Lubinpla

Certificate of analysis vs conformance: which does a buyer need?

Summary

Send a certificate of analysis (CoA) when a chemical customer needs measured lot results, and a certificate of conformance (CoC) when a declaration is enough. A CoC states that the lot meets a named specification. The customer's purchase order or quality agreement decides which one; regulated end uses and disputes can call for both or for an accredited test report.

  • ISO/IEC 17050-1:2004 specifies general requirements for a supplier's declaration of conformity in any sector, and ISO last reviewed and confirmed it as current in 2025 (ISO, 2025).

  • EN 10204:2004 separates a type 2.1 declaration of conformity with the order, which states compliance only, from a type 3.1 inspection certificate that gives the results of specific inspections (EN 10204:2004, summarized by Wermac).

  • US drug manufacturers may accept a supplier's report of analysis in place of their own testing only with at least one specific identity test and periodic validation of the supplier's results (US FDA, 21 CFR 211.84, eCFR 2026).

  • ASTM D3244-24 gives a statistical practice for two parties to resolve a dispute over a product property's conformance with a specification (ASTM, 2024).

This guide is written from the supplier side for industrial chemicals and lubricants sold under a purchase order or quality agreement. It does not cover export certificates of conformity that an importing country's regime requires, CE marking declarations, or drug, food and medical device components, where the customer's sector rules take precedence over the choice described here.

Which conditions decide whether a chemical customer needs a CoA or a CoC?

Whether a chemical customer needs a certificate of analysis or a certificate of conformance depends on four conditions: what the customer's documents ask for, whether the customer checks results against limits, the end use, and who produced the values. A CoA reports measured results for one lot against the specification limits; a CoC declares that the lot conforms to a named specification and usually carries no results.

The first condition is the written requirement. A purchase order may require a CoA for every batch, a CoC for every shipment, or both, depending on the product and customer requirements (Hyperbots, accessed 2026). If the order or quality agreement names a document, that document is the answer, whatever the supplier usually sends.

The second condition is how the customer uses the certificate. A customer whose incoming inspection compares results with limits, or who must trend lot-to-lot variation, needs numbers. A customer who only files proof that the delivery matched the agreed grade can work with a declaration.

The third condition is the end use. A regulated end use, such as a component for a US drug product, moves the decision to the customer's sector rules.

The fourth condition is the origin of the data. A distributor that repacks a manufacturer's lot did not test it, and the certificate has to say so.

Certificate of analysis vs certificate of conformance: which fits which customer?

A certificate of analysis fits a chemical customer who needs lot results, and a certificate of conformance fits one who needs a declaration against a named specification. The table below decides which certificate a chemical supplier sends for the requirements that come up most often in supply contracts.

Customer requirement

Certificate to send

Why

Lot results against specification limits

CoA for the shipped lot, with test methods, limits and results

Incoming inspection compares each result with its limit

Conformance to a named specification only

CoC naming the specification and its edition, the lot and the signatory

A supplier's declaration is the document asked for (ISO/IEC 17050-1:2004)

Both a declaration and results

CoC plus CoA for the same lot

The order can require both (Hyperbots, accessed 2026)

US drug component

CoA, plus data the customer needs to validate it

The customer must still run at least one specific identity test (21 CFR 211.84, eCFR 2026)

Repackaged lot with the manufacturer's data

Manufacturer's CoA passed on, or a CoC that names the source of every value

The repacker did not produce the results

Disputed result

Both parties' results, combined under an agreed practice

ASTM D3244-24 resolves conformance disputes between two parties (ASTM, 2024)

The row that settles most cases is the first: when the customer's inspection compares results with limits, a declaration without numbers will not pass, however correct it is.

Two rows need care in practice. For a US drug component, the CoA is an input to the customer's own acceptance testing, so send it with the test methods named and be ready to support the customer's validation of your results. For a repackaged lot, the certificate must make clear that the results came from the manufacturer's laboratory, and the repacked lot must trace back to the manufacturer's lot. When a customer's requirement does not match any row, ask before shipping rather than sending both certificates by default, because an unrequested certificate can raise questions the customer's receiving team then has to resolve.

When is a certificate of conformance enough for a chemical customer?

A certificate of conformance is enough for a chemical customer when the purchase order, quality agreement or specification asks only for a declaration that the lot meets a named specification, and the customer does not compare individual results with limits. Typical cases are routine deliveries of an approved grade to a customer who qualified the product earlier and files the CoC as proof of the delivered grade.

A CoC is a supplier's declaration, and ISO/IEC 17050-1:2004 sets general requirements for such a declaration "in cases where it is desirable, or necessary, that conformity of an object to the specified requirements be attested, irrespective of the sector involved" (ISO/IEC 17050-1:2004). The standard is a reference point for what a declaration should identify; whether a customer requires it is a contract matter.

Metals supply shows the same split in a formal scheme. EN 10204:2004 defines a type 2.1 declaration of conformity with the order, approved by the manufacturer, and a type 3.1 inspection certificate that indicates the results of specific inspections and is approved by an inspection representative independent of production (EN 10204:2004, summarized by Wermac). In chemical supply, the customer's purchase order or quality agreement usually sets the level.

A CoC stops being enough when the customer asks for numbers, when a lot falls close to a limit, or when the result is disputed.

How should a repackaging distributor label values copied from the manufacturer's certificate of analysis?

A repackaging distributor should label values copied from the manufacturer's certificate of analysis as the manufacturer's results, name the manufacturer's lot they come from, and state that the distributor did not retest them. A reader must be able to tell measured results from transcribed ones without asking.

Chemical practitioners already draw this line. One forum participant working in the chemical business wrote that "A CofA implies that our lab has tested the material (usually something we made) with the results as reported," and that data on a CofC "implies we copied over the data from somebody else's CofA" for repackaging operations (Elsmar Cove forum, 2005). That is one practitioner's convention, not a standard, so state the origin explicitly rather than relying on the document title.

Metals supply has a formal rule for the same situation: EN 10204:2004 includes a section on transmission of inspection documents by an intermediary (BSI, 2004). For chemicals, a workable label carries four items: the manufacturer's name and lot number, the date of the manufacturer's analysis, the distributor's own lot or container number linked to that lot, and a sentence such as "Results transcribed from the manufacturer's certificate of analysis; not retested" (illustrative wording). Send the manufacturer's original CoA with it when the supply agreement allows.

A copied CoA that names the wrong source lot passes on the wrong results, so check the lot link before every shipment.

How do you confirm which certificate the customer's purchase order or quality agreement requires?

To confirm which certificate a chemical customer requires, read the purchase order, the quality agreement and the customer's specification before the first shipment, and write down five answers: which document, per lot or per shipment, which properties, which specification edition, and who signs. Where the three documents disagree, ask the customer in writing which one governs.

Suppliers certified to ISO 9001 already have a step for this. ISO 9001:2026 includes clause 8.2.3, Review of requirements for products and services (ISO, 2026), and a certificate requirement is one of the requirements to review before committing to supply.

Check the details that most often cause rejection. The specification named on a CoC must be the edition the customer cited. A CoA must cover the properties listed in the customer's specification, not only the supplier's standard release tests. The lot on the certificate must be the lot in the shipment. A customer who accepts a copy of the manufacturer's CoA from a distributor should say so in writing.

Record the answer in the customer's file so the next shipment does not depend on memory. Further reading on the checking practice: how to stop sending an outdated SDS or the wrong lot's CoA. Lubinpla's submission document check fixes the recipient's requirements first, then judges whether each document is the requested kind and covers the target lot.

When does a chemical customer need a third-party test report instead?

A chemical customer needs a third-party test report instead of a supplier certificate when it wants evidence independent of the supplier, when a result is disputed, or when its own customer or regulator requires results from an accredited laboratory. A supplier's CoA reports the supplier's own testing, so it is not independent evidence about the material in the customer's tank.

The usual benchmark is a laboratory accredited to ISO/IEC 17025:2017, the standard for the competence of testing and calibration laboratories, which ISO last reviewed and confirmed in 2023 (ISO, 2023). Accreditation covers the specific tests in the laboratory's scope, so check that the test method on the report is listed there.

Accredited results also travel across borders: "The ILAC MRA signatories agree to accept the results of each other's accredited conformity assessment bodies under the ILAC MRA" (ILAC, accessed 2026).

For a disputed result on petroleum products and lubricants, ASTM D3244-24 is designed for reference in supply contracts and combines independently obtained results from both parties into an assigned test value (ASTM, 2024). It requires the acceptance limit to be determined before testing starts, so write it into the contract before a dispute arises.

Why do published definitions of who issues a certificate of conformance differ?

Published definitions of who issues a certificate of conformance differ because the same name covers at least three documents: a supplier's own declaration, a trade certificate issued by an agency or certification body, and a repacker's document carrying copied data. Each source describes the one its readers meet.

ISO/IEC 17050-1:2004 treats the document as a supplier's declaration of conformity (ISO/IEC 17050-1:2004). A logistics guide on certificates of conformity for international trade says the issuer depends on the product and country: "In some cases, it could be a government agency responsible for regulating trade and commerce. In others, it might be a third-party organization that specializes in certifying products" (GoComet, 2024). The same guide adds that manufacturers typically issue them. In chemical repackaging, a forum practitioner describes a CoC as the document that carries data copied from another company's CoA (Elsmar Cove forum, 2005).

None of these is wrong for its context. The practical consequence for a chemical supplier is to ask what the customer means by a CoC: a supplier declaration, a certificate for an import regime, or a document that passes on the manufacturer's results. The answer decides who signs it and what it must contain.

Frequently asked questions

Is a certificate of compliance the same as a certificate of conformance?

In most chemical supply the two names are used for the same supplier declaration. Some quality practitioners distinguish them, holding that products conform to requirements while people comply with them, but others reply that the distinction has no standard basis. Follow the term your customer's documents use.

Can one document serve as both a CoA and a CoC?

Yes, if the customer accepts it. A certificate of analysis that lists the lot results and also states, with a signature, that the lot conforms to the named specification edition gives both the results and the declaration. Confirm in writing that the customer accepts one combined document.

Does a CoA from the supplier's own laboratory count as independent evidence?

No. A certificate of analysis from the supplier's laboratory reports the supplier's own testing. It is useful evidence, but a customer who needs independent results should ask for a report from a laboratory accredited to ISO/IEC 17025 for that test method.

Related posts

Turn technical reasoning into better results.

Bring your own case. Lubinpla reasons from your data and ends in a document your customer or manager can act on. Free to start, no card.