Tirzepatide certificate of analysis explained

Last updated 2026-07-27

What is a certificate of analysis for tirzepatide, exactly?

A certificate of analysis (COA) is a document a lab issues after testing a specific batch of a product. For compounded tirzepatide, it's supposed to confirm that the vial actually contains tirzepatide (identity testing), how much of it there is compared to the label claim (potency/purity, usually reported as a percentage), and whether contaminants like bacterial endotoxins or heavy metals are within limits. Think of it as a batch-specific report card, not a general safety seal. A COA tied to lot #A2306 tells you almost nothing about lot #A2411 unless the pharmacy tests every batch. That distinction trips people up constantly: a screenshot of "a COA" from a vendor's website, with no batch number visible, is close to worthless as proof for the vial sitting in your fridge. Compounded tirzepatide is not FDA-approved. The FDA has approved tirzepatide only as Eli Lilly's branded products, Mounjaro (type 2 diabetes) and Zepbound (chronic weight management) ^{[1] [2]}. Compounded versions are legal only under specific conditions in FDA-registered outsourcing facilities (503B) or state-licensed compounding pharmacies (503A), and they don't go through FDA batch review the way the branded drugs do. A COA is the closest substitute for that missing federal oversight, which is exactly why it matters more here than it would for an FDA-approved pill.

What should actually be on a legitimate COA?

A real COA reads like a lab report, not a marketing sheet. At minimum it should show the compound name and lot number matching the vial, the testing lab's name and accreditation (commonly ISO/IEC 17025), the test methods used, and numeric results with pass/fail thresholds, more than a stamp that says "passed." Here's a rough checklist of what should be present: | Element | Why it matters |

How do I know if a COA is from a real, independent lab?

Search the lab's name plus "ISO 17025" and see if it shows up in an actual accreditation body's directory, such as A2LA or ANAB. Legitimate testing labs are listed publicly; a lab that only exists on the vendor's own website is a red flag worth taking seriously. A few practical checks: does the COA list a lab address and a way to contact them independently of the seller? Does the lab test other, unrelated products (a quick web search often turns up other clients or industries)? Is the report a PDF with a document ID or reference number, or is it a low-resolution image that looks copy-pasted? One pattern worth knowing: some COAs get recycled across multiple lots, sometimes for months, with only the lot number edited in text. If the numeric results (purity percentage, endotoxin levels) are identical across several "different" lots down to the decimal point, that's not a coincidence, that's a template.

Does a compounding pharmacy have to test every batch?

503B outsourcing facilities are required to register with the FDA and are subject to CGMP (current Good Manufacturing Practice) requirements, which is a higher bar than a standard 503A compounding pharmacy operating under a doctor's prescription ^[4]. CGMP includes expectations around testing raw materials and finished product quality, though the specific stability and purity testing requirements are enforced through FDA inspection rather than a public batch-by-batch database consumers can check. 503A pharmacies compound for individual patients under a prescription and are regulated primarily at the state level by boards of pharmacy, with the FDA's oversight role more limited under Section 503A of the Federal Food, Drug, and Cosmetic Act ^[5]. Testing rigor varies a lot between individual 503A pharmacies. Some run third-party purity and sterility testing on every batch; others don't, and there's no federal mandate forcing them to publish it. The FDA has also been explicit that tirzepatide compounding falls outside the normal drug-shortage exception in some circumstances. After Lilly reported that tirzepatide shortages were resolved, the FDA removed tirzepatide from its drug shortage list in late 2024, which narrows the legal basis compounders have for producing copies outside of documented clinical need ^[6]. That regulatory shift is part of why sourcing from a compounder with genuine batch testing, more than a boilerplate compliance page, matters more now than it did during the height of the shortage.

What's the difference between a COA and "third-party tested" marketing language?

"Third-party tested" is a phrase, not a document. A COA is the actual paper trail. Plenty of vendor sites use the phrase without linking a single batch-specific report, and that gap is exactly where trust should break down for a careful buyer. If a provider says "third-party tested," the reasonable next question is: tested by whom, on which lot, and can I see the report? A provider working with a legitimate pharmacy partner should be able to answer that without friction. Tirz Rx works with a pharmacy partner and is upfront that it doesn't compound or manufacture anything itself; the actual testing and production sits with the licensed pharmacy, and a provider-reviewed process should include visibility into that pharmacy's quality documentation, more than a marketing claim repeated on a landing page.

What purity or potency numbers should I expect to see?

There's no single FDA-published purity threshold specific to compounded tirzepatide the way there is for, say, a pharmaceutical monograph limit. In practice, reputable compounding COAs tend to report purity in the high 90s (commonly cited informally in the compounding industry as ≥95-98% for API purity), with potency (actual content vs. labeled content) ideally landing close to 100%, often accepted within roughly 90-110% depending on the pharmacy's internal specification. Those ranges are industry norms, not federal law, so treat them as a sanity check rather than gospel. What should worry you more is potency far outside that range: a report showing 60% of labeled content, for instance, means you might be significantly underdosing even while following your provider's dosage plan exactly. It also means calculations from a dosage calculator assume label-accurate content, which a bad batch quietly breaks.

Why does peptide purity actually matter for safety, more than efficacy?

Impurities in peptide products can include truncated or modified peptide sequences, residual solvents from synthesis, or bacterial endotoxins if sterility processing fails. Endotoxins are a real injectable-drug concern generally (they're a standard test in USP sterile compounding chapters), separate from tirzepatide's own known side effect profile ^[3]. Tirzepatide itself, at correct purity and dose, has a well-characterized side effect profile from its FDA trials. The SURMOUNT-1 trial (NCT04184622) reported nausea, diarrhea, and constipation as the most common adverse events, occurring in a meaningful minority of participants, with gastrointestinal events being mostly mild to moderate and dose-dependent ^[7]. The SURPASS program (for example SURPASS-2, NCT03987919) found similar GI-predominant side effects in the type 2 diabetes population ^[1]. Tirzepatide carries a boxed warning for risk of thyroid C-cell tumors, based on rodent studies, and it's contraindicated in patients with a personal or family history of medullary thyroid carcinoma (MTC) or Multiple Endocrine Neoplasia syndrome type 2 (MEN 2) ^[8]. It's also associated with a signal for pancreatitis and gallbladder-related events (cholelithiasis, cholecystitis) in trial data, which is why providers screen for gallbladder and pancreatic history before starting ^{[1] [2]}. None of that changes because a vial has a COA. A clean purity report doesn't offset a real contraindication; it just tells you the drug in the vial is actually tirzepatide at roughly the labeled strength, which is a separate and narrower question from "is this safe for me."

Can I request a COA myself, and what happens if a provider refuses?

Yes, and you should. A reasonable ask is: "Can you send me the COA for the specific lot number on my vial?" Not a generic PDF from the vendor's FAQ page, the actual batch-matched document. If a provider stalls, gets vague about which pharmacy compounds the product, or sends a document with no lot number, treat that as a real signal, not an oversight. A pharmacy with nothing to hide can usually produce this within a business day or two, since it's paperwork they already have on file for their own quality records. A provider-reviewed model, where a clinician reviews your history before prescribing and the product ships from a named pharmacy partner, tends to make this easier because there's a documented chain: prescriber to pharmacy to patient, with the pharmacy's compliance data attached at each step. That's different from a vendor selling "research peptides" with no prescription and no named dispensing pharmacy at all, which is a structure the FDA has specifically warned patients about with respect to compounded GLP-1/GIP products sold outside legitimate pharmacy channels .

How does this differ for Zepbound or Mounjaro pens versus compounded vials?

Branded Zepbound and Mounjaro don't come with a consumer-facing COA because FDA approval itself is the quality guarantee. Every batch of an FDA-approved drug is manufactured under CGMP with FDA oversight, and the drug's identity, purity, and potency are established through the approval process and ongoing inspection, not a per-purchase lab report ^{[1] [2]}. Compounded tirzepatide, by contrast, doesn't have that federal approval backstop. That's the entire reason COAs matter so much more in this specific corner of the market. It's also why cost and convenience differences between branded pens and compounded vials come with a real tradeoff in oversight, more than a price difference. If you're deciding between the two, that oversight gap belongs in the decision, alongside dosing logistics like how you'd reconstitute a vial or handle injection sites and rotation, which branded pens simplify but compounded vials don't.

What are common red flags in a fake or low-quality COA?

A few patterns show up again and again in reports that don't hold up to scrutiny: no lot number, or a lot number that doesn't match the vial in hand; a lab name that returns zero real search results outside the vendor's own site; identical numeric results across multiple supposedly different batches; a document with no date, or a date many months before the product was shipped; and results reported without units or thresholds ("purity: good" instead of "purity: 97.4%, spec: ≥95%"). Another one worth knowing: some sellers show a COA for the raw API (active pharmaceutical ingredient) powder, not the finished, reconstituted, or compounded product. Testing the raw ingredient before it's compounded into a sterile injectable is not the same as testing the final vial for sterility, preservative stability, and accurate dilution. If the COA doesn't specify which stage of production it covers, ask.

Bottom line: how much should a COA change my decision?

A COA is necessary evidence, not sufficient evidence. It tells you the pharmacy is doing real quality control on that specific batch; it doesn't replace medical screening for thyroid history, pancreatitis risk, or gallbladder disease, and it doesn't substitute for a clinician reviewing your labs and history before you start a dosing cycle. If you're evaluating a provider, ask for the COA the same way you'd ask about the prescribing process. A provider-reviewed path through Tirz Rx is built around that combination: clinical review before prescribing, and a named, accountable pharmacy partner behind the product, rather than an anonymous vendor relationship where nobody can tell you who tested what. Ask the question, read the actual numbers, and treat a refusal to answer as the answer.

Frequently asked questions

What is a certificate of analysis (COA) for tirzepatide?

A COA is a lab report for a specific batch of compounded tirzepatide, confirming identity (that it really is tirzepatide), potency (how close the actual content is to the labeled dose), and contaminant screening such as endotoxins or heavy metals. It should list a lot number matching your vial, the testing lab's name, methods used, and numeric results, more than a pass/fail stamp.

Is compounded tirzepatide FDA-approved?

No. Only branded Mounjaro (type 2 diabetes) and Zepbound (chronic weight management) are FDA-approved ^[1][2]. Compounded tirzepatide is produced under separate legal pathways (503A or 503B) and doesn't undergo FDA batch review, which is why independent lab testing and a batch-specific COA matter much more for compounded product.

How can I verify a COA is legitimate and not fabricated?

Search the testing lab's name plus its accreditation (commonly ISO/IEC 17025) and check if it appears in a real accreditation directory like A2LA or ANAB. Confirm the lot number on the COA matches your vial, check the test date is recent, and be suspicious if identical numeric results appear across multiple supposedly different batches.

What purity percentage should a tirzepatide COA show?

There's no single federal purity threshold specific to compounded tirzepatide. Reputable compounding labs often report API purity in the high 90s and potency close to 100% of labeled content. Treat these as industry norms, not law, and be far more concerned by results dramatically outside that range (like 60-70% of labeled potency) than by minor variation.

Does a 503B outsourcing facility test differently than a 503A pharmacy?

503B facilities register with the FDA and operate under CGMP requirements, generally a higher and more consistently enforced quality bar ^[4]. 503A pharmacies compound per individual prescription under state board of pharmacy oversight and Section 503A of the FD&C Act ^[5], with testing rigor varying significantly by pharmacy since there's no uniform federal batch-testing mandate for them.

What are the main side effects and risks of tirzepatide, regardless of sourcing?

Trial data from SURMOUNT-1 (NCT04184622) and SURPASS-2 (NCT03987919) show gastrointestinal effects (nausea, diarrhea, constipation) as most common ^[7][8]. Tirzepatide carries a boxed warning for thyroid C-cell tumor risk and is contraindicated with personal/family MTC or MEN 2 history, plus signals for pancreatitis and gallbladder disease ^[1][2][9].

Can I ask my provider or pharmacy directly for a COA?

Yes, and you should ask specifically for the report tied to the lot number on your vial, not a generic document from a website. A legitimate pharmacy with real quality control can typically produce this within a day or two, since it's paperwork already on file for their own compliance records.

What red flags suggest a fake or reused COA?

Missing or mismatched lot numbers, a testing lab with no independent web presence, identical results across different batches, no test date, results with no units or pass/fail thresholds, and reports covering only raw API powder rather than the finished compounded vial are all common red flags.

Why was tirzepatide removed from the FDA drug shortage list?

Eli Lilly reported that supply had caught up with demand, and the FDA confirmed tirzepatide's removal from the shortage list in late 2024 ^[6]. That removal narrows the legal justification some compounders previously relied on, making sourcing scrutiny, including COA review, more important going forward.

Does a COA guarantee the product is safe for me personally?

No. A COA confirms batch-level identity and purity; it says nothing about whether tirzepatide is medically appropriate for your history, especially thyroid cancer risk factors, pancreatitis history, or gallbladder disease. That determination requires a clinician reviewing your health history before prescribing, separate from any lab report.

What's the difference between COA testing on raw API versus the finished product?

Raw API testing checks the tirzepatide powder before compounding; finished-product testing checks the actual sterile, reconstituted vial you'll inject, including sterility and accurate dilution. A COA covering only raw material doesn't verify the compounding process itself went correctly, so ask which stage a given COA actually covers.

Do FDA-approved Zepbound and Mounjaro pens come with a COA?

No, and they don't need one in the consumer-facing sense. FDA approval means every manufacturing batch already goes through CGMP oversight and FDA inspection; the approval itself is the quality guarantee, which is a structurally different assurance than a per-batch lab report from a compounding pharmacy.

Sources

1. FDA, Zepbound prescribing information / approval: Zepbound (tirzepatide) is FDA-approved for chronic weight management, with boxed warning on thyroid C-cell tumors and contraindication in MTC/MEN 2
2. FDA, Mounjaro prescribing information / approval: Mounjaro (tirzepatide) is FDA-approved for type 2 diabetes, with the same boxed warning and contraindications as Zepbound
3. USP, General Chapter <797> Pharmaceutical Compounding-Sterile Preparations: USP <797> sets sterility and quality standards for compounded sterile preparations that compounding pharmacies are expected to follow
4. FDA, Human Drug Compounding Outsourcing Facilities (503B): 503B outsourcing facilities must register with FDA and are subject to CGMP requirements
5. FDA, Compounding Laws and Policies (Section 503A): 503A compounding pharmacies operate under Section 503A of the FD&C Act with oversight primarily at the state board of pharmacy level
6. NEJM / ClinicalTrials.gov, SURMOUNT-1 (NCT04184622): SURMOUNT-1 trial data on tirzepatide for weight management, reporting gastrointestinal adverse events as most common
7. ClinicalTrials.gov, SURPASS-2 (NCT03987919): SURPASS-2 trial of tirzepatide in type 2 diabetes, reporting GI-predominant adverse event profile
8. FDA, Medications Containing Semaglutide/Tirzepatide Marketed for Weight Loss: FDA warning to patients about risks of compounded GLP-1/GIP products sold outside legitimate prescribing and pharmacy channels