A certificate of analysis (COA) only counts if the lab named on it actually issued it, and a PDF or screenshot is easy to edit. Most labs that stores cite let anyone look up a report on the lab's own website. For what the figures on a report mean, see how to read a certificate of analysis.
Five steps
- Find the verification ID on the COA: a task number and key, a search code, an access code or a QR code.
- Go to the lab's website yourself, by typing its address or searching its name, not only through a link on the report.
- Enter the ID on the lab's lookup page. If you scan a QR code, check that the page it opens is on the lab's own domain.
- Compare the lab's copy with the store's field by field: client, product, amount, batch or lot, dates and results.
- If the lab has no lookup or finds no record, contact it through its own website and ask whether it issued the report.
A match shows the lab tested a sample for that client. It doesn't show your vial came from that batch, so check the batch number on the vial too.
The labs stores cite most
Each store page lists the labs the store cites. The table covers every lab named by two or more store sites in PeptidesGrid's data on Sep 25, 2026, most cited first, with details from each lab's own website read that day. Labs change their sites; follow their current instructions.
| Lab | How to verify | What to look for |
|---|---|---|
| Janoshik | Enter the task number and unique key on its verification page. | Task number at the top left of the report, key at the bottom. Reports are private unless the client makes them public; public tests need no key. |
| Freedom Diagnostics | Search by Search Code, accession number or company name. It says "Every COA is searchable by accession number or company name." | The Search Code is in the top right table of the COA: the first 4 characters of the company name, then the accession number. |
| Kovera Labs | Use the code or link on the COA. It says every COA includes "a verification code your customers can use to confirm authenticity." | Report numbers start with KVR. The link should open on koveralabs.com. |
| Chromate | Click Verify at the top of its site and enter the Job Number and Access Code. | If the COA doesn't show both, ask the store. Clients get results through the same Verify portal. |
| Finnrick Analytics | Sign in or sign up, then enter the 7-character certificate ID. | Only published tests verify; about a third are shared only with the requester. Its COAs "do not feature a vendor name or batch ID by design", so ask the store for the results page URL. |
| MZ Biolabs | No public lookup found on its site. Ask the lab through its contact form. | The sample certificate on its site shows a lot number, analysis date, client and signature, but no verification code. |
| BioRegen | Click Verify on its site and enter the COA number and validation key. | Each lot and test gets its own certificate, number and key. Endotoxin is a separate report. |
| ILS Laboratories | Enter the access code on its verify page, or scan the QR code. | A 7 to 8 character code in bold below the QR code at the top right, and again in the footer. |
| MDx BioAnalytical Laboratory | Enter the Search Code in its CoA Search. | Format "25xxxx or 25xxxxE". A match opens a PDF from files.mdxbiolabs.com. |
| TrustPointe Analytics | Scan the QR code or follow the link at the top right of the COA, or enter the key on its verification page. | The QR code and link lead to trustpointelims.com, which asks for "the key printed on your PDF report." |
Red flags
- No verification ID where the lab normally prints one. Describing forged copies of its reports, TrustPointe wrote that the forgers "removed the QR Code and the link from the COAs that would allow customers to verify that the COA is legitimate."
- A link or QR code that opens somewhere other than the lab's own domain. TrustPointe: "If you follow the link and it does not take you to the laboratory's website (URL), it is likely falsified." Check the address spelling; a copied page on a lookalike domain can show anything.
- A lab you can't reach or find outside the store's site.
- No record found. Finnrick says that when a certificate ID "returns no result at finnrick.com/verify and the vendor cannot provide a working results URL, the document may be fabricated." Recheck the code for typos first.
- A lab record for a different product, amount, client or batch.
- Dates or figures that differ from the lab's record. As Finnrick puts it, "PDFs can be modified or forged".
One failed check isn't proof: stores sometimes post the wrong file, and some labs keep reports private, so ask the store and the lab. If a lab says it didn't issue a report, you can warn other buyers through a buyer report with your evidence.
General information about labs' verification tools, not an assessment of any store's documents. Lab details read Sep 25, 2026.