How to Read a CBD Product Certificate of Analysis (COA): A Retailer's Guide

A Certificate of Analysis (COA) is a third-party lab report that verifies the safety, potency, and compliance of CBD and other hemp products. For retailers, understanding these reports protects your business reputation, builds customer trust and confirms that you're offering products that meet legal standards and consumer expectations.

What Is a CBD Product Certificate of Analysis and Why Do Retailers Need It

A Certificate of Analysis is a formal document from an independent laboratory that reports on cannabinoid content, contaminants, and product safety for a specific batch of hemp  products. These third-party lab reports come from facilities with no financial stake in the product outcome, providing unbiased verification.

For retailers, COAs deliver critical value:

Risk reduction: Prevents stocking contaminated or mislabeled inventory that could harm customers and your reputation.

Customer trust: Enables staff to answer questions about potency and purity with documentation, not marketing promises.

Quality control: Confirms products match supplier claims, batch after batch.

Competitive differentiation: Separates trustworthy brands from operations cutting corners, like those sellingquestionable CBD products found at gas stations.

How to Read a COA Step by Step

Every COA follows a similar structure. Retailers who know what to look for can evaluate any report in under two minutes. At CBDistillery, we test every batch through ISO 17025-accredited labs before products reach retail partners.

Verify the Independent Lab Details

Start by confirming lab identity. Look for the lab name, contact information, and accreditation details. ISO/IEC 17025 is the gold standard for testing lab competence; it means the lab meets international quality and technical standards for calibration, methodology and quality control.

Check that the report includes lab name and location, contact details (phone, email or website), and accreditation logo or statement (ISO 17025 is preferred). Missing or vague lab information is an immediate red flag. The lab should have no ownership connection to the manufacturer.

Match the Batch or Lot Number

Every COA ties to a specific production batch or lot number, typically a combination of letters and numbers like "LOT-2024-0315A." This number should match the product packaging exactly. Locate the batch number on the COA header, find the corresponding number on the product label, and reject products where these don't align.

A COA for a different batch, even if it’s a batch of the same product type, does not verify your current inventory. Each production run can vary based on hemp source, extraction conditions, and formulation timing, so it’s important to verify the lab result for the batch in your current inventory.

Check the Test Date for Freshness

It’s also important to check the date on the COA to confirm when the lab analyzed the sample. CBD products can degrade over time, particularly when exposed to light, heat or air. A test date that is too old can be a sign that the tested products are no longer fresh, or even that the rest results are from an earlier batch.

CBD tinctures typically maintain stability for up to 24 months when stored properly, while gummies usually have a bit shorter shelf life. The shelf life of hemp flower is approximately 6 months, though the raw ingredients used to make a hemp product can affect the shelf life as well. If the test age exceeds the typical shelf life of that product type, request updated testing.

Compare Cannabinoid Potency with the Label

The cannabinoid profile section shows measured amounts of CBD, THC and other cannabinoids, expressed in milligrams per gram (mg/g) or percentage. Find the total CBD value on the COA and compare it to the label claim. You should also check that delta-9 THC levels stay within regulatory limits; at the time publication, federal regulations limit delta-9 THC to 0.3% or less in hemp products, though some states have implemented lower regulations and federal regulations could change in the future.

Small variances are normal due to natural plant variability, analytical method differences between labs, and variations between quality standards at different brands. For example, CBDistillery does not release product batches if testing shows CBD levels 1mg below the label claim. Other brands may allow cannabinoids levels at ±10–15% of the label claim. Variances of more than 20% should be cause for additional questions.  Understanding how lab testing workshelps retailers recognize acceptable variance versus concerning discrepancies.

Review Contaminant Results for Pass Status

Test results for contaminants should show “Pass,” “ND” (Not Detected), “Absent,” “<LOD” (below the Limit Of Detection) or a similar notation. Reputable testing includes these four categories:

• Heavy metals: Lead, mercury, cadmium, arsenic (measured in parts per million or ppm)
• Microbial contaminants: Mold, yeast, bacteria including E. coli and Salmonella (measured in colony-forming units or CFU)
• Pesticides: Agricultural chemicals (typically screening for 400+ compounds)
• Residual solvents: Leftover extraction chemicals like ethanol, butane, or hexane (measured in parts per million)

Any failure, elevated level, or missing panel should prompt immediate questions to your supplier. For reference, acceptable heavy metal limits typically fall below 10 ppm for lead and below 1 ppm for mercury, though exact limits vary by state.

Confirm Signatures and QR Codes

Legitimate COAs are signed or digitally verified by the lab, often with a QR code or unique report ID. Look for a lab signature, stamp, or digital verification mark. Scan any QR code to confirm it links to the lab's official website and displays the same data as the printed report. Unsigned reports or broken QR links suggest alteration or fabrication.

CBDistillery includes QR codes on all product packaging that link to batch-specific COAs, allowing both retailers and end customers to verify test results.

Top Red Flags That Signal a Problem COA

Even one of these red flags warrants a serious conversation with your supplier, or even walking away entirely.

Missing Accreditation or Contact Info

Without clear lab identification, contact details, or accreditation statements, the COA is unverifiable. You should be able to call or email the lab directly to confirm that they conducted the testing.

Outdated Test Dates

Test dates older than the product's typical shelf life raise questions about inventory freshness and whether the company is reusing old test results from previous product batches. Request updated testing if the test dates exceed the expected shelf life for that specific product category.

THC Above Legal Limit

Any COA showing total THC above regulatory limits is a hard stop; do not stock this product. At the time of publication, that federal limit is 0.3% in accordance with the 2018 Farm Bill. However, it’s important to note that some states, like California and Ohio, have implemented stricter THC limits or different hemp regulations. Federal limits and regulations could also change, so make sure you verify current limits at the state and federal level.

Large Potency Discrepancies

If the COA shows 300 mg CBD but the label claims 1,000 mg, you're looking at mislabeled products or mismatched documentation. The typically accepted variance is ±10–15%, though some brands have stricter internal controls; anything beyond 20% variation warrants immediate investigation. Consistent underdosing may indicate cost-cutting measures, and either underdosing or overdosing can indicate poor manufacturing or quality controls (as well as potentially creating problems for customers seeking to take a specific amount of CBD).

Incomplete Contaminant Panel

If test results are missing entire panels (like showing no pesticide testing, no heavy metals screening, or absent microbial analysis), then the COA is incomplete. Full transparency requires testing across all major contaminant categories. A comprehensive COA typically runs 2-4 pages with detailed results tables.

Keep in mind that these different tests and screenings may be included in one comprehensive COA or may be spread across two or three Certificates of Analysis. If multiple COAs are given, confirm that each COA was performed by an accredited lab and check the dates on each COA for recency.

Retailer COA Checklist You Can Use Today

Print this checklist or save it digitally for quick reference when evaluating new suppliers or products:

☐ Lab name and accreditation (ISO 17025 preferred) clearly stated
☐ Batch/lot number matches product packaging exactly
☐ Test date is newer than the product's expected shelf life
☐ Total CBD aligns with label claim (no more than 20% variation, though some brands have stricter internal standards)
☐ Total THC at or below 0.3% for hemp products
☐ Heavy metals panel shows PASS, ND, Below Limit Of Detection (LOD) or similar
☐ Microbial panel shows PASS, ND, Below Limit Of Detection (LOD) or similar
☐ Pesticide panel shows PASS, ND, Below Limit Of Detection (LOD) or similar
☐ Residual solvent panel shows PASS, ND, Below Limit Of Detection (LOD) or similar (if applicable)
☐ QR code or report ID verifies authenticity
☐ Lab signature or digital verification present

Move Forward with Confidence in Lab-Tested CBD Products

Learning to read COAs transforms you from passive buyer to informed retail partner who can confidently vet suppliers, educate customers, and build a reputation for quality. When you stock products backed by rigorous third-party testing and clear documentation, you're offering peace of mind that drives repeat business and referrals.

CBDistillery provides easy access to COAs for every product we offer, with rigorous third-party testing through ISO 17025-accredited laboratories and transparent documentation. Every batch is tested before distribution, and results are publicly accessible via QR codes on product packaging. Explore our complete range of lab-tested CBD products and see the difference that quality verification makes.