Why Your Supplier's CoA Isn't Enough: Using an Analytical Testing Laboratory to Qualify Raw Material Vendors

The document looks clean. Four pages, professional letterhead, CoA stamped and signed. Your botanical supplier certified the ashwagandha root extract to 5.0% withanolides, passed for heavy metals, passed microbial limits. You’ve received 12 shipments from them over two years and never tested a single one independently.

That’s a common story — and it’s a compliance gap that FDA investigators are increasingly skilled at identifying.

A certificate of analysis from a supplier is a starting point, not a finish line. In incoming raw material testing programs at analytical testing laboratories like ours, somewhere between 20–30% of botanical ingredients received from overseas suppliers show at least one meaningful discrepancy when retested under USP-method conditions. That’s not a one-time anomaly — it’s a pattern that holds across ashwagandha, turmeric, ginger, echinacea, and elderberry, year after year.

If your supplier qualification program amounts to filing CoAs in a folder, this post is for you.

What 21 CFR Part 111 Actually Requires — and Where Most Brands Fall Short

FDA’s Current Good Manufacturing Practice regulations for dietary supplements (21 CFR Part 111) are more specific about incoming raw material testing than many brands realize.

Section 111.75 gives you two legitimate options. You can test every incoming component lot yourself, under specifications you’ve formally established. Or, you can rely on a supplier’s CoA — but only if you’ve done the documented work to qualify that supplier through a defined program that includes your own confirmatory testing on at least a subset of lots. This second option is not a free pass. FDA expects documented evidence that your supplier produces consistent product, that you’ve performed at least initial qualification testing to establish a baseline, and that your skip-lot protocol is genuinely risk-based.

What FDA does not accept: filing a third-party CoA, never testing independently, and calling it GMP compliance. Form 483 observations for exactly this gap have increased since 2022, and FDA’s Office of Dietary Supplement Programs has specifically flagged it in warning letters to both finished product manufacturers and contract packagers.

The practical consequence? If an adverse event is ever tied to a contaminated ingredient in your product, your defense rests on what testing you can demonstrate. A supplier’s CoA you accepted without any independent verification is not much of a defense.

The Five Tests That Reveal What a Supplier CoA Routinely Misses

Not all test methods are created equal. A supplier may have genuinely tested their material and still produced a result that diverges from what an ISO 17025-accredited analytical testing laboratory finds — because their internal method differs from the compendial standard, their instrument wasn’t calibrated for that matrix, or the sample they tested wasn’t representative of the lot.

Here are five test categories where the gaps between supplier-reported and independently confirmed results show up most consistently.

1. Botanical Identity — HPTLC and DNA Barcoding

The most fundamental check: is this ingredient actually what the label says? High-Performance Thin-Layer Chromatography (HPTLC) produces a fingerprint-style chemical profile that experienced botanists read against authenticated reference standards. It catches species substitution — valerian replaced with horehound, echinacea purpurea standing in for echinacea angustifolia — and adulteration with cheaper fillers.

DNA barcoding adds a molecular layer that HPTLC can’t always provide. It’s especially critical for heavily processed materials — extracts, powders, granules — where cellular structure is degraded and visual identification is impossible. For raw material qualification, running both methods in tandem is current best practice; each catches failure modes the other can miss.

2. Marker Compound Potency Assays

Withanolides in ashwagandha. Curcuminoids in turmeric. Ginsenosides in panax ginseng. Hypericin in St. John’s wort. These bioactive compounds define both product efficacy and, in some cases, regulatory compliance with label claims.

Supplier CoAs often report these figures from in-house HPLC methods that don’t align with USP monograph methodology. We’ve seen ashwagandha extracts certified at 5% withanolides by suppliers retest anywhere from 3.2% to 6.8% under validated USP-aligned conditions. That spread absolutely matters when you’re formulating to a specific label claim and calculating serving-size math.

3. Heavy Metals via ICP-MS (USP <232>/<233>)

Botanical raw materials — particularly roots, bark, and leaves grown in mineral-rich soils or near industrial zones — sit among the highest-risk categories for heavy metal contamination. Lead, arsenic, cadmium, and mercury are the four elements of concern under USP <232>, with validated method requirements codified in USP <233>.

The problem with supplier CoAs here is twofold. Some suppliers test only lead and mercury by flame AAS (atomic absorption spectroscopy), a less sensitive technique than ICP-MS. Others test finished extract rather than incoming raw material, which can underrepresent actual risk. ICP-MS at an accredited analytical testing laboratory resolves to parts-per-trillion detection limits — catching contamination that less sensitive methods simply pass over.

4. Microbial Burden — USP <61> and <62>

Total Aerobic Microbial Count (TAMC) and Total Yeast and Mold Count (TYMC) under USP <61>, combined with pathogen absence testing under USP <62> (Salmonella, E. coli, bile-tolerant gram-negatives) — these are non-negotiable for botanicals that typically pass through multiple handling steps before reaching your facility.

Moisture fluctuation during ocean freight, warehouse storage conditions in warm climates, and re-bagging practices all affect microbial load after the supplier’s test date. We’ve received materials with a passing microbial CoA from 90 days prior showing hot-spot contamination on arrival — entirely consistent with a storage or transit event that occurred after the original test was run.

5. Adulteration Screening

Economic adulteration — substituting a costly ingredient with a cheaper one — is a documented and persistent problem in the botanical supply chain. A 2015 New York Attorney General investigation used DNA testing on store-brand herbal supplements from Walmart, Walgreens, Target, and GNC and found that roughly 4 in 5 tested products either contained none of the labeled botanical or contained undisclosed ingredients. The supply chain hasn’t been fundamentally restructured since then. Adulteration screening via HPTLC and LC-MS/MS is how you confirm that your ginkgo biloba isn’t partly senna, and that your black cohosh isn’t a closely related actaea species from a different geographic origin with a materially different alkaloid profile.

How to Build a Practical Supplier Qualification Program

You don’t need to test every lot of every ingredient at the same intensity. What you need is a risk-based framework — documented, defensible, and consistently applied.

Step 1: Categorize ingredients by risk tier. High-risk: botanicals with documented adulteration histories (echinacea, ginseng, black cohosh, turmeric, bilberry), ingredients with tight specification windows, anything sourced from a single vendor with limited audit history. Medium-risk: well-characterized ingredients with USP monographs from suppliers with two or more years of clean data. Lower-risk: excipients with straightforward chemical identity — citric acid, magnesium stearate, silicon dioxide.

Step 2: Set qualification standards for each tier. For high-risk botanicals, initial qualification should include full identity, potency, heavy metals, and microbial panels on at least three non-consecutive lots before approval. For medium-risk, identity confirmation plus one additional parameter is defensible. Document these criteria formally in a written specification for each ingredient.

Step 3: Establish a documented skip-lot protocol. Once a supplier achieves qualified status, you can reduce testing frequency — but FDA expects the skip-lot interval to reflect actual supplier performance data, not just scheduling convenience. If a lot fails after 18 months of clean results, your investigation needs to trace back through your skip-lot history and explain the deviation.

Step 4: Trigger re-qualification for supply chain changes. Any time a supplier changes their sourcing region, manufacturing site, extraction process, or contract grower, treat it as a new qualification event. This happens more than brands expect — Chinese and Indian botanical suppliers pivot growing regions in response to commodity prices more often than they disclose.

Step 5: Keep records that survive an inspection. Specification sheets, qualification test results, approval decisions, and out-of-spec investigations should all exist as retrievable, dated documents. “We’ve always used this supplier without problems” is not documentation. It’s a statement that invites the next question.

The Practical Advantage for Midwest Brands

For manufacturers and brand owners in the Chicago area, Midwest, or anywhere within a day’s freight of the Chicago suburbs, logistics add a real cost to raw material testing. Shipping samples to a West Coast or East Coast laboratory extends your receiving-to-release cycle by three to five days — and in a lean manufacturing environment, that delay compounds.

Our sample receiving hub in Countryside, Illinois is built around that reality. Samples from Midwest-based brands typically arrive within one business day of shipment. They’re logged, accessioned, and forwarded same-day to our ISO 17025-accredited testing partner for analysis under validated USP and AOAC methods. Standard turnaround on a full qualification panel — identity, potency, heavy metals, and microbiology — runs 5–7 business days. Rush service is available for time-sensitive lots.

We work with supplement brands, contract manufacturers, private-label distributors, and raw material brokers across Illinois, Indiana, Michigan, Wisconsin, and Ohio. Companies that need ISO 17025-quality data and a CoA that holds up under FDA scrutiny, without the logistics overhead of coast-to-coast shipping.

Start With Your Three Highest-Risk Ingredients

If you’ve read this and recognized that your incoming QC program is thinner than it should be, the fix isn’t complicated — it just requires starting.

Pull your approved supplier list. If you don’t have a formal one, create it. Flag your three highest-risk botanical ingredients by purchase volume and adulteration exposure. Reach out to your testing laboratory and request a qualification panel quote on your next incoming lot of each. Three steps, and you’ve started building a program that’s defensible on paper and in practice.

The first time an FDA investigator asks how you verify a supplier’s CoA, “we submit samples to an accredited analytical testing laboratory for independent confirmation before lot release” ends that line of questioning cleanly. Everything else invites follow-up you don’t want.

---

Written by Nour Abochama, VP Operations, Qalitex | Quality Consultant, Ayah Labs. Learn more about our team

Ship your sample to our Chicago facility — get a Qalitex CoA in 5–7 days. Contact us

Related from our network

• Supplement Testing Under ISO 17025 — Qalitex Laboratories — Full-service raw material and finished product testing under ISO 17025 accreditation, covering USP, AOAC, and FDA compliance panels for supplement brands.