AUPAM · Certificate evidence checker

CoA or CoC? Check what the certificate actually proves

Review the evidence inside a Certificate of Analysis or Certificate of Conformity before relying on its title.

Neither document is automatically more comprehensive. A CoA normally answers a batch-specific analytical question; a CoC attests conformity to a stated scope. The issuer, scope, batch link and underlying evidence determine what either certificate can support.

Certificate of Analysis (CoA)

Usually reports tests and results for an identified sample or batch against acceptance criteria. It may support a material-quality decision only within the applicable GMP system and supplier-control procedure.

Certificate of Conformity / Compliance (CoC)

Attests that defined requirements were met. Its scope may concern a batch, product, system, standard or market requirement. The title alone does not show which evidence was reviewed.

Certificate evidence check

Select only what you can verify in the document or controlled supporting record. The result reviews coverage; it is not an authority release, disposition or acceptance decision.

Evidence you verified

Coverage review

Choose the certificate type and mark the evidence you can verify.

Decision-based practice

Six difficult certificate cases

Fictional training cases. Decide what to do before revealing the suggested path, then apply the national and site procedures.

CoC says compliant; the batch result does not

Scenario: A CoC states that the batch conforms, while the attached CoA shows an assay result outside the approved limit.

Reveal the response path

Immediate action

Place the material or batch on hold. Verify the specification, result, version and document linkage; open the applicable discrepancy or laboratory investigation. A conformity statement does not cancel a conflicting result.

Evidence to obtain

Authenticated CoA and CoC; approved specification; original analytical record; sampling, method and investigation records; Quality disposition.

Escalation

Quality Unit; include Regulatory Affairs if a submitted dossier, import record or authority commitment may be affected.

Avoid

Do not select the more favourable document, average conflicting values, or release only because the CoC says compliant.

A complete CoA from an unqualified supplier

Scenario: The CoA includes results and limits, but supplier qualification is incomplete and no receiving identity test is documented.

Reveal the response path

Immediate action

Keep the material under the applicable receipt status. Follow the approved sampling and identity-testing procedure and complete or escalate supplier qualification before relying on supplier results.

Evidence to obtain

Approved-supplier status; qualification and periodic-review records; receipt, sampling and identity-test records; CoA verification; current quality agreement.

Escalation

Quality Unit and supplier-quality owner. Procurement may support records but must not make the quality disposition.

Avoid

Do not treat a polished certificate, prior purchases or commercial urgency as supplier qualification.

The CoA uses an obsolete specification

Scenario: The batch passes the CoA limits, but they belong to a superseded specification; the approved receiving specification is newer.

Reveal the response path

Immediate action

Hold disposition while Quality confirms the specification applicable to this batch, date and market. Reconcile change-control implementation and assess affected documents and batches.

Evidence to obtain

Approved specifications and effective dates; change control; purchase requirement; supplier notification; quality agreement; manufacture date; market commitments.

Escalation

Quality Unit and change-control owner; Regulatory Affairs where registered limits or implementation commitments differ.

Avoid

Do not compare with whichever limit produces a pass or edit the certificate locally.

A site GMP certificate is presented as batch evidence

Scenario: A valid manufacturing-site GMP certificate is submitted instead of batch-specific analytical evidence for an incoming material.

Reveal the response path

Immediate action

Record what the GMP certificate covers, then obtain the batch evidence required by the receipt and testing procedure. Keep site-compliance status separate from batch disposition.

Evidence to obtain

GMP certificate scope, issuer and validity; batch CoA or required tests; supplier/manufacturer identity; receipt procedure; approved specification.

Escalation

Quality Unit; Regulatory Affairs if the certificate is also required for licensing or import documentation.

Avoid

Do not infer that a GMP-certified site makes every batch compliant, or that a CoA proves the site’s GMP status.

Two CoAs carry the same batch number but different results

Scenario: The email and supplier portal provide CoAs with the same batch and issue date, but one result and the approval signature differ.

Reveal the response path

Immediate action

Stop reliance on both copies until authenticity and version history are resolved through a controlled supplier contact. Preserve both and initiate the applicable data-integrity or supplier discrepancy process.

Evidence to obtain

Both original files and metadata; portal audit trail; controlled correspondence; supplier version history; original result; authorised approval record.

Escalation

Quality Unit, data-integrity lead and supplier-quality owner; Regulatory Affairs if a conflicting copy was submitted externally.

Avoid

Do not delete the inconvenient copy, rename one final without evidence, or ask for an undocumented replacement.

Quality evidence is adequate; the import document is not

Scenario: The CoA supports internal quality review, but the current receiving procedure separately requires an authenticated conformity document for the import or official-release file.

Reveal the response path

Immediate action

Keep quality assessment and the regulatory-document gap as separate records. Follow the current authority route to obtain or clarify the document; do not turn an internal conclusion into official release.

Evidence to obtain

Current authority procedure and version; document checklist; authenticated certificate where required; CoA and internal disposition; shipment identifiers; controlled correspondence.

Escalation

Regulatory Affairs or the authorised import-release function, with Quality informed of any impact on status or storage.

Avoid

Do not claim that a passing CoA waives a separate authority document, or that the missing document proves poor batch quality.

Official sources and scope

These sources support the analytical-certificate and supplier-control checks. They do not create a universal definition or acceptance rule for every document called a CoC.

Sources reviewed 20 September 2026. Always check the current national procedure and product-specific requirement.