Why Your Supplier's COA Isn't Enough: What Analytical Testing Laboratories Find in Botanical Raw Materials

Nearly half of the botanical raw materials submitted for third-party identity verification through the American Botanical Council’s Botanical Adulterants Program have shown some form of adulteration, substitution, or mislabeling. Half. And in most of those cases, the supplier had provided a certificate of analysis that said everything was fine.

That gap — between what a COA claims and what an independent analytical testing laboratory actually finds — is one of the most persistent problems in botanical ingredient sourcing. If you’re qualifying herbal raw material suppliers primarily by reviewing their documentation, you’re accepting significant risk on faith.

Here’s what’s actually in that gap.

What a Supplier-Issued COA Actually Tells You (And What It Doesn’t)

A supplier’s certificate of analysis isn’t worthless. It communicates lot-specific test results, the methods used, and the testing date — and under FDA’s 21 CFR Part 111 cGMP requirements, you’re required to receive one with every raw material shipment. That’s the regulatory baseline. The problem is in the assumptions we stack on top of it.

When a supplier runs their own COA testing, they’re often working in-house or through a contract lab they’ve selected and paid. That creates obvious incentive structures. More subtly, their methods may not match your product specs, your target pharmacopoeial monographs, or the Ph.Eur. and USP standards your customers expect. A COA might list an HPLC assay result for a botanical marker compound but use a proprietary in-house method that’s never been validated against USP <561> Articles of Botanical Origin or the corresponding Ph.Eur. monograph.

There’s also the question of what’s not on the COA. Pesticide residue screening, mycotoxin testing, elemental impurities beyond lead — these are frequently absent unless you’ve negotiated them into the purchase specification upfront. A COA showing a clean heavy metal screen might mean a full 10-element ICP-MS panel, or it might mean a colorimetric test for lead alone. Same document. Completely different analytical picture.

Five Failures Our Team Sees Regularly During Botanical COA Verification

When we run independent verification testing on botanical raw materials submitted by clients for supplier qualification, a handful of failure categories come up with uncomfortable regularity.

Botanical identity mismatches. This is the most alarming category, and the most common in high-adulteration-risk genera. Using HPTLC fingerprinting and DNA barcoding, we regularly identify materials that are a different species than stated, a lower-grade substitute, or a blend that includes non-specified botanical material. A shipment of Echinacea purpurea root powder is exactly that until you run a TLC chromatogram alongside a USP reference standard. We’ve seen E. pallida and E. angustifolia substituted interchangeably, even though their phytochemical profiles and applicable regulatory documentation differ meaningfully.

Heavy metal contamination above pharmacopoeial limits. USP <2232> sets oral botanical dosage form limits at ≤1.0 µg/g for lead, ≤1.5 µg/g for arsenic, ≤0.3 µg/g for cadmium, and ≤0.3 µg/g for mercury. We see exceedances — particularly for lead and cadmium — in materials sourced from agricultural regions in South and Southeast Asia where soil contamination is elevated and supplier testing may rely on older, less sensitive methods. One ashwagandha root powder batch we tested came in at 1.8 µg/g lead: 80% above the USP limit, with a clean COA from the originating supplier.

Pesticide residues that a narrow panel will never catch. The European Pharmacopoeia section 2.8.13 lists maximum residue limits for hundreds of compounds, and the EU requires compliance for any botanical material entering the European market. Many non-EU suppliers test a panel of 20–30 common organophosphates, nothing more. We routinely find neonicotinoids, fungicides like carbendazim, and persistent organochlorines in materials that passed a restricted supplier screen. The EU default maximum residue level for unapproved pesticides is 0.01 mg/kg — a threshold that a partial panel will consistently miss.

Microbial counts higher than labeled. USP <2021> and Ph.Eur. 2.6.31 set total aerobic microbial count (TAMC) limits for oral botanical preparations. The general oral botanical limit under USP <2021> is ≤10⁵ CFU/g for TAMC and ≤10³ CFU/g for total combined yeast and mold (TYMC). Supplier COAs listing results at or near the method detection limit are often based on plating methods run under suboptimal incubation conditions — something we can partially evaluate when method metadata is provided. When it isn’t provided, re-testing is the only way to know.

Marker compound assay results that don’t replicate. A COA reporting 5.2% hypericin in Hypericum perforatum extract means little if you don’t know the HPLC method and reference standard behind that number. We’ve run parallel assays on materials submitted with high-value COA results and found replicate values 20–40% lower using validated USP-equivalent HPLC methods. That gap translates directly to label claim failures at the finished product stage — the worst possible place to discover it.

What an Analytical Testing Laboratory Actually Runs in a Botanical Verification Panel

A complete botanical raw material verification isn’t a single test — it’s a layered protocol. What that panel includes depends on the material, the target market, and the risk tier you’ve assigned the supplier, but a comprehensive screen for a high-risk botanical generally covers:

• Botanical identity — macroscopic evaluation, HPTLC per USP <203> or in-house validated SOP, DNA barcoding for adulteration-prone species
• Marker compound assay — HPLC with validated method and pharmacopoeial reference standards
• Heavy metal screening — ICP-MS per USP <2232>: Pb, As, Cd, Hg at minimum; Cr, Ni, Cu for risk-based additions
• Pesticide residue screening — GC-MS/MS and LC-MS/MS multi-residue panel; 200+ compounds for materials targeting EU markets
• Mycotoxin panel — aflatoxins B1, B2, G1, G2; ochratoxin A; fumonisins where applicable
• Microbiology — TAMC, TYMC, Salmonella spp., E. coli, bile-tolerant gram-negative bacteria per USP <2023>
• Foreign matter and loss on drying

That’s six to eight distinct test categories, each with its own method validation requirements. No supplier COA covers all of it by default. And none of it substitutes for re-testing by an independent analytical testing laboratory working to your specifications and your target standards.

Building a Risk-Based Verification Protocol That Goes Beyond the COA

Not every raw material shipment needs a full independent panel — that would be operationally and financially unsustainable for most operations. What you need is a structured, risk-tiered approach aligned with 21 CFR Part 111’s requirement that you establish written specifications and verify that incoming materials meet them.

Tier 1 — High risk: Novel suppliers, botanicals with documented adulteration histories (ashwagandha, turmeric, black cohosh, ginkgo, elderberry), materials from high-contamination agricultural sourcing regions, and any ingredient with a direct consumer safety implication. Run a full independent verification panel on every lot for the first three shipments, then every other lot thereafter if results remain consistently in-spec.

Tier 2 — Moderate risk: Established suppliers with 12+ months of clean incoming test history, lower-risk botanicals, materials with chemically straightforward identity markers. Run a reduced independent panel — identity, heavy metals, and microbiology — on a quarterly re-testing cadence.

Tier 3 — Low risk: Approved suppliers with three or more years of consistent clean data, materials with commodity-level standardization, non-botanical excipients. COA review with periodic supplier audit and statistical skip-lot sampling — roughly 1 in 10 incoming lots with independent identity confirmation.

The supplier audit process feeds directly into this tiering, but so does the accumulating test data. If a Tier 2 supplier generates three consecutive in-spec independent results across multiple parameters, you have evidence to support a tier review. If a Tier 1 supplier fails a single identity test, they reset — and a documented root cause and corrective action are required before re-qualification proceeds.

Document the rationale at every tier boundary. FDA investigators reviewing cGMP compliance under Part 111 will ask how you arrived at your verification frequency. “We review the COA” isn’t an answer. “We tier suppliers by material risk and sourcing region, verified by independent analytical testing laboratory results per our written supplier qualification SOP” is.

The Real Cost of Trusting the COA Alone

A recall attributable to a contaminated botanical ingredient typically costs an average of $10 million in direct remediation expenses — before litigation, before brand damage, before the downstream effect on contract manufacturing relationships. A comprehensive botanical verification panel from an independent analytical testing laboratory runs roughly $500–$1,500 per lot depending on the material and scope. The math is not complicated.

What makes this tractable is that verification testing concentrates your risk exposure intelligently. Most failures come from a predictable set of materials (adulteration-prone botanicals), a predictable set of sourcing corridors, and a predictable set of failure modes — identity substitution, heavy metal contamination, pesticide exceedance. A well-designed supplier qualification program routes your testing budget toward those concentrations rather than spreading it uniformly.

Your supplier’s COA is a starting point. The data that actually protects your product — and your customers — comes from independent verification.

---

Written by Nour Abochama, Quality Consultant, Ayah Labs. Learn more about our team

Talk to our team about raw material testing Contact us

Related from our network

• ISO 17025-Accredited Supplement and Raw Material Testing — Qalitex Laboratories provides third-party analytical testing for dietary supplement brands and raw material suppliers requiring independent COA verification and FDA cGMP compliance documentation.