By the PharmaTradz BD Team. Published October 2026.
A Certificate of Analysis (CoA) is the document a manufacturer's quality control laboratory issues for a specific batch, showing each test that was performed, the specification limit for that test and the actual result. It is signed off by an authorised person in quality and travels with the goods. For a buyer of APIs, excipients or finished medicines, the CoA is the batch's report card, and the first document anyone will ask for if something goes wrong.
It is also one of the most commonly misread documents in pharmaceutical trade. A CoA is only as good as the laboratory behind it, and knowing how to read one properly is a basic skill for anyone who buys or imports medicines.
What a proper CoA contains
WHO publishes a model certificate of analysis, and most good manufacturers follow something close to it. A complete CoA should show:
| Section | What to look for |
|---|---|
| Product identification | Product name, grade (for example USP or Ph. Eur.), strength and dosage form for a finished product, and the salt or hydrate for an API |
| Batch details | Batch or lot number, batch size, date of manufacture and expiry or retest date |
| Manufacturer | Name and full address of the site that made and tested the batch |
| Specification reference | The pharmacopoeia monograph or in-house specification the batch was tested against, with its version |
| Tests, limits and results | Every test (identity, assay, impurities, dissolution, residual solvents, microbial limits and so on), the acceptance limit and the actual numerical result |
| Conclusion and release | A clear statement that the batch complies, the date, and the name and signature of the authorised quality person |
CoA versus Certificate of Conformance
The two are often confused. A Certificate of Analysis reports actual results for a specific batch. A Certificate of Conformance (or Compliance) simply states that a product meets its specification, without the test data. A conformance certificate can be acceptable for some packaging components or non-critical materials, but for an API or a finished medicine you should expect a full CoA with results.
How to read a CoA critically
Start by checking that the batch numbers match: the CoA, the commercial invoice, the packing list and the labels on the goods should all show the same batch. A mismatch is a classic sign of a document reused from another shipment.
Then look at the results themselves. A real laboratory produces real numbers, with natural variation from batch to batch. Results written only as "complies" for quantitative tests, results that are identical across several batches, or values sitting exactly on the limit every time all deserve a polite question.
Check that the specification matches what you ordered. If your dossier is built on the European Pharmacopoeia and the CoA is tested to an in-house method, that has to be resolved before the goods are released. The same applies to the exact salt or hydrate, which our explainer on hydrochloride versus base covers in detail.
Finally, look at dates and signatures. The CoA should be signed by a named, authorised person, the expiry or retest date should leave the shelf life your market requires, and the testing date should make sense against the manufacturing date.
Trust, but verify
Even a perfect-looking CoA is the manufacturer's own statement. Regulated buyers therefore build in checks of their own. Typically they test the first few batches from a new supplier in an independent laboratory, then move to periodic testing once the results consistently agree. In many markets, importers are required to test or release imported batches themselves, and India, for example, introduced government-laboratory testing of cough syrups before export in 2023. Our guide to verifying a pharmaceutical supplier sets out the red flags to watch for across all the supplier's documents.
Where the CoA fits among the other documents
The CoA speaks for one batch. Other documents speak for the site and the product as a whole: the GMP certificate covers the manufacturing site, the CoPP confirms the product's regulatory status in the exporting country, and a DMF or CEP describes how an API is made. Together they make up the document pack most regulators and tender authorities expect. Our explainer on APIs explains how these fit together for an active ingredient.
More document explainers
The documents in a supplier's quality pack work together. See also what a DMF (Drug Master File) is, what a CoPP is and how importers use it, GMP vs cGMP and what a WHO-GMP certificate is and how to check one.
How PharmaTradz can help
We ask suppliers for a sample CoA up front, so you can compare it with your specification before any order is placed. Our documentation and quality pack collects the CoA together with GMP, CoPP and DMF or CEP documents, and our RFQ checklist shows how to state the grade and tests you need. When you are ready, send us an RFQ.
Frequently Asked Questions(FAQs)
What is a Certificate of Analysis in pharma?
A batch-specific document from the manufacturer's quality control laboratory listing each test performed, the specification limit and the actual result, signed by an authorised quality person.
What is the difference between a CoA and a Certificate of Conformance?
A CoA reports actual test results for a specific batch. A Certificate of Conformance only states that the product meets its specification, without the data.
Who issues the CoA?
The manufacturer's quality control department issues it for each batch it releases. Independent laboratories can also issue a CoA when a buyer has a batch tested separately.
Is a CoA enough to accept a batch?
Not on its own for a new supplier. Regulated buyers usually confirm the first batches with independent testing and check that batch numbers, specifications and dates match the order and the shipping documents.
What are the warning signs on a CoA?
Batch numbers that do not match the invoice or labels, "complies" instead of numbers for quantitative tests, identical results across batches, a specification you did not order, and no named signatory.
