Vendor due diligence: a real checklist

Most peptide-related disappointments — failed cycles, unexplained side effects, lost orders — trace back to a vendor decision made in 90 seconds at midnight. Vendor due diligence isn't glamorous. It's a checklist, run before you spend a dollar, that filters out maybe 80% of the bad outcomes in the research-chem peptide market. This article is that checklist, with the reasoning behind each item and a worked example of running it on a hypothetical new vendor.

Why vendor due diligence matters more than peptide selection

Two truths sit on top of the research-chem peptide market:

1. The product is invisible. A 5 mg vial of "BPC-157" looks identical whether it's 99% pure peptide or a different compound at low purity. You cannot inspect the product before injecting it.
2. There is no regulator. No agency tests vials. No license can be revoked. Vendors operate under whatever quality regime they choose, and "as advertised" is not enforceable.

Those two facts mean the vendor — not the peptide — is what you're really buying. A premium peptide from a careless vendor is a research-chem; a mid-priced peptide from a vendor with rigorous COAs is the closest thing to pharmaceutical-grade you'll find in this market.

For the wider regulatory backdrop, see the sourcing pillar.

The checklist, in order

The checklist runs in a specific order because each step is cheaper than the next. Stop the moment something fails — don't keep validating a vendor that already lost.

1. Years in business

Look up when the vendor's site was registered (whois lookup) and when they appear in forum/Reddit threads. A vendor that has been around for 3+ years has had time to accumulate criticism.

Years of operation isn't a guarantee — established vendors can have quality drift — but it's the cheapest filter available.

2. Independent reviews on neutral platforms

Search the vendor name plus "review" on:

• Reddit (subreddits for peptides, biohackers, recovery)
• BBB
• Trustpilot
• Discord communities (open peptide servers)
• Industry forums

What you're looking for is not exclusively positive reviews — those usually indicate curation. Look for:

• A mix of positive and negative reviews
• Negative reviews with substantive complaints (not just shipping)
• The vendor's response style — defensive, dismissive, or constructive
• Repeated mentions of the same problem (red flag)
• Repeated mentions of the same strength (signal)

A vendor with no critical reviews anywhere on the internet is either very new or filtering reviews. Be skeptical.

3. COA availability and quality

Before you order, ask for the COA for the current batch of the peptide you want. The minimum acceptable response is a third-party laboratory PDF showing identity (mass spec), purity (HPLC with chromatogram), and endotoxin (LAL).

For a line-by-line COA walkthrough, see reading a COA worked example and the COA reading guide.

A compact rubric:

The willingness to send a COA before you place an order is itself a quality signal.

4. Lab independence verification

Don't just take "third-party" on faith. Look up the laboratory name on the COA:

• Does the lab have its own website?
• Is the lab ISO-17025 accredited?
• Is the lab geographically and corporately separate from the vendor?
• Have other vendors used this lab?

Some vendors use legitimate ISO-17025 labs. Others print COAs that look third-party but reference labs that don't exist or are owned by the same parent company. Five minutes of searching catches most of this.

5. Pricing sanity

Peptide prices vary by vendor and by peptide, but the ranges aren't arbitrary. Without quoting specific dollar figures (which date quickly), the principle is:

• Dramatically below market is a warning sign. Either the vendor is subsidizing customer acquisition (a temporary state) or they're cutting quality to hit a price point
• Dramatically above market doesn't equal premium quality. A high price with a weak COA is just expensive research-chem
• Similar to established vendors with strong COAs is the typical pattern for a legitimate operation

If you see one peptide priced at half the going rate while everything else on the site is normal, ask why.

6. Physical address and business details

A real vendor has:

• A listed physical address (verifiable on a map)
• A business phone number that someone answers
• A consistent business name across the site, payment processor, and shipping label
• A contact email that responds within a business day

A vendor with no physical address, no phone, only a contact form, and a generic email domain is harder to hold accountable when something goes wrong.

7. Customer service interaction

Before placing an order, send two emails:

1. A simple question about a product
2. A request for a current-batch COA

Time how long the response takes. Read the response carefully. Look for:

• Direct, knowledgeable answers vs. canned responses
• Willingness to share documents
• A name attached to the response (not just "Support")
• Tone — professional and informative vs. salesy or pressured

Pressure tactics ("limited stock," "discount expires today," "DM me on Telegram for a deal") are red flags. Reputable vendors don't operate that way.

8. Shipping and customs realities

Where the vendor ships from determines a lot:

For US buyers, domestic shipping skips customs. For UK/AU/CA buyers, customs interception varies and is enforcement-dependent. Check the vendor's reshipment policy in writing before ordering. For more, see shipping and customs.

9. Test order before commitment

Place a small order — one vial — before committing to a cycle's worth. Verify:

• Shipping speed and packaging quality
• Vial labeling matches the website description
• Batch number on the vial matches the COA
• Lyophilized appearance is normal (small disc or fluffy puck, not melted residue)
• Reconstitution behavior is normal (dissolves cleanly, no particulate)
• Subjective response, if applicable

A test vial costs less than a wasted cycle.

10. Save the documents

For every order, save:

• The website confirmation
• The shipping notification
• The COA PDF for the batch
• A photo of the vial as received
• Any receipts or invoices

Keep these for at least 6 months. If you experience a side effect or a quality problem, this paper trail is what makes investigation possible.

Walking through a hypothetical vendor

Suppose you're evaluating "Acme Peptides" — a hypothetical vendor you've never used. The checklist in action:

A vendor that passes all ten steps is the kind you order from again. A vendor that fails three or more steps isn't worth the discount.

The fail patterns

Three patterns account for most vendor problems:

Pattern 1: The good-looking new vendor. Slick website, low prices, "COAs available," young domain. The COAs turn out to be in-house. The customer service is responsive but evasive. The first order is fine. The second order has a wrong batch number. By the third order, the site has moved to a new domain.

Pattern 2: The established vendor that drifts. Years in business, reasonable prices, formerly third-party COAs. Quietly switches to in-house testing. The forum reputation lags reality by months. By the time the community catches the change, batches have already shipped.

Pattern 3: The marketplace listing. A vendor name on eBay, Amazon, or Alibaba. The peptide arrives in unmarked vials. There is no COA. The price is unbeatable. The vial may or may not contain the labeled compound. This is roulette.

Every pattern is caught by the checklist. None of them is caught by intuition.

A few questions to ask, in writing

For a vendor evaluation in progress, paste these into an email:

• "Could you send the current-batch COA for [peptide name]? I'd like to verify identity, purity, and endotoxin before ordering."
• "Which laboratory performs your testing? Is it ISO-17025 accredited?"
• "What's your reshipment policy for orders intercepted by customs?"
• "How long does a typical reconstituted vial remain stable in your testing?"
• "Where is the product manufactured?"

A vendor that answers all five clearly is in a different league from one that dodges any of them.

What due diligence doesn't cover

Honest caveat: the checklist is necessary but not sufficient. It cannot detect:

• A batch with a manufacturing defect that the COA doesn't reflect
• Future quality drift after a successful first order
• Counterfeit COAs sophisticated enough to fool a non-chemist
• Stability problems that only show up after 60 days of refrigerated storage

The mitigations: re-verify periodically, save vials for retesting if a side effect appears, and trust the network of users who report problems publicly. Vendor due diligence is a continuous process, not a one-time gate.

For closely related material, see vendor quality checks and counterfeit peptide red flags.

Related reading

• Reading a COA worked example
• Choosing a vendor
• Counterfeit peptide red flags
• Endotoxin testing explained
• Vendor quality checks