White-label COAs: why a lab report under a seller's brand breaks trust

What a white-label COA is

A white-label COA is a lab result issued under another company’s name. Usually that company is the seller. The test may be real, but the report’s branding no longer tells you plainly who measured the sample, who ordered it, or how they are related.

The practice has names on lab price lists: duplicate COAs, subsidiary COAs, additional-brand COAs, branded COAs. In HK Analytical’s September 2026 research, five labs offered some way to issue one result under more than one company name. One price list allowed up to 20 company names for a single sample. Some intake forms also ask for “COA header information”, so the seller’s company name prints at the top of the report.

The forms a white-label COA takes

Form	What you see	What it hides
Seller’s logo over lab data	A watermark or logo across the chromatogram or results	Part of the evidence, and whose document it is
Lab name hidden	A report under a brand name, with no lab named	Who measured the sample
One result, many names	The same numbers under several company names	That only one sample was tested
Seller-chosen header	The seller’s name in the report header	Who wrote the header, and who the lab’s client was
Platform wrapper	A testing brand or rating site’s frame around a lab’s report	Which lab ran it, and on what terms

Each form appears in the market. In HK Analytical’s September 2026 review of public COAs from 25 labs and one rating site’s certificate wrapper, 9 of 26 showed vendor or platform branding over lab data on at least some reports. On three report brands, the lab that ran the measurement was not named.

Why it breaks trust

You cannot tell who measured. ISO/IEC 17025 clause 7.8.2.1 lists the lab’s name and address among the things every report must carry. A report without them gives you no lab to ask.

You cannot check it at the source. PeptideTrust scores seller transparency on ten criteria. Three of them are the name of the lab on the COA, a lab that is independent of the seller or accredited, and a COA that can be authenticated on the laboratory’s own website. A white-label report tends to fail all three.

One test can look like several. When one result appears under several company names, a buyer sees what looks like broad testing. It is one sample. Rating sites look for exactly this pattern. Disclosed Labs flags any lot number that appears under two or more sellers. PeptideBenchmark flags identical files across sellers and lab links reused in a different context. Our guide on reused COAs covers how these copies spread.

Dependence stays hidden. A lab that earns much of its income from one seller has a reason to keep that seller happy. A report under the seller’s brand makes the link harder to see. In the same review, none of the 26 printed a statement of how the client was related to the lab.

The seller controls the frame. When the seller sets the header and the branding, it also decides what the report looks like to buyers. A lab result should look the same whoever paid for it.

Why independence matters

Standards and rating sites treat independence as part of what makes a result believable.

• ISO/IEC 17025 asks labs to identify and manage risks to their impartiality, including risks from relationships (clause 4.1, as explained in UNIDO’s guide to the standard). It also asks labs to mark information supplied by the client, such as product name and lot, as client-supplied (clause 7.8.2.2).
• The WHO model certificate of analysis was designed for quality control labs that are not related to the manufacturer.
• Merit Verified states that “a lab must be a genuine third party”. Vendor-owned labs “are flagged and cannot earn a passing tier”.
• Peptigrity states that “in-house testing by vendors is not accepted”. It also removes a certificate whose figures do not match the lab’s own record.

Accreditation is a separate question. It is often counted alongside independence on these sites, and it should be checked on the accreditation body’s register, with its scope. We do not hold ISO/IEC 17025 accreditation. Our guide on lab independence covers how to check who owns a lab.

The honest way to meet a reseller’s need

Resellers have a real need. Several shops may sell from one supplier’s batch, and each wants to show buyers a report. White-labelling meets that need by hiding the lab. There are cleaner ways:

• One report, under the lab’s own name. Each reseller links to the lab’s record of that batch, so every buyer checks the same report at the source.
• The client on the record. The lab’s record shows who ordered the test, so a buyer can see that a second shop is showing a supplier’s report.
• A test of each reseller’s own stock. Stock that has been repacked, stored or shipped again is worth testing on its own. This is also how rating sites reward breadth: Merit Verified gives more points for results from more distinct labs.

Our guide on which lab results vendors accept covers the seller side, and vendor COAs versus your own test covers the buyer side.

How to tell whether a COA is white-labelled

1. Find the lab’s name and address on the report. No lab named is the clearest sign.
2. Open the lab’s own website by typing its address, not from a link on the COA.
3. Look the report up with its number and key. Our guide on how to verify a peptide COA walks through it.
4. Compare the client. If the lab’s record shows a different company from the one on the report you were given, the report was re-badged or borrowed.
5. Look for branding over the data. A seller’s logo across the chromatogram or the results table is a sign the document passed through the seller’s hands.
6. Look for a relationship statement. A report that says how the client is related to the lab tells you what a white-label report hides.
7. Ask the seller which lab ran the test, and for the lab’s own verification link.

If you cannot complete steps 1 to 4, treat the COA as unverified, whatever it looks like.

What HK Analytical does

Every HK Analytical report can be checked at hkanalytical.com/verify with its report ID and access key, so the lab behind it is never hidden. Each report states how the client is related to HK Analytical, inside the signed record (an Ed25519 signature over the canonical record), so the statement cannot be removed without breaking the signature. Our quality page sets out our independence rules, including no white-label reports.

The report also carries our own photo of the vial as received, and every number comes with its raw data. Sellers who need batch testing can see our vendor testing, and the example report shows where the relationship statement sits.