Complete guide to lot tracking and COAs

Every vial that leaves Purity Science carries a lot number and a certificate of analysis (COA). For practitioners working under a 503A pharmacy framework, a research authorization, or any state-licensed compounding model, that traceability isn't a marketing nicety — it's the spine of the regulatory record you're expected to maintain. This guide walks through what lot tracking means in practice, what a COA actually proves, how the chain of custody flows from manufacturer to patient, what state boards expect when they audit your recordkeeping, and how the Purity Science platform implements lot tracking step by step.

Why lot tracking matters

A "lot" is a discrete batch of a peptide produced under uniform conditions. Two vials from the same lot were synthesized, purified, vialed, and tested together; two vials from different lots may have different impurity profiles, different endotoxin readings, even different mass-spec confirmations of identity. When something goes wrong — a contamination event, a stability failure, a patient adverse reaction — you have to be able to identify which vials are implicated. Without lot tracking, you'd have to recall every vial of that peptide you ever shipped. With it, you isolate the affected lot and quarantine only the vials traceable to that batch.

Lot tracking is also what protects your license. State pharmacy boards and the FDA both expect that compounding pharmacies, dispensing practitioners, and research authorization holders can reconstruct the chain of custody for every API and finished product. "Where did this lot come from? Who shipped it? When did it arrive? Where is it now? Where did it go?" If you can't answer those questions in under five minutes during an inspection, you have a recordkeeping problem.

Beyond regulatory exposure, lot tracking has real clinical utility. Practitioners who track which lot a given patient received can correlate clinical response — efficacy, side effect frequency, batch-to-batch variability — across their own practice over time. That data is invaluable both for protocol refinement and for defending against malpractice claims.

The anatomy of a COA

A certificate of analysis is the manufacturer's signed attestation that a specific lot meets the specifications it was supposed to meet. A typical research-grade peptide COA includes:

• Identity confirmation via mass spectrometry (MS). The peptide's molecular mass must match the theoretical mass within a tight tolerance. A mismatch means you have a different peptide, a truncation product, or a sequence error.
• Purity by HPLC. High-performance liquid chromatography separates the peptide from impurities (truncation products, racemized residues, hydrolysis byproducts). Purity is typically reported as area-percent at a specific UV wavelength. Most reputable suppliers target ≥98% purity for research peptides.
• Endotoxin testing. Endotoxins (lipopolysaccharide fragments from gram-negative bacteria) cause fever, hypotension, and inflammatory responses in patients. Endotoxin is measured by Limulus amebocyte lysate (LAL) assay; the result is reported in endotoxin units per milligram (EU/mg). For injectable products the threshold is application-specific but is typically <5 EU/kg body weight.
• Bioburden. The number of viable microorganisms per unit of product, typically reported in CFU/g. For sterile injectables, the result must be "not detected" at the assay's lower limit.
• Water content (Karl Fischer titration). Excess water destabilizes peptides and shortens shelf life.
• Counterion content. Most peptides are supplied as a trifluoroacetate (TFA) or acetate salt; the COA reports the percent counterion so dose calculations can be adjusted accordingly.

Each result on a COA is signed (digitally or wet-ink) by the analytical chemist who ran the assay and counter-signed by the quality control supervisor. The signature is what gives the document legal weight.

Chain of custody

A complete chain of custody for a peptide vial looks like this:

1. Manufacturer synthesizes the lot, runs the analytical battery, issues the COA, ships under temperature-controlled conditions.
2. Distributor (e.g., Purity Science) receives the lot, verifies the COA matches the shipping manifest, performs receiving inspection (intact seals, correct temperature log, no damage), and enters the lot into inventory with a unique lot ID.
3. Practitioner orders a quantity from the lot, receives the shipment, verifies the lot number on each vial against the packing slip, and stores under appropriate conditions.
4. Patient (in the clinical model) or researcher (in the research authorization model) receives the dose and the documentation that ties the dose to the lot.

Every transition in this chain leaves a record. The manufacturer's batch record. The distributor's receiving log. The practitioner's dispensing log. The patient's chart. Audit-readiness means those records align when read side by side.

State board recordkeeping requirements

Recordkeeping retention periods vary by state. A representative sample:

• California (Board of Pharmacy): 3 years for compounding records, longer for controlled substances. Per 16 CCR § 1735.3.
• New York (Board of Pharmacy): 5 years for dispensing records.
• Texas (Board of Pharmacy): 2 years for prescription records, 7 years for compounding records.
• Florida (Department of Health): 4 years from the date of dispensing.
• Louisiana: 2 years for prescription records, longer for compounding.
• Mississippi: 2 years generally; longer for controlled substances.
• Tennessee: 2 years for prescription records.

These are minimums. Your malpractice carrier may require longer retention, and the federal Drug Supply Chain Security Act (DSCSA) overlays additional requirements for finished drug products that pass through the wholesale distribution system. When in doubt, retain longer — there is no penalty for keeping records past the minimum, but there is significant penalty for falling short.

How Purity Science implements lot tracking

Every product variant in our catalog is backed by one or more inventory_lots rows in our database. Each lot row captures:

• The originating manufacturer's lot number (carried forward unchanged from the manufacturer's COA).
• The COA file itself (PDF, attached to the lot record).
• The expiration date.
• The qty on hand, qty reserved (allocated to in-flight orders but not yet shipped), and qty available (the difference).
• The received-at timestamp.
• Any receiving-inspection notes (temperature excursion, damaged outer carton, etc.).

When you place an order, our system allocates vials from a specific lot at the moment the order is paid and packed. The lot ID flows through to order_items.inventory_lot_id, where it lives forever. From your /account/orders/[id] view, you can:

• See the lot number for every vial in every line item.
• Download the COA PDF directly from the order detail page.
• Cross-reference the lot number against the vial label when the shipment arrives.

For audit purposes, that single page is the complete recordkeeping bundle for that delivery: the order, the line items, the lot numbers, the COAs, and the carrier tracking.

Common pitfalls

A few patterns we've seen go wrong, in roughly decreasing order of frequency:

Lot mixing. Combining vials from two different lots into a single shipment and recording only one lot number. This breaks traceability for the unrecorded lot. Always record every lot number that appears in a shipment, even if the same SKU shows up across multiple lots.

COA mismatch. Storing a COA against the wrong lot number — usually a copy-paste error during receiving. Always verify the lot number on the COA matches the lot number printed on the vial labels.

Expired-lot detection. Vials get pushed to the back of the storage refrigerator and aged out of inventory. Build a monthly walk-through into your SOP that compares physical inventory against the expiration dates in your records, and quarantine anything within 30 days of expiry.

Receiving inspection skipped. A shipment arrives, looks fine, and goes straight into the fridge without the receiving log being filled out. If a temperature excursion happened in transit, you've now compromised the lot's stability profile without a record of when it happened.

Carrier handoff documentation. Mailroom drops the carton at the door, no signature. Always require a signature for temperature-controlled shipments, and capture the carrier's tracking number against the shipment record.

Audit response

When a state board investigator asks about a specific lot, the response should follow a standard playbook:

1. Pull the lot record from your inventory system, including receiving date and condition on arrival.
2. Pull the COA for that lot.
3. Pull the manufacturer's documentation showing where the lot was synthesized and tested.
4. Pull every dispensing record that drew from the lot, sorted by date.
5. Pull the patient records for each dispensing event, redacted appropriately.
6. Assemble a single PDF binder with a cover page summarizing the chain, in chronological order.

Have this binder ready before the investigator arrives. The difference between "I can have that for you in an hour" and "let me get back to you next week" is the difference between a routine inspection and a formal enforcement action.

FAQ

Q: How long do you retain COAs? A: Indefinitely. The PDF lives with the lot record forever; even after a lot is fully consumed and removed from active inventory, the COA stays attached to the historical lot row.

Q: What if my state requires longer retention than your default? A: Our default is the longest of all relevant state minimums. You're welcome to retain longer-form records (your own dispensing logs, patient charts) on your end; we retain the upstream lot and COA documentation indefinitely.

Q: Can I download all my historical COAs in one batch? A: Yes — open a support ticket from your account and request a bulk COA export. We'll generate a ZIP keyed by lot number and email a secure link.

Q: What happens if a lot is recalled? A: We notify every account that received vials from the affected lot, suspend further sales of that lot immediately, and walk you through quarantine and disposition. The notification includes the original lot record plus the recall reason and any updated COA.

Q: How do I cite a Purity Science lot in a peer-reviewed publication? A: Use the manufacturer's lot number as printed on the COA, plus your receiving date and our internal inventory ID. We can provide a citation block on request.

Q: What if a vial's lot label is illegible? A: Don't use the vial. Quarantine it and open a support ticket — we'll trace it through your order history and replace if appropriate.

Q: Is the COA the same thing as a Certificate of Compliance? A: No. A Certificate of Compliance (CoC) attests that a product conforms to a specification; a Certificate of Analysis reports the actual measured values for that lot. They're often confused. For research peptides, you want the COA.

Q: Can I share a COA with a colleague? A: Yes — the COA is yours to share once you've taken delivery of vials from the lot. Most practitioners distribute the COA alongside the patient chart.

If you have a question about lot tracking or COA handling that this guide doesn't cover, open a support ticket from your account dashboard or email support@purityscience.com.