COAs, cGMP Certificates, and Lab Reports: The Documents Amazon Supplement Sellers Must Keep

Every Amazon supplement enforcement eventually becomes a document request. A claims flag, a customer complaint, a category review, an account deactivation: different triggers, same ending. Amazon asks for paper, gives you a short window, and judges you on what you can produce and how fast. Sellers with organized documents resolve these in days. Sellers who have to email their manufacturer and hope are the ones whose appeals stall for weeks.

Here is each document type, what it actually proves, when Amazon asks for it, and how long it stays valid.

Certificate of Analysis: the workhorse

A COA is a lab report tied to a specific production lot. It verifies three things: identity (the product contains the ingredients on the label), potency (at the amounts stated), and purity (contaminants like heavy metals, microbes, and pesticides are within limits). A proper COA names the product, the lot or batch number, the test methods, the testing lab, and the date.

Two failure modes make COAs useless in an Amazon context. First, generic COAs: a document from your manufacturer covering "the formula" with no lot number proves nothing about the units in FBA. Second, stale COAs: a 2023 COA for a lot that sold out in 2024 does not cover current inventory. Amazon reviewers look for the lot linkage, and so does the FDA.

COAs also matter beyond enforcement: they are the backbone of proving your detail page is truthful. If your bullets say 500 mg of ashwagandha extract per serving, the COA is what demonstrates that number is real, which is exactly the mismatch Amazon is chasing under its misleading ingredient claims enforcement.

cGMP certification: proof of how it was made

Where a COA speaks for one lot, a cGMP certificate speaks for the factory. Dietary supplement manufacturing is governed by 21 CFR Part 111, which requires documented controls across manufacturing, packaging, labeling, and holding, including master manufacturing records and batch records for every run. A cGMP certificate from a credible auditor attests that your manufacturer operates under those controls.

This document is in the middle of the biggest policy shift in the category. Amazon now requires third-party cGMP verification for all dietary supplements, phased in with 90-day windows after seller outreach. Critically, Amazon accepts this documentation only from its approved testing, inspection, and certification organizations: NSF, UL, Eurofins, SGS, Intertek, Certified Laboratories, and Merieux NutriSciences, plus a Fast-Track path for products already certified by partners like NSF, USP, and Informed. Certificates emailed by the seller do not count for this program. Our guide to the cGMP verification requirement covers timelines and how to get ahead of the outreach email.

Lab test reports: the deep file

Beyond the summary COA, keep the underlying test reports: stability studies, heavy-metal panels, microbial testing, and any finished-product testing you commissioned independently of your manufacturer. Amazon requests these in category-approval flows and safety investigations, and independent tests from an ISO 17025 accredited lab carry more weight than manufacturer self-testing when a complaint alleges the product does not contain what it claims.

Supplier and manufacturer invoices: proof of the chain

Invoices answer a different question: not "is the product good" but "did this product actually come from where you say." Amazon's standard ask is invoices dated within the last 365 days, showing the supplier's name and contact details, your business name and address, the product, and quantities consistent with your sales volume. Pro forma invoices, quotes, and sanitized screenshots are routinely rejected. For brand owners who manufacture under contract, the manufacturer's invoices plus the supply agreement cover this.

FDA facility registration and the supporting cast

Three more documents round out the file:

• FDA facility registration for your manufacturer, required under the Bioterrorism Act for facilities producing food and supplements for the US market. Amazon asks for evidence of it in some category and ingredient reviews. Remember that registration is not approval, and saying "FDA approved" anywhere on a listing is itself a violation.
• Product liability insurance. Amazon requires coverage once sales cross its threshold, and supplements are a category where the certificate of insurance gets checked.
• Your FDA structure/function claim notifications, filed within 30 days of marketing a claim. Keep copies of what you filed and when; our guide to the 21 CFR 101.93 notification walks through the requirement.

FTC substantiation: the document category sellers forget

Amazon asks for COAs. The FTC asks for proof of your marketing claims, and that proof is also a document set you must keep: the studies behind every efficacy claim on your listing. Under the FTC's Health Products Compliance Guidance, health benefit claims generally require competent and reliable scientific evidence, usually randomized controlled human trials, and the substantiation must exist before the claim runs. A "clinically proven" bullet with no clinical file behind it is a liability with civil penalties attached. Build a substantiation dossier per product: the claims you make, mapped to the studies that support them, at your dose and form. Our breakdown of FTC substantiation for clinically proven claims covers what qualifies.

When Amazon asks for what

Situation	What Amazon typically requests
Category approval or gating	COA, product label images, sometimes cGMP evidence and FDA registration
cGMP verification outreach	Documentation submitted through an approved TIC organization within 90 days
Misleading claims or listing deactivation	Current label, COA, corrected copy, often invoices
Authenticity or condition complaint	Invoices from the last 365 days, supply chain documents
Account-level appeal	Everything above, attached to your plan of action

Freshness rules of thumb

• COAs: tied to lots. Every lot in sellable inventory should have one, and Amazon expects test documentation from roughly the last 12 months.
• cGMP certificates: typically valid for one year from the audit. Calendar the renewal 90 days out; a certificate that expires mid-appeal is a self-inflicted rejection.
• Invoices: within 365 days, always.
• Insurance certificates: annual, with Amazon listed per its policy requirements.
• Substantiation dossiers: updated whenever the claim, dose, or formulation changes.

A practical retention checklist

For each ASIN, keep one folder containing: current label files (all panels), COA per active lot, manufacturer cGMP certificate with expiry noted, FDA facility registration evidence, last 12 months of invoices, certificate of insurance, structure/function notification copies, and the substantiation file for every claim on the page. Review the folder quarterly, when you audit the listing copy itself.

Documents win appeals before they are written

Reinstatement outcomes correlate less with prose quality than with production speed: an appeal that lands with the current label, a lot-matched COA, and clean invoices attached gets approved because the investigator can verify everything in one pass. An appeal that promises documents "on request" invites a rejection and a second round. That is the logic behind pairing your document files with your appeal, which our guide to writing a plan of action that reinstates a listing covers in detail.

It is also why VERID8 includes a document vault alongside its compliance scanner: COAs, cGMP certificates, and lab reports live in one place, tied to the listings they cover, so when enforcement hits, the evidence pack is a download, not a scramble. And since the cheapest document request is the one that never comes, you can scan any listing free to catch the claim that would have triggered it.

Paper feels like overhead until the performance notification arrives. Then it is the whole game.