Independent and not affiliated with the FDA, MHRA, ISPE, PDA, or any agency. Get the appgoutham@madhadi.com
madhadi.comData Integrity & GxP Quality
Browse all topics → Articles Templates & Procedures Learning paths GlossaryScenariosToolsRegulatory ReferencesLearning PathsTopics About Start here
Checklist Plug-and-play starting point Quality Assurance

Checklist: Certificate of Analysis Incoming Review

A plug-and-play incoming-inspection checklist for Certificate of Analysis review: lot match, source qualification, spec-version capture, test-completeness, per-lot identity check, and disposition, with pass/fail/NA items, references, and a filled specimen.

Document type: Checklist

Read and copy the template below into your own quality system. It is a generic starting point for your own internal use, provided as is, with no warranty; see the Terms and License. Adopting it does not by itself create compliance.

This is a ready-to-use checklist that forces every step of a Certificate of Analysis (CoA) review so nothing is silently skipped. Use it alongside SOP: Certificate of Analysis Review and Incoming Material Disposition. Replace every <<FILL: ...>> placeholder, mark each item Pass, Fail, or N/A, and route the completed checklist through your normal review and approval. A filled specimen follows. This is general guidance to adapt and verify, not legal or regulatory advice.

How to use

Complete one checklist per incoming lot. Any Fail routes the lot to quarantine and a deviation, not to release. The checklist is retained with the CoA and the in-house test data as part of the release package.

FieldEntry
Material name and grade<<FILL>>
Internal material code<<FILL>>
Supplier / manufacturer<<FILL>>
Lot number<<FILL>>
Specification number and version<<FILL>>
Reviewer<<FILL>>
Date<<FILL>>

1. Identity and lot match

#ItemReferencePass / Fail / NA
1.1CoA lot number matches the physical container labels21 CFR 211.84
1.2CoA material name and grade match the purchase order and packing slip211.84
1.3One CoA covers only this lot (not multiple lots on one certificate)211.84
1.4CoA is not a certificate copied forward from a prior lotICH Q7 11.4

2. Source qualification

#ItemReferencePass / Fail / NA
2.1CoA issuer is a qualified manufacturer on the approved supplier list211.84(d)
2.2Supply chain (including any distributor or repackager) is qualified end to end211.84(d)
2.3A quality agreement covering CoA content is in place with the supplierICH Q7

3. Specification linkage

#ItemReferencePass / Fail / NA
3.1Current internal specification pulled; number and version recorded211.160
3.2Every test in the current specification is present on the CoA211.84
3.3Each CoA acceptance limit meets or is tighter than your specification limit211.84
3.4Each test lists the method or compendial reference usedICH Q7 11.4

4. Result-by-result review

#ItemReferencePass / Fail / NA
4.1Every result meets YOUR acceptance criterion (not the supplier’s looser limit)211.84
4.2Units checked on every numeric result211.194
4.3Limit direction checked (not-more-than vs not-less-than; range boundaries)211.160
4.4Descriptive tests (appearance, identification) match the required outcome211.84
4.5No unresolved out-of-specification result underlies a “conforms” conclusion211.192

5. Per-lot in-house check

#ItemReferencePass / Fail / NA
5.1Required per-lot check performed (identity for components; visual for containers/closures)211.84(d)(2), (d)(3)
5.2Material sampled per the applicable sampling plan211.84(b)
5.3In-house result matches the CoA identity claim211.84(d)

6. Lifecycle and dates

#ItemReferencePass / Fail / NA
6.1Date of analysis follows the manufacture dateICH Q7 11.4
6.2Expiry or retest date assigned from the CoA211.137

7. Disposition

#ItemReferencePass / Fail / NA
7.1Disposition recorded (release / reject / hold), signed and dated211.84, 211.87
7.2Deviation opened for any Fail above<<FILL: SOP-ID for deviations>>
7.3CoA, in-house data, spec version, and disposition retained together211.180

Signoff

RoleNameSignatureDate
Reviewer<<FILL>>
QA approver<<FILL>>

Filled specimen

The following shows a completed checklist for an example API lot. The numbers and names are illustrative.

Header: Material “Example API, in-house spec grade”; code API-0031; supplier ASL-014; lot API-2605-118; spec SPEC-API-0031 v6.0; reviewer J. Mensah; date 18 June 2026.

#ItemPass / Fail / NA
1.1Lot matches containerPass
1.2Name/grade match PO and packing slipPass
2.1Issuer qualified on ASLPass
3.1Spec v6.0 pulled and recordedPass
3.2All spec tests present on CoAFail (residual solvents test absent)
4.1Results meet internal criteriaPass for tests present
5.1Identity by IR performedPass (conforms)
7.1DispositionHold
7.2Deviation openedDEV-2026-0211

Outcome: item 3.2 failed because SPEC-API-0031 v6.0 requires a residual-solvents test (added when the synthesis route changed) that the supplier CoA did not cover. The reviewer held the lot, opened a deviation, and referred the gap to supplier quality to update the CoA template, rather than releasing on the tests that were present. This is the classic missing-test escape the checklist is designed to catch.

Common inspection findings this checklist prevents

  • The silent-skip failure mode: a reviewer checks that present rows pass but never confirms every required test is on the certificate.
  • Comparing to the supplier’s limit instead of the internal specification.
  • No documented per-lot identity or visual check.
  • Specification version not captured, so a later tightening is never applied at incoming.
  • A “conforms” CoA accepted over an unresolved out-of-specification result on the same lot.

How to adapt this checklist

  1. Replace the generic reference cites with your own procedure numbers where you point to internal SOPs.
  2. Add material-type-specific rows (for example cold-chain condition checks for temperature-sensitive materials).
  3. If you use reduced or skip-lot testing, add a row confirming the lot’s testing level and that identity still ran.
  4. For electronic or structured CoAs, add a row confirming certificate authenticity and source.
  5. Confirm every regulation cited against the current published version before issue.
Use madhadi.com as an app Full screen, works offline, one tap from your home screen.