How we audit UK research-peptide vendors
The Peptide Watch is independent, sells nothing, and takes no payment from any vendor. Here is exactly how every verdict is reached, so you can check our working.
What we check
For each of the 598 UK research-peptide domains we have found, we open the vendor's own published certificate of analysis and read two things: which laboratory ran the test, and which company the certificate names as the client. We record the vendor's Trustpilot score, whether it advertises on Google, and any shared-operator networks visible in public records. We re-scan regularly.
How a verdict is decided
A vendor is independently tested only when it publishes a Janoshik certificate that names the vendor itself as the client and can be verified on Janoshik's own website. Everything else, in-house tests, borrowed supplier certificates, lesser labs, "COA on request" promises, factory QC sheets and fabricated documents, goes on the watch list, with the specific, observable reason shown. Janoshik Analytical is our gold standard because its reports carry a unique, checkable code that cannot be faked. See how to verify a COA and the glossary.
What we can and can't tell you
We evaluate the credibility of a seller's evidence, not the product itself. No document, and no website including this one, can prove what is in the specific vial you receive; that would require independently testing the exact unit. Even a genuine certificate only proves a sample was tested once, not that your batch matches it. We reduce uncertainty and filter out fakes, borrowed certificates and undocumented sellers, we do not certify products or eliminate risk.
What we count when you use the search box
The search box on the home page sends the words you type, and nothing else, to our own server so we can count which sellers people are asking about. We use that to decide which vendors to audit next, because a seller people are checking today is often one we have not covered yet.
What that does not involve: no cookie is set, no account exists, no profile is built, and the search text is never stored in any file or database of ours. The request is discarded the moment it arrives. All that survives is the request in our hosting provider's own traffic records, which are kept for 31 days. We use them to count what people ask about, and we do not use them to identify anyone. Nothing you type is passed to any vendor. The box itself runs entirely in your browser, so your search still works if you block the request.
Corrections
Every verdict states an observable fact from the vendor's own site, the certificate it published, or the public record. Any vendor can request a correction. The full audit is also an open dataset (CC BY 4.0).