// Lab Literacy

ISO 17025 Testing, COAs, and What a Lab Report Really Proves

Nearly every 7-hydroxymitragynine brand now stamps "lab tested" somewhere on the label. The phrase costs nothing to print. What separates a real testing program from marketing copy is the paperwork behind it — and most buyers have never been shown how to read it. This guide covers what ISO/IEC 17025 accreditation actually certifies, what a complete certificate of analysis (COA) contains, and a five-minute routine for verifying a lab report before you spend money on a product.

What ISO/IEC 17025 actually certifies

ISO/IEC 17025:2017 is the international standard titled "General requirements for the competence of testing and calibration laboratories." Read that title carefully: it is a standard for laboratories, not for products. When a lab is ISO 17025 accredited, an independent accreditation body — in the United States, usually A2LA, ANAB, or Perry Johnson Laboratory Accreditation (PJLA) — has audited the lab's method validation, instrument calibration records, reference standards, staff qualifications, proficiency testing, and impartiality controls, and continues to reassess it on a recurring cycle.

Two nuances matter for buyers. First, accreditation is granted for a defined scope — a specific list of test methods and matrices. A lab accredited for water chemistry is not automatically accredited for botanical alkaloid quantitation, so the scope document matters, not just the logo. Second, every accredited lab has a certificate number that you can look up in the accreditation body's public directory. If a COA claims ISO 17025 status, that claim is checkable in about a minute. A lab that only says "ISO certified" without naming 17025 may be referring to ISO 9001, which is a general quality-management standard and says nothing about analytical competence.

A COA is not the same thing as accreditation

These two get conflated constantly. A COA is a report on one batch of product: what was tested, by what method, and what was found. Accreditation is a standing credential of the lab that produced the report. Neither substitutes for the other. A batch-specific COA from an unaccredited garage lab is a number with no pedigree; an accredited lab's logo on a brand's homepage, with no batch COAs behind it, is a pedigree with no numbers. What you want is both together: a COA for the exact batch in your hand, issued by an independently accredited laboratory.

What a complete 7-OH COA should show

7-OH products — tablets pressed to a stated milligram content, or powders sold by concentration — need more than a single potency line. A thorough COA covers four panels, each with the method named, the analysis date, a sample description, and the batch or lot identifier.

Alkaloid identity and quantity

The core panel confirms that the product contains 7-hydroxymitragynine and states how much, typically measured by HPLC-UV or LC-MS/MS. For tablets the result is usually reported in milligrams per tablet; for powders, as a percentage by weight. Tablets on the US market are commonly labeled anywhere from roughly 7.5 mg to 30 mg of 7-OH each, and real results rarely land exactly on the label — a tablet labeled 15 mg that tests at 14.3 mg (95.3% of claim) is a normal, credible result. Good COAs also report mitragynine content, since commercial 7-OH is generally produced by converting mitragynine extracted from kratom leaf, and residual mitragynine tells you something about how clean that conversion was.

Heavy metals

Botanical raw materials can carry metals from soil and processing equipment. Labs screen four by ICP-MS: arsenic, cadmium, lead, and mercury, reported in parts per million or micrograms per gram against published limits. A COA that skips this panel is telling you the brand paid for the cheapest possible test.

Microbials

Total aerobic plate count, yeast and mold, coliforms, E. coli, and Salmonella. These matter most for powders, which have more surface area and handling steps than pressed tablets.

Residual solvents

This panel is more important for 7-OH than for plain leaf kratom. Because most commercial 7-OH is semi-synthesized from mitragynine, solvents such as ethanol, methanol, or dichloromethane are used somewhere in production. A residual solvent screen (typically headspace GC) verifies they were removed to within accepted limits. Its absence from a 7-OH COA is a meaningful gap.

In-house testing vs. independent testing

Manufacturer bench testing is a legitimate quality-control step — it is how a producer catches a bad batch before it ships. But it is not verification, because the entity reporting the result profits from a passing grade. Independent (third-party) testing means a laboratory with no ownership ties to the brand ran the analysis and gets paid for the work, not the outcome. The distinction matters even more at the wholesale level, where a retailer's own reputation rides on someone else's product: 7ohBlack's breakdown of what belongs on a 7-OH certificate of analysis is written from that buyer's-side perspective and is worth reading if you evaluate products for resale. The strongest programs do both — internal QC on every run, plus an independent accredited lab on every released batch.

Red flags on a lab report

  • No batch or lot number. A COA that can't be tied to a specific production run verifies nothing about the package you bought.
  • No lab name or contact information. A real report identifies the laboratory, its address, and usually its accreditation number.
  • Screenshot-only COAs. Cropped images posted to social media, with no downloadable document, are the easiest thing in the world to fabricate or alter.
  • One COA reused everywhere. The same document linked from six different products, or a report dated a year before the product existed.
  • Results that exactly match the label. A potency panel reading precisely 100.0% of claim across multiple batches is statistically implausible.
  • Vague accreditation claims. "ISO certified" with no standard number, no certificate number, or a certificate that has lapsed. Accreditation directories are public — check.
  • Potency-only reports. No metals, no microbials, no solvents. Half a COA is half an answer.

Walkthrough: matching a package to its COA

Here is the whole verification routine, start to finish:

  1. Find the lot number. It's printed on the package, usually near the bottom of the label or on a small sticker — something like "LOT SS-0426."
  2. Pull up the brand's published results. Serious brands maintain a public page with a COA for every batch. Favor'd Alkz, for example, posts a batch-by-batch lab results page where each production run has its own downloadable report — that per-batch structure is the pattern to look for, whatever brand you're evaluating.
  3. Match the identifiers exactly. The lot number on the COA must match the lot number on your package. Close doesn't count.
  4. Check the lab. Note the laboratory name and accreditation certificate number, then search the A2LA, ANAB, or PJLA public directory to confirm the accreditation is current and its scope covers the relevant methods.
  5. Compare results to the label. Potency within a reasonable band of the claim, all four panels present, methods and dates listed.
  6. When anything fails, ask. Email the brand and request the COA for your lot. A legitimate operation answers with a document; silence is its own answer.

If you want a line-by-line tour of an actual report — what "LOQ" means, how limits columns work, how to read a chromatography result — this consumer's guide to reading a kratom COA walks through each field on a real document.

"Tested" never means "safe"

This point is non-negotiable, so we'll state it plainly: a COA is a measurement, not a safety verdict. It tells you what one batch contained relative to the limits the lab screened for — nothing more. No lab report makes a 7-OH product safe, and none of these products are FDA approved. The regulatory picture is also actively moving: the DEA has filed notices of intent to temporarily schedule 7-hydroxymitragynine, with the earliest possible scheduling action falling on August 5, 2026. Six states — Alabama, Arkansas, Indiana, Rhode Island, Vermont, and Wisconsin — already ban these products, laws taking effect July 1, 2026 ended lawful shipping to Tennessee and Kansas, and Mississippi permits sales to adults 21+ except in eleven northeastern counties. Lab literacy tells you what is in a package. It does not tell you whether the product is safe, legal where you live, or appropriate for you.

Frequently asked questions

What does ISO 17025 mean on a kratom lab report?

ISO/IEC 17025 is the international standard for the competence of testing laboratories. When a lab report references it, it means the lab that ran the analysis has been audited by an accreditation body (such as A2LA, ANAB, or PJLA) and found competent to perform specific test methods. It is a credential of the laboratory, not an approval of the product being tested.

Does "7-OH lab tested" mean the product is safe?

No. A lab test is a measurement, not a safety verdict. A certificate of analysis tells you what was found in one batch — alkaloid content, heavy metals, microbial counts, residual solvents — against the limits the lab screened for. It does not mean the product is safe, FDA approved, or legal where you live. 7-OH products are not FDA approved.

How do I check a 7-OH COA before buying?

Find the batch or lot number printed on the package, then look for that exact batch on the brand’s published lab results page. Confirm the COA names an independent laboratory, lists the methods used, and covers potency, heavy metals, microbials, and residual solvents. You can verify the lab’s accreditation certificate number in the accreditation body’s public directory.

What is the difference between a COA and third-party testing?

A COA (certificate of analysis) is just the document — it can come from anyone, including the manufacturer’s own bench. Third-party testing means an independent laboratory with no ownership stake in the brand performed the analysis. The strongest evidence is a batch-specific COA issued by an independent, ISO 17025-accredited lab.

How often should a 7-OH brand publish lab results?

Every production batch. Alkaloid content varies batch to batch, so a single COA from months ago tells you nothing about the package in your hand. If a brand publishes one generic COA per product rather than one per batch, treat the testing claim as unverified.