How to vet a research-peptide supplier: what independent testing can and cannot show

A certificate of analysis is only as useful as the link between it and the vial on your bench. For a laboratory buying synthetic peptides, vetting a supplier comes down to two questions: does the documentation show what it claims to show, and can you tie that documentation to the material you actually received? This guide sets out what published analyses of unregulated peptide products have found, what a third-party test report can and cannot prove, a checklist you can apply to any supplier, and a worked example using a real certificate.

Why does vetting a supplier matter?

Much of what is published about peptide quality outside regulated supply chains comes from medicines control laboratories, anti-doping laboratories and university groups that analyse products that were seized or bought online. Those products were sold as medicines or doping agents rather than as research reagents, but the analyses show which failures occur when nobody checks, and which of them a given test can detect.

• Germany, 2010–2013. The Cologne anti-doping laboratory analysed 337 black-market products, using high-resolution mass spectrometry and, for peptides and proteins, gel electrophoresis followed by nano-LC-MS/MS identification. It found 67 active ingredients; peptide hormones and growth factors accounted for 12.8% of the findings, and the unusual ones included thymosin β4 and a fusion protein of unknown biological activity. The authors described several of the substances as fake or non-approved (Krug et al., 2014).
• Belgium, 2018. Janvier et al. screened the ten falsified peptide drugs most often encountered on the Belgian market, bought from three suspected illegal internet pharmacies, for the active ingredient, related impurities, small-molecule contaminants, elemental impurities and residual solvents. The amount of drug per unit varied widely, purity ranged from 5% to 75% for the cysteine-containing peptides, one sample contained lead, and several contained arsenic at up to ten times the ICH limit for parenteral drugs, all of it in the more toxic inorganic form (Janvier et al., 2018).
• Hungary, 2024. Ashraf et al. combined online market surveillance with test purchases of semaglutide from six illegal online pharmacies. Three vials were delivered. Their semaglutide content exceeded the labelled amount by 28.56% to 38.69% and no peptide-like impurities were identified, yet the measured purity was only 7.7% to 14.37%, against the 99% stated on the labels. The freeze-dried samples contained no viable microorganisms when tested, but endotoxin was detected in all of them, at 2.16 to 8.95 EU per milligram (Ashraf et al., 2024).
• Unexpected compounds. In black-market growth-promoting products, Krug et al. (2018) identified analogues of GHRP-6, GHRP-2 and ipamorelin each extended by one extra glycine at the N-terminus, and a growth hormone variant carrying one extra alanine. Esposito et al. (2014) identified a modified GHRH analogue in a confiscated product and found evidence that its C-terminal amidation was incomplete, which the authors read as a sign of poor pharmaceutical quality.

The failure types recur: the wrong amount, low purity, toxic elements, endotoxin, and a compound that is not quite the one expected. The World Health Organization separates two kinds of problem product: substandard products fail to meet their quality standards and specifications, while falsified products deliberately misrepresent their identity, composition or source (WHO fact sheet). Documentation from a supplier needs to rule out both, and several of the failures above, such as metals and endotoxin, are invisible to the purity test most certificates report.

What can a third-party certificate show?

A third-party certificate is a report from a laboratory that is not part of the supplier or the manufacturer, describing a sample the laboratory received. A complete one answers several separate questions.

• Identity: is it the right molecule? This is normally shown by mass spectrometry, which compares the observed mass with the mass calculated from the sequence. The glycine-extended analogues above differ from their parent peptides by a single residue, which a mass measurement picks up and a purity percentage on its own does not. Our guide to HPLC and mass spectrometry covers both tests in detail.
• Purity: how much of the detected material is the main component? Usually reported as the main peak’s share of the total peak area in a reversed-phase HPLC chromatogram.
• Quantity: how much is in the vial? Some reports give the measured amount of peptide in the vial tested, which can be compared with the amount on the label. Identity and quantity are different measurements. A screening method developed at a Belgian Official Medicines Control Laboratory for suspected illegal peptide preparations, for example, detects 25 peptides by LC-MS/MS and quantifies them with a separate UHPLC method using diode-array detection, validated for a representative set of ten peptides to the requirements of ISO 17025 (Vanhee et al., 2015).
• Who tested it, and when. A named laboratory, a report or task number, and dates for when the sample was received and analysed.
• Which batch. The batch or lot number of the material the sample came from.

For regulated peptide medicines, pharmacopoeial monographs organise these attributes as identification, purity and assay, although the European Pharmacopoeia and the United States Pharmacopeia still differ considerably in how they test and which limits they set (Vergote et al., 2009). Research-grade peptides are not bound by those monographs, so for any certificate the useful questions are which tests were run, by which method, and against which limit.

The laboratory itself is part of the evidence. ISO/IEC 17025 is the international quality standard for testing and calibration laboratories. Its 2017 revision restructured the standard and introduced risk-based thinking, and keeping accreditation involves auditing, management review and participation in proficiency testing schemes (Hajek et al., 2023). Accreditation is granted by accreditation bodies, and results from laboratories accredited by signatories of the ILAC Mutual Recognition Arrangement can be recognised internationally (ILAC). Accreditation applies to a defined scope of methods, so if your work requires accredited results, check that the specific test on your certificate falls within it.

What can a third-party certificate not show?

A genuine, verifiable certificate still has firm limits.

• It covers one sample, from one batch, on one date. It says nothing about other batches of the same product, about other products from the same supplier, or about vials from the same batch that were not tested.
• It covers only the tests that were run. A purity and identity report does not show sterility, endotoxin, elemental impurities, water content or counter-ion content. The 2024 semaglutide samples are a clear example: no viable microorganisms, yet endotoxin in every sample (Ashraf et al., 2024). In cell work that matters: primary CD1c+ dendritic cells in culture were activated by amounts of endotoxin equivalent to the contamination found in some commercial recombinant proteins, a few of which exceeded the levels stated on their data sheets (Schwarz et al., 2014).
• It does not give peptide content unless that was measured. A synthetic peptide powder can carry counter-ions such as trifluoroacetate, which may originate from the synthesis itself or from purification steps (D’Hondt et al., 2014), so the share of the powder that is peptide is lower than the purity figure suggests. Our guide to reading a Certificate of Analysis explains the difference.
• It says nothing about what happened after the test. Storage, shipping and handling between analysis and your bench are outside its scope.
• It does not show how the sample was chosen. When a supplier commissions a test, the supplier decides which vial goes to the laboratory. That is normal practice, but it is not a random sample of everything the supplier sells. A test of a vial you received yourself, arranged by your own laboratory, answers a different and stronger question.
• A copy is not the record. An image or PDF hosted by a supplier can be edited. The version that counts is the one the testing laboratory holds and shows on its own site.

A checklist for vetting a research-peptide supplier

Use these as questions for any supplier. A gap is not proof of a problem, but each one is something to ask about before the material goes into an experiment.

1. Batch-specific certificates. Each certificate names one batch, and different batches have different certificates.
2. The same batch number on the vial and the certificate. Without that match, the document cannot be tied to the material in your hands.
3. A named testing laboratory. For independent tests, the laboratory is named on the report, and the report has its own number or key.
4. Verification at the source. The report can be looked up on the testing laboratory’s own website, and the laboratory’s record matches the supplier’s copy: same product, batch, dates and results.
5. Dates. The certificate shows when the sample was received and analysed, so you can judge how recent the test is relative to your batch.
6. Tests and methods stated. Identity by mass spectrometry, purity by HPLC, and any quantity measurement, with the method named and, ideally, the chromatogram and mass spectrum available on request.
7. Honest labelling of who did the testing. A manufacturer’s in-house batch certificate and an independent third-party report are both useful, but they are different documents and should be described as such.
8. Tests that match your experiment. If your work involves immune cells, endotoxin matters; if you need a solution of known concentration, peptide content and the salt form matter. Ask whether those were measured, or arrange the test yourself.
9. Accreditation, where you need it. If your work requires results from an accredited laboratory, check the laboratory’s ISO/IEC 17025 scope with its accreditation body.
10. A clear research-use-only stance. The supplier’s wording is consistent across product pages, labels and documents.
11. An identifiable legal entity. A registered company name and address you can look up.
12. Your own records. Keep the certificate, the batch number and the date you received the vial with your experimental records, so that any unexpected result can be traced back to a batch.

Worked example: checking a EuroPeps certificate

The first supplier to put through the checklist is EuroPeps, which supplies synthetic research peptides for in-vitro laboratory use, is operated by EuroPeps EOOD of Petrich, Bulgaria, and ships across the EU. Its public COA library currently lists three independent third-party certificates, all from the Czech laboratory Janoshik: BPC-157 10 mg (batch 28318), GHK-Cu 100 mg (batch 72463) and Retatrutide 10 mg (batch 67726). Here is the BPC-157 certificate, taken through the checklist.

• Batch-specific, with a matching vial label. The report names batch 28318. That is EuroPeps’ own batch number, and the same number is printed on the vial label. The COA library has a lookup that finds a certificate by batch number, and the authenticity check lets a buyer enter the code printed on a vial to see that vial’s batch documentation.
• Named laboratory and report number. Janoshik, task #237981.
• Dates. Testing ordered on 23 September 2026, sample received on 30 September 2026, analysed on 5 October 2026.
• Verification at the source. The library entry links to the report on Janoshik’s own verification site, and the report carries a unique key, HJS4LF9FD4XT, for looking it up there. The point of this step is to compare the laboratory’s record with the copy the supplier hosts, rather than relying on the supplier’s copy alone.
• Results. A measured quantity of 12.00 mg in a vial labelled 10 mg, and a purity of 99.426%. The other two certificates report 115.73 mg and 99.888% purity for the GHK-Cu 100 mg sample, and 10.83 mg and 99.662% purity for the Retatrutide 10 mg sample. These are what was measured in the vials tested, which is more informative than a restated label claim.
• Methods. The report lists the test requested as “BPC-157 analysis” and gives the results, but it does not print the analytical method, a chromatogram or a mass spectrum, and it does not say whether the quantity refers to the peptide alone or to the peptide in its salt form. Those are questions to put to the laboratory or the supplier.
• Who did the testing. The three Janoshik reports are the independent certificates. For products without one, the product page states that a certificate of analysis is issued per batch and offers a way to request it by email; that certificate is the manufacturer’s batch certificate, not independent testing.
• Research-use stance and legal entity. The site carries a research-use-only statement and names EuroPeps EOOD, Petrich, Bulgaria, as the company behind it.

The limits described earlier apply here as well. The independent certificates currently cover three products, one batch of each, tested once, on 5 October 2026; other products carry the manufacturer’s certificate on request. The report names EuroPeps as the client, so, as with any supplier-commissioned test, the supplier chose which vial went to the laboratory. The report also shows no endotoxin, peptide-content or counter-ion results and no accreditation statement, so a laboratory that needs any of those should ask, or arrange its own test.

What are the red flags?

These patterns are worth treating as warnings with any supplier. Each follows from the limits above or from failures described in the published analyses.

• One certificate for every batch. The same document, often undated, shown for several batches, fill sizes or years. A certificate describes one batch; reuse breaks the link to the material.
• No batch number, or a batch number that is not on the vial. Nothing ties the document to what you received.
• A report that cannot be found at the laboratory. A report number or key that does not resolve on the testing laboratory’s own site, or a laboratory record that differs from the supplier’s copy in product, batch, date or results.
• “99%+” with no method and no laboratory. A purity figure without a method, a chromatogram or a named laboratory is a label claim, not a measurement. In the 2024 test purchases, vials labelled 99% measured 7.7% to 14.37% purity (Ashraf et al., 2024).
• In-house certificates presented as independent. A manufacturer’s certificate described as “third-party tested” without a named external laboratory.
• Only a purity figure, where more is needed. The Belgian screening found arsenic and lead, and the Hungarian samples carried endotoxin; neither shows up in an HPLC purity result (Janvier et al., 2018; Ashraf et al., 2024).
• Dates that do not add up. An analysis date before the sample was received, or a test that predates the batch it supposedly describes.
• No identifiable company. No registered legal entity, no address, or contact details limited to a messaging account.
• A research-use-only label contradicted elsewhere. Product pages, labels or support replies that read as though the material were meant for something other than laboratory research.

No single item proves a supplier unreliable, and a clean record on every item does not prove a batch is right. What the checklist does is separate claims you can check from claims you are asked to accept, which is the most a buyer can do before the material reaches the bench.