How to Read a Supplement COA

Cooper Stence August 20, 2026 12 min read

Functional mushrooms on a table next to a microscope

Most supplement brands don't publish their lab results. Some because the results don't look good. Some because they simply don't test at all beyond what the FDA's current Good Manufacturing Practice (cGMP) rules technically require. A Certificate of Analysis, or COA, is the primary document that proves a supplement batch was actually tested and actually passed. Knowing how to read one is the difference between taking a brand's word for it and verifying the claim yourself.

Happenstence publishes manufacturer-level COAs for its products ingredients. This guide explains every panel you'll see on one of those documents, what the numbers mean, and what a genuinely clean result looks like versus one that passes on a technicality.

Start With the Lab, Not the Results

Manufacturer Certificate of Analysis for Creatine Hydration Powder - Pg1

AlzChem Creatine testing results for Creatine byproducts not normally tested for in the industry

Before reading a single number on a COA, look at who issued it. A COA is only as trustworthy as the laboratory that produced it. The credential to look for is ISO/IEC 17025 accreditation.

ISO 17025 is the international standard for testing and calibration laboratories. A lab carrying this accreditation has undergone independent evaluation of its staff competency, testing methods, equipment calibration, and quality management systems. It means the lab's procedures have been validated and audited by a third party, not just declared by the lab itself. For supplement testing, this matters because it eliminates a major loophole: a brand can't simply set up an internal lab, run its own tests, and issue itself a passing COA. ISO 17025 accreditation requires ongoing external verification.

The COA should clearly identify the issuing lab, its accreditation number, and the scope of accreditation relevant to the tests performed. If those details are absent, or if the COA is issued by the brand itself rather than an independent lab, treat it with skepticism regardless of what the results say.

Identity Testing: Is It Actually What It Claims to Be?

High-performance liquid chromatography machine with technician inserting a sample

The first substantive panel on a COA is typically identity confirmation. This test answers the question: is the ingredient in the bottle actually the ingredient listed on the label?

Identity testing is usually performed by high-performance liquid chromatography (HPLC) or near-infrared spectroscopy (NIR), which produce a chemical fingerprint of the sample and compare it against a reference standard for the declared ingredient. For mushroom products, identity testing should confirm the species (Lion's Mane, Cordyceps militaris, Reishi, etc.) and the extract type. For creatine, it confirms the monohydrate structure.

A passing result here doesn't just protect you from fraud. It protects you from contamination during manufacturing, mislabeled raw materials from suppliers, and ingredient substitution, all of which occur more often than most consumers assume. The comparison post on mushroom supplement quality covers how identity failures show up in practice, particularly the mycelium-on-grain problem in the mushroom supplement space.

Potency and Assay: Is the Dose Actually There?

Passing identity testing confirms the ingredient is present. Potency testing confirms it's present at the labeled dose. These are separate questions.

The assay result on a COA is typically expressed as a percentage of the label claim or as an absolute concentration. A result of 98 to 102% of label claim is considered a tight result and indicates well-controlled manufacturing. Wider variance, say 85% or 115%, reflects inconsistency in the production process. A result below the label claim means the customer is getting less of the ingredient than they paid for.

For mushroom extracts, potency testing often includes beta-glucan percentage, since beta-glucans are the primary bioactive compounds in medicinal mushrooms and the direct indicator of extract quality. For creatine, assay testing confirms purity percentage, which is why Creapure at 99.9% purity is meaningfully different from generic creatine products that don't publish assay results at all.

Heavy Metals Panel: The Four That Matter

Heavy metal contamination is one of the more serious risks in dietary supplements, particularly those derived from natural sources like mushrooms, herbal extracts, and botanicals. Plants and fungi bioaccumulate metals from the soil they're grown in, which means raw material sourcing and the testing that follows it are both critical.

The four metals tested are arsenic, cadmium, mercury, and lead. These are tested using ICP-MS (inductively coupled plasma mass spectrometry), the most sensitive detection method available for trace elemental analysis. Results are reported in micrograms per gram (µg/g) or parts per million (ppm), and the COA compares those results against established limits.

The reference standard most labs use is USP General Chapter <2232>, which sets daily-dose limits for elemental contaminants in dietary supplements:

Arsenic (inorganic): 15 µg per day.

Cadmium: 5 µg per day.

Mercury (total): 15 µg per day.

Lead: 10 µg per day.

California's Proposition 65 applies stricter thresholds, particularly for lead (0.5 µg/day) and arsenic (10 µg/day), and functions as the de facto national benchmark for premium supplement quality programs because it's the most conservative widely-used standard. A COA that passes at California Prop 65 thresholds is a tighter certification than one that only passes USP.*

When reading a heavy metals panel, look for the actual numerical result alongside the specification limit, not just a pass/fail statement. A result of 0.002 µg/g against a limit of 0.5 µg/g is meaningfully different from a result of 0.49 µg/g against the same limit. Both pass, but one is 250 times cleaner than the other. The lead in protein powders post covers why this granularity matters and how contamination risks vary widely across supplement categories.

Microbiology Panel: Coliform, E. Coli, and Total Counts

The microbiology panel tests for harmful microorganisms, including those that indicate contaminated manufacturing conditions and those that pose direct health risks.

Total Aerobic Microbial Count (TAMC) and Total Yeast and Mold Count (TYMC) are the baseline enumeration tests, performed under USP <61>. For solid oral supplements like capsules and powders, acceptable limits are typically no more than 10,000 colony-forming units per gram (CFU/g) for TAMC and no more than 1,000 CFU/g for TYMC. These limits exist because not all microbial presence is dangerous, but counts above the threshold indicate conditions during manufacturing that create risk for pathogenic growth.

Beyond counts, the COA should show absence testing for specific pathogens under USP <62>. The standard required tests for oral supplements include E. coli and Salmonella, with an absence result required in any 1-gram sample. For products with higher risk profiles, testing may extend to Staphylococcus aureus and Pseudomonas aeruginosa as well.

Total coliform testing is a broader indicator of fecal contamination and sanitation conditions during production. Coliform bacteria are gram-negative organisms common in soil and animal waste. Their presence doesn't always mean E. coli, but elevated coliform counts signal a manufacturing environment that wasn't adequately controlled. A clean COA shows TNTC (too numerous to count) replaced with a result at or below the detection limit for coliform, with E. coli specifically listed as absent.

The practical takeaway: a supplement that tests clean for microbiology was produced in a controlled environment using properly sanitized equipment and raw materials. One that doesn't run this panel, or doesn't publish results, gives you no information about manufacturing conditions at all.

Organoleptic Evaluation: The Sensory Check

Organoleptic evaluation is the systematic sensory inspection of a raw material or finished product: appearance, color, odor, texture, and sometimes taste. It's performed by trained analysts against predefined specifications for each ingredient.

For a mushroom extract powder, the specification might read: appearance is a fine powder, color is light tan to brown, odor is characteristic earthy/mushroom with no off-notes, texture is free-flowing with no clumping. A passing organoleptic result means the sample matched all of those descriptors within the defined acceptable range.

Organoleptic testing isn't the most technically sophisticated panel on a COA, but it serves an important function: it's the first-pass quality screen that catches obvious problems before more expensive analytical testing is run. A mushroom extract that smells like ammonia or a creatine powder with an unexpected color fails organoleptic before it ever reaches ICP-MS. It also gives the manufacturer a documented record that the physical characteristics of each batch were inspected and matched specification.

By itself, organoleptic evaluation can't confirm identity or potency. Regulators and quality standards treat it as necessary but not sufficient, which is why it appears on the COA alongside the analytical testing panels rather than as a replacement for them.

The Analogies Block: "The Vehicle Inspection Report"

A COA works the same way a pre-purchase vehicle inspection report does. You can look at a car and form an impression. The seller will tell you it runs great. But neither of those things tells you whether the brakes are worn, the frame is bent, or the odometer was rolled back. The inspection report brings in a credentialed mechanic, documented tests, and results you can verify against the specs the manufacturer published. A supplement COA from an ISO 17025 lab is that inspection report. It doesn't replace reading the label or trusting the brand. It adds an independent, documented verification layer on top of both. A brand that won't publish it is the equivalent of a seller who won't let you take the car to a mechanic.

How to Find and Read Happenstence COAs

Certificate of Analysis from Dolce Superfoods, showing tested parameters and results for Organic Cordyceps Extract. Expiring 2028-06-15

Happenstence publishes COAs from each ingredient manufacturer, tested by an accredited laboratory. We do not perform independent, third-party testing on our products at this time. The manufacturer's lab tests cover heavy metals (arsenic, cadmium, mercury, and lead), microbiology (coliform, E. coli, TAMC, TYMC), organoleptic evaluation, identity, and potency. For the Creapure creatine products specifically, an additional authenticity verification is available through the Creapure Quality Seal Portal using the partner code printed on each tub. That process is covered in detail in The Purity Receipt post.

When reviewing any COA, apply the same checklist regardless of brand: confirm the issuing lab is ISO 17025 accredited, look for actual numerical results rather than pass/fail summaries only, verify that all four heavy metals were tested and compare results to both USP and Prop 65 limits, confirm E. coli is listed as absent, and check that the lot number on the COA matches the lot number on your product.

FAQ - Reading a Supplement COA

1. What does ISO 17025 accreditation actually mean?

ISO/IEC 17025 is the international standard for testing and calibration laboratories. A lab holding this accreditation has been audited by an independent accreditation body and confirmed to meet rigorous requirements for technical competence, validated testing methods, equipment calibration, and quality management. For supplement testing, it means the COA was issued by a lab that can demonstrate its results are accurate and reproducible, not one that simply claims they are. Accreditation must be maintained through ongoing audits, so it's not a one-time certification that expires and gets ignored.

2. What is ICP-MS and why is it used for heavy metals?

ICP-MS stands for inductively coupled plasma mass spectrometry. It's the most sensitive method available for detecting trace elements in a sample, capable of detecting concentrations as low as parts per trillion. For heavy metals in supplements, sensitivity matters because the limits are very small, often in the single-digit micrograms per day range. ICP-MS can reliably detect and quantify arsenic, cadmium, mercury, and lead at concentrations far below the regulatory limits, which means a clean result is genuinely clean rather than "not detected because the test wasn't sensitive enough to find it."

3. What is the difference between USP limits and California Prop 65 limits?

USP General Chapter <2232> sets daily-dose limits that are mandatory for products labeled as USP-compliant and treated as a respected voluntary benchmark otherwise. California Proposition 65 sets its own limits, which are stricter, particularly for lead (0.5 µg/day under Prop 65 versus 10 µg/day under USP) and arsenic (10 µg/day under Prop 65 versus 15 µg/day under USP). Products sold in California must either comply with Prop 65 limits or carry a warning label. Because California is such a large market, Prop 65 thresholds have become the de facto premium quality benchmark nationally, even for brands not primarily selling in California.

4. If a COA shows "pass" for microbiology, does that mean there are no bacteria in the product?

No. A passing microbiology result means the tested counts were within acceptable limits, not that the product is sterile. Non-sterile oral supplements are not required to be free of all microorganisms. The TAMC limit of 10,000 CFU/g allows for some microbial presence as long as it stays below the threshold. What matters is that pathogen absence testing (E. coli, Salmonella) returned no-detect results and that the enumeration counts were within the acceptable range. The distinction between a passing microbiology result and a sterile product is standard in pharmaceutical and supplement quality science.

5. Can I tell anything from organoleptic results alone?

Not enough to rely on. Organoleptic evaluation is a useful first-pass screen and a documented quality checkpoint, but it can't confirm identity or potency on its own. A powder can look, smell, and feel exactly as expected while still failing heavy metals or containing the wrong ingredient. Regulators treat organoleptic testing as necessary but not sufficient. Its value is as one layer in a multi-panel testing system, not as a standalone verification method.

6. Why do most supplement brands not publish their COAs?

A few reasons. Some brands test minimally and the results wouldn't hold up to scrutiny. Some test adequately but view the COA as an internal quality document rather than a customer-facing one. Some don't test at all beyond what cGMP regulations require, which is less comprehensive than full COA testing. The practical effect for consumers is that the absence of a published COA should be treated as a signal worth noting, not as a neutral fact. A brand that tests thoroughly and passes has every incentive to show the results. The reluctance to publish is itself informative.*