Beyond Janoshik: The 2026 Third-Party Peptide-Testing Lab Landscape

For most of the research-peptide market, third-party verification has historically meant one name: Janoshik Analytical, a Prague-based lab whose public COA portal made it the de facto reference point. In 2026 that single-lab dependence is being re-examined. A data breach reported in early 2026 at Janoshik — described by community and review sources as exposing customer shipping information and triggering an attempted extortion, though not independently confirmed by a primary source — drew attention to the operational and trust risks of routing nearly all market verification through one provider [3]. The practical response among researchers has been to map the wider landscape of labs that can independently confirm what a vial actually contains.

That landscape splits into two groups. The first is the research-community labs that built their reputation on the gray market: Janoshik (Czech Republic), Testides (Canada), ACS Lab (Florida) and MZ Biolabs (Arizona). They specialize in fast, publicly verifiable peptide COAs; among them, ACS Lab publicly states ISO/IEC 17025 accreditation via A2LA, while Janoshik, Testides and MZ Biolabs are generally reported as not holding ISO/IEC 17025 accreditation for the specific peptide assays they run [3][4][5][6][10]. The second group is conventional contract analytical laboratories — for example Colmaric Analyticals — that are listed as holding ISO/IEC 17025:2017 accreditation and test peptides alongside supplements, cosmetics and pharmaceuticals [7]. The distinction matters because accreditation, not popularity, is what gives a COA formal evidentiary standing.

The table below summarizes publicly stated location, primary methods, accreditation status and turnaround for the most frequently cited labs. Details reflect each lab's public disclosures and third-party reviews at the time of writing; scopes and policies can change, so current status should be confirmed directly with the lab and the relevant accreditation body.

A peptide COA is only as meaningful as the analytical chemistry behind it. Three measurements carry most of the information. Reverse-phase high-performance liquid chromatography (RP-HPLC) with UV detection reports purity as the percentage of the target peptide relative to total UV-absorbing material — it separates the intended sequence from truncated chains, deletion sequences and process impurities. RP-HPLC quantifies how much of what is present is the right compound, but it does not by itself prove the identity of the main peak.

Identity is established by mass spectrometry. Liquid chromatography-mass spectrometry (LC-MS, often LC-MS/MS) measures the molecular weight of the eluting species and compares it to the theoretical mass of the intended sequence; a match within instrument tolerance confirms the compound is what the label claims. Higher-resolution instruments such as QTOF (quadrupole time-of-flight) analyzers, used by labs including MZ Biolabs, deliver accurate-mass measurements suitable for distinguishing closely related sequences [6]. Purity (HPLC) and identity (MS) are complementary — a credible COA reports both, not one in isolation.

The third pillar is endotoxin testing. Bacterial endotoxins (lipopolysaccharides from gram-negative bacteria) are quantified by the Limulus amebocyte lysate (LAL) assay or, increasingly, by recombinant factor C (rFC) methods. In 2026 this area is undergoing a compendial shift: USP General Chapter <86>, covering the bacterial endotoxins test using recombinant reagents, was published for early adoption in November 2024 and took effect in May 2025, formally recognizing non-animal recombinant reagents alongside traditional LAL [8]. Notably, endotoxin, sterility and heavy-metal panels are not part of every lab's standard offering — Janoshik's default panel, for instance, is reported to center on purity and identity rather than endotoxin or sterility [4].

ISO/IEC 17025:2017 is the international standard titled 'General requirements for the competence of testing and calibration laboratories' [1]. Accreditation to it is granted by recognized accreditation bodies (such as PJLA, A2LA or ANAB) and signifies that a lab has demonstrated technical competence for a defined scope of methods, validated those methods, controls measurement uncertainty, and operates an impartial quality-management system [1][2]. It is the framework regulators and accreditation bodies reference when judging whether a lab's data is reliable.

This is precisely where most research-community peptide labs sit at or outside the edge of the formal system. Janoshik and Testides are reported as not holding ISO/IEC 17025 accreditation for the peptide assays they perform, and MZ Biolabs's status is described inconsistently across public sources [3][5][6]. That does not necessarily mean their chemistry is wrong — many run the same instruments as accredited labs — but it does mean such COAs would not, on their own, be accepted in a pharmaceutical regulatory submission. ACS Lab publicly states ISO/IEC 17025 accreditation through A2LA [10], and Colmaric Analyticals is listed with ISO/IEC 17025:2017 accreditation (PJLA Accreditation No. 86258) [7]. In every case, the verifiable question is whether the specific assay and lab carry a named, in-scope accreditation — a claim that should be checked against the accreditation body's public register rather than taken at face value, including where a vendor's marketing simply invokes 'ISO-accredited' testing.

Independent of which lab issued it, a COA is more trustworthy when it is transparent and traceable. The following elements separate a verifiable report from a marketing graphic.

• Issuing lab and a unique test/report ID that can be confirmed on the lab's own public verification portal — not just a PDF supplied by the seller.
• Both purity (RP-HPLC, with the percentage and ideally a chromatogram) and identity (MS, with observed vs. theoretical mass) — one without the other is incomplete.
• Stated methodology and instrumentation, so the assay can be understood and, in principle, reproduced; methodology hidden behind a paywall weakens the report's evidentiary value.
• A sample-to-result date and a batch/lot reference that ties the certificate to a specific production batch rather than a generic product name.
• Accreditation scope where claimed — a named ISO/IEC 17025 accreditation number that can be cross-checked with the accrediting body's register.
• Endotoxin or contaminant data (LAL/rFC, heavy metals, residual solvents) when the application calls for it, recognizing many standard peptide panels omit these.

Because no single research-market lab is both universally accredited and universally used, cross-referencing a vendor-supplied COA against the issuing lab's own portal — and, where stakes are higher, commissioning an independent blind test at a separate lab — remains the most defensible verification practice in 2026.

Verification scrutiny is rising partly because the regulatory status of several peptides is in active motion. In the United States, the FDA placed multiple peptides into Category 2 of the Section 503A interim bulk drug substances list in September 2023, a designation that effectively restricted their use in compounding. According to the FDA's advisory-committee calendar, the agency has scheduled a Pharmacy Compounding Advisory Committee meeting for July 23–24, 2026 to consider several peptides — including BPC-157 and TB-500 — for the 503A bulks list [9]. These are regulatory and chemical-classification developments; they do not constitute guidance on human use.

For laboratories sourcing research peptides, the takeaway is that documentary rigor is becoming the differentiator. As classifications shift and compounding pathways are debated, the analytical record behind a compound — what it is, how pure it is, and which accredited or unaccredited lab confirmed it — is the part of the supply chain a researcher can actually control and verify.

Based on public lab information and third-party reviews, Janoshik Analytical is reported as not ISO/IEC 17025 accredited for peptide purity testing. Its reports are widely used in the research community for speed and public verifiability, but because they are not issued under an accredited scope they would not be accepted in formal pharmaceutical regulatory submissions [3][4].

According to community and review sources, Janoshik experienced a data breach reported in early 2026 in which customer shipping information and database contents were said to be exposed and attackers attempted extortion [3]. This account is corroborated by aggregator and forum reporting rather than a primary regulator or established news outlet, so the specific scope and timing should be treated as reported but not independently confirmed. The episode is cited as highlighting the operational-security trade-off of sending samples with real personal details to any single third-party lab.

RP-HPLC measures purity — what percentage of the UV-absorbing material in the sample is the target peptide — while mass spectrometry (LC-MS/MS) measures identity by confirming the molecular weight matches the intended sequence. A complete COA reports both: HPLC tells you how much, MS tells you whether it is the right compound [3][6].

Among the labs surveyed, traditional contract laboratories carry the strongest formal credentials. Colmaric Analyticals is listed with ISO/IEC 17025:2017 accreditation (PJLA No. 86258), and ACS Lab publicly states ISO/IEC 17025 accreditation via A2LA, whereas Janoshik, Testides and MZ Biolabs are reported as not ISO 17025 accredited for their peptide assays (MZ Biolabs's status is described inconsistently across sources). 'Strongest accreditation' and 'most widely used' are not necessarily the same lab in this market [5][6][7][10].

Not by default. Many standard peptide panels report only purity and identity; endotoxin (via LAL or recombinant factor C), sterility and heavy-metal testing are often separate add-ons or are offered by only some labs. In 2026, USP General Chapter <86> formally recognized recombinant reagents for endotoxin testing, effective May 2025 [8]. If endotoxin data matters for an application, confirm it is explicitly on the COA rather than assumed.

Cross-check the report's unique test ID on the issuing lab's own public verification portal (for example, Janoshik's public portal) rather than trusting a PDF forwarded by a seller. Confirm it shows both an HPLC purity figure and an MS identity result, names its methodology, and references a specific batch. For higher-stakes verification, an independent blind re-test at a separate lab is the most robust check [3][4].

• Are Research Peptides Legal? -> /learn/are-research-peptides-legal
• Research-Use-Only (RUO) Legal Status for Peptides: Complete Guide -> /learn/research-use-only-ruo-legal-status-for-peptides-complete-guide
• FDA Peptide Reclassification 2026: 14 Peptides Return to Category 1 -> /learn/fda-peptide-reclassification-2026-14-peptides-return-to-category-1
• Verify a Peptide COA -> /verify
• Compare Peptide Vendors and Prices -> /compare