Education · Safety & Legal

Peptide Safety, Sourcing, and COAs: How to Actually Vet What You Buy

Peptide safety and sourcing, explained: how to read a COA, what cGMP and FDA-registered really mean, red flags to avoid — and how we grade ourselves.

LAST REVIEWED 2026-08-16READ TIME ~9 MINEDUCATIONAL — NOT A PRODUCT PAGEBY NICK PETRUCCI, FOUNDER

Short answer: Vet any peptide product the same way: ask for a lot-specific Certificate of Analysis from an independent lab showing identity, potency, heavy metals, and microbials; confirm printed lot numbers; walk away from disease claims or invented percentages. Then hold us to the same checklist.

Everyone claims purity; almost nobody proves it. The vocabulary — COA, cGMP, third-party tested, FDA-registered — is used loosely enough to mean almost anything. This page explains what each document actually proves, where the gray market lives, and how to grade any seller — including us.

What a COA is (and what it isn't)

A Certificate of Analysis is a lab report tied to a specific production lot — not a product line, not a brand. The lot number should appear on your packaging; a COA with no lot number, or one matching nothing you can buy, is marketing, not documentation.

A real COA typically reports four things:

Identity — usually by HPLC and/or LC-MS. Is the molecule in the product actually the molecule on the label? Catches substitution and counterfeits; says nothing about how much is there.
Potency (assay) — how much active is present per unit versus the label claim; catches under- and over-dosing. A COA without a potency table verifies that something is there, not that the dose is right.
Heavy metals — lead, arsenic, cadmium, mercury. Contamination screening from raw materials and manufacturing.
Microbials — total plate count, yeast and mold, pathogens like E. coli and Salmonella. Basic hygiene of the production run.

Each test proves one narrow thing: a COA passing identity and microbials but skipping potency tells you the product is clean and real — not that it's correctly dosed. Read the whole table; notice what's missing.

Third-party vs. in-house testing

"In-house tested" means the manufacturer graded its own homework — not worthless, but an obvious conflict. Third-party testing means an independent laboratory, with no stake in the result, ran the analysis.

Even among third-party labs there's a spectrum: specialist peptide labs (Janoshik, MZ Biolabs, Colmaric) offer fast, affordable verification; accredited labs (Eurofins, ACS, Alkemist) cost more but operate under formal accreditation. Any legitimate lab needs certified reference standards and a validated method — a lab that "tests supplements" can't automatically test peptides correctly.

Practical takeaway: a lot-specific COA from a named, independent lab is the minimum bar; vague "lab tested" badges with no document behind them are decoration.

What "cGMP" and "FDA-registered facility" actually mean

Two phrases do enormous marketing work:

cGMP (current Good Manufacturing Practice) is FDA's manufacturing rule set — for dietary supplements, 21 CFR Part 111 — covering cleanliness, ingredient verification, batch records, and testing; third-party certifications (NSF/ANSI 455-2) audit this. Meaningful — but a process standard, not a product endorsement.

"FDA-registered facility" is the most abused phrase in the industry. Registration is a mandatory administrative listing — the facility told FDA it exists; FDA does not approve, inspect on registration, or endorse anything. Registration is not approval, and any seller blurring that line is telling you something about themselves.

To be unambiguous: no consumer peptide strip — ours included — is an FDA-approved drug; nothing in this category has been through new-drug approval.

The research-chemical gray market

Search any popular peptide and you'll find two kinds of sellers: consumer products, and vials labeled "for research use only" or "not for human consumption" — often cheaper, with impressive-looking purity claims.

That label is a legal fiction, not a quality mark. Research-chemical vendors face no supplement-grade manufacturing requirement, no per-lot dosing verification, and no accountability if the label is wrong. Some are scrupulous; some aren't — the label guarantees nothing. A product positioned for human use should be manufactured, labeled, and tested like one.

Red flags when vetting any seller

No lot numbers on the product, or COAs with no lot number to match.
No COA at all — or one months or years old with no indication it covers current stock.
Invented percentages. Absorption figures ("absorbs 90%+") citing no published pharmacokinetic study are decoration; real PK data is published, peer-reviewed, and specific.
Disease claims. Any seller saying a peptide treats, cures, or heals a named condition is violating FDA rules. If they'll do that on the homepage, assume the QA department is equally casual.
"FDA approved" language for any non-drug product. Instant disqualifier.
No physical address, no verifiable company identity, or a support channel that can't answer "which lab ran this COA?"

Who should not use these products

Simple and non-negotiable: not for anyone under 18, not for anyone pregnant or nursing, and if you take prescription medications, have a medical condition, or are under a provider's care, talk to that provider first. No article, including this one, substitutes for that conversation.

The 2026 regulatory moment, in plain language

In July 2026, the FDA's Pharmacy Compounding Advisory Committee voted to recommend several peptides — including BPC-157, KPV, TB-500, MOTS-c, and Semax — for the list of substances compounding pharmacies may use. Those votes are advisory and non-binding; formal rulemaking is pending, with timelines stretching into 2027.

For buyers: the picture is actively evolving; nothing sold as a consumer peptide product today is FDA-approved, and anyone claiming otherwise is misinformed or dishonest. Sourcing discipline matters more, not less — without settled rules, the documentation a seller voluntarily publishes is the main signal you have.

Hold us to this checklist

We wrote the checklist above to apply to ourselves, in public. Our honest scorecard, as of this writing:

InstaMed SKUs with a published, lot-specific COA: BPC-157, GHK-Cu, Thymosin Alpha-1, CJC-1295/Ipamorelin, NAD+, Glutathione, and PT-141+. See the documentation behind the BPC-157 sublingual strips on the product page.

The five SKUs with no COA yet: SLEEP, BOOST, KLOW, NEURO, and ULTRATRUTIDE. Those products carry an unverified state on our site, not a testing badge — a badge without a document is decoration. If that means you wait on those five, that's the checklist working.

The gaps in the COAs we do have:

The NAD+ COA has no potency table — appearance, heavy metals, and microbials but no mg-per-strip assay — so it verifies cleanliness and identity, not dose. Read it on the NAD+ sublingual strips page; we've asked for the missing data.
The Glutathione COA is on different letterhead (Nutrastrips) than the other six — possibly a different lab or manufacturing arrangement; we haven't confirmed. Not a red flag by itself, but we won't claim "one consistent lab" anywhere, because it isn't true. The document is posted on the glutathione strips page, letterhead and all.
The PT-141+ COA doesn't test the third active — it independently verifies PT-141 and oxytocin only.

If a competitor's sourcing page reads cleaner than this one, ask which parts they left out.

What the evidence shows — and what it doesn't

Established: lot-specific third-party COAs are the industry-standard verification tool; cGMP and NSF certification are real, auditable manufacturing standards; FDA facility registration is real but purely administrative; the July 2026 advisory votes happened and are non-binding.

Not established: no consumer peptide strip — ours or anyone's — has published, peer-reviewed human pharmacokinetic absorption data. Absorption percentages in peptide marketing are unverified. Long-term safety in healthy adults is not well characterized — the honest reason for the "talk to a provider" guidance. And no COA, however complete, proves a product works — it proves the product is what's on the label. For the delivery-format side, see how sublingual delivery actually works.

The bottom line

Vetting peptides isn't complicated once you know what the documents actually prove: ask for a lot-specific COA from a named independent lab, check what's on it (and what's missing), and discount any seller who blurs "FDA-registered" into "FDA-approved." The good news is that this standard is easy to apply and easy to keep — we publish our own COAs, letterhead quirks and all, and hold ourselves to the same checklist above. Do that, and the gray market stops being confusing: the sellers worth trusting are the ones whose documentation does the talking.

---

Explore this cluster

The rest of the safety and sourcing file: legality, labelling, the FDA record, and how to vet what you are buying.

These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.

This content is for educational purposes only and is not medical advice. Consult a licensed healthcare provider before starting any new product. Individual results vary.

Frequently asked

peptide safety sourcing questions, answered straight

What is a peptide COA?

A Certificate of Analysis is a lab report for a specific production lot, typically covering identity (is it the right molecule), potency (is the dose right), heavy metals, and microbial contamination. It should come from an independent lab and match a lot number on your product.

Is "third-party tested" the same as "FDA approved"?

No. Third-party testing means an independent lab analyzed the product. FDA approval is a formal drug-authorization process that no consumer peptide strip has undergone. The two phrases are unrelated, and sellers who blur them should be avoided.

What does "FDA-registered facility" mean?

It means the facility filed a mandatory registration telling FDA it exists. It does not mean FDA inspected, certified, or approved anything about the facility or its products. It's a baseline administrative step, not a quality endorsement.

Are research peptides labeled "not for human use" safer or purer?

Neither, by default. That label is a legal positioning device, not a quality certification. Research-chemical products carry no requirement for supplement-grade manufacturing or per-lot verification for human use — judge them by their documentation like anything else, and understand what the label is really saying.

Keep reading