What Your Botanical CoA Doesn't Tell You: The Case for Dual-Method Identity Testing

The certificate of analysis your herb supplier sends over looks thorough. Moisture content: check. Heavy metals: below limits. Microbial counts: within range. There’s even a line item for “identity” — and it passes.

What that line almost never tells you is how identity was confirmed. In most supplier CoAs we see at our receiving hub in Countryside, IL, “identity” means a technician looked at the material macroscopically, ran an organoleptic check, or at best matched a thin-layer chromatography pattern against an internal reference that may or may not be authenticated. That’s not nothing. But it won’t catch the category of problems that actually hurt brands: deliberate species substitution, partial adulteration with lookalike botanicals, or mislabeled lots from overseas suppliers where supply-chain oversight is thin.

If you’re sourcing botanical raw materials for the US market and your incoming identity testing documentation is a supplier CoA, your 21 CFR Part 111 compliance is built on a weaker foundation than you think.

The Adulteration Problem Is More Common Than the Industry Admits

The data here is unambiguous, even if it’s inconvenient. A 2013 study published in BMC Medicine by researchers at the University of Guelph tested 44 herbal supplement products from 12 companies using DNA barcoding and found that 59% contained DNA from plant species not listed on the label. More troubling: 33% of products showed outright species substitution — the labeled botanical was either entirely absent or present as a minority ingredient. This wasn’t a fringe-suppliers study. Several established brands were included.

The FDA’s CFSAN Adverse Event Reporting System (CAERS) consistently places botanical-related products among the most-reported categories for adverse events. And when the agency issues warning letters for adulterated or misbranded dietary supplements — more than 30 in fiscal year 2024 — species identity fraud is a recurring citation. Not a rare outlier. Recurring.

Under 21 CFR Part 111, Section 111.75, the cGMP regulation for dietary supplements explicitly requires that each incoming component be tested to verify its identity before use. The rule doesn’t prescribe a specific analytical method, but the evidentiary burden is clear: it’s on you, the manufacturer. If your only identity record is a supplier CoA generated by a method that can’t distinguish Echinacea purpurea from Echinacea angustifolia — or echinacea from a cheap filler — your compliance documentation won’t survive an FDA audit.

What HPTLC Catches (And Where It Falls Short)

High-performance thin-layer chromatography is the benchmark method for botanical identity in most pharmacopeial systems. USP Botanical Dietary Supplement monographs specify HPTLC procedures for dozens of species, and the American Herbal Pharmacopoeia has published validated methods for many more. The technique separates plant constituents on a silica plate, then compares the resulting band pattern — characterized by Rf values and UV/vis response under derivatization — against an authenticated reference standard.

HPTLC is genuinely excellent at what it does. A well-run plate with a proper reference standard can confirm species authenticity, detect major fillers like rice flour, soy, or starch, and flag some forms of crude adulteration within a few hours of sample receipt. Experienced analysts extract a remarkable amount of information from a chromatographic fingerprint.

But the method identifies chemistry, not genetics. And botanical chemistry overlaps significantly across related species. Withania somnifera (ashwagandha) and certain closely related Withania species share withanolide profiles closely enough that a standard HPTLC won’t reliably separate them. The same is true for several Panax species, Valeriana variants, and most adulteration cases we encounter in licorice-derived materials. When the adulterant has a similar phytochemical profile to the genuine article — which sophisticated adulterators tend to select for precisely that reason — HPTLC can return a clean result while the product still fails genetic identity.

DNA Barcoding Fills the Gap — With Its Own Limitations

DNA barcoding assigns species identity by amplifying and sequencing standardized genomic regions. For flowering plants, the primary markers are ITS2 (internal transcribed spacer 2), matK, and rbcL — each species-specific in a way metabolite profiles simply aren’t. A Panax ginseng and a Panax quinquefolius may look nearly identical chemically and morphologically; their ITS2 sequences differ in ways that are unambiguous against a reference database. For adulteration detection, the sensitivity is exceptional — metabarcoding approaches can detect contaminating species at thresholds below 0.1% by DNA proportion in a mixed sample.

The Consortium for the Barcode of Life (CBOL), GenBank, and the NCBI reference sequence libraries provide the backbone databases. Multiple international regulatory bodies have validated the approach for botanical authentication, and it’s increasingly referenced in both FDA draft guidances and the European Pharmacopoeia.

The limitation is sample matrix. Highly refined botanical extracts — where DNA has been degraded through heat processing, solvent extraction, or hydrolysis — may not yield amplifiable genetic material. A 95% Boswellic acid extract has had most of its cellular structure broken down; DNA barcoding may return inconclusive not because the material is fraudulent but because the genetic target was eliminated during processing. Similarly, some co-extracted and highly concentrated botanical powders can inhibit PCR amplification without careful extraction optimization. DNA barcoding is the right tool for most raw botanical inputs and many standardized extracts — but not universally.

The Dual-Method Approach: Why Both Methods Together Meet the Standard

The USP Expert Panel on Botanical Dietary Supplements has recommended a complementary multi-method approach to identity verification for exactly these reasons. Neither HPTLC nor DNA barcoding is a universal answer. Used together, they cover each other’s blind spots.

The tiered protocol we run through our Ayah Labs intake facility — with testing performed at our ISO 17025-accredited analytical laboratories in California — works like this:

1. HPTLC first, run against a USP or AHP reference standard with full documentation of Rf values, UV visualization, and derivatization images. This resolves approximately 70–75% of incoming lots from established suppliers without further action.

2. DNA barcoding (ITS2 + matK) triggered automatically when: (a) the HPTLC result is ambiguous or atypical; (b) the material falls in a high-risk species category — ashwagandha, turmeric, valerian, ginseng, black cohosh, and elderberry are all in the top-10 adulteration targets tracked by the American Botanical Council’s Botanical Adulterants Prevention Program; or (c) it’s the first incoming lot from any new supplier relationship.

3. Full identity battery — HPTLC + DNA barcoding + NIRS screening — for any material flagged under either method, or for clients operating enhanced QA programs who need the additional documentation layer.

That structure keeps costs manageable while ensuring that the categories most vulnerable to adulteration get genetic confirmation. For a Midwest supplement brand sourcing 15–20 botanical inputs per year, this typically means 6–8 lots per year trigger DNA barcoding at roughly $180–$220 per barcoding run. That’s a rounding error compared to the cost of a single FDA warning letter, a third-party product recall, or the reputational fallout from a failed retail audit.

What to Ask Any Analytical Laboratory Before You Sign a Testing Agreement

Not every laboratory offering “botanical identity testing” is running validated pharmacopeial methods. These questions sort the programs that are doing the work from those checking a box:

On HPTLC: Which reference standard system do you use — USP, AHP, or ESCOP? Are reference chromatograms archived with batch records? What is your protocol for an ambiguous result?

On DNA barcoding: Which genomic regions are routinely amplified? Do you sequence against GenBank or a curated reference database? How do you handle degraded DNA in standardized extracts?

On accreditation: Is the laboratory ISO 17025 accredited, and for which specific methods? ISO 17025 accreditation requires documented method validation, proficiency testing participation, and regular external audits — it’s not the same as a GMP certificate or an internal quality audit.

On documentation: Does the final CoA include Rf images from the HPTLC plate and the sequence alignment data from barcoding? That documentation is what an FDA investigator reviewing your 21 CFR Part 111 records will want to see. “Supplier CoA attached” is rarely sufficient on its own.

If your current analytical laboratory can’t answer those questions with specifics, that’s worth knowing before you stake a product line on their identity results.

---

The risk calculus here isn’t complicated. If you’re sourcing ashwagandha, turmeric, valerian, or any high-volume botanical where the economics of adulteration are attractive, you need both methods documented in your incoming component records — not because every lot will fail, but because the one that does will be the one you didn’t test thoroughly enough. Dual-method identity testing isn’t gold-plating your QA program. Under current cGMP expectations and the enforcement environment around botanical supplements, it’s the floor.

---

Written by Nour Abochama, VP Operations, Qalitex | Quality Consultant, Ayah Labs. Learn more about our team

Ship your sample to our Chicago facility — get a Qalitex CoA in 5–7 days. Contact us

Related from our network

• Full-spectrum supplement testing under ISO 17025 accreditation — Qalitex Laboratories runs HPTLC, DNA barcoding, ICP-MS, and USP microbiology for supplement brands nationwide, issuing accredited CoAs accepted by major retailers and Amazon’s supplement compliance programs.