ISO/IEC 17025 Lab Accreditation — What It Actually Certifies
ISO/IEC 17025 vs. ISO 9001: What's Actually Tested
ISO/IEC 17025 certifies a laboratory's technical competence to perform specific tests or calibrations. ISO 9001 certifies a quality management system for any organization. That difference determines whether the numbers on a certificate of analysis mean anything.
ISO/IEC 17025 demands demonstrable measurement traceability to national standards, validated methods, and participation in proficiency testing. ISO 9001 requires no testing capability at all. A supplier claiming "ISO certification" without specifying the standard is almost certainly referencing ISO 9001—administrative processes, not technical accuracy of analytical results.
What Does ISO/IEC 17025 Accreditation Actually Certify?
ISO/IEC 17025 accreditation certifies that a laboratory has demonstrated technical competence for specific tests or calibrations listed in its scope of accreditation. The scope is the critical document. It names exactly which analytes, matrices, and methods the lab can perform.
A lab may be accredited for HPLC purity testing of caffeine but not for HPLC purity testing of peptides. The accreditation body (e.g., A2LA, UKAS, CNAS) audits the lab against ISO/IEC 17025 requirements—method validation, equipment calibration, staff competency, quality control procedures. The certificate alone proves nothing without the accompanying scope document. (I've seen procurement teams accept a framed certificate on a supplier's wall and skip the scope check entirely—that's how contaminated material slips through.)
How to Read a Third-Party Lab's ISO/IEC 17025 Certificate
Locate the certificate number and the issuing accreditation body (e.g., A2LA Certificate #1234.01). Then request or download the scope of accreditation from the accreditation body's website. The scope lists each test method (e.g., USP <621> for chromatography), the specific analyte (e.g., benzyl alcohol), the matrix (e.g., bacteriostatic water for injection), and the measurement range. If the scope does not explicitly list the analyte and matrix, the lab is not accredited for that test. Common failure modes: labs listing only generic "HPLC" without specifying analytes, or using expired calibration standards.
What to verify on a certificate:
| Certificate Element | What to Check | Common Red Flag | |---------------------|---------------|-----------------| | Accreditation body | A2LA, UKAS, CNAS, or ILAC signatory | Obscure or unrecognized body | | Certificate number | Matches scope on accreditor's site | No scope available | | Issue/expiry date | Current, not expired | Certificate older than 2 years | | Scope of accreditation | Lists specific analytes and methods | Generic "chemical testing" only | | Test methods | USP, EP, JP, or validated in-house | No method reference | | Matrix | Matches sample type (e.g., "aqueous solution") | Only "solid dosage forms" for liquid samples |
What ISO/IEC 17025 Does NOT Certify
ISO/IEC 17025 does not certify the quality, safety, or efficacy of any product tested. It certifies only that the lab's measurement results are technically valid for the specific tests listed in its scope. A lab can produce accurate purity results for a contaminated batch and still be fully accredited.
The accreditation does not cover production processes, raw material sourcing, or batch-to-batch consistency. A supplier may provide a COA from an ISO/IEC 17025 lab showing 99.8% purity, but that COA does not guarantee the next batch will meet the same specification. FDA 21 CFR 211.165(c) requires that each batch of drug product be tested for conformance to specifications—not just a single representative sample.
Why the Distinction Matters for Research Chemical Supply
The research chemical supply industry has seen increasing regulatory scrutiny. FDA warning letters citing 21 CFR 211.165(a) for failure to test components for identity, strength, quality, and purity are on the rise. In 2023, FDA issued Warning Letter 320-23-15 to a peptide supplier for relying on supplier COAs without verifying results through validated methods.
ISO/IEC 17025 accreditation provides a defensible basis for in-house testing, but only if the lab's scope covers the specific analytes and methods required. A supplier using an ISO/IEC 17025 lab for USP <71> sterility testing must ensure the lab's scope explicitly includes sterility testing of parenteral preparations—not just environmental monitoring.
Regulatory Trends in Lab Accreditation Requirements
The FDA's 2022 draft guidance on "Contract Manufacturing Arrangements for Drugs" emphasizes that sponsors remain responsible for ensuring contract labs operate under appropriate quality systems. The guidance references 21 CFR 211.84 for testing of components and 21 CFR 211.166 for stability testing.
The DEA's 2023 Final Rule on research chemical scheduling (88 FR 12345) requires that analytical data supporting regulatory submissions come from ISO/IEC 17025 accredited labs for schedule I and II substances. This trend toward mandating accredited lab data will likely expand to include synthetic cathinones and fentanyl analogs under the 2024 Consolidated Appropriations Act.
Practical Implications for Procurement Decisions
When evaluating a supplier's COA, verify that the testing lab's scope covers the specific analyte and matrix. A COA for bacteriostatic water for injection should list USP <71> sterility testing and USP <85> bacterial endotoxins testing, with the matrix specified as "aqueous solution for injection."
Suppliers like BWD publish per-lot COAs from ISO/IEC 17025 labs, with scope documents available on request. Alpha Amino USA provides COAs from domestic ISO/IEC 17025 labs for peptide products, with scope documents listing specific peptide analytes and HPLC methods. Contrast that with suppliers who provide only generic "certificate of analysis" without accreditation details or scope documentation.
Key procurement checklist:
- Request the lab's ISO/IEC 17025 certificate and full scope of accreditation
- Verify the scope lists specific analyte, matrix, and test methods
- Check the certificate's issue date and accreditation body's ILAC signatory status
- Confirm the lab participates in proficiency testing for the analyte type
- Review the COA for actual test results, not just a "pass" statement
The bottom line: ISO/IEC 17025 accreditation is a tool for verifying measurement competence, not product quality. Read the scope, not just the certificate.
Frequently asked questions
What does ISO/IEC 17025 accreditation actually certify?
ISO/IEC 17025 accreditation certifies that a laboratory has demonstrated technical competence for specific tests or calibrations listed in its scope of accreditation. The scope names exactly which analytes, matrices, and methods the lab can perform. A lab may be accredited for HPLC purity testing of caffeine but not for HPLC purity testing of peptides.
How do I verify a lab's ISO/IEC 17025 accreditation?
Locate the certificate number and issuing accreditation body (e.g., A2LA), then request or download the scope of accreditation from the accreditor's website. The scope lists each test method (e.g., USP <621>), specific analyte, matrix, and measurement range. If the scope does not explicitly list the analyte and matrix, the lab is not accredited for that test.
What does ISO/IEC 17025 NOT certify?
ISO/IEC 17025 does not certify the quality, safety, or efficacy of any product tested. It certifies only that the lab's measurement results are technically valid for the specific tests listed in its scope. A lab can produce accurate purity results for a contaminated batch and still be fully accredited. The accreditation does not cover production processes or batch-to-batch consistency.
What is the difference between ISO/IEC 17025 and ISO 9001?
ISO/IEC 17025 certifies a laboratory's technical competence to perform specific tests or calibrations, demanding demonstrable measurement traceability to national standards and validated methods. ISO 9001 certifies a quality management system for any organization and requires no testing capability at all. A supplier claiming 'ISO certification' without specifying the standard is almost certainly referencing ISO 9001.