If you manufacture dietary supplements, you’ve likely been asked by a retailer or customer to provide a “certificate of conformance.” The term sounds straightforward, but in an industry where the FDA estimates there are more than 85,000 products on the U.S. market alone and the global value tops 130 billion USD, the quality of that piece of paper can make or break your brand’s credibility [4]. Many founders are unsure whether a certificate of conformance (CoC) is the same as a certificate of analysis (COA) or what documentation will hold up under scrutiny. Let’s clear that up.

Certificate of Conformance vs. Certificate of Analysis

In dietary supplement manufacturing, the two terms are often used interchangeably, but they serve different roles. The FDA’s small entity compliance guide for 21 CFR part 111 defines a “certificate of analysis” as a document, provided by a supplier, that lists certain characteristics and attributes of a component—typically an incoming raw material [2]. When a retailer or distributor asks for a certificate of conformance, they are usually requesting a document that states a finished product lot meets its specifications. While the cGMP regulation does not explicitly define a CoC, the same fundamental principle applies: you are making a documented claim about quality. Under the Dietary Supplement Health and Education Act of 1994 (DSHEA), the manufacturer is responsible for ensuring that claim is accurate before the product reaches a consumer [5].

What FDA’s cGMP Rule Requires for Supplier COAs

The current Good Manufacturing Practice for dietary supplements, finalized in 2007 and codified at 21 CFR part 111, sets strict boundaries around the use of supplier COAs [2]. When you rely on a supplier’s certificate of analysis to confirm the identity of a component or to verify that other specifications are met, the rule includes five non-negotiable steps [2]:

You must first qualify the supplier by establishing the reliability of their COA through confirmation of the supplier’s test results.
The COA must include a description of the test or examination methods used, the test limits, and the actual results of those tests.
You must keep documentation showing exactly how you qualified the supplier.
You are required to periodically re-confirm the supplier’s COA to ensure ongoing reliability.
Your quality control personnel must review and approve the qualification and re-qualification documentation.

In plain terms, a COA that only says “Pass” or “Conforms” without listing the specific methods and numeric results falls short of what 21 CFR 111.75(a)(2)(ii) demands [2]. And during a cGMP inspection, FDA investigators will review not only those certificates but also your entire supplier qualification program, as detailed in the agency’s dietary supplement inspection compliance program [3]. If your binder full of COAs lacks actual test data or documented re-qualification, that will become an inspection finding.

What a Useful Certificate of Conformance Should Contain

Whether your brand is issuing a CoC for a finished product or reviewing one from a contract manufacturer, the document should leave no room for ambiguity. Drawing from the FDA’s expectations for a COA and industry best practice, a reliable CoC for a supplement lot should include:

Product name, lot number, and manufacture date
Each specification parameter (e.g., assay of active ingredient, heavy metal limits, microbial limits)
The test method used for each parameter, such as HPLC for potency or ICP-MS for heavy metals
The acceptance criteria or limits
The actual test result, or a clear statement of conformance when the full data is provided in an attached COA
The date of testing and the signature or electronic signature of a quality control representative

When you encounter a CoC that lists only a few generic statements and a stamped signature, it’s worth asking your supplier for the supporting raw data. Because if you’re later challenged—whether by an FDA investigator or a retailer’s audit—you’ll need to show that the claim of conformance was built on actual laboratory evidence, not just a boilerplate form.

Moving from Supplier Trust to Verified Proof

Relying on supplier certificates saves time, but it also concentrates risk. The FDA’s system holds the finished product manufacturer responsible for component quality [2]. That’s why many supplement companies treat supplier COAs as a first layer of verification, not the final word. In-house or third-party testing confirms that the material matches the documentation. This is where certificates of conformance take on a different weight: if you can attach an independent laboratory’s test results to your CoC, retailers, consumers, and regulators get a much stronger signal of quality.

The USP Dietary Supplement Verification Program demonstrates how rigorous conformance documentation operates at the highest level. Products that carry the USP Verified Mark must pass manufacturing facility audits, quality control documentation reviews, and laboratory testing for conformance to standards in the USP–NF or manufacturer specifications [1]. In effect, the Mark serves as a public-facing certificate of conformance backed by off-the-shelf testing that continues long after the initial verification—something a single CoC from an untested supplier cannot offer [1].

How Third-Party Testing Reinforces Your CoC

When you invest in independent third-party testing, you create a direct evidence trail that makes a CoC far more defensible. Standard analytical panels—identity by HPLC, heavy metals by ICP-MS, microbiology screening—can verify that each component meets its specifications. By pairing those lab reports with your finished product lot, the CoC you issue transforms from a simple declaration into a documented proof point. Even if you’re not pursuing USP verification, commissioning periodic confirmatory testing on incoming ingredients and finished batches gives you the evidence you need to satisfy both the FDA’s supplier qualification rules [2] and the growing demands of online platforms and brick-and-mortar retailers that increasingly require independent quality verification before stocking a brand.

The Real Value of a CoC in Today’s Market

In an industry where a 2024 inspection program specifically instructs FDA field staff to evaluate quality control’s review of supplier certificates [3], the days of filing away a one-page conformance certificate and hoping it’s enough are over. A certificate of conformance is only as strong as the testing program behind it. By understanding the cGMP requirements for supplier documentation [2], insisting on actual test data rather than pass/fail stamps, and layering on independent third-party analysis, you give your brand the kind of documentation that can withstand an audit, build retail confidence, and ultimately protect the consumers who take your products every day.

Sources

[1] Dietary Supplements Verification Program | USP (usp.org, accessed 2026-10-08)
[2] Small Entity Compliance Guide: Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements | FDA (fda.gov, accessed 2026-10-08)
[3] CP 7321.008, Dietary Supplements – Foreign and Domestic Inspections, Sampling, and Imports (fda.gov, accessed 2026-10-08)
[4] Current regulatory guidelines and resources to support research of dietary supplements in the United States - PMC (pmc.ncbi.nlm.nih.gov, accessed 2026-10-08)
[5] Dietary Supplements | FDA (fda.gov, accessed 2026-10-08)

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

What a Certificate of Conformance Means for Supplement Brands