Every batch HPLC + mass-spec verifiedIndependent Certificate of Analysis per lotUS-based fulfillment · tracked shippingFull traceability — vial label to lab recordAnalytical-grade reference standardsFor laboratory research use onlyEvery batch HPLC + mass-spec verifiedIndependent Certificate of Analysis per lotUS-based fulfillment · tracked shippingFull traceability — vial label to lab recordAnalytical-grade reference standardsFor laboratory research use only

ISO-Certified Analytical Labs: What the Certification Verifies

Analytical laboratory bench with scientific instruments

This article is provided for educational and informational purposes only. All compounds discussed are supplied strictly for laboratory and research use. Vitro Labs products are not for human or animal consumption.

Walk into any compound vendor’s website and you’ll see the same three letters everywhere: ISO. ISO-certified lab. ISO 17025 accredited. ISO-tested. The acronym gets used like a magic word, as if those three letters by themselves prove a compound is what the label says it is.

They don’t. Not by themselves.

ISO certification is real, and it matters a great deal when you understand what specifically is being certified. But the gap between “this lab has an ISO certificate on the wall” and “this specific batch of compound was tested under that certificate’s scope” is wide enough to drive a truck through. Researchers who confuse the two end up paying for the appearance of quality control instead of the substance of it.

This guide walks through what ISO certifications actually cover in the compound-testing world, how to read a Certificate of Analysis with the certification context in mind, and the specific questions that separate a meaningful ISO claim from a marketing decoration. For laboratory research use only.

What ISO Actually Is

ISO stands for the International Organization for Standardization. It is a non-governmental body headquartered in Geneva that publishes voluntary technical standards covering everything from screw threads to information security to laboratory testing. The organization itself does not certify anything. It writes the standards. National accreditation bodies (in the United States, the most common is A2LA, the American Association for Laboratory Accreditation) then assess whether a laboratory’s practices conform to a given ISO standard and issue accreditation if they do.

That distinction matters. When a compound vendor says “our lab is ISO-certified,” the meaningful question is always: certified to which standard, by which accreditation body, for which scope of testing? Without those three pieces of information, the claim is a sentence, not a fact.

The standards most relevant to compound testing

Two ISO standards come up repeatedly in research-grade compound quality control:

  • ISO 9001, which describes a generic quality management system applicable to almost any organization.
  • ISO/IEC 17025, which describes the technical and management requirements specific to testing and calibration laboratories.

A lab can hold either, both, or neither. The two certifications mean different things, and conflating them is the most common confusion in compound marketing copy.

ISO 9001 vs ISO/IEC 17025: The Distinction That Matters

ISO 9001 is a management standard. It says, in essence: this organization has documented procedures, follows them, audits itself, and corrects errors when they appear. A bakery, a software company, and a compound testing lab can all hold ISO 9001 certification. The standard says nothing about whether the bakery’s bread is good, the software is bug-free, or the lab’s analytical results are accurate.

It says only that the organization has a system for trying to be consistent at whatever it does.

ISO 9001 is useful as a baseline organizational signal. It is not a quality claim about test results.

ISO/IEC 17025 is different. It is a laboratory-specific standard that requires the lab to demonstrate technical competence at specific tests. To get accredited, the lab has to show that its instruments are calibrated, its methods are validated, its analysts are trained and proficient, its reference standards are traceable, its data handling is documented, and its results are reproducible. An assessor from the accreditation body actually visits the lab and inspects the work.

What ISO/IEC 17025 covers in practice

The 2017 revision of ISO/IEC 17025, which is the version currently in force, requires accredited labs to document and demonstrate the following:

  • Validated analytical methods, with documented detection limits, accuracy, precision, and specificity
  • Equipment calibration with traceability to national or international measurement standards
  • Analyst training and ongoing proficiency testing
  • Sample handling chain of custody
  • Estimation of measurement uncertainty for each reported result
  • Internal quality control (often including replicate analyses and reference standard checks)
  • Periodic external audits by the accreditation body

The work that goes into maintaining an ISO/IEC 17025 accreditation is substantial. That is partly why the accreditation carries weight when it is genuinely held and genuinely applied to the test that produced your COA.

The Scope of Accreditation: Where the Truth Lives

Here is the part most marketing copy quietly skips. ISO/IEC 17025 accreditation is never blanket. Every accredited lab has a scope of accreditation: a public document that lists exactly which tests, on which sample types, by which methods, the lab is accredited to perform.

A lab might be accredited for high-performance liquid chromatography purity analysis of small organic molecules but not for compounds. Or accredited for compound identity by mass spectrometry but not for endotoxin testing. Or accredited for one method on one matrix and running everything else “in-house” outside the scope.

How to find a lab’s actual scope

Most accreditation bodies publish their accredited labs’ scopes on public websites. In the United States, A2LA, ANAB (the ANSI National Accreditation Board), and PJLA (Perry Johnson Laboratory Accreditation) all maintain searchable databases. The scope document for a given lab will list:

  • The lab’s certificate number and accreditation expiration date
  • Each method by name and reference (often citing USP, AOAC, or ASTM standards, or the lab’s own validated procedure)
  • The matrices and analytes the method covers
  • The measurement range for which uncertainty has been characterized

For compound research, the scope items that matter most are HPLC purity analysis (often referencing USP general chapter <621> or similar), mass spectrometry for identity confirmation, and any specific assays for endotoxin, sterility, or heavy metals if those are reported on the COA.

Analytical Methods Used Under ISO/IEC 17025

An accredited compound-testing lab typically operates a combination of separation, identification, and contamination-screening methods. Each one tells you something different.

Method What It Measures Typical Use on a Compound COA
HPLC (reverse-phase) Relative purity of the main peak vs other peaks Reported as a percentage, often “≥98% by HPLC”
Mass Spectrometry (MS, often LC-MS or MALDI-TOF) The molecular weight of the main peak Confirms identity by matching observed mass to expected mass
LAL Endotoxin Assay Bacterial endotoxin contamination Reported in EU/mg, typically below a defined limit
Karl Fischer Titration Residual water content of lyophilized powder Reported as a percentage of total mass
ICP-MS Heavy metal contamination Reported as parts per million for specific metals

Why HPLC and mass spectrometry are usually paired

HPLC tells you that one peak dominates the chromatogram, but it cannot tell you with certainty which peak that is. A truncated compound, a misfolded variant, or a related impurity can co-elute with the target compound and inflate the apparent purity number.

Mass spectrometry confirms identity by measuring the molecular weight of the dominant species. Pairing the two methods is the standard approach in compound analytical chemistry. Sherma and Rabel (2018) in Journal of Liquid Chromatography & Related Technologies reviewed HPLC compound analysis and noted that purity reporting is method-dependent and that orthogonal confirmation by mass spectrometry strengthens the result (PMID: 29641892).

For research-grade compound work specifically, D’Hondt and colleagues (2014) in the Journal of Pharmaceutical and Biomedical Analysis documented the analytical challenges of compound impurity profiling and emphasized the need for validated, orthogonal methods to characterize related substances (PMID: 24513099). The takeaway from the literature is that HPLC alone, without identity confirmation, leaves real uncertainty about what the dominant peak actually is.

“Quantitative analysis of synthetic compounds by HPLC requires careful attention to method validation and the use of orthogonal techniques such as mass spectrometry for confirmation of peak identity.”
, Sherma and Rabel (2018), PMID: 29641892

Reading a COA With ISO Context

A Certificate of Analysis from an ISO/IEC 17025-accredited lab should give a researcher enough information to evaluate not just the result but the methodology behind it. Here is what a useful COA shows.

  1. Lab name and accreditation reference. The COA names the testing lab, its accreditation body (A2LA, ANAB, PJLA, or international equivalent), and the certificate number. This lets a researcher cross-check the lab’s public scope.
  2. Sample identification. The batch or lot number, compound name, and date of receipt or analysis. This anchors the result to the specific vial in the researcher’s possession.
  3. Methods used. Each test references the method (e.g., “HPLC, in-house validated procedure XYZ-001” or “MALDI-TOF MS”). Methods within the lab’s accredited scope can be flagged as such.
  4. Results with units and uncertainty. Purity reported as a percentage with a defined detection wavelength. Mass reported with the expected and observed values. Endotoxin reported in EU/mg with the assay sensitivity.
  5. Analyst signature and report date. A named analyst and a dated, signed report. This is part of ISO/IEC 17025’s traceability requirements.

Vitro Labs ships every batch with a Certificate of Analysis from Freedom Diagnostics, an independent ISO-certified analytical laboratory in Franklin, Tennessee. Identity, purity, and quantity are verified per batch by HPLC and mass spectrometry; sterility and heavy metal analysis are conducted on a scheduled basis. The full archive is publicly available on the Vitro Certificates of Analysis page, and the methodology is documented in the Vitro Editorial Standards. For laboratory research use only.

Common Misuses of the ISO Label

Once you understand what ISO certifications cover, the marketing patterns become easy to spot.

“ISO certified” with no standard named

This usually means ISO 9001, which is a management-system claim and not an analytical-quality claim. It is not nothing, but it is not what most readers assume.

“Tested by an ISO-certified lab”

The lab might be accredited, but the specific test that produced this COA might not be in the lab’s accredited scope. Without seeing the method reference and the scope document, the claim is unverifiable.

“ISO accreditation is meaningful only when matched to the specific test, the specific scope, and the specific batch. The label without those details is a slogan.”
, Adapted summary of ISO/IEC 17025:2017 principles

Self-issued certificates

Some vendors print COAs on their own letterhead with no third-party lab name. This is not third-party testing under any reasonable definition. It may be honest internal QC, but it is not what “ISO-tested” implies.

Stale accreditation dates

ISO/IEC 17025 accreditations expire and require periodic reassessment. A lab whose certificate lapsed two years ago is no longer accredited. Reputable labs include the certificate number on every COA, which lets researchers verify current status with the accreditation body.

How Researchers Verify an ISO Claim

The verification process is fast once you know the steps. The whole sequence takes about ten minutes per vendor.

  1. Identify the standard. Confirm the vendor is referencing ISO/IEC 17025 specifically, not ISO 9001. The two are not interchangeable.
  2. Identify the testing lab. The COA should name the lab. If the vendor and the lab are the same entity, that is internal testing, not third-party testing.
  3. Identify the accreditation body. A2LA, ANAB, PJLA, or an international equivalent. The body issues and oversees the certificate.
  4. Look up the lab’s public scope. The accreditation body’s website lists every accredited lab and the scope of each accreditation. Check that the methods on the COA fall within that scope.
  5. Verify the certificate is current. Accreditations expire. Confirm the date on the COA is within the lab’s active accreditation period.
  6. Check the methods cited. Look for HPLC and mass spectrometry as a paired identity-and-purity workflow. Single-method COAs leave more room for ambiguity than dual-method COAs.

This is the same verification logic Vitro applies to its own supplier and lab relationships. The brand documents the process publicly because the process itself is the trust signal. A researcher who reads a COA carefully ends up with more confidence than a researcher who reads marketing copy.

Regulatory and Sourcing Context

The U.S. Food and Drug Administration does not approve research-grade compounds for human use, and the agency has been increasingly active in enforcement actions against vendors whose marketing implies otherwise. ISO/IEC 17025 accreditation does not change a compound’s regulatory status. An accredited lab confirming the identity and purity of a research compound says nothing about whether that compound is approved for any particular use. It says only what the test result was.

For laboratory research applications, that distinction is the point. The researcher needs to know what is in the vial. The accreditation framework, when properly applied, answers that question with documented methodology and traceable measurement. It does not answer any question about clinical use, and it is not intended to.

This article is for educational and informational purposes only. All compounds discussed are research chemicals for laboratory use only and are not for human consumption.

Frequently Asked Questions

Is ISO 9001 certification enough to verify compound quality?

No. ISO 9001 certifies a quality management system, which means the organization has documented procedures and audits itself, but the standard says nothing about analytical accuracy or test results. The standard that verifies a lab’s technical competence to perform specific tests is ISO/IEC 17025. For compound identity and purity testing, ISO/IEC 17025 accreditation paired with a defined scope covering HPLC and mass spectrometry is the relevant signal.

What does the ‘scope of accreditation’ on an ISO/IEC 17025 certificate actually cover?

The scope is a public document that lists each test, method, sample matrix, and measurement range the lab has been formally assessed and accredited to perform. A lab might be accredited for HPLC purity analysis but not for endotoxin testing, or accredited for one analyte class but not another. Tests outside the scope are valid only as internal procedures, regardless of how the COA is presented. Researchers can find a lab’s scope on the accreditation body’s public website (A2LA, ANAB, PJLA in the U.S.).

Why are HPLC and mass spectrometry typically paired in compound testing?

HPLC measures the relative size of the dominant peak in a chromatogram, which estimates purity, but it cannot confirm what that peak actually is. Mass spectrometry measures the molecular weight of the dominant species and confirms identity by matching observed mass to expected mass. Sherma and Rabel (2018) reviewed HPLC compound analysis and noted that orthogonal confirmation by mass spectrometry strengthens the result (PMID: 29641892). D’Hondt and colleagues (2014) similarly emphasized validated orthogonal methods for compound impurity profiling (PMID: 24513099). Pairing the two is the standard approach.

How can a researcher verify that a vendor’s ISO claim is real?

Five steps: confirm the standard cited is ISO/IEC 17025 specifically (not ISO 9001), identify the testing lab named on the COA, identify the accreditation body (A2LA, ANAB, PJLA, or international equivalent), look up the lab’s public scope to confirm the methods on the COA fall within it, and verify the certificate is current and not expired. The process takes about ten minutes per vendor and resolves most ambiguous claims.

Does ISO/IEC 17025 accreditation say anything about a compound’s regulatory status?

No. ISO/IEC 17025 accreditation only addresses the technical competence of a testing laboratory to perform specific analytical methods. It does not approve, endorse, or change the regulatory status of any compound the lab tests. Research-grade compounds remain not approved for human consumption regardless of how rigorous the analytical testing is. The accreditation answers what is in the vial, not whether the vial may be used for any clinical purpose.

References

  1. Sherma J and Rabel F (2018). Journal of Liquid Chromatography & Related Technologies. A review of thin layer chromatography methods for determination of authenticity of foods and dietary supplements. PMID: 29641892. View on PubMed
  2. D’Hondt M et al. (2014). Journal of Pharmaceutical and Biomedical Analysis. Related impurities in compound medicines. PMID: 24513099. View on PubMed
  3. Vergote V et al. (2009). Journal of Pharmaceutical and Biomedical Analysis. Quality specifications for compound drugs: a regulatory-pharmaceutical approach. PMID: 19261424. View on PubMed