient Testing

L-Theanine Supplement Testing: HPLC Purity, L vs D Enantiomer Verification, and Identity

Compliance

Supplement Label Claim Substantiation — Testing Every Word on Your Bottle

Ingredient Testing

Maca Root Testing: Identity, Macamide Markers, and Heavy Metal Screening

Test Methods

Melamine Testing Supplements: Detecting Nitrogen Spiking by LC-MS/MS

Specialized

Melatonin Supplement Testing — HPLC Content Verification

Test Methods

Microbial Limits Testing for Supplements

Test Methods

Microcystin Testing Algae Supplements: Cyanotoxin ELISA and LC-MS/MS

Ingredient Testing

Multivitamin Testing: Multi-Analyte Potency, Label Overage

Test Methods

Mycotoxin Testing Supplements: Aflatoxins, Ochratoxin A, Fumonisins

Test Methods

Nitrosamine Testing Supplements: NDMA/NDEA Detection by LC-MS/MS

Ingredient Testing

NMN Supplement Testing: Purity by HPLC, NMN vs NR Verification, and Regulatory Status

Test Methods

Non-GMO PCR Testing for Supplements — How It Works

Specialized

NSF Certified for Sport vs Informed Sport — Which Testing Program?

Specialized

Omega-3 & Fish Oil Supplement Testing — EPA, DHA, TOTOX

Compliance

Organic Supplement Certification — Testing Requirements

Getting Started

7 Supplement Tests You're Probably Overpaying For (And How to Fix It)

Test Methods

PAH Testing Supplements: Polycyclic Aromatic Hydrocarbons by GC-MS

Test Methods

Pesticide Testing for Supplements — Multi-Residue Screen Guide

Ingredient Testing

Pre-Workout Supplement Testing: Banned Stimulants and Label Accuracy

Ingredient Testing

Prenatal Vitamin Testing: Folate Form, Heavy Metal Safety, Potency

Ingredient Testing

Protein Powder Testing: Heavy Metals, Amino Spiking, and Real Protein Content

Ingredient Testing

Psyllium Fiber Testing: Identity, Microbial Screening for Salmonella, and Water Activity

Test Methods

Residual Solvent Testing for Supplements — USP <467>

Ingredient Testing

Saw Palmetto Testing: Fatty Acid Profile, Adulteration, Identity

Ingredient Testing

Sea Moss Testing: Iodine Content, Heavy Metals, Species Auth

Compliance

Skip Lot Testing for Supplements — When You Can Reduce Testing

Ingredient Testing

Spirulina Chlorella Testing: Microcystin, Heavy Metals, Micro

Compliance

Structure/Function Claims Testing Requirements

Compliance

Supplement Facts Panel Testing Requirements

Ingredient Testing

Turmeric Curcumin Testing: Potency, Lead Chromate, Identity

Test Methods

USP 2232 Heavy Metals Testing Explained

Ingredient Testing

Vitamin C Testing: Ascorbic Acid HPLC Potency, Degradation, Stability

Specialized

Vitamin D Potency Testing — HPLC vs LC-MS/MS Methods

Test Methods

Water Activity Testing for Supplements — Why It Matters