How to Read a Certificate of Analysis (CoA)
A shipment of medical products arrives with a Certificate of Analysis stapled to the packing list, and a quality manager has a few minutes to decide whether the paperwork actually backs up what is on the label. A Certificate of Analysis (CoA) is one of the most common documents in medical and pharmaceutical procurement, and also one of the most frequently skimmed rather than read. Knowing which fields matter, and what to check them against, turns the CoA from a formality into a real control point.
What a CoA Actually Is
A CoA is a document issued by a manufacturer or its quality laboratory that reports the results of specific tests performed on a particular lot or batch of product, compared against a defined specification. It is not a marketing sheet and not a general product datasheet — it is lot-specific evidence that a stated set of tests was run and that the results fell within the acceptance range the manufacturer committed to. A CoA that cannot be tied to a lot number is not doing the job the document exists for.
The Fields That Matter Most
A usable CoA should let a reader match every one of the following without guessing:
- Product name and lot/batch number — must match the physical unit received, exactly, not just the product family.
- Manufacturing and expiry (or retest) date — tied to the same lot, not a generic shelf-life statement.
- Test parameters — the specific attributes tested (for example, identity, purity, sterility, endotoxin level, or physical/mechanical properties relevant to the product category).
- Specification (acceptance range) — the limit each test result is judged against, not just a pass/fail flag.
- Result — the actual measured value, reported against that specification, not merely the word "Conforms."
- Method reference — the test method or standard used, so the result can be interpreted in context.
- Authorized signature and issue date — indicating quality-department release, not a sales document.
Result vs. Specification: The Detail Buyers Skip
The most common shortcut in reading a CoA is checking only for the word "Pass" or "Conforms" next to each parameter and moving on. A more useful read compares the actual reported value to the stated specification range. A result sitting exactly at the edge of its acceptance limit tells a different story than one comfortably mid-range, even though both are technically a "pass." Consistently borderline results across multiple lots from the same supplier are worth raising as a quality conversation, independent of whether any single certificate failed.
CoA vs. Certificate of Conformity (CoC)
The two documents are often confused. A table helps:
| Document | What it confirms | |---|---| | Certificate of Analysis (CoA) | Reports actual test results for a specific lot against a specification | | Certificate of Conformity (CoC) | States that a lot conforms to requirements, often without reporting individual test values |
A CoC can be a legitimate document for lower-risk items, but it carries less information than a CoA. Buyers evaluating higher-risk products should know which one they are actually being given, since the two are not interchangeable substitutes.
Red Flags Worth a Second Look
A few patterns are worth verifying rather than accepting at face value:
- A CoA with no lot number, or one that does not match the product received.
- Identical values repeated across multiple lots and dates — genuine test results normally show some run-to-run variation.
- Missing method references, making the result impossible to interpret against a recognized standard.
- A document format that changes noticeably between shipments from the same supplier without explanation.
None of these automatically indicates a problem, but each is a reasonable basis for asking the supplier a direct question before the shipment is released to stock or use.
The Takeaway
A Certificate of Analysis is only as useful as the reading it gets. Matching the lot number, checking actual results against the stated specification rather than a bare pass/fail flag, and knowing the difference between a CoA and a CoC are the basics that turn incoming documentation into a genuine quality gate rather than a filing exercise.
This is general educational information, not legal or regulatory advice; consult the current official texts and your competent authority.
