A Certificate of Analysis is the cheapest quality document you will ever accept and the most expensive one to misread. When a phosphatidylserine lot arrives, the CoA is usually the first — sometimes the only — evidence that what you paid for is what you received. Yet QA teams keep finding the same defects: assay results without a method reference, heavy metal panels copied from a template, lot numbers that trace to nothing, and "typical" values standing in for actual batch results. US dietary supplement GMPs under FDA 21 CFR Part 111 make you responsible for establishing specifications and verifying that incoming components meet them — a supplier CoA can substitute for your own testing only if its reliability has been confirmed. This article walks through a practical CoA audit for PS: what a compliant document looks like, four recurring red-flag patterns, and a disciplined procedure for reconciling supplier data with your own testing.

What a Compliant PS CoA Must Contain

Before hunting for red flags, anchor on what a complete PS CoA looks like:

  • Identification block: Supplier name and address, manufacturing site (not just the sales office), product name and grade, lot number, manufacture date, retest or expiry date, and lot quantity.
  • Identity and assay: Identity confirmation (commonly HPLC retention-time match plus a phospholipid profile) and the PS assay against specification — typically 20%, 50%, or 70% by HPLC, with the basis (as-is or dry) clearly stated.
  • Physicochemical panel: Appearance, water content or loss on drying, pH where applicable, peroxide value, and particle size where the application demands it.
  • Contaminant panel: Heavy metals (lead, arsenic, cadmium, mercury at minimum), residual solvents appropriate to the extraction process, microbiology (TPC, yeast and mold, Enterobacteriaceae or coliforms, Salmonella, E. coli), and where relevant, mycotoxins and pesticide residues.
  • Method and result discipline: Each line showing specification, actual result, test method with identifier and version, and the testing laboratory — in-house or accredited third party.

A CoA missing any block is not automatically fraudulent, but every gap is a question to ask before the material is released for production.

QA analyst reviewing a Certificate of Analysis beside HPLC chromatograms on a laboratory monitor

Red Flag 1: Assay Method Ambiguity

The most common defect in PS CoAs is an assay result with no defensible method behind it. The audit questions are simple: which method, which detector configuration, which column chemistry, which calibration standard, and on what basis — dry or as-is?

PS assays are genuinely method-sensitive: HPLC-UV, ELSD/CAD detection, and older spectrophotometric phosphorus methods respond differently to the phospholipid class mix and can differ meaningfully. Red flags in this block include a method stated only as "HPLC" or "in-house" with no document number or version; results on a different basis than the specification; assays rounded to suspiciously clean numbers across consecutive lots; and no identified calibration source — without a traceable PS reference standard, the number has no anchor. If the method cannot be produced on request, treat the assay as unverified and test the lot independently before release.

Red Flag 2: Incomplete Impurity, Heavy Metal, and Micro Panels

The contaminant block is where template-driven CoAs fall apart. Frequent patterns: heavy metals listed as "complies" instead of numeric results against limits; micro panels omitting the organisms that matter for your destination market; residual solvents reported only for the solvents the site prefers while the extraction history says otherwise; and "not detected" verdicts without detection limits.

For phosphatidylserine specifically, a credible panel shows numeric results and limits for lead, arsenic, cadmium, and mercury; residual solvents matching the declared extraction process — ethanol or hexane fractionation each leaves a different footprint; a micro panel covering TPC, yeast and mold, Enterobacteriaceae, Salmonella, and E. coli with methods and units; and a peroxide value limit that reflects an oxidizable phospholipid rather than a generic botanical default. Red flags to write up: "conforms" with no numbers, missing detection limits, micro results identical to the last digit across years of lots, and any panel where the testing laboratory is unnamed. Each is a signal the document was assembled rather than generated.

Red Flag 3: Specification Drift and "Typical" Values

A CoA is a record of what one lot measured — not a brochure. Watch for:

  • "Typical value" columns replacing batch results. A results column containing a range ("50–55%") or a "typical" note gives you a data sheet, not a Certificate of Analysis.
  • Limits loosened since qualification. Compare against the spec sheet in your qualification file. Quietly widened peroxide or micro limits between the approved sample and routine lots are one of the most reliable indicators of an upstream supply change.
  • Retest dates without logic. A phospholipid with a 36-month retest date but peroxide value creeping toward its limit lot over lot deserves a stability question, not a rubber stamp.
  • Inconsistent formats. Units changing between lots, varying method spellings, and results always sitting exactly at the limit with no margin all warrant a conversation with supplier QA.

None of these alone proves anything wrong — but each justifies requesting the underlying laboratory report and batch record extract.

HPLC system with autosampler running phospholipid analysis in a quality control laboratory

Red Flag 4: Batch Traceability Gaps

Every CoA should trace backward to a production record and forward to your receiving file. The audit is quick: confirm the lot number format matches the supplier's established scheme, the manufacture date is plausible given the lot sequence, the covered quantity matches the consignment, and the manufacturing site matches your qualification file and import documentation.

Traceability red flags: lot numbers repeating across product grades, CoAs issued by an entity other than the manufacturer with no stated relationship, dates inconsistent with shipping documents, and — the classic — a CoA for a lot number that appears nowhere on the drums you received. For US buyers under FSMA importer programs and EU buyers facing official-controls sampling, an untraceable CoA is a compliance problem as much as a quality one.

Reconciling CoA Discrepancies with Internal Testing

Sooner or later your incoming test will disagree with the supplier's CoA. A disciplined sequence:

  1. Verify like-for-like. Confirm both results use the same method family, basis, and units. Many "discrepancies" dissolve when a dry-basis assay is compared against an as-is CoA line.
  2. Check your own laboratory first. Sample handling, water content, and oxidation during storage move PS results. If methods differ, request details and run a method comparison on retained sample.
  3. Escalate to an independent third party. For persistent gaps — especially assay or heavy metals — send a retained sample to an accredited laboratory both parties accept, with chain of custody.
  4. Quarantine and document. The lot stays on hold until resolved, and the investigation goes into your deviation system. If you accept the material, the rationale belongs in the file.
  5. Feed the result back to supplier management. A pattern of discrepancies is a scorecard event — and under 21 CFR 111, evidence for why you do, or no longer can, rely on the supplier's CoA in lieu of your own testing.

FAQ

Q1: Can I rely on a supplier CoA instead of testing each incoming PS lot?

Under FDA dietary supplement GMPs, only after establishing the reliability of the supplier's results through qualification, confirmed at scheduled intervals. Identity generally cannot rely on the CoA alone. EU importers face parallel expectations.

Q2: What assay method should a PS CoA specify?

HPLC with a documented method identifier — column chemistry, detector (UV, ELSD, or CAD), and calibration against a traceable PS reference standard. "HPLC" alone warrants requesting the full method first.

Q3: What heavy metals must appear on a PS CoA?

Lead, arsenic, cadmium, and mercury at minimum, each with numeric result, limit, method, and basis. Panels that say "complies" without numbers are incomplete — reject them.

Q4: A lot's peroxide value is within limit but close to it. Red flag?

Not disqualifying, but trend it. Phospholipids oxidize readily; a rising lot-over-lot trend signals storage or stability issues upstream.

Q5: The supplier's assay says 52.1% and my lab says 49.4% on a 50% spec. What now?

Confirm both results are on the same basis and comparable methods. If the gap persists, quarantine the lot, request the raw lab report and batch record extract, and send a retained sample to a jointly accepted third-party lab. Document the investigation either way.

Conclusion

A CoA audit is the control point where paper risk is either contained or inherited. The recurring red flags are findable in minutes: assays without methods, contaminant panels without numbers, specifications drifted since qualification, lot numbers that trace to nothing. Each is cheap to catch at goods-in and expensive to discover in a finished product, a retail audit, or an official-controls inspection. Build the audit into a standard checklist and keep a discrepancy procedure that quarantines first and investigates second. For a second opinion, send us a recent CoA and spec sheet — our QA desk will walk it against the audit points above.

Sources

  1. eCFR — 21 CFR Part 111, Current Good Manufacturing Practice for Dietary Supplements: https://www.ecfr.gov/current/title-21/part-111
  2. U.S. Food and Drug Administration — Dietary Supplements: https://www.fda.gov/food/dietary-supplements
  3. NIH Office of Dietary Supplements — Dietary supplement quality and analytical resources: https://ods.od.nih.gov/
  4. AOAC International — Analytical methods and laboratory proficiency testing: https://www.aoac.org/
  5. European Commission — Food Safety, Official Controls: https://food.ec.europa.eu/food-safety/official-controls_en

Recommended next steps

Contact sales for product documents

Share source preference, application, country, and annual quantity.

Contact Sales