Supplement Testing Requirements
Testing is where supplement quality becomes measurable. This guide covers what testing is legally required under 21 CFR Part 111, what types of tests exist, and how to read a Certificate of Analysis so you know what you're actually getting.
Dietary supplement manufacturers must comply with 21 CFR Part 111 (Current Good Manufacturing Practice for dietary supplements). This includes requirements for personnel, facilities, equipment, production, laboratory operations, and record-keeping.
Types of Testing
Supplement testing falls into six categories. Some are legally required. Others are industry best practice. Knowing the difference helps you evaluate whether a manufacturer's quality program is adequate or just adequate on paper.
Identity Testing
RequiredConfirms that each incoming ingredient is what the supplier says it is. Required by 21 CFR 111.75(a)(1). Without identity testing, you could put the wrong ingredient in your product and never know until someone gets hurt. Methods include HPTLC, HPLC, and DNA barcoding for botanicals.
Potency Testing
RequiredVerifies that the finished product contains the amounts listed on the Supplement Facts panel. If your label says 500mg of Vitamin C per serving, potency testing confirms it. Required under 21 CFR 111.75(c). Common methods: HPLC, UV-Vis spectrophotometry.
Purity / Contaminant Testing
RequiredScreens for unwanted substances: pesticides, solvents, allergens, and adulterants. Particularly important for herbal supplements and products sourced from regions with less agricultural regulation.
Microbial Testing
RequiredTests for harmful microorganisms including total aerobic count, yeast, mold, E. coli, Salmonella, and Staphylococcus aureus. Every finished batch should be tested. Contamination can occur during production even with clean raw materials.
Heavy Metals Testing
Best PracticeScreens for lead, mercury, cadmium, and arsenic. Not explicitly required by 21 CFR Part 111, but California's Proposition 65 creates practical requirements. Many retailers (Amazon, Walmart) require heavy metals testing for listing. Methods: ICP-MS, ICP-OES.
Stability Testing
Best PracticeDetermines shelf life by testing product at intervals under controlled conditions. Accelerated stability (40°C/75% RH for 6 months) provides a preliminary shelf life estimate. Real-time stability (room temp for 24 months) provides the final answer. Required to support any expiration date on your label.
How to Read a Certificate of Analysis
A COA is only useful if you know what to look for. Here are the key elements and what they tell you.
- Lab name and accreditation: Look for ISO 17025 accreditation. This means the lab's methods have been independently validated. An unaccredited lab's results carry less weight.
- Batch/lot number: Must match the batch you received. A COA from a different batch is meaningless for your product.
- Test methods: Should list specific methods (HPLC, ICP-MS, USP methods). "Tested per internal SOP" without method details is a yellow flag.
- Specifications vs. results: The spec column shows pass/fail criteria. The results column shows actual values. Look for results that are close to the specification limit, which may indicate consistency problems.
- Date of testing: Should be recent relative to your batch production date. A COA dated months before production suggests it was tested from a different batch.
- Authorized signature: A legitimate COA is signed by a qualified analyst or lab director. Unsigned or digitally generated COAs without review are less reliable.
Testing Red Flags
- Manufacturer refuses to share COAs before you sign. Testing transparency should be table stakes. Reluctance to share suggests something is wrong.
- COA shows the same results across multiple batches. Natural variation means results should differ slightly between batches. Identical numbers suggest fabricated or template COAs.
- No third-party testing option. In-house testing alone creates a conflict of interest. The manufacturer is testing their own work.
- Identity testing only at receipt, not at use. If months pass between receiving raw materials and using them, conditions may have changed. Testing at point of use is stronger.
- No stability data for shelf life claims. An expiration date without stability testing behind it is a guess. It's also a regulatory risk under 21 CFR Part 111.
Frequently Asked Questions
What testing is legally required for dietary supplements?
Under 21 CFR Part 111, manufacturers must perform identity testing on every incoming ingredient lot, test finished products to verify they meet label claims (potency), and test for contaminants. The regulation does not specify exact test methods, but they must be scientifically valid.
What is a Certificate of Analysis (COA)?
A COA is a document from a testing laboratory that reports the results of tests performed on a specific batch of product. It includes the product name, batch number, test methods used, results, specifications (pass/fail criteria), and the lab's accreditation. Every batch of finished product should have a COA.
Should I use my manufacturer's in-house lab or a third-party lab?
Both have a role. In-house labs are faster and cheaper for routine quality control during production. Third-party labs provide independent verification. The strongest quality programs use both: in-house for production QC and third-party for finished product release testing.
How much does supplement testing cost?
Basic COA testing (identity, potency, microbial) costs $500 to $1,500 per batch. Heavy metals panels add $200 to $500. Stability studies range from $3,000 to $8,000. Costs depend on the number of active ingredients, test methods required, and the lab's pricing.
Disclaimer: This guide is educational content, not legal or regulatory advice. Testing requirements may vary based on your specific product, ingredients, and target markets. Consult with a qualified regulatory professional. See our Terms of Service for details.