Transparency is a documentary property, not a marketing claim. When a research-peptide vendor says it is transparent, the only thing that matters is whether the paperwork it publishes can be checked by a stranger. A certificate of analysis (CoA) is the core document: it should report identity and purity for a specific batch, name the laboratory that ran the tests, and give you a way to confirm the results independently. This guide consolidates the documentary red flags that repeatedly signal weak transparency, framed around the signals themselves rather than any brand. Each flag below is something you can look for before you ever buy, using nothing but the files and pages a vendor already makes public. These products are sold for research use only, and a CoA describes composition, not safety.
Why judge a vendor on documents rather than claims?
A marketing page can assert anything: "99% purity", "third-party tested", "pharmaceutical grade". None of those phrases is evidence. Evidence is a document that a reader who does not trust the vendor can still verify. That is the whole premise of the PeptideTrust scoreboard: vendors are rated purely on whether they publish batch-level CoAs from named, independent labs that resolve at the source. The literacy this guide teaches is the same literacy the scoring methodology applies across ten weighted criteria. So the useful question is never "does this vendor sound trustworthy?" but "what can I confirm without taking the vendor's word for it?" If a claim has no document behind it, treat it as a claim. If a document has no verification behind it, treat it as a document you cannot check. Everything that follows is a way of separating the two.
What does "no named lab" tell you?
The first and most common red flag is a CoA or product page that references testing without naming the laboratory that did it. Phrases like "tested by a US lab" or "independently verified" with no laboratory name attached are unverifiable by design. A credible CoA names the independent third-party lab - the kind of named facility discussed in our guide on what an independent testing lab actually is - so that you can look that lab up and confirm it exists and does this work.
- Red flag: no lab name anywhere on the document.
- Red flag: a lab name you cannot find any independent record of.
- Stronger signal: a named lab, ideally one accredited to ISO/IEC 17025, the international standard for testing-laboratory competence.
Accreditation is not mandatory for a result to be real, but an unnamed lab removes your ability to check anything at all. Anonymity is the flag.
Is a purity percentage without a chromatogram enough?
No. A purity figure such as "99.0%" is a conclusion, not evidence. HPLC (high-performance liquid chromatography) measures purity by separating a sample into peaks and reporting the target peak as a percentage of total peak area. The real evidence is the chromatogram - the plotted trace showing those peaks - because it lets a reader see the baseline, the shape of the main peak and any impurity peaks beside it. A bare number with no chromatogram attached is a weak signal: you are being handed the answer with the working erased.
Remember too that purity and identity answer different questions. HPLC can tell you a sample is 99% one substance without telling you which substance. Mass spectrometry (MS or LC-MS) confirms identity by measuring molecular mass. Our explainer on purity versus identity testing covers why a document showing only a purity percentage, with neither a chromatogram nor a mass-spec result, leaves both questions partly open.
What is wrong with one generic CoA for every product?
Results describe a specific batch at a specific point in time. That is why a credible CoA carries a batch or lot number that matches the number printed on the vial, plus a date of analysis. A single certificate reused across every product in a catalogue, or across every batch of the same product, cannot be doing that job. It is a template, not a measurement.
- Red flag: the same PDF linked from many different product pages.
- Red flag: no batch or lot number, or a number that never changes.
- Red flag: no date, so you cannot tell whether the analysis is recent or years old.
- Stronger signal: a distinct CoA per batch, with a lot number you can match to the vial you receive.
When one document is meant to stand in for many analyses, the honest reading is that most of those analyses were never published, and possibly never performed for the batch you are holding.
Why is "CoA by email after purchase" a red flag?
Transparency that only appears after you have paid is not transparency for the decision that matters - the decision to buy. When CoAs are available only "by email on request" once an order is placed, you lose the ability to compare vendors on evidence beforehand, and you cannot confirm a batch number before committing. It also shifts the burden onto you to chase paperwork that a transparent vendor would simply publish.
There is a spectrum here worth naming plainly:
| Access pattern | What it signals |
|---|---|
| Batch CoA published openly, linked from the product | Strongest: verifiable before purchase |
| CoA in an account area after login | Partial: gated but at least available |
| CoA "by email on request" only after purchase | Weak: no pre-purchase comparison possible |
| No CoA offered at any stage | Absent: nothing to evaluate |
The further down this table a vendor sits, the less its documentary transparency can actually be tested by a prospective buyer.
What does a dead verification portal mean?
The strongest CoAs include a verification mechanism: a code or QR that resolves on the testing laboratory's own domain, letting you confirm the certificate against the lab's records rather than a file the vendor alone controls. A verification code, QR image or portal link that leads nowhere - a broken page, an error, or a login you can never reach - is a significant red flag, because it removes the one step that makes a CoA verifiable at the source.
- Red flag: a QR code that resolves to nothing, or to a vendor-hosted PDF rather than the lab.
- Red flag: a "verify here" portal that returns an error or a dead link.
- Stronger signal: a code that resolves on the lab's own domain and shows the same batch, date and results as the CoA you were given.
A PDF hosted only by the vendor can be edited by the vendor. A result you can pull directly from the lab's system is far harder to fake, which is exactly why a working verification path carries weight in the scoring criteria.
How should you use this checklist together?
No single flag is a verdict, but the flags compound. A vendor that names its lab, publishes a per-batch CoA with a matching lot number and date, shows the chromatogram behind its purity figure, and offers a verification code that resolves on the lab's domain has made its evidence checkable at every step. A vendor missing several of these has, in documentary terms, asked you to trust rather than verify.
Keep the framing narrow and honest as you apply it. A purity and identity CoA speaks to composition, not to sterility or endotoxin load - those are separate tests under USP <71> and USP <85> and are usually absent from a standard purity CoA, so their absence is normal and must not be read as any kind of safety guarantee. Once you can spot these five documentary signals for yourself, you can carry the same checklist across to the ranked vendor scoreboard and see how consistently each vendor's paperwork actually holds up.