Accepted answer
Put another way, evaluate a supplier on the documentation they cannot fabricate cheaply, which in practice means lot-specific certificates from a laboratory that hosts its own reports and a testing history that spans more than one lot.
The diagnostic red flags, in rough order of how much they tell you: a certificate whose lot number does not match the vial; a certificate with no method section; a purity figure quoted to two decimal places with no chromatogram; a testing date that precedes the stated manufacturing date; identical certificates across nominally different lots; and "sterile filtered" offered in place of a sterility test. Each of those is a specific inference, not a vibe.
What a verification listing at VendorInvestigate or a rating at PeptideMeter actually evidences is that some process was applied — which is more than nothing and considerably less than an audit. The useful question is what the process consists of and whether its inputs are independently obtained samples or vendor-supplied ones.
Regulatory positions on personal importation are published: the relevant frameworks are the US FDA’s personal importation policy in its Regulatory Procedures Manual, the UK MHRA’s guidance on importing medicines for personal use, and the equivalent national provisions in the EU member states and Australia’s Therapeutic Goods Administration personal importation scheme. They differ materially from each other.
The caveat is that none of this makes an unapproved product safe or lawful to use. It reduces one category of uncertainty — what is in the vial — and leaves every other category untouched.
Test the first lot from any new supplier, set your accept threshold before the result arrives, and keep the certificate with the lot number and the date in one place.
edited 26 Feb 2025 by siobhan_deasy — clarified the distinction between purity and content