COA and Batch Traceability for Coconut Ingredients: What to Ask For

Buyer’s snapshot

• A Certificate of Analysis (COA) describes one sampled lot. Codex defines a lot as a definitive quantity produced essentially under the same conditions, and requires the lot identification on every non-retail container of desiccated coconut and coconut oil.
• In the 2018 US Salmonella outbreak linked to dried coconut, one importer’s bulk recall was limited to three lot codes; the retail recall beside it covered every pack filled before a cut-off date (CDC, 2018). The lot definition decided how much product came back.
• Coconut sits outside the FDA Food Traceability List except as coconut butter, and EU law requires only one step back and one step forward. Silk Foods Ceylon (SFC) supplies coconut products from its BRCGS and FSSC 22000 V6 certified Matale facility and approved Sri Lankan coconut processors, with lots traceable from raw material intake to shipment through batch coding and a COA on request. The format table and the six RFQ lines below are the parts to forward to QA.

Most coconut COAs that reach a QA desk fail on the first line, not the last. The moisture, fat and microbial results are usually inside the limit. What is missing is a lot number that resolves to a production run the supplier can isolate. A lot written as a month, tied to desiccated coconut from an unnamed drying plant, is a label, not a trace. The general traceability depth and COA cadence primer covers the four depths of tracing and the 4-hour trace time a BRCGS audit expects. This piece applies that to coconut: how a lot is defined for each format, what the law leaves to the contract, and the six lines that make the COA and the trace point at the same bags.

What does a COA certify for a coconut lot?

A COA reports laboratory results for a sample drawn from a defined lot. It certifies that lot only, for the parameters listed, by the methods named, on the test date shown. If the lot is not defined, or the sample was composited across several runs, the certificate proves the average of something. It does not prove the quality of the bags on the pallet.

Codex treats the lot as the unit of acceptance. The desiccated coconut standard accepts a lot when the defective containers in the sample do not exceed the acceptance number of the sampling plan (Codex CXS 177-1991, section 3.4), and the general labelling standard defines a lot as a definitive quantity of a commodity produced essentially under the same conditions (Codex CXS 1-1985). One drying run at one processor on one day passes that test. A month of output blended in a silo does not.

Spec snapshot: the header of a usable coconut COA

• Lot number, and what it resolves to (site, date, run)
• Production date, and the test date for each parameter, since peroxide value and microbial counts move with time
• Method and laboratory for each line, with the sampling plan stated
• Net quantity the lot covers, so the COA reconciles to the packing list

The parameter lists sit elsewhere in this cluster: oil limits in the acceptance clause primer for bulk coconut oil, the residue and metals panel in the guide to reading a heavy metal and pesticide COA. This post is about the header those lists hang from.

How a lot is defined for each coconut format

Each coconut format is made by a different process, so one lot means a different quantity and a different record at the producing site. Desiccated coconut is a drying run, coconut oil is a press or tank batch, milk and cream are a retort batch, milk powder is a spray-dry run, and a repacked format carries two codes: the producer’s and the repacker’s. “Are you traceable” gets a yes from everyone. “What does one lot number resolve to for this format, and how many kilos is it” gets an answer that can be audited.

Format	What one lot usually is	What the code should resolve to	COA lines for that lot
Desiccated coconut, fine or medium	One drying and sieving run, often a day’s output from one kernel intake	Intake date, drier run, sieve grade, pack date	Moisture, fat, free fatty acid, Salmonella, plate count, yeasts and moulds
Virgin, white and RBD coconut oil	One expelling or filtration batch, or one tank fill, drawn into a numbered drum range	Press or tank batch, filtration date, first and last drum number	Moisture, free fatty acid, peroxide value, each with a test date
Coconut milk and cream, retort-sterilised	One cook and retort cycle; the pack carries the retort batch code	Batch sheet, retort cycle record, fill date	Fat, total solids, pH, commercial sterility
Coconut milk powder, spray-dried	One spray-dry run; on the Matale line, at 50 kg per day, a lot is small by design	Feed batch, dryer run, pack date	Moisture, fat, bulk density, plate count
Flour, chips and flakes repacked at Matale	The approved processor’s lot, repacked and coded again	Processor lot, SFC repack code, and the link between them	Processor COA; microbiology and metals through an external laboratory on request

Source: SRV Trade Team reading of Codex CXS 177-1991 and CXS 240-2003 product definitions against SFC process descriptions, October 2026.

Lot size is a commercial variable. A processor can define a lot as a run or as a week, and the price of the tighter definition is more COAs per tonne. Coconut products for Silk Route Ventures (SRV) are made at the Matale facility and by approved Sri Lankan coconut processors, so for a repacked SKU the buyer should expect a processor lot and an SFC code, with the quote naming the producing site. One code without the other is half a trace.

Why the lot number is the first line to check

In March 2018, two US recalls of dried coconut ran side by side during one Salmonella Typhimurium outbreak. One importer’s bulk recall was limited to three named lot codes. The retail recall beside it covered every bag with a packed-on number below a cut-off date. The pathogen was the same. The difference was the lot definition.

Between 22 September 2017 and 26 February 2018, 14 people in eight US states and the District of Columbia were infected with the outbreak strain, and three were hospitalised (CDC, final update, 18 May 2018). On 16 March 2018 the importer recalled its 25 lb bulk cases by batch, lot numbers OCSM-0010, OCSM-0011 and OCSM-0014, alongside retail bags identified only by a 14-month range of sell-by dates. Three days later a retailer recalled its own-label coconut with packed-on numbers lower than 18-075, every pack filled before the 75th day of the year. The importer’s recall came to 14,620 lb of bulk product and 24,270 bags across 14 states (CIDRAP, 2018). The public notices never named the origin processor.

Three lot codes can be counted, located and reconciled. “Everything before day 75” cannot be separated from a single run, so the whole shelf came back, and the CDC noted that recalled product was still in homes months after the outbreak was declared over. The time to learn how a supplier defines a lot is before the purchase order, not during the recall call.

What the law requires, and what it leaves to the contract

EU law requires each food business operator to identify its immediate supplier and its immediate customer (Regulation (EC) No 178/2002, Article 18). The US Food Traceability Rule covers coconut only as coconut butter, with enforcement not before 20 July 2028. Codex requires lot identification on every non-retail container of desiccated coconut and coconut oil. Lot size, COA cadence and trace time are left to the contract.

Requirement	Source	What it obliges the supplier to do	What it leaves to the buyer
One step back, one step forward	Regulation (EC) No 178/2002, Article 18	Name who supplied the coconut and who received it	Lot size, batch records, trace speed
Lot identification on non-retail containers	Codex CXS 177-1991 section 9.2; CXS 210-1999 section 7.2	Put the lot identification and the manufacturer or packer on the container, or an identification mark clearly identifiable with the accompanying documents	What the lot identification resolves to
Traceability lot code, key data elements, sortable records within 24 hours	FDA Food Traceability Rule, 21 CFR Part 1, Subpart S	Applies to coconut butter and foods containing it; coconut is excluded from the tropical tree fruit category; enforcement not before 20 July 2028	Whether to ask coconut ingredient suppliers for the same records anyway
Full trace, raw material to dispatch and back, within 4 hours, tested at least annually	BRCGS clause 3.9; FSSC 22000 V6 through ISO 22000:2018 clause 8.3	Run the batch trace as an audited system at the certified site	Whether the trace reaches the processor’s kernel intake

Source: the regulatory texts named in each row, read October 2026.

The Codex line is the one bulk buyers skip, and the one that bites first. The general labelling standard requires each container to be permanently marked, in code or in clear, to identify the producing factory and the lot (CXS 1-1985, section 4.6). For a 25 kg bag on a pallet, that mark is the only physical link to the COA, and a bag whose printed lot does not match the certificate has failed Codex before anything is tested. The US rule works by category, not crop: coconut butter is listed under nut butters, while desiccated coconut, oil, milk and flour fall outside it. Brands making spreads with coconut butter will need traceability lot codes from July 2028, and most will write the same ask into every coconut contract rather than run two systems. Which certificate covers which format at the producing site is the subject of the BRCGS and FSSC 22000 V6 coconut facility post.

Writing the traceability and COA ask into the RFQ

Six lines turn “traceable, COA available” into a term that can be verified: the lot definition per format, the code format and its decode key, one COA per lot with the header fields, the producing site named per format, the result of the supplier’s last traceability test, and the retention period for records and samples.

1. Lot definition, per format, in kilograms. Write “one lot of fine desiccated coconut is one drier run of not more than X kg” and let the supplier fill the X.
2. Code format and decode key. Ask for one worked example: this code means this site, this date, this run. A code the buyer cannot decode turns every trace request into a phone call.
3. One COA per lot, with the header fields. Lot number, production date, test date per parameter, method and laboratory per line, sampling plan. A composite COA across lots is not accepted for release.
4. Producing site, per format. Which formats are made at the certified site and which by an approved processor, and the certificate covering each.
5. The last traceability test. The lot traced, the time taken and the percentage reconciled. A supplier running the system can send that record by return.
6. Retention. How long batch records and sealed retained samples are kept per lot, so a referee test is possible if a result is disputed.

Buyer’s checklist: the traceability pack for a coconut lot

1. Lot definition per format, in kilograms, in writing
2. One worked decode of the lot code
3. One COA per lot with lot number, dates, methods, laboratory and sampling plan
4. Producing site and certificate per format; processor lot plus repack code where repacked
5. Most recent traceability test: lot, time, reconciliation percentage
6. Lot identification printed on every non-retail container, matching the COA
7. Sample dispatched against the agreed specification before any purchase order

The parameter lists these lines sit beside are in the virgin coconut oil RFQ template. Together they are the whole ask. Separately, either half can be answered with a yes that means nothing.

What Silk Foods Ceylon can show for a coconut lot

SFC lots are traceable from raw material intake to shipment through batch coding, and a COA is available on request against the parameters written into the quote. The standard panel is tested in-house; microbiology, heavy metals, aflatoxin and pesticide residues are tested through an external laboratory on request. The producing site is confirmed per SKU.

Every dispatched order leaves with the same documentation pack: commercial invoice, packing list, bill of lading or air waybill, certificate of origin, a phytosanitary certificate where the destination requires it, and a COA on request. For organic SKUs the import certificate the destination requires is added; the organic certification chain post covers how it reads against the food safety certificate. The lot code is common across the pack, and because SFC holds BRCGS and FSSC 22000 V6, the batch trace and the annual traceability test are audited rather than self-declared.

Where SRV’s offer doesn’t fit

Buyers who need grower-level or harvest-year traceability on conventional coconut. SFC’s batch coding runs from raw material intake to shipment, and the team will say so rather than stretch the claim. For organic SKUs the grower-group chain is enforced by the organic regulation itself, and that is the honest route to a grower-level claim.

Frequently asked questions

What should a coconut COA include besides the test results?

The lot number and what it resolves to, the production date, the test date for each parameter, the method and laboratory for each line, the sampling plan, and the quantity the lot covers. Codex CXS 1-1985 defines a lot as a definitive quantity produced under the same conditions, so the COA should name that quantity.

Is coconut covered by the FDA Food Traceability Rule?

Only as coconut butter, which the Food Traceability List includes under nut butters. The list’s tropical tree fruit category excludes tree nuts such as coconut, so desiccated coconut, coconut oil, milk and flour are outside the rule. FDA has been directed not to enforce the rule before 20 July 2028.

How is a lot defined for desiccated coconut?

In practice, one drying and sieving run at the processor, often a day’s output from one kernel intake, coded to the intake date, drier run and sieve grade. Codex CXS 177-1991 accepts or rejects desiccated coconut at lot level by sampling, and section 9.2 requires the lot identification on every non-retail container.

Does Silk Foods Ceylon provide batch-level traceability and a COA for bulk coconut?

Yes. Lots are traceable from raw material intake to shipment through batch coding, and a COA is available on request against the parameters in the quote, with external laboratory tests on request. Bulk MOQ is 100 kg per SKU from the BRCGS and FSSC 22000 V6 certified Matale facility and approved Sri Lankan coconut processors.

How Silk Route Ventures can help

Silk Route Ventures (SRV) supplies desiccated coconut, coconut oil, milk, cream, milk powder and flour, made at the BRCGS and FSSC 22000 V6 certified Silk Foods Ceylon facility in Matale and by approved Sri Lankan coconut processors, with USDA Organic and EU Organic on selected SKUs, confirmed per SKU. The trade desk names the producing site for each format on the quote, and a COA is issued on request against the parameters agreed. Commercial orders start at 100 kg per SKU, trial quantities from 10 kg, and samples are free for evaluation with the buyer covering the courier. Standard SKUs run 2 to 3 weeks from PO to dispatch, private label and custom specifications 4 to 6 weeks. Contact us to request a sample and a traceability pack, or see the full Ceylon coconut ingredient range.

Sources

1. Codex Alimentarius Commission, Standard for Desiccated Coconut (CXS 177-1991, revised 2011), sections 3.4 and 9.2. https://www.fao.org/input/download/standards/261/CXS_177e.pdf (retrieved 22 October 2026)
2. Codex Alimentarius Commission, Standard for Named Vegetable Oils (CXS 210-1999, amended 2015), section 7.2. https://www.fao.org/input/download/standards/336/CXS_210e_2015.pdf (retrieved 22 October 2026)
3. Codex Alimentarius Commission, General Standard for the Labelling of Prepackaged Foods (CXS 1-1985), section 2 (definition of lot) and section 4.6 (lot identification). https://www.fao.org/fao-who-codexalimentarius/sh-proxy/en/?lnk=1&url=https%253A%252F%252Fworkspace.fao.org%252Fsites%252Fcodex%252FStandards%252FCXS%2B1-1985%252FCXS_001e.pdf (retrieved 22 October 2026)
4. US Centers for Disease Control and Prevention, Salmonella Typhimurium Infections Linked to Dried Coconut, final update, 18 May 2018. https://archive.cdc.gov/www_cdc_gov/salmonella/typhimurium-03-18/index.html (retrieved 22 October 2026)
5. CIDRAP, University of Minnesota, “Dried coconut from 2 firms tied to Salmonella cases in 8 states”, March 2018. https://www.cidrap.umn.edu/salmonella/dried-coconut-2-firms-tied-salmonella-cases-8-states (retrieved 22 October 2026)
6. US Food and Drug Administration, Food Traceability List, 21 CFR Part 1, Subpart S. https://www.fda.gov/food/food-safety-modernization-act-fsma/food-traceability-list (retrieved 22 October 2026)
7. Regulation (EC) No 178/2002 of the European Parliament and of the Council, Article 18, Traceability. https://eur-lex.europa.eu/eli/reg/2002/178/oj (retrieved 22 October 2026)
8. BRCGS Global Standard Food Safety, clause 3.9 (traceability), and ISO 22000:2018 clause 8.3, as applied in the SRV traceability depth and COA cadence primer. https://www.esilkroute.com.lk/blog/traceability-depth-and-coa-cadence-a-compliance-primer-for-buyers/

Written by the Silk Route Ventures Trade Team. Silk Route Ventures (E-Silk Route Ventures (Pvt) Ltd) is a Sri Lankan B2B supply-chain operator for the Food, Beverage, Wellness, and Nutraceuticals sectors. The Silk Foods Ceylon manufacturing arm holds BRCGS and FSSC 22000 V6 certifications. Questions or to request a sample: Contact us or email info@esilkroute.com.lk.