Skip to main content
NPN/DSHEA Compliance

Amazon's Supplement Enforcement Is Tightening — The COA Documentation Gap Midwest Brands Must Close

Amazon now requires ISO/IEC 17025 COAs for supplement listings. Here's the DSHEA documentation gap Midwest brands must close to avoid delisting.

Nour Abochama VP Operations, Qalitex | Quality Consultant, Ayah Labs

Key Takeaway

Amazon now requires ISO/IEC 17025 COAs for supplement listings. Here's the DSHEA documentation gap Midwest brands must close to avoid delisting.

Somewhere in the last two years, Amazon shifted from a marketplace that tolerated vague supplement documentation to one that actively suspends listings over it. Brands that relied on supplier-issued Certificates of Analysis — sometimes covering entirely different production lots, sometimes years old — are finding their products delisted with minimal notice. The trigger usually isn’t a formal regulatory action. It’s a documentation request Amazon can’t reconcile with an ISO/IEC 17025-accredited testing report.

That’s a meaningful shift, and it’s catching a lot of Midwest supplement brands flat-footed.

What Amazon’s Current Documentation Policy Actually Requires

Amazon’s dietary supplement policies have evolved steadily since the platform formalized its supplement category requirements. Today, sellers are required to provide Certificates of Analysis from third-party, ISO/IEC 17025-accredited laboratories — not from contract manufacturers, not from ingredient suppliers, and not from internal quality teams. The accreditation scope matters too: the lab’s ISO 17025 certificate needs to specifically cover the test methods being used on your product.

The practical implication: a COA from your raw material supplier doesn’t satisfy Amazon’s documentation requirements for your finished product. Amazon wants to see that an independent, accredited lab tested your finished product, from your batch, against your label claims.

The four parameters that align with DSHEA’s core requirements under 21 CFR Part 111 are identity, purity, strength, and composition. In practice, the COA needs to demonstrate:

  • Identity: Is the ingredient what you say it is? For botanicals, this means HPTLC or DNA barcoding, not an organoleptic check or a visual inspection note.
  • Strength: Does the product contain what the label claims, within acceptable tolerances? FDA’s general benchmark is ±20% for most nutrients — but tighter windows apply for specific ingredient categories and claims.
  • Purity: Are contaminants — heavy metals, pesticides, mycotoxins — below applicable regulatory and pharmacopeial limits?
  • Composition: Does the full formulation match what’s declared on the label?

Amazon doesn’t publish an exhaustive required test list, which creates real ambiguity in practice. But brands that have had listings suspended and reinstated consistently report the same pattern: the COA needs to include method citations, instrument references, and lot-level traceability. A generic “Complies” notation with no supporting data doesn’t hold up.

Why Supplier COAs Create a False Sense of Security

One of the most common documentation errors we see from Midwest supplement brands — particularly smaller private-label operations and contract manufacturers — is treating a supplier’s COA as a finished-product quality record. It isn’t.

A supplier COA tells you about a raw material at the point it left their facility. It says nothing about:

  • How that ingredient was handled and stored during inbound transit
  • What happened to potency during blending, encapsulation, tableting, or coating
  • Whether the finished product’s cumulative heavy metals burden still falls within USP <232>/<233> limits after combining multiple botanical ingredients
  • Whether microbial counts increased during manufacturing or filling (USP <61>/<62>)

Heavy metals are an instructive example. A single botanical ingredient might test below limits on its own. So might a second. And a third. But blend 10 or 12 botanical powders into a single finished formula and run ICP-MS on the combined product — the cumulative lead load can easily push past the 10 µg/day oral intake limit referenced in USP <2232>, even though every individual ingredient COA showed a passing result. An accredited analytical lab running your finished product catches this. Your ingredient supplier’s COA cannot.

This matters beyond Amazon compliance. FDA’s cGMP regulations under 21 CFR Part 111.75 explicitly require manufacturers to test finished product for identity and to verify it meets established specifications. Treating supplier COAs as a substitute is a documented cGMP deficiency — it appears in FDA 483 observations regularly, and it’s the kind of gap that widens quickly if a consumer complaint triggers an inspection.

The Five Tests That Keep Amazon Listings Alive — and FDA-Defensible

This isn’t a full quality program. But it’s the core documentation stack that supplement brands selling on Amazon need on file for every commercial batch:

1. Botanical Identity Verification For any product containing plant-derived ingredients, identity testing is the foundation. HPTLC remains the gold standard in regulatory contexts because it generates a visual chromatographic fingerprint that’s both interpretable and defensible. DNA barcoding is increasingly used as a complementary method, but has limitations when applied to processed botanical ingredients — genetic markers can degrade during extraction, drying, and encapsulation, meaning a negative or inconclusive DNA result doesn’t automatically indicate adulteration. The two methods together are stronger than either alone.

2. Label Claim Potency Testing Active ingredient quantification against your stated label claim. The general ±20% tolerance is a starting point, not a blanket standard — certain vitamins (particularly fat-soluble ones) and active botanical markers have tighter pharmacopeial specifications. Set your internal specifications before you finalize label claims, not after, because closing the gap in reverse is expensive.

3. Heavy Metals Panel by ICP-MS Lead, arsenic, cadmium, and mercury at minimum, by ICP-MS per USP <233>. The applicable limits come from USP <232>, but California Prop 65 limits are the practical floor for any brand distributing nationally through Amazon — because Amazon’s marketplace reaches California customers regardless of where your company is incorporated. Prop 65’s Maximum Allowable Daily Level (MADL) for lead is 0.5 µg/day. That is a considerably smaller target than the USP oral limit, and it’s the threshold that generates consumer complaints and third-party watchdog reports.

4. Microbial Screening per USP <61>/<62> Total aerobic microbial count, total combined yeast and mold count, and absence of specified organisms — Salmonella, E. coli, Staphylococcus aureus, and Pseudomonas aeruginosa for topically applicable products. Herbal supplements are particularly susceptible: root powders, dried berries, and any ingredient with elevated water activity carry higher baseline microbial risk. This screening needs to be batch-specific. An annual raw material qualification isn’t a substitute for finished-product testing.

5. Pesticide Residue Screening Amazon doesn’t uniformly require this, but pesticide residues in botanical supplements have become a reliable flashpoint for consumer advocacy groups and media coverage. Consumer testing programs have found pesticide residues in botanicals at rates that have surprised even experienced formulators. For any formula with a significant botanical load — especially herbs sourced from outside the US — a targeted pesticide screen adds meaningful defensibility and catches sourcing problems before they become label problems.

The Logistics Problem Midwest Brands Don’t Talk About Enough

Most ISO 17025-accredited dietary supplement laboratories are clustered on the coasts — California and New Jersey, primarily. For brands and contract manufacturers based in Chicago, Milwaukee, Indianapolis, or Detroit, that creates a friction many operations underestimate: overnight shipping costs, temperature-sensitive sample management, cold-chain documentation requirements, and chain-of-custody paperwork that has to be airtight for the COA to carry regulatory weight.

That friction is often the real reason brands skip or delay testing — not cost, but calendar. If you’re producing 8,000–10,000 units of a private-label product and you want to ship to an Amazon FBA warehouse within two weeks of production, a 21-day testing turnaround is genuinely disruptive to cash flow and inventory planning.

Ayah Labs’ sample receiving hub in Countryside, IL addresses this for Midwest brands directly. Samples received locally are consolidated and forwarded same-day to the Qalitex Laboratories facility in California — ISO 17025-accredited for dietary supplement testing — and completed COAs typically return within 5–7 business days for standard panels. Heavy metals, microbiology, and potency testing run concurrently when samples arrive properly labeled and accompanied by complete chain-of-custody documentation.

The Midwest receiving point also simplifies the documentation chain. Chain-of-custody integrity from your production facility to the analyzing lab is a detail that matters when a COA gets scrutinized — whether by Amazon’s compliance team, an FDA investigator, or a plaintiff’s expert witness.

What the Current Trajectory Means for Your Brand

Amazon’s enforcement posture isn’t softening. The combination of FTC scrutiny on supplement health claims, sustained media attention from consumer testing organizations (which have found that 20–35% of sampled supplements fail to match label claims on potency or identity), and Amazon’s own product liability exposure makes stricter documentation requirements more likely over the next 18 months, not less.

The brands that manage this well aren’t scrambling for documentation after a listing gets suspended. They’re treating third-party testing as a standing operational requirement, built into the production schedule and the per-unit cost of goods from the start.

Concretely: build testing into your production timeline. Get specifications set before labels are printed. Confirm that your contract lab’s ISO 17025 accreditation scope actually covers the specific test methods in your COA — accreditation scope matters, and a lab can be accredited under ISO 17025 without that accreditation covering dietary supplement potency or ICP-MS for heavy metals.

If your current COA stack can’t answer the question “can I defend this documentation simultaneously to Amazon and to an FDA investigator?” — that’s exactly where to start.


Written by Nour Abochama, VP Operations, Qalitex | Quality Consultant, Ayah Labs. Learn more about our team

Ship your sample to our Chicago facility — get a Qalitex CoA in 5–7 days. Contact us

Nour Abochama

Written by

Nour Abochama

VP Operations, Qalitex | Quality Consultant, Ayah Labs

Chemical engineer with 17+ years of experience in laboratory operations, quality assurance, and regulatory compliance. Expert in herbal and supplement testing, botanical identity, contract laboratory services, and ISO 17025 quality systems. Master's in Biomedical Engineering from Grenoble INP – Ense3. Former Director of Quality at American Testing Labs and Labofine. Executive Producer and co-host of the Nourify-Beautify Podcast.

Chemical Engineering17+ Years Lab OperationsISO 17025 (via Qalitex)Herbal & Supplement Testing Specialist
View LinkedIn Profile →

Need contract testing?

Get a quote from Ayah Labs. 48-hour turnaround for chemistry tests. Signed CoA included.

Get a Testing Quote →