GMP Claims: How to Verify a Certificate and When Not to Trust It

Few phrases appear on peptide supplier websites more often than "GMP", and few are checked less often by the people reading them. Good manufacturing practice is a real and demanding regulatory regime. It is also a two-syllable marketing term that can be attached to anything, and in the research-peptide market it very often is. This guide is not about what GMP requires of a manufacturer; it is about what you should do when a supplier claims it. The maintainer of this site makes no such claim and this guide takes no position on whether any particular supplier should; it describes how to find out whether a claim is true, what it covers, and when it is irrelevant to the vial in your hand.

The short version: a GMP claim is verified in the issuer's records, never in the supplier's PDF; it is specific to a site, a scope and a date; and a genuine certificate for a company tells you nothing about a product outside its scope. Everything else is detail.

What GMP is, and who certifies it

Good manufacturing practice is a body of regulation and guidance describing how medicines and their active substances must be made so that quality is built into every batch: documented procedures, trained staff, qualified equipment, controlled materials, batch records, release testing, deviation handling, and a quality unit with authority to reject. The texts differ by jurisdiction but say similar things:

• In the United States, 21 CFR Parts 210 and 211 set the current good manufacturing practice regulations for finished drugs, and FDA has adopted ICH Q7 as its guidance for active pharmaceutical ingredients. FDA's own summary page, "Facts About the Current Good Manufacturing Practice", is a readable introduction.
• In the European Union, EudraLex Volume 4 contains the GMP guidelines, with Part II (derived from ICH Q7) covering active substances.
• Internationally, ICH Q7 is the harmonized text for active substances, and most regulators' expectations for peptide manufacture trace to it.
• In the United Kingdom, MHRA publishes the GMP and good distribution practice framework on gov.uk.

Who certifies compliance depends entirely on the jurisdiction, and this is the first thing a reader of a certificate needs to know:

The European Union and countries with similar systems issue GMP certificates. After an inspection, the competent authority issues a certificate stating the site, the activities and the product types covered, and records it in EudraGMDP, a public database that also records statements of non-compliance. A European GMP certificate is therefore a document you can look up.

The United States does not issue GMP certificates. FDA inspects and classifies the outcome (no action indicated, voluntary action indicated, official action indicated), may issue a Form 483 listing observations, and may send a warning letter. There is no FDA GMP certificate for a manufacturer to show you. A document headed "FDA GMP Certificate" was not issued by FDA. What exists is the inspection record, searchable by firm in FDA's Inspection Classification Database and Data Dashboard, and establishment registration, which is a separate notification requirement (21 CFR Part 207) and not a quality judgment.

China inspects rather than certifies. The revised Drug Administration Law in force from December 2019 ended the issuance of separate drug GMP certificates; compliance is assessed through inspection by the National Medical Products Administration and provincial authorities. A Chinese "GMP certificate" dated after 2019 therefore needs a careful reading of who issued it.

Private bodies issue certificates with no regulatory standing. Consultancies and certification companies sell "GMP" audits and certificates, sometimes labeled "WHO-GMP" or "cGMP", for drugs, food supplements and cosmetics. These may reflect a genuine audit against a published standard, or may not; what they are not is a regulator's finding. Cosmetic GMP (ISO 22716) and food GMP are separate schemes again, and a certificate under one of them says nothing about peptide manufacture.

A reader who knows these four facts can already sort most GMP claims. "GMP certified" with no issuer named is unverifiable. "FDA GMP certified" is a phrase FDA does not use. A certificate from a company you have never heard of is a private audit. A European certificate can be checked in two minutes.

The four questions to ask of any GMP claim

Every GMP claim, whatever its form, should be able to answer four questions. If it cannot, it is a slogan.

1. Who issued it? A named regulator (and which one), or a named private body. The issuer determines where the claim can be checked and how much it means.
2. For which site? GMP compliance is assessed per manufacturing site, identified by address. A company with several sites may have one inspected and others not. A trading company has no manufacturing site and cannot hold manufacturing GMP status in its own right; if it shows a certificate, the certificate is its supplier's, and the question becomes whether that supplier made your lot.
3. For which scope? Certificates and inspection records specify activities (manufacture of active substances, of finished products, of sterile products, packaging, testing) and often product categories. A certificate for the manufacture of a specific category does not extend to everything the company sells.
4. When, and is it current? Certificates carry issue dates and, usually, validity periods; inspection classifications carry inspection dates. A certificate that expired two years ago, or an inspection from 2017 followed by nothing, is history, not status.

Write the four answers down before going further. The verification step is checking each answer against the issuer's own records.

Where to check each kind of claim

European GMP certificates. EudraGMDP, maintained by the European Medicines Agency, lists manufacturing and import authorizations, GMP certificates and non-compliance statements. Search by company name or site address. The record shows the issuing authority, the site, the scope and the dates. If a supplier's European certificate is not in EudraGMDP, ask for the certificate number and the issuing authority and query the discrepancy before anything else.

US inspection outcomes. FDA's Inspection Classification Database and the FDA Data Dashboard show inspections by firm name, with dates and classifications. A firm that claims to be "FDA inspected" should appear, and the classification should be visible. Note that many foreign manufacturers of active substances for the US market are inspected, and that an inspection with a poor outcome is as visible as a good one.

US establishment registration. The Drug Establishments Current Registration Site lists registered establishments. Registration is required of manufacturers of drugs for the US market and is a filing, not an inspection result. A supplier saying "FDA registered" should be in this list; being in it proves registration and nothing more. FDA has publicly cautioned that registration does not denote approval or endorsement.

UK, Canada, Australia and other regulators. Each publishes inspection or licensing information in its own form; MHRA's GMP pages on gov.uk are the UK entry point. The principle is the same: find the regulator's record, not the supplier's.

Private certificates. There is no central register. Some certification bodies publish lists of certified clients; the IAF CertSearch database covers accredited management-system certificates (such as ISO 9001) but not private GMP schemes. If the issuer cannot be found or does not publish a register, the certificate cannot be verified and should be weighted as a self-declaration with a logo.

Laboratory accreditation claims. Often bundled with GMP claims ("our GMP facility and ISO 17025 laboratory"). Accreditation to ISO/IEC 17025 is granted by national accreditation bodies for a listed scope of tests, and every ILAC signatory publishes a directory; see the supplier legitimacy guide for the lookups. A laboratory's accreditation says nothing about the manufacturing site's GMP status, and vice versa.

Reading a certificate image

Suppliers often show a certificate as an image or PDF. Before looking it up, read it. The fields that should be present, and what their absence means:

Then apply the simplest test of all: does the name on the certificate match the name on the invoice? Trading companies routinely show their manufacturers' certificates. That can be legitimate, provided the trading company tells you which manufacturer made your lot and the manufacturer's record confirms it. Shown without that explanation, a certificate in another company's name is a borrowed document.

Why a genuine certificate may not cover your vial

This is the point most often missed, and it applies even when every check above passes.

GMP status attaches to activities and products within a scope. A manufacturer with a valid certificate for the manufacture of certain active substances holds that status for those substances made under its quality system, with batch records, release testing and retained samples. The research-use peptides sold on the same company's website are, in nearly every case, outside that scope: made in a different area, under a different quality regime, released against a research-use specification, and not covered by the batch documentation a regulated product would carry. The company's certificate is genuine; the vial you buy is not within it.

The practical consequence is that "GMP" on a supplier's website should prompt two further questions:

1. Is the specific product and lot I am buying within the certified scope? The honest answer, for research-use materials, is usually no.
2. If it is, can I see the evidence that follows from that? Material made within a GMP scope has a batch record, a release certificate signed by the quality unit, and traceability to raw materials. A supplier that claims the lot was made under GMP but cannot produce any of that is claiming a status without its consequences.

When the answer to the first question is no, the certificate is irrelevant to your purchase, and you are back to the lot-level evidence this site's other guides describe: a certificate of analysis that passes the verification checks, public lot records, and independent testing of a sample you selected. That is not a lesser standard for research-use supply; it is the applicable one.

What a verified claim changes

Suppose a supplier's GMP claim verifies: a named regulator, a listed site, a scope that plausibly includes your product, current dates, and a matching legal name. What should change in your due diligence?

Expectations rise. A manufacturer operating under GMP for the product in question should be able to provide, for a given lot, a release certificate from its quality unit, the analytical methods and their validation status, a statement of the retest period and the stability data behind it, a change-control history if the process has changed, and, on request and under confidentiality, access to batch records or to an audit. If those are available, you are dealing with a manufacturer whose documentation is of a different order from the research-use norm, and your verification effort can shift from "is this real?" to "does this meet my specification?".

If they are not available, the claim has not been falsified, but it has not been given any content either. A certificate is the beginning of a documentation trail, not a substitute for it.

When not to trust the claim

The following, individually, are reasons to disregard a GMP claim for the purpose of your purchase. Together, they describe most of the GMP language in the research-peptide market.

• No issuer is named. A bare "GMP certified" with no authority, body or certificate number.
• The issuer is FDA. FDA does not issue GMP certificates. The phrase "FDA GMP certified" identifies a document FDA did not produce.
• The certificate cannot be found in the issuer's database, and the supplier cannot explain why.
• The legal name on the certificate is not the supplier's, and the supplier does not say which manufacturer made your lot.
• The scope does not include your product category, or no scope is stated.
• The certificate is a cosmetic, food or dietary-supplement GMP scheme offered as evidence for a peptide product.
• The certificate has expired, or the latest inspection record is years old with nothing since.
• The claim is accompanied by language regulators would not use: "GMP grade", "pharma grade", "medical grade" applied to research-use material.
• No lot-level documentation follows from it. A GMP claim with no batch record, no quality-unit release and a generic certificate of analysis is a logo.

None of these means the supplier's material is poor. They mean the GMP claim provides no information about it, and your assessment should proceed as if the claim had not been made.

The alternative: lot-level evidence you can check

The research-use peptide market is overwhelmingly supplied by manufacturers that do not hold, and do not need, GMP status for those products. Some of them say so plainly and offer instead what can be checked: a public library of lot records with dates, methods and PDFs; a QR code on every label that resolves to the lot record; a stated willingness to have received samples tested independently; and at least one independent report verifiable on the laboratory's own site. Pepti, which maintains this site, takes that position and makes no GMP claim here or in its worked examples.

For a buyer, this is the useful comparison. A GMP claim you cannot verify, or that does not cover your product, is worth nothing. A lot record you can open, compare with the vial, and test against is worth something whether or not the word GMP appears anywhere. The vendor-comparison guide sets this out as one row among many: "GMP claim verified in issuer's database and in scope for product: yes / no / not claimed", with "not claimed" being an honest and common answer rather than a failing one.

Maintained by Pepti, a Guangzhou peptide manufacturer; lot records referenced here are published at peptioem.com/coa. This guide is informational and does not sell or recommend specific vendors. Corrections: contact.