How to Read a Hemp COA: A Complete Step-by-Step Guide

If you have ever clicked the "Lab Results" link on a hemp product page, you have probably seen a dense PDF full of chemical names, percentages, and pass/fail marks that look more like a chemistry exam than a shopping aid. That document is called a Certificate of Analysis, or COA, and it is the single most important piece of information you can review before buying any hemp or THCa product. It tells you what is actually in the jar — not what the label claims, not what the marketing promises, but what an independent laboratory measured using calibrated instruments.

Unfortunately, most shoppers skip right past the COA because it looks intimidating. That is a mistake. Once you understand the structure of a COA, reading one takes less than two minutes, and it is the fastest way to tell a reputable hemp brand from one that is cutting corners — or worse, selling something that is not federally compliant. This guide walks through every section of a hemp COA, explains what each number means, and shows you exactly how to spot a document that has been faked or manipulated.

What a COA Actually Is

A Certificate of Analysis is a report generated by a third-party laboratory after it tests a specific batch of a specific product. "Third-party" is the operative phrase — the lab has no financial relationship with the brand beyond being paid a flat testing fee, and it has no incentive to inflate potency numbers or hide contamination. A legitimate COA is tied to one batch number, one product, and one testing date. It is not a generic document reused across an entire product line.

Every COA should answer four questions: What cannabinoids are present, and in what quantity? Is the product compliant with the 2018 Farm Bill's 0.3% delta-9 THC limit? Are there contaminants — pesticides, heavy metals, microbial life, or residual solvents — present at unsafe levels? And who performed this testing, using what methods? If a document you are looking at cannot answer all four, it is incomplete at best.

Section 1: Laboratory Accreditation and ISO 17025

Before you look at a single cannabinoid number, check who ran the test. Reputable hemp testing labs are accredited to ISO/IEC 17025, an international standard for the competence of testing and calibration laboratories. This accreditation is not a marketing badge — it means an independent accreditation body (in the U.S., typically A2LA or ANAB) has audited the lab's equipment calibration, staff training, chain-of-custody procedures, and statistical methods, and re-audits them periodically.

You should be able to find the lab's name, address, and accreditation number printed directly on the COA, usually in the header or footer. Take that accreditation number and search the accrediting body's public directory (A2LA and ANAB both maintain searchable databases). If the lab does not appear, or the scope of its accreditation does not cover the specific tests listed on the document, treat the entire report with suspicion. Labs that only test hemp informally, without accreditation, are far more likely to produce inflated potency numbers because they have a financial incentive to keep their client brands happy — a conflict of interest that ISO 17025 accreditation and true independence are designed to eliminate.

Section 2: The Header and Batch Information

The top of a COA should include a set of identifying details that let you match the document to the exact product in your hand:

• Batch or lot number — this should match a number printed on the product packaging itself, usually on a sticker or stamped near the barcode.
• Sample name and product type — flower, edible, vape, tincture, and so on.
• Date received and date tested — these tell you how fresh the data is.
• Date reported — when the lab finalized the document.
• Client name — the brand or distributor that submitted the sample.

The batch number is the most important field on the entire page, because it is what ties the abstract PDF to the physical product you are about to consume. If a brand only publishes one COA per product line and that same document is reused for every batch produced over the following year, cannabinoid and contaminant levels can drift significantly between harvests, and you have no way of knowing what you are actually getting. Reputable brands re-test every batch and make it easy to match a batch number on the package to the correct report, often through a QR code or a batch lookup tool on the website.

Section 3: The Cannabinoid Panel

This is the section most people look at first, and it typically appears as a table listing each cannabinoid the lab tested for, along with its concentration expressed as a percentage of the total sample weight (and sometimes in milligrams per gram or milligrams per package for edibles). Here is what you are likely to see, and what each line means:

• THCa (tetrahydrocannabinolic acid) — the raw, non-intoxicating acidic precursor to THC that is naturally present in the hemp plant. This is almost always the largest number on a hemp flower COA, sometimes 20% or higher.
• Delta-9 THC (D9) — the intoxicating compound most people associate with cannabis. This is the number regulators care about most, because federal law defines legal hemp as containing no more than 0.3% delta-9 THC by dry weight.
• Delta-8 THC (D8) — a THC isomer, less potent than delta-9, sometimes present naturally in small amounts or added via conversion in certain product categories.
• CBD (cannabidiol) and CBDa — non-intoxicating cannabinoids commonly associated with relaxation and wellness support.
• CBG (cannabigerol) and CBGa — sometimes called the "mother cannabinoid" because other cannabinoids are synthesized from it earlier in the plant's growth cycle.
• CBN (cannabinol) — a byproduct of THC degradation over time, often associated with sedative effects.
• CBC (cannabichromene) — a minor cannabinoid increasingly studied for its own distinct properties.
• Total THC and Total Cannabinoids — calculated summary rows explained in detail below.

Any value listed as "ND" means "not detected" — the compound was below the lab's limit of quantification. A value of "<LOQ" means the compound was detected but in a quantity too small to measure precisely. Neither of these is a red flag by itself; they simply mean that particular cannabinoid was not present in a meaningful amount.

Section 4: The 0.3% Delta-9 THC Compliance Check

Federal hemp law, established by the 2018 Farm Bill, defines legal hemp as cannabis containing no more than 0.3% delta-9 THC on a dry-weight basis. This is the single legal threshold that separates federally legal hemp from federally controlled marijuana. On the COA, look specifically at the "Delta-9 THC" row — not the THCa row, not the "Total THC" row. The delta-9 number by itself must be at or below 0.3% for the product to be compliant hemp.

This is where a lot of confusion happens, because raw hemp flower can legally contain a large amount of THCa — sometimes 15%, 20%, or higher — while still testing under 0.3% delta-9 THC, because THCa has not yet been converted into delta-9 THC. THCa only converts to delta-9 THC through decarboxylation, a chemical reaction triggered by heat (such as smoking, vaping, or cooking). This is precisely why THCa flower is legal to sell and ship as hemp, even though it becomes intoxicating once heated. A compliant COA will show a low delta-9 number and a much higher THCa number, and that gap is expected and normal.

Section 5: Understanding the Total THC Calculation

"Total THC" or "Total Potential THC" is a calculated field, not a directly measured one. Because THCa converts to delta-9 THC at a known efficiency rate when heated, labs use a standard formula to estimate the maximum psychoactive potency of a product after it is smoked, vaped, or otherwise decarboxylated:

Total THC = (THCa × 0.877) + Delta-9 THC

The 0.877 multiplier accounts for the loss of mass that occurs when THCa loses a carboxyl group (CO2) during decarboxylation. This Total THC figure is the number that actually tells you how potent a product will feel once consumed — it is far more useful for gauging effects than the raw delta-9 number, which will always be near zero on unheated hemp flower. When you compare potency between two flower products, compare their Total THC percentages, not their raw delta-9 percentages.

Section 6: The Terpene Panel

Many higher-end COAs include a separate terpene panel, listing compounds like myrcene, limonene, caryophyllene, linalool, and pinene along with their percentages. Terpenes are the aromatic compounds responsible for a strain's smell and flavor, and many researchers believe they interact with cannabinoids to shape the overall experience — often referred to as the entourage effect. You can read more about how specific terpenes influence effects in our terpenes guide. A terpene panel is not required for compliance, but its presence is a good signal that a brand is investing in more comprehensive testing than the bare legal minimum.

Section 7: Contaminant Panels

This is arguably the most important part of the COA from a health and safety standpoint, and it is the section most likely to be missing or abbreviated on a low-quality or fraudulent report.

Pesticide Testing

Hemp is a bioaccumulator, meaning it readily absorbs whatever is in the soil and water around it, including pesticide residue if the plant was treated during cultivation. A full pesticide panel screens for dozens of specific compounds — common ones include myclobutanil, bifenthrin, chlorpyrifos, and permethrin — each with a maximum allowable concentration measured in parts per million or parts per billion. Look for a table with individual pesticide names and "Pass" or a specific measured value under the legal action limit next to each one, not a single vague "pesticides: pass" line with no supporting detail.

Heavy Metal Testing

Hemp is particularly efficient at pulling heavy metals out of soil, which is part of why it has historically been used for soil remediation. That same property becomes a liability when hemp is grown in contaminated soil and then consumed. A proper heavy metal panel tests for the four metals of greatest concern: cadmium, lead, arsenic, and mercury. Each should show a specific measured value (often in parts per million) compared against a maximum limit — states like California have set some of the strictest allowable thresholds, and many labs test to that standard regardless of where the hemp was grown, since it represents a conservative safety benchmark.

Microbial Testing

Hemp flower is a plant material that is cured and stored, which creates real risk for mold, yeast, and bacterial growth if it is not dried and stored properly. Microbial panels typically test for total yeast and mold count, along with dangerous specific pathogens including E. coli and Salmonella. Because moldy or bacterially contaminated flower can cause respiratory infections or foodborne illness, this panel should always be present on flower and pre-roll products, with clear pass/fail results for each pathogen tested.

Residual Solvent Testing

This panel is most relevant for extracted or concentrated products — vape cartridges, dabs, distillate-infused edibles — because solvents like butane, propane, or ethanol are commonly used during extraction. Residual solvent testing verifies that any solvent used in processing was properly purged from the final product before it reached your hands. A full panel lists each solvent tested with its measured concentration versus its allowable limit; a passing result means the extraction process was executed properly.

Section 8: Matching the Batch Number to Your Product

Once you have located a COA, take a moment to physically compare the batch number listed on the report to the batch number printed on your product's packaging. This step is easy to skip but critically important — a brand's website might display several COAs for a product line, and if you do not confirm the batch match, you could be looking at data from a different production run entirely. Reputable brands make this simple with a QR code directly on the packaging that links straight to the correct, batch-matched report. If a brand cannot easily show you which COA corresponds to the exact batch you purchased, that is a meaningful gap in transparency.

How to Spot a Fake or Manipulated COA

Unfortunately, as hemp has grown into a multi-billion dollar industry, so has the incentive to fake compliance documents. Here is what to watch for:

• No lab letterhead or contact information. Every legitimate COA includes the testing lab's name, address, phone number, and often a signature or digital verification seal from a responsible scientist.
• Inconsistent fonts or formatting. A COA that has clearly been edited in image-editing software, with mismatched fonts or blurry numbers pasted over a template, is a serious warning sign.
• No accreditation number, or one that does not verify. Always cross-check the lab's accreditation against the A2LA or ANAB public database.
• Suspiciously round or repeated numbers across multiple "different" batches — real biological samples show natural variation from batch to batch; identical numbers across supposedly different harvests suggest the same document is being reused or fabricated.
• Missing contaminant panels entirely, with only a cannabinoid table present. A COA that only shows potency and nothing else is not a complete compliance document.
• No batch number, or a batch number that does not match anything on the packaging.

Why In-House Testing Is a Red Flag

Some brands will proudly advertise that their products are "lab tested" while quietly relying on their own in-house equipment rather than sending samples to an independent, accredited third party. In-house testing is not inherently useless for quality control during production, but it should never be presented as a substitute for third-party verification. A brand testing its own product has an obvious financial incentive to report favorable numbers, and without external accreditation, there is no independent check on accuracy. If a COA does not clearly name an outside laboratory with its own address and accreditation separate from the brand selling the product, be skeptical.

Putting It All Together: A Quick Checklist

Before you buy, or before you consume something you already purchased, run through this list:

• Does the lab name, address, and ISO 17025 accreditation number appear on the document, and does it verify in a public accreditation database?
• Does the batch number on the COA match the batch number on your packaging?
• Is the delta-9 THC value at or below 0.3%?
• Does a full contaminant panel appear — pesticides, heavy metals, microbials, and (for extracts) residual solvents — with individually listed results, not a single vague pass/fail?
• Is the report dated within a reasonable window of the product's production date, not years old?
• Is this testing performed by a genuinely independent third party, not the brand's own lab?

If you can answer yes to all six, you are looking at a trustworthy document from a brand that takes compliance and consumer safety seriously. To see this transparency in action, you can browse third-party lab results across our own full menu, including THCa flower, where every batch is independently tested before it ships. If you are still getting familiar with THCa itself, our guide to THCa flower is a good next stop, and if drug testing is a concern, read our breakdown on whether THCa shows up on drug tests.

Frequently Asked Questions

What counts as a "passing" COA?

A passing COA shows delta-9 THC at or below the federal 0.3% threshold, along with contaminant results (pesticides, heavy metals, microbials, and residual solvents where applicable) that fall within the lab's designated action limits. Every individual contaminant category should be marked "Pass" or show a specific measured value below its legal limit — not just an overall summary statement.

How old can a COA be before it's no longer trustworthy?

Ideally, a COA should be dated within a few months of the product's manufacturing date, and it must correspond to the specific batch you purchased. Cannabinoid content can degrade over time — THC and other compounds break down gradually into CBN and other byproducts — so a COA from a harvest more than a year old may no longer reflect what's actually in the package.

Where can I find a product's COA?

Reputable hemp retailers publish COAs directly on the product page or make them accessible via a QR code on the packaging. If you cannot find one on a brand's website, contact customer service and ask directly — a legitimate company will provide it without hesitation. If they stall, deflect, or cannot produce one at all, treat that as a serious red flag.

What does ISO 17025 accreditation actually mean?

ISO/IEC 17025 is an international standard that certifies a testing laboratory's technical competence, including equipment calibration, staff qualification, and quality management systems. Accreditation is granted and periodically audited by an independent body such as A2LA or ANAB in the United States. It is the closest thing the hemp testing industry has to a universally recognized seal of scientific reliability.

Why does THCa show up so much higher than delta-9 THC on flower COAs?

THCa is the non-intoxicating acidic form of THC naturally produced by the hemp plant, and it has not yet converted into delta-9 THC. That conversion, called decarboxylation, only happens when the flower is heated — through smoking, vaping, or cooking. Because raw flower hasn't been heated, its delta-9 reading stays near zero even when THCa is high, which is exactly what keeps it compliant as legal hemp.

Can a product legally contain 0% delta-9 THC and still get you the effects associated with THC?

Yes. Because THCa converts to delta-9 THC when heated, a product can be fully compliant hemp (under 0.3% delta-9 THC in its raw, unheated state) while still producing significant psychoactive effects once smoked or vaped, since the conversion happens in real time during use rather than before sale.

Is a COA the same thing as a "batch report" or "test results"?

Generally, yes — different brands use slightly different terminology, but a COA, batch report, and lab results all refer to the same type of document: an independent laboratory's findings for a specific product batch. What matters is not the label on the document but whether it contains all the elements described in this guide.

This article is for educational purposes only. Hemp laws vary by jurisdiction. Not medical or legal advice.