Direct answer: A supplement Certificate of Analysis (CoA) is the batch-specific lab document that proves what is actually in a product, and a complete one has six sections you should read in order: (1) identity & batch header — product name, botanical name, batch/lot number, manufacture and expiry dates, quantity; (2) active-marker assay — the standardised compound and its measured value against the spec (e.g. total anthocyanins by AOAC 2005.02, or a vitamin content by HPLC); (3) physical parameters — appearance, moisture, particle size, pH; (4) microbiological limits — total plate count ≤10,000 CFU/g, yeast and mould ≤1,000 CFU/g, with E. coli, Salmonella and S. aureus absent in 25 g; (5) heavy metals — lead ≤2.0, cadmium ≤1.0, mercury ≤0.1, arsenic ≤1.5 ppm; and (6) authorisation — the analyst signature, test methods and the accredited laboratory. Read it by matching every “result” column against its “specification” column: each result must fall inside the limit, and the batch number on the CoA must match the batch you received. A CoA with no batch number, no method references, or “pass” instead of numbers is not a real CoA.

What a Certificate of Analysis actually is

A Certificate of Analysis is a laboratory-issued document that reports the test results for one specific batch of an ingredient or finished product. It is not a marketing sheet, not a specification sheet, and not a certificate of conformance. A specification tells you what the material is supposed to be; a CoA tells you what this particular lot measured when it was tested. The two are read together — every result on the CoA is judged against the agreed specification.

For a B2B buyer commissioning an OEM supplement, the CoA is the single most important quality document you will handle. It is the evidence that the batch in your warehouse meets identity, potency and safety limits, and it is the record a regulator, a halal auditor or an importing customs officer will ask to see. Treat it as a legal record: file the CoA for every batch, and never accept a shipment whose CoA batch number does not match the physical batch code on the carton.

Section by section: how to read a supplement CoA

1. The header — identity and batch traceability

Start at the top. A valid CoA header states the product or ingredient name, the botanical or chemical name where relevant (e.g. Hibiscus sabdariffa calyx, or “ascorbic acid”), the batch/lot number, the manufacturing date and expiry or best-before date, the quantity the batch represents, and often the country of origin and plant part. The batch number is the anchor of the whole document — it is what links this paper to the physical goods and to the retained sample held by the manufacturer. If the batch number is blank, generic, or different from the code printed on your delivery, stop and query it before use.

2. The active-marker assay — is it actually potent?

This is the section that separates a standardised material from a commodity powder. It reports the standardised marker compound and its measured value against the specification. For a botanical extract this might be “total anthocyanins ≥1.5% by pH-differential (AOAC 2005.02)” or “total triterpenes ≥10% by HPLC”; for a vitamin it is the assayed content versus label claim. Read three things: the analyte (what was measured), the method (the validated assay used), and the result versus spec. A number with no method reference is unverifiable. A CoA that lists only “colour” or “odour” but no quantified active marker is describing a colourant or a raw powder, not a standardised extract.

3. Physical parameters

Appearance, moisture, particle size, pH, bulk density and loss on drying live here. These matter more than buyers expect: moisture above spec (typically ≤5% for a spray-dried powder) shortens shelf life and invites microbial growth, while particle-size and flow properties affect how a powder blends into a sachet or chewable-tablet base. For a liquid, check Brix, pH and appearance. Physical parameters are also your first quick authenticity check — a “red anthocyanin extract” that is described as a beige free-flowing powder is a contradiction worth chasing.

4. Microbiological limits

The micro panel is a safety gate. For botanical supplement ingredients the conventional limits — aligned with the Malaysian Food Act 1983 and BP/USP practice — are total plate count ≤10,000 CFU/g, yeast and mould ≤1,000 CFU/g, and the pathogens E. coli, Salmonella spp. and Staphylococcus aureus absent in 25 g. Read each pathogen line as “absent” or “not detected”, never as a number. If a CoA reports a pathogen as a count rather than absent/present, or omits the pathogen tests entirely, the material has not cleared a full safety screen.

5. Heavy metals

Botanicals concentrate whatever is in their soil, so heavy-metal testing is non-negotiable. The standard ceilings for a botanical extract are lead (Pb) ≤2.0 ppm, cadmium (Cd) ≤1.0 ppm, mercury (Hg) ≤0.1 ppm and arsenic (As) ≤1.5 ppm, usually measured by ICP-MS or ICP-OES. Confirm all four are present and inside limit. Some destination markets — the EU, the GCC, and infant or children’s categories — impose tighter ceilings, so match the CoA limits to where the finished SKU will sell, not just to the manufacturer’s default.

6. Authorisation — method references, signature and lab accreditation

A CoA closes with the test methods used (AOAC, USP, BP, in-house validated methods), the analyst or QC manager signature, the issue date, and ideally the accredited laboratory that performed the work. Accreditation to ISO/IEC 17025 (or testing under an FSSC 22000-governed quality system) is what makes the numbers defensible. An unsigned CoA, or one with no method column, carries little evidentiary weight.

Red flags: when to reject a CoA

• No batch number, or a batch number that does not match your delivery.
• “Pass” or “conforms” instead of measured values for assay, micro or heavy metals — a CoA must show numbers.
• Missing pathogen tests, or a pathogen reported as a count instead of “absent/25 g”.
• No active-marker assay on a material sold as a “standardised extract”.
• No test methods referenced, so results cannot be reproduced or audited.
• Copy-paste dates — a manufacture date after the test date, or an expiry that does not fit the stated shelf life.
• No signature or issuing lab, making the document unattributable.

Why an integrated OEM simplifies the CoA chain

When an ingredient is extracted by one company and filled by a separate co-packer, you inherit two CoAs and a handoff gap between them — the point where identity or potency data can go missing. Bionutricia’s vertically integrated model at the Sungai Buloh facility standardises the extract, then spray-dries, blends and fills the finished SKU under one roof, so a single, continuous CoA chain covers the raw material through to the finished batch. That is produced under six quality certifications — FSSC 22000, GMP, HACCP, JAKIM Halal, US FDA registration and MeSTI — plus NanoVerify validation for the patented liposomal process, which is exactly the documentation trail a B2B buyer, halal auditor or importer wants to see behind each CoA.

Formats Bionutricia manufactures with full CoA documentation

Every finished format carries batch-level CoA support:

• Powder sachets — instant drink and premix blends, ambient-stable with moisture and micro data per batch.
• Liquid sachets — single-serve RTD formats with pH, Brix and micro on the CoA.
• Gel sachets — texture-controlled delivery with physical and micro parameters.
• Pouch beverages — larger-volume RTD for café, gym and convenience-retail channels.
• Chewable tablets — solid-dose format with hardness, disintegration and micro data.
• Liquid bottles — wellness shots and tonics with full stability and CoA support.

Each format is documented against its specification so the buyer receives an auditable CoA for every production lot — not a generic template.

Related guides

• FSSC 22000 vs ISO 22000 for Supplement OEMs in 2026: What B2B Buyers Actually Audit
• How Long Does a JAKIM Halal Audit Take? Full Timeline and Document Checklist for Supplement OEMs
• Exporting Halal Supplements to the GCC and Saudi Arabia: What Brand Owners Need From Their Manufacturer

Frequently asked questions

What is the difference between a Certificate of Analysis and a specification sheet?

A specification sheet defines what a material should be — the target identity, assay range and safety limits. A Certificate of Analysis reports what a specific batch actually measured when tested. You read them together: every result on the CoA is judged against the matching line on the specification, and each must fall inside the agreed limit.

Should a CoA show actual numbers or just “pass”?

Actual numbers. A credible CoA reports measured values — the assayed active percentage, the CFU counts, the ppm for each heavy metal — alongside the specification limit and the test method. “Pass” or “conforms” with no figures cannot be audited or reproduced, so treat a numbers-free CoA as incomplete.

How do I know the CoA belongs to the batch I received?

Match the batch or lot number on the CoA header to the batch code printed on the physical carton or drum. They must be identical. The manufacturer should also hold a retained sample of that batch. If the numbers differ, or the CoA batch field is blank, do not release the material until it is reconciled.

Which heavy-metal limits should a botanical supplement meet?

The common ceilings for a botanical extract are lead ≤2.0 ppm, cadmium ≤1.0 ppm, mercury ≤0.1 ppm and arsenic ≤1.5 ppm, typically by ICP-MS. Some destination markets and children’s categories require tighter limits, so confirm the CoA limits against the rules of the country where the finished product will sell.

Does Bionutricia provide a CoA for every batch?

Yes. Because extraction and finished manufacturing happen in the same FSSC 22000, GMP and JAKIM-certified facility, Bionutricia issues batch-level Certificates of Analysis that trace the raw material through to the finished SKU, with identity, assay, physical, microbiological and heavy-metal data on each lot.

Need an OEM that documents every batch properly?

Vertically integrated extraction and finished manufacturing under FSSC 22000, GMP, HACCP, JAKIM Halal, US FDA and MeSTI — with a full, auditable CoA chain on every production lot across powder, liquid and gel sachets, pouch beverages, chewable tablets and liquid bottles.

Request a quotation · See our OEM services · View our certifications

WhatsApp: +60 16-661 8510

Article by Bionutricia R&D Team. Last updated: July 3, 2026.