A Certificate of Analysis (COA) is the single most important document in the hemp and cannabis industry — and yet most shoppers have never learned how to read one. At My Cannabis Reviews, every brand we recommend backs its products with authentic, third-party COAs, so understanding these lab reports is the fastest way to shop with confidence.
This article is for general educational purposes and is not medical or legal advice.
What Is a COA?
A Certificate of Analysis is a lab report produced by an independent, third-party testing facility. It verifies exactly what is inside a product — the cannabinoid potency, and whether the product is free of contaminants like pesticides, heavy metals, residual solvents, and microbes. A trustworthy brand pays an outside lab (not its own in-house team) to run these tests, which is why third-party testing is the gold standard.
Where to Find a Product's COA
Reputable brands make COAs easy to locate. You will usually find them through a QR code printed on the packaging, a batch-number lookup tool on the brand's website, or a direct link on the product page. Brands like CBDfx, Galaxy Treats, Diet Smoke, and EMPE USA all publish batch-specific lab results, which is a big part of why we feature them.
The Key Sections of a COA
1. Cannabinoid Potency (Panel)
This is the section most people care about first. It lists the concentration of each cannabinoid — THC, CBD, CBG, CBN and others — usually shown as both a percentage and in milligrams per unit. Compare these numbers to what the label claims. If a gummy is advertised as 10mg of Delta-9 THC, the potency panel should confirm roughly that amount per piece.
2. Total THC and Legal Compliance
For hemp-derived products, the COA should confirm the item contains 0.3% or less Delta-9 THC by dry weight, the federal threshold. This is how compliant brands demonstrate their products are legal hemp.
3. Pesticides, Heavy Metals & Solvents
These contaminant panels should read “Pass” or show results below the allowed limits. Cannabis plants absorb heavy metals from soil, and extraction can leave solvent residue, so passing these panels is essential for a safe product.
4. Microbials & Mycotoxins
This panel screens for mold, yeast, bacteria like salmonella and E. coli, and mold-produced toxins. A clean result here matters most for anything inhaled or eaten.
Red Flags to Watch For
- No COA available at all, or only a vague “lab tested” badge with no document.
- A COA that does not match the batch number on your product.
- An expired or very old test date — results should correspond to the batch you actually bought.
- Potency numbers that differ wildly from the label.
- A report from the brand's own lab rather than an independent third party.
Brands that make their COAs easy to find
- CBDfx lab reports — searchable by batch number straight from the product page
- Galaxy Treats — batch COAs linked per product; save 25% with code 25LIFE
- JustCBD — full lab library published sitewide; save 25% with code LIFE25
- Diet Smoke — per-batch testing on every THC gummy run
We may earn a commission if you buy through these links, at no extra cost to you. Always verify the batch number on the COA matches the batch on your package.
The Bottom Line
Learning to read a COA takes just a few minutes and protects both your wallet and your health. Match the batch number, confirm the potency matches the label, and check that every contaminant panel passes. Every brand in our cannabis product reviews is chosen in part because it makes authentic COAs easy to access — so you can verify exactly what you are getting before you buy.
Frequently Asked Questions
How recent should a COA be?
Look for a test date within roughly 12 months of your purchase, and make sure the batch or lot number on the report matches the one printed on your package. An in-date report for a different batch tells you nothing about the product in your hand.
What does "ND" mean on a lab report?
ND stands for "not detected," meaning the compound was below the lab's limit of quantitation. On a contaminant panel that is what you want to see. On a cannabinoid panel it simply means that cannabinoid is not present in a measurable amount.
Can a COA be faked?
Yes, which is why the report should come directly from the testing lab's own portal or carry a QR code and lab contact details you can independently verify. A flat image file with no lab identifiers, no batch number, or no signature is a warning sign.