Skip to content

25% OFF WITH CODE

Limited-Time Sale | Ends November 15 at 7 PM PSTOne-time purchases only.Shop Now

Quality & Testing

How to Read a CBD Lab Report: Certificates of Analysis, Potency, Contaminants, and Red Flags

A lab report is only useful if you know what to look for. This guide walks through a certificate of analysis section by section and flags the warning signs.

By the BuyLegalMeds team11 min read

A printed laboratory report with a magnifying glass and a CBD product bottle beside it

Key takeaways

  • A certificate of analysis is an independent lab report that lists tests and results for a specific product batch.
  • Before trusting a COA, match the product name, batch or lot number, dates, and laboratory identity to your package.
  • Compare the cannabinoid potency numbers on the COA to the label and pay attention to the units used.
  • Check how THC is reported to understand legal limits and whether the product matches its full spectrum, broad spectrum, or isolate claim.
  • Confirm contaminant panels for heavy metals, pesticides, residual solvents, and microbes and look for stated limits and pass or fail results.
  • Verify the lab by checking for accreditation, named methods and analysts, contact details, and live verification links or QR codes, and be alert to listed red flags.

A certificate of analysis, usually shortened to COA, is the closest thing the CBD market has to a receipt for what is inside a product. Because over-the-counter CBD is not approved or pre-checked by the FDA, an independent lab report is one of the few ways a shopper can find out whether the number on the front of the package has any relationship to what was measured. The trouble is that a COA is dense, technical, and easy to misread. Many shoppers see a PDF with a lot of numbers, assume it must be fine, and move on.

This guide explains what a COA is, how to match it to the product in your hand, what each section means, and which red flags should make you pause. It is educational and does not guarantee that any particular product is safe or accurate. A report is a snapshot of one batch on one day, and it is only as trustworthy as the laboratory that produced it.

One honest note about our own store. We are not able to confirm from this guide that a lab report is posted for every product we sell. If you cannot find one on a product page, ask our customer support team before you buy. Use the checklist below on anything we send you.

Why lab reports matter

The FDA has tested cannabinoid products sold online and found that some contained much less CBD than their labels claimed, some contained more, and some contained THC that was not listed. The agency has also issued warning letters to companies for illegal marketing. An independent report does not fix those problems, but it gives you evidence you can check instead of marketing you have to trust.

A good report answers four questions.

  1. Is this report about the batch I am buying?
  2. Does the amount of CBD match the label?
  3. How much THC is present, and does it sit within the legal and labeled limits?
  4. Was the batch tested for contaminants that could harm me?

The sections below show how to answer each.

What a certificate of analysis is

A COA is a document issued by a testing laboratory that lists the tests performed on a specific sample and the results. In the CBD industry, the sample is drawn from a production batch, meaning a quantity of product made together under the same conditions. The lab measures what it can detect and reports numbers, with the method it used and the limits of what it can measure.

Third-party means the lab is independent from the company that makes or sells the product. That independence matters because a manufacturer testing its own product has an obvious conflict of interest. Third-party testing does not by itself prove quality, but it is a prerequisite.

Shop this topic

Our ACTIV8 CBD Tinctures are a powerful and an effective way to support your overall well-being. Simply just add a few drops of CBD to your…

$24.99each

ACTIV8 CBD Tincture: 325mg, 1,000mg, 2,500mg, 5,000mg & 10,000mg CBD purchase option
Quantity
1

Taste the natural power of CBD with UrbanLeaf Naturals CBD Tinctures! Our tinctures are made with pure, unflavored CBD, carefully extracted…

$29.99each

UrbanLeaf Naturals CBD Tincture 500mg, 1,500mg & 3,500mg purchase option
Quantity
1

Looking for a powerful and effective way to support your overall well-being while also giving back to our troops? Our American CBD Tincture…

$29.99each

American CBD Tincture: 500mg, 2,500mg, 5,000mg & 8,000mg purchase option
Quantity
1

Step one: match the report to your product

Before you read a single result, confirm the report is about what you bought.

Product name and type

The report should name the product, or a clearly related product, and the format. A COA for a raw extract is not a COA for a finished gummy. If the report describes a bulk extract or an ingredient rather than the finished product, it tells you about the starting material, not about the final item. A finished product can differ because of dilution, mixing, and added ingredients.

Batch or lot number

The batch or lot number on the report should match the number printed on your package. This is the most important matching step, and the one most often skipped. A seller may post an impressive report for one batch while shipping a later batch with no testing. If your package has a lot number that does not appear on the report, you do not have evidence about your product. Ask the seller for the report that covers your lot.

Dates

Check the date the sample was received, the date of analysis, and the date the report was issued. A report that is years old, or that predates the manufacturing date of your batch, cannot describe your package. Some labs also list an expiration or retest date.

Laboratory identity

The report should show the name and contact information of the lab, and ideally a lab accreditation number. We return to accreditation below.

Step two: the cannabinoid profile

The cannabinoid section, sometimes called the potency test, lists how much of each cannabinoid the lab measured. It is the section most shoppers want to read first.

Units and what they mean

Results are usually shown in one or more of these units.

  • Percent by weight, written as wt percent, which is the portion of the sample's weight made up by the cannabinoid.
  • Milligrams per gram, written mg/g, which is the same measurement scaled differently. One percent equals 10 milligrams per gram.
  • Milligrams per milliliter, written mg/mL, common for liquids.
  • Milligrams per unit, written mg per piece or mg per serving, common for gummies and capsules.

The label gives total milligrams, and the report gives a concentration, so you may need to convert. For a tincture, multiply the mg/mL result by the bottle volume in milliliters to estimate the total. For example, a 30 milliliter bottle measured at 16.7 mg/mL contains about 500 milligrams of CBD in total. Labs and manufacturers allow for some variation, and many reports show a result within about 10 percent of the label as reasonable, though what is acceptable depends on the product and the standard.

Compare to the label

Look at the CBD result and compare it to the label. A product labeled 500mg that measures 480 or 520 is close. One that measures 150 is a serious problem. One that measures far above the label is also a problem, because it suggests inconsistent manufacturing.

The cannabinoids you may see

Reports often list several abbreviations. Common ones include CBD, THC, THCA, CBDA, CBG, CBN, and CBC. A few notes follow.

  • THCA and CBDA are acidic precursors that convert to THC and CBD when heated. Reports on raw material sometimes show them separately.
  • Some reports show total THC, which is calculated from THC plus a correction for THCA. Total THC is the figure that matters under the federal hemp definition, which uses delta-9 THC measured on a dry weight basis.
  • Delta-8 THC, delta-9 THC, and other THC isomers are different molecules, and a report that says only THC without specifying may be lumping them together or not testing for all of them.
  • ND means not detected, and LOQ or LOD means the limit of quantification or detection, the smallest amount the method can reliably measure. Less than LOQ means something may be present in a tiny amount below what the lab can report.

Isolate, broad spectrum, and full spectrum

The cannabinoid profile is also how you verify the product type. An isolate product should show CBD and little or nothing else. A broad-spectrum product should show CBD plus other cannabinoids, with THC not detected. A full-spectrum product will usually show a range of cannabinoids, including a small amount of THC. If the product claims to be THC free and the report shows a measurable THC result, the claim does not match the evidence. Our guide on isolate, broad spectrum, and full spectrum explains the terms.

For hemp-derived products, THC is the number that makes or breaks legal status at the raw material stage. Under the 2018 Farm Bill, hemp is defined as cannabis and its derivatives with no more than 0.3 percent delta-9 THC on a dry weight basis. The USDA and the Code of Federal Regulations describe how hemp is tested and sampled.

A few cautions follow.

  • The 0.3 percent limit applies to the plant material and certain derivatives. A finished product, such as a gummy, can contain a measurable amount of THC while the extract used to make it stayed within the limit. The finished product still needs to be understood on its own terms.
  • Some states and some drug testing programs apply stricter standards or different rules.
  • A report that shows total THC and delta-9 THC separately is more informative than one that shows a single unlabeled THC number.
  • If you want a product with no THC at all, look for a report showing THC as not detected, and understand that not detected means below what the lab could measure.

Step four: contaminant panels

Potency is only half the story. A thorough lab package also screens for substances that should not be in a product you swallow or apply. Not every COA contains every panel, and the absence of a panel should be noted.

Heavy metals

Plants absorb metals from soil, and hemp is known to be good at taking them up. A heavy metals panel typically tests for arsenic, cadmium, lead, and mercury, and reports results in parts per billion or parts per million, along with a pass or fail against stated limits.

Pesticides

A pesticide panel looks for residues of agricultural chemicals. The report lists many compounds, usually as not detected, with a limit for each. Hemp is a crop, and pesticide use on it is regulated unevenly, which is why this panel matters.

Residual solvents

CBD extraction often uses solvents such as ethanol, butane, or carbon dioxide. A residual solvents test confirms that solvent left over after processing is below accepted limits.

Microbial testing

A microbial panel looks for bacteria, yeast, mold, and specific pathogens. This is especially important for edible and water-based products, where microbes can grow.

Mycotoxins and others

Some labs also test for mycotoxins, which are toxins produced by mold, and for water activity or moisture. Terpene profiles may also appear, though they relate more to aroma than to safety.

Reading pass and fail

A good panel states the limit it is measuring against, the result, and whether the sample passed. Be wary of a report that lists results with no limits, or says pass without showing the numbers. If a panel is missing entirely, treat the report as a partial picture.

Step five: judge the laboratory

A report is only as reliable as the lab behind it. You do not need to be an expert, but a few checks help.

  • Accreditation. Many reputable labs are accredited to an international standard for testing laboratories, commonly ISO/IEC 17025. The report may show the accrediting body and certificate number, which you can look up.
  • Methods. Established methods, such as high performance liquid chromatography for cannabinoids, are usually named on the report.
  • Signatures and contact details. A named analyst or approver, and a way to contact the lab, make the report verifiable.
  • Verification. Many modern reports carry a QR code or a link that leads to the lab's own record. If you scan the code and the page shows the same numbers, that is a good sign. If the link is dead or leads to a page on the seller's own site, be cautious.
  • Independence. The lab should not be owned by the seller.

Red flags

These are signs that a report may be unreliable or may not apply to your product. Any one of them is a reason to ask questions.

  • No batch or lot number, or a number that does not match your package.
  • A report that covers a raw extract, not the finished product.
  • A report that is old, undated, or predates the batch.
  • Results that match the label exactly, to the milligram, on every product. Real measurements vary.
  • No lab name, no contact information, or an unfamiliar lab with no accreditation information.
  • A screenshot or image where numbers look edited, or a PDF with inconsistent fonts and spacing.
  • A potency report with no contaminant panels, presented as full testing.
  • A report listing THC as not detected on a product described as full spectrum.
  • A page that claims lab tested without offering the report.
  • Medical claims, such as treating a condition, placed next to a report as if testing proved them. A potency report says nothing about benefits.

Putting a report to work: a short worked example

Imagine you are considering a tincture labeled 1,000mg CBD in a 30 milliliter bottle.

  1. Your package shows lot number 24A117. You open the report and see the same lot number. Good.
  2. The report is dated shortly before the bottle's manufacturing date, issued by an independent laboratory with an accreditation number listed. Good.
  3. The cannabinoid section shows CBD at 33.1 mg/mL. Multiply by 30 milliliters and you get about 993 milligrams, which is close to the label. Good.
  4. THC is listed as not detected, with a limit of quantification shown. That matches a product advertised as THC free, although not detected means below what the method can measure.
  5. The contaminant section shows heavy metals, pesticides, residual solvents, and microbials, each with limits and a pass. Good.
  6. The QR code opens the lab's own page with the same numbers. Good.

Not every report will be this clean, and an imperfect report is not always a reason to avoid a product. But if you cannot answer these six questions, ask the seller for what is missing.

How to use this on our products

If you are shopping our catalog, start with a product page and look for any posted lab information. Then compare the lot number on your package, when it arrives, with the report. If anything does not match, contact customer support and share a photo of the label. You can browse the full range under all products.

Final thoughts

A lab report will not make a product good, but it can make it knowable. The shopper who checks the lot number, compares potency to the label, looks for a contaminant panel, and notices what is missing is far better protected than one who takes a logo and a PDF on faith. Make it a habit, ask questions, and treat transparency as a feature of the product itself.

Keep reading

Frequently asked questions

What is a COA?

A certificate of analysis is a document from a testing laboratory listing the tests performed on a specific batch sample and the results. Third-party means the lab is independent of the seller.

How do I know a report matches my product?

Compare the batch or lot number on your package with the number on the report, and check that the report covers the finished product and is dated around that batch.

What does ND mean on a lab report?

ND means not detected, which means the compound was below the smallest amount the lab method could measure. It does not mean none exists in any amount.

Is a potency report enough?

No. Potency shows what cannabinoids are present, but contaminant panels for heavy metals, pesticides, residual solvents, and microbes help show whether the batch is free of substances that could be harmful.

What if I cannot find a lab report for a product?

Ask the seller to provide one for your specific lot before you buy or use the product. If they cannot, consider choosing a product that can show its testing.

References

  1. Warning Letters and Test Results for Cannabidiol-Related Products (opens in a new tab). U.S. Food and Drug Administration.
  2. FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) (opens in a new tab). U.S. Food and Drug Administration.
  3. Hemp Production Program (opens in a new tab). USDA Agricultural Marketing Service.
  4. Cannabis (Marijuana) and Cannabinoids: What You Need To Know (opens in a new tab). National Center for Complementary and Integrative Health, NIH.

These statements have not been evaluated by the Food and Drug Administration. These products are not intended to diagnose, treat, cure, or prevent any disease. This article is for general education only and is not medical advice. Talk with a qualified healthcare professional before using any new product, especially if you are pregnant, nursing, or take medication.

Compare tinctures with your checklist

Shop all products

Our ACTIV8 CBD Tinctures are a powerful and an effective way to support your overall well-being. Simply just add a few drops of CBD to your…

$24.99each

ACTIV8 CBD Tincture: 325mg, 1,000mg, 2,500mg, 5,000mg & 10,000mg CBD purchase option
Quantity
1

Taste the natural power of CBD with UrbanLeaf Naturals CBD Tinctures! Our tinctures are made with pure, unflavored CBD, carefully extracted…

$29.99each

UrbanLeaf Naturals CBD Tincture 500mg, 1,500mg & 3,500mg purchase option
Quantity
1

Looking for a powerful and effective way to support your overall well-being while also giving back to our troops? Our American CBD Tincture…

$29.99each

American CBD Tincture: 500mg, 2,500mg, 5,000mg & 8,000mg purchase option
Quantity
1

Keep reading

All guides