A certificate of analysis lands in your inbox. The numbers look right. The format looks official. You file it, check the box, and move on.

Most food, supplement, and consumer goods brands do exactly this, every day, without ever asking the question that actually matters: who ran this test, and how do we know they did it right?

ISO/IEC 17025 accreditation is the answer to that question. And the fact that most brands never ask it is one of the most common — and most costly — blind spots in food safety.

What ISO 17025 Accreditation Actually Is

ISO/IEC 17025 is the international standard for testing and calibration laboratories. When a lab achieves accreditation, it means an independent, third-party body has verified that the lab’s:

• Testing methods are validated and scientifically sound
• Equipment is properly calibrated and maintained
• Staff are qualified and trained to the required standard
• Quality management system ensures consistent, reliable results
• Data integrity controls prevent errors, tampering, or misrepresentation

This isn’t a self-reported certification. A lab can’t simply claim ISO 17025 compliance. It must be assessed, audited, and approved by an accreditation body — in the United States, typically A2LA or ANAB — and maintain that status through ongoing surveillance audits.

The Problem With Non-Accredited Testing

Here’s where most brands have a gap they don’t know about.

A significant portion of food safety testing in the U.S. is conducted by labs that have not achieved ISO 17025 accreditation. Some are in-house supplier labs. Some are third-party facilities that are competent but unverified. Some have simply never invested in the accreditation process.

The results they produce may be perfectly accurate. Or they may not be. Without accreditation, there’s no independent verification either way.

That distinction becomes critical in three situations:

• An FDA inspection or audit: investigators don’t just look at results — they look at whether the data was generated by a validated, accredited process. Non-accredited results carry significantly less weight.
• A retailer qualification: major retail buyers — Whole Foods, Costco, Target, and others — increasingly require ISO 17025 accredited test data as a condition of shelf placement. Non-accredited COAs may not qualify.
• A recall or legal proceeding: if your product is implicated in an illness outbreak or regulatory action, the defensibility of your testing record depends entirely on whether it was generated by an accredited lab.

In each of these scenarios, the question isn’t whether your product passed a test. It’s whether your test was trustworthy enough to matter.

Where Most Brands Get Caught

The most common scenario we see: a brand has been relying on supplier-provided COAs for years. The supplier runs an in-house lab or contracts with a low-cost regional lab. Results come back consistently clean. Nobody asks questions.

Then one of three things happens:

• A major retail buyer asks for accredited documentation before approving a new SKU
• An FDA investigator requests lab accreditation records during a facility inspection
• A contamination event triggers a recall, and the brand’s testing record doesn’t hold up to legal scrutiny

At that point, the brand has to scramble — re-testing products, rebuilding documentation, and in some cases, losing accounts in the interim.

The cost of getting this right before one of those scenarios hits is always lower than the cost of fixing it after.

Four Questions to Ask Your Product Testing Lab

If you’re not sure whether your current testing program is built on accredited results, start here. Ask your lab:

• Are you ISO/IEC 17025 accredited? If so, by which accreditation body, and can you share your scope of accreditation?
• Are your test methods validated for my specific product matrix? Accreditation covers specific methods — make sure the tests being run on your products are within the lab’s accredited scope.
• Can you provide chain of custody documentation from sample intake to result delivery? This is essential for defensibility.
• Are your results generated through a validated data system, or are there manual steps in the process? Manual transcription introduces error and undermines data integrity.

If your lab can’t answer all four questions clearly, that’s important information.

What Accreditation Looks Like in Practice

At Genista, ISO/IEC 17025 accreditation isn’t a credential we list at the bottom of a page. It’s the foundation of how we operate.

Every test we run — across more than 100 accredited methods spanning microbiology, PCR-based pathogen detection, analytical chemistry, allergens, environmental monitoring, and water activity — is conducted within our accredited scope, documented in a validated system, and delivered with a chain of custody that holds up to any level of scrutiny.

Combined with our high-throughput robotics, real-time PCR infrastructure, and connected software platform, accredited results are delivered next-day — not because we’ve cut corners on rigor, but because we’ve built a system where speed and accuracy aren’t a tradeoff.

The Bottom Line

Not all test results are created equal. The number on a COA is only meaningful if the process behind it was independently verified, scientifically validated, and legally defensible.

If you’re not sure whether your current testing program meets that standard, now is the right time to find out — before an audit, a retailer request, or a recall makes the question unavoidable.