Certificate of Conformance vs Certificate of Analysis: The Peptide Document That Reports No Result

A peptide certificate of conformance is not a certificate of analysis. A conformance document states that a batch met its specification. A certificate of analysis states what the batch actually measured, test by test, with the acceptance limit printed beside each numerical result. The two documents can carry the same letterhead, the same lot number and the same authorised signature, and only one of them contains evidence.

The distinction is not a matter of house style. It is written into the guidance that governs active pharmaceutical ingredient manufacture, into the United States Pharmacopeia general chapter on certificate content, and into the United States federal regulations that tell a buyer what a supplier document is and is not allowed to substitute for. In the research peptide market, where documentation is the main thing separating one anonymous white vial from another, knowing which of the two documents you are holding is the whole game.

What a Certificate of Analysis Is Required to Contain

USP general chapter 1080, derived from the International Pharmaceutical Excipients Council of the Americas guide, defines the term with unusual precision. A certificate of analysis is “a document relating specifically to the results of testing a representative sample drawn from the batch of material to be delivered.” Every clause in that sentence carries weight. Results, not conclusions. A representative sample, not a nominal one. Drawn from the batch to be delivered, not from a previous batch or a development lot.

The same chapter specifies what the Analysis section of the document has to carry for each characteristic listed: the test name, the result, the acceptance criteria, and a reference to the test method used. It then states the position plainly. Reporting of actual data and observations is recommended rather than nonspecific “passes” or “conforms” statements. USP 1080 goes further and explains why, drawing a line between attribute testing, which yields pass or fail outcomes, and variable testing, which yields numbers. Attribute results, the chapter notes, merely establish compliance with a specification parameter. There are no data to indicate how well the material complies.

ICH Q7, the international good manufacturing practice guidance for active pharmaceutical ingredients, states the requirement in a single sentence at section 11.42. The certificate should list each test performed in accordance with compendial or customer requirements, including the acceptance limits, and the numerical results obtained if test results are numerical. Section 11.41 adds the identifying information, meaning the name and grade of the material, the batch number and the release date. Section 11.43 requires the document to be dated, signed by authorised personnel of the quality unit, and to show the name, address and telephone number of the original manufacturer.

Read together, these are not stylistic preferences. They describe a document whose entire function is to transmit measurements from the laboratory that made them to the party that has to rely on them, with enough identifying context that the reader can tell which material was measured and who is answerable for the number.

What a Certificate of Conformance Actually Asserts

A certificate of conformance, sometimes issued as a certificate of compliance, is a declaration. Its structure is defined internationally by ISO/IEC 17050-1, which covers the supplier’s declaration of conformity. That standard is explicit about what kind of statement it governs. It addresses first party attestation, meaning attestation undertaken by the supplier itself, and its stated purpose is to give assurance of conformity and to identify who is responsible for that conformity. Responsibility, not measurement.

USP 1080 preserves the same separation inside a single document. Its recommended template places the Analysis section, containing test names and results, in one block, and the Certification and Compliance Statements section, containing declarations of good manufacturing practice compliance and other regulatory references, in a separate block further down. A certificate of conformance is functionally that second block issued on its own, with the Analysis section deleted. Nothing about it is fraudulent. It is simply a different class of information, and the two are not interchangeable.

The practical consequence is that a conformance statement is unfalsifiable from the document alone. If a certificate reports 98.4 percent purity against a limit of not less than 98.0 percent, a reader can see the margin, compare it against the previous lot, and form a view about process control. If the same certificate says only that the batch conforms to specification, the reader learns nothing about margin, nothing about trend, and cannot distinguish a batch that cleared its limit by four tenths of a percent from one that cleared it by a hundredth.

Key Research Findings

• USP general chapter 1080 defines a certificate of analysis as a document relating specifically to the results of testing a representative sample drawn from the batch of material to be delivered, and recommends reporting actual data rather than nonspecific “passes” or “conforms” statements.
• ICH Q7 section 11.42 requires that the certificate list each test performed, including acceptance limits and the numerical results obtained where results are numerical.
• ICH Q7 section 11.44 requires that when a new certificate is issued by an agent, broker, repacker or reprocessor, it must show the laboratory that performed the analysis, reference the original manufacturer by name and address, and attach a copy of the original batch certificate.
• 21 CFR 211.84(d)(2) permits a supplier report of analysis to substitute for a buyer’s own specification testing only if the buyer conducts at least one specific identity test and establishes the reliability of the supplier’s analyses through validation at appropriate intervals.
• FDA guidance issued in May 2007 on testing glycerin for diethylene glycol found that in the documented contamination incidents, manufacturers relied on the supplier certificate, the origin of the material was not apparent from that certificate, and the certificate received was often a copy on distributor letterhead rather than the one issued by the original manufacturer.
• CDC reported in MMWR 1996;45(30):649 that acute anuric renal failure was diagnosed in 86 children in Haiti between November 1995 and June 1996, that at least 79 percent had consumed one of two locally made syrups later found to contain diethylene glycol, and that of the 76 who remained in Haiti only one was known to have survived. Published as O’Brien KL, Selanikio JD and colleagues, JAMA, 1998, 279(15), 1175-1180.
• The same guidance notes that the compendial infrared identity test for glycerin responds to both glycerin and diethylene glycol without distinguishing them, and that only the gas chromatographic test separates the two.

The Documented Case: A Conformance Chain in the Glycerin Supply

The clearest evidence that document class matters comes from outside peptide chemistry. Between November 1995 and June 1996, acute anuric renal failure was diagnosed in 86 children in Haiti, most aged five years or younger, an outbreak CDC reported in MMWR in August 1996. At least 79 percent had consumed one of two locally manufactured syrup preparations later found to contain diethylene glycol. Of the 76 children who remained in Haiti, only one was known to have survived. The epidemiological investigation appeared as O’Brien KL, Selanikio JD and colleagues in JAMA in 1998.

The traceback is the part that belongs in any discussion of certificates. FDA summarised the common features of this and the related incidents in its May 2007 guidance on testing glycerin for diethylene glycol. The manufacturers of the affected syrups did not perform full identity testing on the incoming glycerin. They relied on the certificate of analysis provided by the supplier. And, in FDA’s words, the origin of the glycerin was not easily apparent from that certificate, because the document the manufacturers held was often a copy of a certificate on the letterhead of the distributor rather than the certificate issued by the manufacturer of the glycerin. The chain of custody was not readily known, because the material may have been sold several times between manufacture and use.

That is precisely the failure mode ICH Q7 section 11.44 exists to prevent. A certificate reissued by an intermediary must name the laboratory that ran the analysis, reference the original manufacturer, and carry the original batch certificate attached. Strip those elements away and what remains is an assertion of conformance on a distributor’s letterhead, indistinguishable in appearance from a certificate of analysis and carrying none of its traceability. FDA’s remedy was not better paperwork. It was a specific identity test with a limit test for diethylene glycol on every container of every lot.

What the Regulations Require of a Buyer Regardless

United States federal regulation treats a supplier document as a conditional substitute, never as a complete one. Under 21 CFR 211.84(d)(1), at least one test must be conducted to verify the identity of each component, and specific identity tests must be used where they exist. Under 211.84(d)(2), a report of analysis may be accepted from the supplier in place of the buyer’s own conformity testing, but only provided that the buyer conducts at least one specific identity test itself and provided that the buyer establishes the reliability of the supplier’s analyses through appropriate validation of the supplier’s test results at appropriate intervals.

The wording of the neighbouring paragraph is instructive. For containers and closures, 211.84(d)(3) says that a certificate of testing may be accepted from the supplier, subject to visual identification by the buyer and the same reliability validation. The regulation uses different phrases for different document classes and attaches conditions to both. Neither is ever treated as self-sufficient. USP 1080 reaches the same conclusion by a different route, stating that to use test results from a certificate the user must establish the reliability of the supplier’s results by periodically performing the required tests and comparing outcomes.

A research buyer has no quality unit, so none of these obligations transfer directly. What transfers is the reasoning. Every regulatory system that has examined the question concluded that a supplier document is a starting point for confidence rather than a substitute for it.

Why the Distinction Bites Harder in Research Peptides

Three features of this market make the conformance substitution unusually easy. The first is that most sellers are not manufacturers. Material is synthesised by a contract facility, sold through one or more intermediaries, and relabelled before it reaches the buyer. That is the same multi-handler structure FDA identified in the glycerin supply, and it creates the same opportunity for a document to be retyped onto new letterhead with the originating laboratory removed.

The second is that nobody downstream is running an incoming identity test. In a regulated supply chain the certificate is checked against the buyer’s own measurement at defined intervals, which is what makes a bad certificate eventually visible. Remove that check and a conformance statement can circulate indefinitely without ever meeting a contradicting number.

The third is presentation. A well designed conformance document looks like analytical evidence. It carries a lot number, a compound name, a molecular formula, a date, a signature and a specification column reading “not less than 98.0 percent”. The only missing element is the results column, and a reader scanning for reassurance rather than for data will not notice its absence. This is a different problem from outright falsification, which we have covered separately in our analysis of how falsified certificates of analysis survive scrutiny. A conformance statement need not be false to be uninformative.

Four Documents That Get Called a COA

The batch specific analytical report

A chromatogram and a numerical result generated from a sample drawn from the lot being sold, identified by that lot number, with the analysing laboratory named. This is the only document that satisfies the USP 1080 definition. Where a report of this kind exists it should be linked and readable, which is the standard applied across the reports published on our certificates of analysis page.

The typical or representative certificate

Real analytical data, but from a different lot, presented as characteristic of the product line. USP 1080 requires disclosure when a reported result derives from a reduced frequency programme, an average, or an in process measurement rather than from the delivered batch. The reasoning behind that disclosure requirement is set out in our discussion of skip lot and periodic testing, where a result on the certificate was never run on the batch in hand.

The certificate of conformance

A specification table with a conformance column and no results column. First party attestation in the ISO/IEC 17050-1 sense. It identifies who is responsible if the material is wrong, which has some value, and it reports nothing measurable, which has none.

The reissued distributor certificate

Numbers transcribed from an upstream document onto a seller’s letterhead, with the originating laboratory absent. ICH Q7 section 11.44 addresses this case directly and requires the analysing laboratory to be named and the original batch certificate attached. Whether a named laboratory is itself accredited for the specific measurement is a further question, examined in our review of ISO 17025 accreditation scope.

How to Tell Which Document You Are Holding

Four checks resolve the question quickly. Look for a results column that is distinct from the specification column and contains numbers rather than the words “conforms” or “complies”. Look for a lot number on the document that matches the lot number on the vial label. Look for the name of the laboratory that performed the analysis, which ICH Q7 requires and which a conformance statement structurally cannot provide. And look for a method reference beside each test, because a purity figure with no stated method is not interpretable, a point developed further in our treatment of what a purity number leaves undefined.

If a document passes all four it is an analytical report. If it fails the first, it is a conformance statement whatever its title says. If it passes the first but fails the third, it is a transcription of unknown provenance.

Limitations and Open Questions

Two caveats matter. ICH Q7 and USP 1080 are written for regulated pharmaceutical supply chains, and research chemicals sit outside their legal scope. Their value here is as a definition of what the words on a document conventionally mean, not as an enforceable obligation on a research supplier. And a conformance statement is not evidence of wrongdoing. Legitimate manufacturers issue them routinely alongside analytical reports. The failure is substitution, not existence.

The open question is whether the research peptide market will converge on the ICH Q7 section 11.44 standard for reissued documents, which would require every seller that did not run the analysis to name the laboratory that did and attach the original batch report. The requirement is decades old, the mechanism is simple, and the cost of compliance is a scanned attachment. What has been missing is any expectation on the buyer side that a certificate should resolve to a laboratory and a sample rather than to a letterhead.

Research Use Statement

All compounds and documentation practices discussed here relate to laboratory research contexts only. For research purposes only. Not for human consumption. Not for diagnostic or therapeutic use.