What a COA can — and cannot — prove

Summary: a COA may document testing for a specific lot. It does not by itself prove appropriate prescribing, handling history, legitimate dispensing, or clinical suitability for any patient.

What a COA can show

That a tested lot met (or failed) specific criteria — identity, potency, sterility, endotoxin — as listed by the testing lab.
Which laboratory performed the analysis and when.
The specifications the preparation was held to, and the measured values against them.

What a COA cannot show

That a treatment is appropriate for you, or that any clinician evaluated you properly.
That the vial you received actually came from the tested lot — the document cannot see your supply chain.
That storage and handling stayed intact between testing and dispensing.
That the product, indication, or compounded preparation is FDA approved. A COA is a testing document, not a regulatory status.
That the pharmacy or provider involved is legitimate. Paperwork accompanies products; it does not license people.

Use COAs inside a bigger picture

The most complete documentation pathway combines legitimate prescribing, transparent pharmacy sourcing, meaningful follow-up, and verifiable testing records. A COA is one piece. That is why this registry verifies records with their source before displaying them, and why PepKey treats COAs as literacy tools in its provider methodology — never as product endorsements or safety guarantees.

PepKey and the COA Registry are not a clinic, pharmacy, prescriber, or diagnostic tool. Use these guides to ask clearer documentation questions, and discuss medical decisions with a qualified clinician.