Where do people draw the line on COA transparency? My view: the per-batch certificate, the chromatogram, the method, and the identity confirmation should be available by default — not something you have to extract.
If a supplier treats the chromatogram like a trade secret, that tells you something. Curious whether others are stricter or more relaxed than that, and why.