COA Verification Checklist for Med Spa Peptide Purchases

Every peptide API shipment that arrives at your med spa should be accompanied by a Certificate of Analysis, and every COA should be thoroughly verified before the material is accepted for use. This is not bureaucratic overhead — it is the single most important quality gate standing between your patients and potentially substandard or dangerous products. A proper COA documents the identity, purity, and safety profile of the specific batch you are receiving, and verifying it takes only minutes when you have a systematic checklist to follow. This guide provides that checklist, along with the context you need to evaluate each element meaningfully.

A complete COA for peptide APIs must include identity confirmation, purity data, and safety testing results. Identity should be confirmed by at least two independent methods — typically amino acid analysis and mass spectrometry — verifying that the peptide sequence matches the expected structure. Purity should be reported as HPLC purity with a full impurity profile listing each detected impurity above 0.1%, not just a single summary number. Endotoxin levels must be tested and reported for any peptide intended for injectable use, with results expressed in EU/mg and falling within USP limits. The COA should also include residual solvent analysis per ICH Q3C guidelines, water content, and appearance description. If any of these elements are missing, request a complete COA before proceeding.

Red flags on a COA should trigger immediate investigation and potential rejection of the shipment. Watch for COAs that report suspiciously perfect results — for example, every parameter hitting exactly the middle of the specification range, which suggests fabricated data rather than actual testing. Be alert to inconsistencies between the COA and the physical product, such as mismatched batch numbers, quantities, or appearance descriptions. Generic COAs that lack batch-specific data, COAs with formatting inconsistencies suggesting they were altered, and COAs missing the signature or stamp of the quality control reviewer are all cause for concern. When in doubt, contact the manufacturer directly to verify the COA's authenticity using contact information obtained independently, not from the COA itself.

Third-party testing provides an additional layer of verification that every med spa should consider, especially when working with new suppliers. Sending a sample from each new supplier's first shipment to an independent analytical laboratory for confirmatory testing validates the supplier's COA claims and establishes a baseline for future shipments. Focus third-party testing on the highest-risk parameters: identity confirmation, HPLC purity, and endotoxin levels. While third-party testing adds cost and time to your receiving process, it provides objective evidence of product quality that is invaluable for patient safety, regulatory compliance, and your own peace of mind. Many med spas transition to periodic third-party testing after establishing confidence in a supplier through initial verification.

Digital verification tools are transforming how med spas manage COA review and documentation. Platforms like oriGENapi offer automated COA verification features that cross-reference reported results against your predetermined specifications, flag any out-of-spec parameters instantly, and maintain a searchable digital archive of all verified COAs. These tools eliminate the human error risk inherent in manual COA review and dramatically reduce the time required to process incoming shipments. They also create an automatic audit trail of your verification activities, which is invaluable during regulatory inspections or quality audits. Whether you use a dedicated platform or build your own spreadsheet-based system, the key is having a documented, repeatable verification process that is followed consistently for every single peptide API shipment your med spa receives.