How to read a certificate of analysis
A COA is the only real evidence behind a CBD label. What to check, in order, and the four findings that should stop a purchase.
A technician preparing a tray of capped sample vials in a laboratory.
A certificate of analysis is a laboratory report on one specific batch of product. It is the difference between a claim and a measurement, and it is the only document in this category that carries evidentiary weight.
Read it in this order
1. Batch or lot number. It must match the number printed on the container you are holding. A COA for a different batch tells you about a different product. This is the most common and most overlooked failure.
2. Date. Cannabinoid content changes over time. A report older than roughly twelve months describes the product as it was, not as it is.
3. The laboratory. It should be independent of the brand and ideally ISO/IEC 17025 accredited for the methods used. Accreditation is scope-specific - a lab accredited for potency is not automatically accredited for pesticides.
4. Cannabinoid panel. Look for total CBD and total THC, and whether the report gives total THC including THCA or only delta-9. Given the standard taking effect in November 2026, which figure is reported now matters directly.
5. Contaminant panels. Pesticides, heavy metals, residual solvents, microbials, and mycotoxins. Each should be present with a pass/fail against a stated limit.
Four reasons to walk away
- The batch number on the certificate does not match the container.
- Measured CBD is materially off the label claim. Most state regimes treat ±10% as acceptable; a wider gap suggests the product was never tested against its own label.
- Contaminant panels are missing entirely rather than reported as passing. Absence is not a pass.
- The laboratory named on the report has no independent existence you can verify.
A QR code that resolves to a brand-hosted PDF is convenient, not independent. Check that the document it opens is the lab's own report with the lab's identifiers - not a brand-designed summary reproducing selected numbers.
Terms that trip people up
Limit of detection vs limit of quantitation. LOD is the smallest amount the method can tell is present; LOQ is the smallest amount it can measure reliably. “Non-detect” or “ND” means below one of these thresholds - the report should say which, and the threshold is part of the claim.
Total CBD vs CBD. Total CBD accounts for CBDA converting to CBD, using a standard conversion factor. A product can show modest CBD and high CBDA and still deliver a meaningful total. Compare like with like across brands.
Per gram vs per container. Potency is often reported as mg/g or as a percentage. Getting to milligrams per serving requires the container volume and serving size, and this is where arithmetic errors - and occasionally convenient ones - appear.
What the coming rules change here
From November 12, 2026, the federal hemp definition moves to total THC inclusive of THCA and delta-8, and finished cannabinoid products face a 0.4 mg total THC cap per container.
Two practical consequences for reading COAs:
- A report showing only delta-9 will no longer be sufficient to assess compliance. Look for total THC.
- Concentration alone will not tell you whether a finished product complies. You need concentration and container size to evaluate a per-container cap.
Expect COA formats to change in response. Until they do, you may have to do the multiplication yourself - and if a brand cannot tell you the total milligrams of THC in the container, that is an answer in itself.
Editorial content only. This article is reporting and analysis, not medical, legal, or investment advice. Hemp and CBD regulations differ by state and change frequently. Verify current rules in your jurisdiction before making decisions.