How to Read a Full Supplement COA: Panel by Panel Guide

Knowing how to read a supplement COA is the single most effective skill for cutting through supplement marketing. A Certificate of Analysis is the only objective third-party document that verifies whether a supplement contains what it claims, at the dose it claims, without harmful contaminants. This guide walks through every panel of a complete COA — what each test measures, what acceptable ranges look like, and what red flags should prompt a second look.

The Evidence Base: Why COAs Exist

The United States regulates dietary supplements as food products under the Dietary Supplement Health and Education Act (DSHEA) of 1994. Unlike pharmaceutical drugs, dietary supplements do not require pre-market safety testing or FDA approval. Manufacturers are legally responsible for ensuring their products are safe and accurately labeled — but mandatory pre-market testing is not required.

This regulatory gap has real consequences. NSF International, ConsumerLab.com, and independent academic audits have consistently found that 20–30% of dietary supplements fail potency testing when purchased off-the-shelf. A 2015 Consumer Reports analysis found that popular herbal supplements frequently contained contaminants or undisclosed ingredients. A 2013 study in JAMA Internal Medicine found DNA evidence of species substitution in 59% of tested herbal supplement products.

Third-party Certificates of Analysis are the supplement industry's voluntary response to this gap. When a brand submits product samples to an accredited independent laboratory and publishes the results, it allows consumers to verify the testing independently. The COA is meaningful only to the extent that the testing laboratory is credible, the tested batch corresponds to what's currently being sold, and the COA covers the relevant testing panels. A COA that omits heavy metals testing or shows only identity without potency quantification is incomplete — not reassuring.

Understanding what third-party testing actually means is the prerequisite for reading a COA intelligently. Not all testing labs are equivalent, and not all COAs cover the same scope.

The Mechanism: What Testing Actually Measures

A complete COA is a collection of distinct analytical tests, each answering a different question about the product. They are performed using different laboratory techniques and serve different quality-assurance purposes. Most COAs available on supplement brand websites are abbreviated — they include 2–3 panels and omit the rest. A comprehensive COA has up to eight distinct panels.

A Certificate of Analysis (COA) typically includes the following test parameters—here is how to interpret each:

The primary analytical techniques used in supplement COA testing include: High-Performance Liquid Chromatography (HPLC) for potency and identity of organic compounds; Inductively Coupled Plasma Mass Spectrometry (ICP-MS) for heavy metals quantification; plate count methods and PCR for microbial testing; Gas Chromatography-Mass Spectrometry (GC-MS) for residual solvents and pesticide residues; and enzyme-linked immunoassay (ELISA) for allergen detection. Each technique has specific detection limits, and a credible COA will report those limits alongside the results.

Panel 1: Identity Testing

Identity testing confirms that the compound listed on the label is actually present in the product. This is distinct from potency — identity testing answers "Is this NMN?" while potency testing answers "How much NMN is here?"

For synthetic compounds like NMN, creatine, and magnesium glycinate, identity is confirmed via HPLC retention time matching to authenticated reference standards, or via nuclear magnetic resonance (NMR) spectroscopy, which provides a molecular fingerprint. For botanical extracts (ashwagandha, resveratrol from Japanese knotweed), identity testing uses marker compound profiles — withanolides for ashwagandha, resveratrol content for polygonum-derived products — via HPLC or FTIR spectroscopy.

What to look for: "Conforms to specification" or "Passes" for identity testing. A COA that provides potency data without a separate identity test has confirmed the quantity of something without confirming whether that something is what it should be. In the supplement industry, where raw material substitution and adulteration have been documented, identity testing is not optional for credible quality assurance.

Panel 2: Potency Testing

Potency testing is the most important panel for consumers and the one most commonly published. It quantifies how much active ingredient is present per capsule or per serving, and compares it to the labeled claim.

Acceptable potency range for dietary supplements: 90–110% of label claim is the general industry standard. USP (United States Pharmacopeia) sets tighter specifications for pharmaceutical-grade testing: 95–105% for most compounds. A product claiming 1,000 mg NMN per capsule should assay at 900–1,100 mg minimum, with higher-quality products targeting 950–1,050 mg.

Potency testing for NMN is performed via HPLC with UV detection or mass spectrometric detection. The NMN molecule has characteristic HPLC retention time and UV absorbance at 260 nm, allowing accurate quantification. Results should be expressed in mg/capsule or mg/serving, not as "present" or "detected" — qualitative statements without quantities are not potency data.

Potency below 90% represents a material misrepresentation: you're paying for a dose you're not getting. Potency above 110% indicates formulation inconsistency and potentially raises dosing accuracy concerns, though overage is less concerning than underage for safety.

Panel 3: Heavy Metals Testing

Heavy metals testing quantifies four metals with established toxicity: lead (Pb), arsenic (As), cadmium (Cd), and mercury (Hg). These contaminants enter supplements through raw materials grown in contaminated soil, water used in processing, or manufacturing equipment. Botanical supplements are at higher risk than synthetic compounds, but even synthesized NMN can accumulate trace metals during fermentation or synthesis.

Regulatory reference standards for heavy metals in dietary supplements:

Lead: USP limit is 10 µg/day per supplement serving. California Proposition 65 sets a more stringent safe harbor at 0.5 µg/day for lead — some brands targeting California consumers test to this tighter standard. For children's supplements, the limit should be substantially lower.

Arsenic: 10 µg/day total arsenic is the USP limit for dietary supplements. Note that organic arsenic (arsenobetaine from marine sources) is essentially non-toxic, while inorganic arsenic is the form of toxicological concern. A rigorous COA will specify inorganic arsenic separately from total arsenic for products containing marine-derived ingredients.

Cadmium: 4.1 µg/day is the reference level under California Prop 65. Cadmium accumulates in the kidneys and has a long biological half-life — chronic exposure at sub-toxic levels remains a health concern, making it particularly important to verify this panel for daily-use supplements.

Mercury: 15 µg/day total mercury; 3 µg/day methylmercury per FDA reference.

What to look for: A high-quality COA reports actual quantified values (in µg/g or ppb) for each metal, not just "Pass." Knowing the quantified level allows you to calculate total daily exposure across all supplements, assess proximity to regulatory limits, and compare products. A COA that reports only "Pass/Fail" without numbers tells you the result cleared a threshold but not by how much. Our guide to heavy metals in supplements covers interpretation in greater detail.

Panel 4: Microbial Testing

Microbial testing verifies that the product does not contain harmful bacteria, yeast, or mold above established limits. This panel is particularly important for botanical supplements (ashwagandha root powder, mushroom extracts, greens powders) and animal-derived products (collagen, fish oil), both of which can carry higher baseline microbial loads than synthetic compounds.

USP Chapter <2023> limits for oral non-sterile dietary supplements:

Total Aerobic Microbial Count (TAMC): ≤10⁴ colony-forming units (CFU) per gram. Total Yeast and Mold Count (TYMC): ≤10³ CFU per gram. Specific pathogens: Salmonella — absent in 10 g; E. coli — absent in 1 g; Staphylococcus aureus — absent in 1 g; Pseudomonas aeruginosa — absent in 1 g (for some product types).

Microbial contamination at levels above these thresholds doesn't necessarily cause illness in healthy adults, but it indicates inadequate manufacturing controls. For immunocompromised individuals, the elderly, or children, even lower microbial counts may be appropriate. For synthetic compounds like NMN, magnesium glycinate, and creatine, microbial contamination risk is low if manufacturing controls are adequate — but verification via COA is still appropriate.

Panel 5: Pesticide Residues

Pesticide residue testing is relevant for any supplement containing botanical raw materials — ashwagandha, turmeric, resveratrol from Japanese knotweed, green tea extract, elderberry, and similar plant-derived inputs. Agricultural pesticides (organophosphates, organochlorines, pyrethroids, neonicotinoids) accumulate in plant material and can persist through extraction and encapsulation.

Reference standards: USDA/EPA Maximum Residue Levels (MRLs) for pesticides in agricultural commodities apply as a starting point, though specific supplement-industry limits are set by NSF International, USP, and certifying bodies. The absence of pesticide testing on a COA for an ashwagandha product is a quality gap — it means the brand didn't test for this panel, not that residues are absent.

Pesticide testing uses gas chromatography with mass spectrometric detection (GC-MS/MS), capable of identifying and quantifying hundreds of pesticides in a single analytical run. Credible testing labs run a broad pesticide screening panel (200+ compounds) rather than testing for a narrow selection.

Panel 6: Residual Solvents

Residual solvent testing verifies that organic solvents used in manufacturing or extraction processes have been adequately removed from the final product. This is relevant for botanical extracts made with ethanol, hexane, acetone, or other solvents; and for any synthetic compound produced via solvent-based synthesis.

ICH Q3C guidelines classify solvents by toxicity. Class 2 solvents (acetonitrile, hexane, methanol) have established acceptable daily exposure limits; Class 3 solvents (ethanol, ethyl acetate, acetone) are considered low toxicity and are acceptable up to 50 mg/day. A credible COA for an extracted botanical supplement will include GC-based residual solvent testing with quantified results against ICH limits.

Evaluating the Lab and Documentation

A COA is only as meaningful as the lab that issued it. Key criteria for evaluating laboratory credibility:

ISO 17025 accreditation: The international standard for testing laboratories. Labs accredited by A2LA (American Association for Laboratory Accreditation), ANAB (ANSI National Accreditation Board), or UKAS (UK Accreditation Service) meet this standard. ISO 17025 accreditation means the lab has demonstrated technical competency and measurement traceability to international standards. Its absence is a meaningful red flag.

Independence: Third-party testing means the lab has no commercial relationship with the brand being tested. A COA issued by a lab owned by or affiliated with the manufacturer is a conflict of interest, not independent verification. Always check whether the lab is genuinely independent.

Batch traceability: The lot number on the COA must match the lot number on the product you're purchasing. Some brands publish a single COA at product launch and never update it as manufacturing batches change. If a COA is more than 12–18 months old, request a current one for the actual lot you're buying.

Date proximity: Testing should occur close to the manufacturing date. Testing conducted months after manufacture may not reflect conditions at time of production. Look for a test date within 60–90 days of the manufacture date.

Bio:sudo publishes COAs for all products — if you need the current COA for our NMN 1000mg or magnesium glycinate, request it via the product documentation page or contact our team directly.

Who Benefits Most From COA Literacy

COA evaluation skills matter most for:

Daily supplement users at higher doses: Someone taking 1,000 mg NMN daily is accumulating potential contaminant exposure over months and years. At daily use, the economics of quality also matter more: underpotent supplements represent real money spent on a dose that isn't delivered.

People with chronic health conditions: Individuals with kidney disease, liver conditions, or metabolic disorders have narrower tolerance windows for heavy metal exposure and contaminants. For this population, COA verification is not optional.

People evaluating newer or less-established brands: Large, established supplement companies have significant reputational incentives to maintain quality. New brands, heavily discounted products, and supplements sold through unverified third-party marketplaces carry higher risk and warrant more rigorous documentation review.

Parents supplementing children: Heavy metal limits for children are lower than adult limits due to smaller body weight and developmental sensitivity. The same product that passes adult limits may deliver concerning heavy metal doses to a child at pediatric supplementation amounts.

Practical Takeaways

• Request a COA for any supplement you take regularly — reputable brands publish them or provide them on request; absence of a COA is a red flag
• Verify the lot number on the COA matches the product batch you're actually purchasing, not just the product line
• For potency: confirm the reported mg/serving falls within 95–105% of the label claim; below 90% is a material underdose
• For heavy metals: insist on quantified values (µg/g or ppb), not just Pass/Fail; verify lead is below 10 µg/day and arsenic below 10 µg/day per serving
• For botanical supplements (ashwagandha, turmeric, resveratrol): check that the COA includes pesticide testing — if absent, it's an untested gap, not confirmation of absence
• Prefer ISO 17025 / A2LA accredited laboratories; a COA issued by the manufacturer's own facility or an unaccredited lab is insufficient
• If the most recent COA is over 18 months old, request a current one — manufacturing batches change, and quality can vary between runs

Bottom Line

A complete supplement COA covers up to eight panels; the non-negotiable minimum is identity, potency, and heavy metals — verified by an ISO 17025-accredited independent laboratory with batch-traceable documentation. Microbial testing is essential for botanical products. Pesticide and residual solvent testing are marks of brands that exceed minimum requirements. A brand that publishes comprehensive, current COAs with quantified values is providing the information you need to make an evidence-based purchasing decision. One that doesn't is asking you to trust marketing materials instead.

References

1. Yoshino M, et al. "Nicotinamide mononucleotide increases muscle insulin sensitivity in prediabetic women." Science. 2021;372(6547):1224–1229. [Source]
2. Igarashi M, et al. "Chronic nicotinamide mononucleotide supplementation elevates blood nicotinamide adenine dinucleotide levels and alters muscle function in healthy older men." npj Aging. 2022;8(1):5. [Source]
3. Irie J, et al. "Effect of oral administration of nicotinamide mononucleotide on clinical parameters and nicotinamide metabolite levels in healthy Japanese men." Endocrine Journal. 2020;67(2):153–160. [Source]
4. Liao B, et al. "Nicotinamide mononucleotide supplementation enhances aerobic capacity in amateur runners." J Int Soc Sports Nutr. 2021;18(1):54. [Source]
5. Gomes AP, et al. "Declining NAD+ induces a pseudohypoxic state disrupting nuclear-mitochondrial communication during aging." Cell. 2013;155(7):1624–1638. [Source]
6. Niu KM, et al. "The impacts of short-term NMN supplementation on serum metabolism, fecal microbiota, and telomere length in pre-aging phase." Nutrients. 2023;15(3):755. [Source]