Guidelines for GMP and Third-Party Testing of Supplements: How to Determine if a Product Is “Genuine”?

The U.S. dietary supplement industry is “lightly regulated.” This article explains what GMP is, how to interpret third-party testing results, the five major certification marks, and 10 ways to identify “counterfeit” products.



Guidelines for GMP and Third-Party Testing of Supplements: How to Determine if a Product Is “Genuine”?

The U.S. dietary supplement industry is virtually “lightly regulated.”
Since the passage of the DSHEA Act in 1994, the FDA’s requirements for supplements have been far less stringent than those for drugs:
**No FDA approval is required before marketing**
**No proof of efficacy is required**
**Manufacturers are responsible for safety**
This means that consumers must judge for themselves whether a product is genuine.
Fortunately, there are several tools to help you:
82.**GMP Certification**—Basic Quality Assurance
83.**Third-Party Testing**—Independent Verification
84.**COA (Certificate of Analysis)**—Batch-Specific Data
85.**Third-Party Certification Seals**—NSF, USP, ConsumerLab, etc.
This article will teach you how to interpret these and provide 10 methods for identifying “counterfeit products.”

1. What Is cGMP?
1.1 GMP = Good Manufacturing Practice
GMP stands for “Good Manufacturing Practice”—ensuring products are manufactured in accordance with quality standards.
U.S. cGMP = 21 CFR Part 111 (Federal Regulations, Part 111)
cGMP Requirements:
 Cleanliness and maintenance of facility premises
 Equipment calibration
 Records of raw material sources
 Control of the production process
 Testing of finished products
 Complaint handling
 Recall procedures
1.2 Key Points of GMP
cGMP does not guarantee a product’s efficacy—it only guarantees that the production process complies with standards.
cGMP is the baseline—any reputable brand should have it.
Products without cGMP certification = high risk.
1.3 How to Verify cGMP Compliance?
 Check the product label directly: “Manufactured in a cGMP-certified facility”
 Search for registration on the FDA website: [FDA Registration & Listing](https://www.accessdata.fda.gov/scripts/cder/drls/)
 **Ask the brand**: If they cannot provide a cGMP certificate, **switch brands immediately**

2. Third-Party Testing vs. First-Party Testing
2.1 First-Party
 Testing conducted by the manufacturer itself
 **Conflict of interest**—acting as both player and referee
 Cannot be fully trusted
2.2 Second-Party
 Testing commissioned by the brand to a laboratory
 Still involves some conflict of interest
2.3 Third-Party
 **Independent laboratories**
 No financial ties to the brand
 **Most trustworthy**
well&whole uses: Eurofins, NSF International, ConsumerLab (independent testing)

3. What is a COA? How do you read it?
COA = Certificate of Analysis = Test Report
3.1 What should a COA include?
Item    Why it’s important
**Active ingredient content**    Verifies the dosage stated on the label
**Heavy Metals** (lead, mercury, cadmium, arsenic)    Toxicity risk
**Microorganisms** (bacteria, yeast, mold)    Contamination risk
**Pesticide Residues**    Raw material quality
**Solvent Residues**    Manufacturing process
**Physical Tests** (disintegration, hardness)    Quality
3.2 How to Read a COA?
Example: well&whole Liver Support Complex COA
`
Active Ingredients:
TUDCA: 250 mg/capsule (labeled 250 mg) ✅
Sulforaphane: 10.2 mg/capsule (labeled 10 mg) ✅
Milk Thistle: 98.5 mg/capsule (labeled 100 mg) ✅
 (±10% tolerance allowed)
Heavy Metals:
Lead: < 0.05 ppm ✅ (USP limit: 0.5 ppm)
Mercury: < 0.01 ppm ✅
Cadmium: < 0.02 ppm ✅
Arsenic: < 0.05 ppm ✅
Microorganisms:
Total colony count: < 100 CFU/g ✅
Yeast and mold: < 10 CFU/g ✅
E. coli, Salmonella: Not detected ✅
`
3.3 COA Frequency
**Ideal**: A COA for every batch (every production run)
**Acceptable**: Random sampling every quarter or every six months
**Unacceptable**: Only a “first edition” COA or no COA at all
well&whole Standard: COAs for every batch are publicly available

4. Top 5 Third-Party Certification Marks
🏅 Logo 1: USP (United States Pharmacopeia)
Most authoritative—U.S. Pharmacopeia standards
Verification: Ingredients, purity, disintegration, heavy metals
Applicable to: Vitamins, minerals, herbs
URL: [quality-supplements.org](https://www.quality-supplements.org/)
🏅 Logo 2: NSF International
Independent third party—testing + certification
 3 Levels:
 - NSF Certified: Basic testing
 - NSF Contents Certified: Label accuracy
 - NSF Certified for Sport: For athletes only—additional testing for banned substances
 URL: [nsf.org](https://www.nsf.org/)
🏅 Seal 3: ConsumerLab.com
Independent consumer testing organization
Subscription-based (approx. $40 per year)
Tests thousands of products
Products that pass receive the “CL Approved” seal
🏅 Seal 4: Informed Sport / Informed Choice
For athletes only—tests for prohibited substances
Informed Sport: Tests every batch
Informed Choice: Monthly spot checks
🏅 Seal 5: UL (Underwriters Laboratories)
 Rarely used for supplements
 Primarily used for electronic products
Other Certifications
**IFOS** (International Fish Oil Standards): **5-star certification specifically for fish oil**
**Friend of the Sea**: Sustainable seafood
**Non-GMO Project**: Non-GMO
**USDA Organic**: Organic certification
**Vegan Society**: Vegan certification

5. 10 Ways to Identify “Counterfeit” or Substandard Products
🚩 Red Flag 1: Abnormally Low Price
“30 capsules of 1,000 IU Vitamin D for $2.99”—**impossible** to be pharmacopeia-grade
You get what you pay for
If the price is **significantly lower** than the industry average = suspicious
🚩 Red Flag 2: Incomplete Labeling
No complete list of ingredients
No dosage information (only states “compound”)
**“Proprietary Blend” is almost always a black box**
🚩 Red Flag 3: Dosage “Far Below” Clinical Levels
 Label shows 1 mg of sulforaphane per capsule—clinical studies require 10–20 mg
 This product is “marketing,” not “science”
🚩 Red Flag 4: No Third-Party Testing
 Website does not provide a COA
 Seller refuses to provide one
No USP/NSF certification
🚩 Red Flag 5: Exaggerated Claims
“Lose 20 pounds in 7 days”
“Cures cancer and diabetes”
**FDA Regulations**—Any claim of a “cure” is illegal
🚩 Red Flag 6: Use of “Generic OEM Ingredient Names”
 Label reads “Proprietary Liver Support Blend 500 mg”
 Does not specify the amount of each ingredient
🚩 Red Flag 7: No Brand Information
 No “About Us” page
 No address
 No contact information
 Domain registered less than 1 year ago
🚩 Red Flag 8: Poor Packaging Quality
 Chinese label lacks English translation
 Spelling errors
 Blurry printing
 Country of origin unknown
🚩 Red Flag 9: Contains banned or dangerous ingredients
 DMAA (ephedrine analog)
 DMHA
 Certain “traditional” ingredients (e.g., comfrey, kava, ephedra)
 **Check the FDA warning list**
🚩 Red Flag 10: Online Reviews Are “Too Good to Be True”
 All 5-star ratings
 Similar review content
 Reviews posted within a short timeframe
 **Possible fake reviews**

6. Practical Guide: 5-Step Pre-Purchase Checklist
Step 1: Check the Product Page
 Is there a complete list of ingredients and dosages?
 Is there a “Our Quality Guarantee” page?
 Is the COA publicly available?
Step 2: Check Brand Information
 Is there an “About Us” page?
 What is the background of the founding team?
 Are contact details provided (phone number, email, address)?
Step 3: Check Third-Party Certifications
 Are there USP/NSF/ConsumerLab logos?
 Can you verify them on the certification body’s website?
Step 4: Check Independent Reviews
 ConsumerLab reviews?
 Labdoor reviews?
 Discussions on Reddit’s r/Supplements?
 Genuine Amazon reviews (not just star ratings)?
Step 5: Check FDA Warnings
FDA Warning Letter Database: [fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters](https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters)
Search by brand name
**Any warning letter is a red flag**

7. well&whole’s Quality Commitment
🛡️ 7 Key Commitments
1. cGMP-Certified Facility
Manufactured in the U.S.
FDA-registered facility
Annual FDA audits
2. COA Published for Every Batch
Direct download from the product page
Third-party laboratories (Eurofins, NSF)
3. Clinical Dosage
 Each ingredient meets or approaches the effective dose used in clinical studies
 No token doses used
4. Complete Transparency
 Detailed ingredient lists
 Raw material sources disclosed
 Manufacturing locations disclosed
5. USP-Grade Key Ingredients
 TUDCA, Methylene Blue = USP Pharmacopoeia grade
6. Heavy Metals < 1/10 of USP Standards
Far exceeds industry standards
Especially for products with high heavy metal risks, such as fish oil and beef liver
7. Independent Third-Party Certification
IFOS 5-Star Fish Oil Certification
Non-GMO Certification
Vegan Options

8. Brand Comparison Example
well&whole TUDCA Liver Support vs. Generic Brand TUDCA
Category    well&whole    Generic Brand
TUDCA Purity    ≥99.5%    95–98%
Manufacturing Facility    U.S. cGMP    Unknown
COA    Published for each batch    None
Third-Party Testing    Multiple tests (heavy metals, bioactivity)    None
Packaging    Light-resistant container    Transparent
Additives    Zero additives    Contains fillers

9. Frequently Asked Questions (FAQ)
Q1: Is the cGMP logo sufficient?
A: It’s a basic requirement, but not sufficient. A COA and third-party testing should also be provided.
Q2: Should I buy products without a COA?
A: Not recommended, especially for high-value ingredients (TUDCA, Methylene Blue, CoQ10, etc.).
Q3: Does USP certification mean the product is perfect?
A: No. USP verifies purity, dosage, and disintegration, but not efficacy. It’s a basic standard.
Q4: Why do some products claim “100% third-party testing” but lack a certification mark?
A: It could be in-house testing by the brand or testing by the OEM manufacturer. Check who specifically conducted the testing and what was tested.
Q5: What should I look for in fish oil?
A: IFOS 5-star rating + TOTOX value (oxidation level) + actual EPA/DHA content
Q6: What should I look for in beef liver?
A: Heavy metals (cattle accumulate these) + third-party testing + grass-fed certification
Q7: How can I verify that a COA is genuine?
A: Check if the COA includes:
 Name and address of the testing laboratory
 Test date
 Testing method
 Signature or stamp
 Batch number (matching the product lot number)
Q8: Which certification is most important?
A: NSF Certified for Sport > USP > NSF Certified > ConsumerLab
Q9: Does a higher price mean better quality?
A: Not necessarily. Look at the ingredients, dosage, and testing results—not the price.
Q10: How do I report a problematic product?
A: Contact the FDA: MedWatch (fda.gov/medwatch)