Every COA we issue is backed by raw chromatograms, mass spectra, calibration curves, and system-suitability records held in our instrument software per 21 CFR Part 11-style data-integrity principles. This page describes when and how that raw data is available.
For every submission, we retain raw instrument files (chromatograms, mass spectra, integration parameters, calibration curves, blank and surrogate QC) for at least seven years. By default these files are visible only to the client of record and to our admin staff. They never appear on the public COA lookup unless you opt them in (below).
At intake, customers can check “Publish raw data with COA”. When that flag is set, the underlying chromatograms and instrument files are published to the public COA verification page alongside the result. Anyone reading the COA can then pull the raw file and re-do the math.
This is the default position for transparency-first brands (peptide vendors, kratom AKA-GMP shops, supplement labels selling on Amazon Brand Registry) where the credibility lift of full disclosure outweighs any IP concerns. It's opt-in rather than default-on because not every customer wants their lot numbers and impurity peaks publicly indexable.
The client of record can request raw data at any time after a report is signed. We deliver the request within one business day. Email cs@goldstandardanalytics.com with the accession number; we'll provide a signed-URL bundle of the underlying instrument files.
Downstream parties (an aggregator the brand sells through, a regulator running an inspection, an auditor doing pre-acquisition due diligence) can request raw data with written authorization from the client of record. We do not release raw data without that authorization, even when the COA itself is public.
Raw data is delivered as a zipped bundle containing PDF chromatograms for human reading plus the native instrument-export format (.d for Agilent, .raw for Waters / Thermo, .xy exports for ICP-MS) for downstream analysts who want to re-process. Each file's SHA-256 is embedded in the bundle manifest.
Free for the client of record on every submission. Free for regulators and authorized auditors. We charge a small handling fee for downstream third-party requests routed through the client (e.g. due-diligence packages for an acquirer); contact us for a quote.