What a Certificate of Analysis Must Include Under Canadian GMP: A Manufacturer's Checklist

The most common documentation deficiency Health Canada inspectors record isn’t a missing batch record or an undocumented deviation. It’s an incomplete certificate of analysis — a document so routine that many QC departments generate it without ever questioning whether it actually meets regulatory requirements.

A certificate of analysis under Canadian GMP is more than a lab printout. It’s a controlled document that forms part of your lot release package and provides the formal, signed evidence that a specific batch met its quality specifications before distribution. Get the content wrong, and you’ve handed an inspector an observation before the product even reaches patients.

Here’s what the regulations actually require — and where most manufacturers fall short.

What Health Canada’s GMP Framework Says About COAs

Part C, Division 2 of the Food and Drug Regulations (C.02) governs pharmaceutical manufacturing in Canada. Section C.02.022 requires that raw materials, packaging materials, and finished products all undergo testing before release. Section C.02.025 requires that each lot of finished drug product be tested against its approved specifications. Those results must be documented.

Health Canada’s interpretive guidance — GUI-0001 (Good Manufacturing Practices Guidance, Version 3, 2019) — expands on what “documented” means in practice. The guidance is explicit: a compliant certificate of analysis must capture actual test results, not a summary conclusion. A field that reads “Complies” where a numerical purity result should appear is not documentation. It’s an assertion — and assertions don’t survive an audit.

For Active Pharmaceutical Ingredients (APIs), Health Canada has adopted ICH Q7 (GMP Guide for Active Pharmaceutical Ingredients), which adds another layer of COA requirements specific to API manufacturers and importers. We’ll return to that.

The 12 Elements Every Canadian GMP Certificate of Analysis Must Include

Regulatory guidance doesn’t hand you a COA template. But taken together, C.02, GUI-0001, and the applicable ICH guidelines make the required content quite clear. A compliant certificate of analysis in Canada must contain all of the following:

1. Product name and dosage form (or material designation for raw materials) This must match the approved label and the batch manufacturing record exactly. Abbreviations are acceptable only if defined in your approved nomenclature system.

2. Lot or batch number The assigned lot number, fully traceable to the batch record. For APIs, this is also the number appearing on the shipping label and the 3.2.S section of any related drug submission.

3. Manufacturing date and expiry date (or re-test date for APIs) For finished products, both dates are mandatory. For APIs and excipients without a formal expiry, a re-test date is acceptable — but the COA must explicitly state it’s a re-test date, not an expiry. The distinction matters for inventory management and compliance.

4. Quantity of the batch In appropriate units (kg, L, number of dosage units). This allows traceability back to the batch record and confirms the COA covers the full quantity being released.

5. Name and address of the manufacturer or testing laboratory If testing was performed at a contract laboratory, both the contract lab’s and the manufacturer’s name and address should appear. Health Canada is tightening oversight of contract testing arrangements, and inspectors routinely ask to see service agreements alongside COAs.

6. All tests performed, listed individually Every test in your approved specification must appear — appearance, identification, assay, purity and impurity profile, dissolution where applicable, water content, microbial limits, and any product-specific attributes. Bundling tests under a heading like “Physical tests: Pass” is a deficiency. If six tests were performed, six results must be documented.

7. Acceptance criteria (specifications) for each test Numerical ranges, explicitly stated. The specification source should also be noted — for example, “BP 2024,” “USP 2025 <61>,” or an internal specification document ID with its revision version. A result without its reference specification forces the reviewer to search elsewhere, and under inspection pressure, that gap looks like inconsistency.

8. Actual test results with units This is the single most frequently cited deficiency we encounter in COA reviews. Results must be numerical wherever the test method generates a numerical output. “Assay: 98.7% w/w (Specification: 97.0–103.0%)” is compliant. “Assay: Pass” is not. For qualitative tests, the method and the outcome must still be documented in full — for example, “Identification by IR spectroscopy: Spectrum conforms to reference standard lot RS-2024-045.”

9. Reference to the test method, including version or edition Compendial references must include the edition year. In-house methods must reference the SOP number and its current revision. Without this, there is no way for an auditor — or a future deviation investigator — to confirm which procedure was actually followed on that date.

10. Date of testing The date the analysis was completed. If testing spans multiple days (as it does for microbial growth-based methods, which require 3–5 days incubation), the completion date of the final result should be stated, with the full testing window optionally noted.

11. Formal lot disposition statement A clear statement that the lot meets — or does not meet — all applicable specifications. This is distinct from the individual test results; it’s the QC release decision. It should reference the specification document version current at the time of release.

12. Authorised signature of a qualified QC professional The person signing the COA must have formally delegated release authority under your quality system. A technician’s signature without a QC Head countersignature (or documented delegation of authority) is non-compliant. Health Canada inspectors check whether the signatory’s role appears in your organisational charts and whether their training records support the authority being exercised.

Where COAs Routinely Break Down Under Inspection

Documentation deficiencies account for roughly 40% of observations issued during Health Canada GMP inspections across pharmaceutical and NHP manufacturers. COA gaps are a meaningful contributor to that figure. The patterns we see most often:

Results summarised as conclusions. “All specifications: pass” on a multi-attribute COA tells an inspector nothing about what values were obtained. Without individual numerical results, you cannot trace which test was performed, at what level, or whether the result was close to the specification limit — information that’s critical during deviation investigations and complaint handling.

Missing method version numbers. Labs update test methods, and version control is a GMP requirement. If your COA references an SOP by number but not by revision, there’s no audit trail confirming the correct method was used for that specific lot. This becomes a liability during an OOS investigation.

Template drift. Specifications get updated through your change control system, but the COA template doesn’t get revised to match. A COA showing an acceptance criterion of 95.0–105.0% w/w for assay when the current approved specification is 98.0–102.0% will generate immediate questions about whether your change control program is functioning. Those are expensive questions to answer mid-inspection.

Signatures from unauthorised personnel. Under Section C.02.012 of the Food and Drug Regulations, batch records and associated release documents must be reviewed and approved by qualified personnel. If your COA is signed by someone whose authority to release isn’t documented in your quality system, the release is technically irregular — regardless of whether the product was actually compliant.

Special Considerations for Imported APIs and Excipients

This is where Canada GMP requirements diverge meaningfully from what some manufacturers expect, particularly those transitioning from ICH-harmonised markets.

Under Section C.02.022 of the Food and Drug Regulations, you cannot rely solely on a supplier’s COA to release imported raw materials for pharmaceutical use. Health Canada requires at least confirmatory identity testing on every incoming lot, regardless of supplier qualification status. Full specification testing is required unless the supplier has been formally qualified under a vendor qualification program — and that program must be documented with at least several consecutive compliant lots before skip-lot testing is permitted.

ICH Q7, Section 11 — adopted by Health Canada for API manufacturers — specifies that the API manufacturer’s COA must include results for every test in the approved specification, be signed by an authorised QC representative, and reference a regulatory filing number where applicable (for example, a Drug Master File number on file with Health Canada).

If you’re a finished product manufacturer relying on a third-party API supplier’s COA, your own finished product COA must be traceable back to those incoming material records. Health Canada inspectors increasingly ask to see the documented linkage between incoming material COAs, in-house confirmatory testing results, and the final product release decision. A gap anywhere in that chain is an observation waiting to happen.

On record retention: Section C.02.017 requires that batch records — including COAs — be kept for at least one year past the product’s expiry date. For a drug with a three-year shelf life, that’s a minimum of four years of documented records. Many manufacturers handling sterile or biologic products maintain seven to ten years as a practical standard, aligned with post-market surveillance commitments and the realities of product liability.

Review the Templates Before the Inspector Does

A COA review takes about 30 minutes if you use the 12-element checklist above as a starting point. Pull five recent certificates across different product types — finished drug, API, and excipient — and check each element against the list. Pay particular attention to method versioning, the presence of numerical results (not conclusions), and whether your signatory authority is documented.

If you find gaps, fix the templates now. A controlled document revision is a straightforward quality system activity. An inspector observation about routine documentation deficiencies, by contrast, tends to prompt broader questions about your overall QC program — and those questions take considerably more time and resources to resolve.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Androxa. Learn more about our team

Talk to our team about Health Canada compliance Contact us

Related from our network

• Raw Material COA Verification and Supplier Testing Services — How ISO 17025-accredited testing supports incoming material qualification and COA confirmation for Canadian manufacturers
• EU GMP Batch Release Documentation for Pharmaceutical Exporters — What European Qualified Person (QP) release requires in your batch documentation package and how it compares to Health Canada expectations