Best Ways to Read a CBD Certificate of Analysis

September 25, 2026 at 6:54 am

A certificate of analysis (COA) is the lab report behind a CBD product. The fastest way to read one: match the product and batch number to what you are holding, check that the CBD result is close to the label, confirm what the report says about THC, and then look for which contaminant tests were actually run, and on what material.

That last step is where people get tripped up: a report can be genuine and still cover less than you assume. Below are ten habits for reading a COA, using one of our own reports as the worked example.

Why bother? In a 2017 study published in JAMA, researchers bought 84 CBD products online and tested them. Only about 31% were within 10% of their labeled CBD (about 43% had more, about 26% less), and THC was detected in 18 of the 84 (Bonn-Miller et al., JAMA 2017). A COA is how you check a specific bottle instead of trusting a label.

Key takeaways

Start with identity: product name, batch or lot number, and the date. If they do not match your product, nothing else on the report applies to it.
Potency is a math check. Multiply the mg per mL result by the bottle size and compare it with the label.
"ND" means "not detected": below the lab's limit of detection for that test, which is not the same as a guaranteed zero.
A finished-product COA and an ingredient COA answer different questions. Read which one you are looking at.
Look for an identifiable, ISO/IEC 17025 accredited lab and a way to verify the report.

1. Confirm the report matches your product and batch

On our CBD Comfort Drops report from SC Labs, the sample name is "Proof CBD Drops 15ml," the batch number is HT0101-050325, the sample was collected and received on 05/07/2025, and the report was issued 05/15/2025. The "tested for" block lists our company name and Sebastopol, California address.

Compare the batch number with the one on your bottle. If a brand posts one report for a product it sells year round, ask whether it covers your batch.

2. Check who did the testing, and whether you can verify it

A trustworthy COA names the lab, its address, and a license or accreditation number. Our report is from SC Laboratories in Santa Cruz, California, and its footer cites ISO/IEC 17025:2017 accreditation through PJLA (accreditation number 87168). It also carries a CoA ID (250507P016-002) and a QR code "to verify authenticity of results."

ISO/IEC 17025 is the international standard that sets requirements for the competence, impartiality, and consistent operation of testing laboratories (ISO). It means an outside body audits how the lab works, not that every result is correct.

Ours also says "For quality assurance purposes. Not a Regulatory Hemp Lab Test Report," meaning it was commissioned for quality checks, not as a state compliance filing.

3. Read the amendment notes

Labs sometimes reissue a report. Ours is an amendment, and the notes give the reason: "Unit/Serving Mass Change." An amendment is not a red flag by itself, as long as the reason is stated.

4. Do the potency math yourself

The summary page shows Total CBD of 1,027.125 mg per unit. The detail page shows why: CBD measured 68.475 mg per mL, and the unit is 15 mL. Multiply the two and you get 1,027.125 mg, against a label claim of 1,000 mg. That is about 103% of the label, inside the plus or minus 10% window the JAMA researchers used to call a product "accurately labeled."

Also note "measurement uncertainty" (plus or minus 2.5541 mg per mL for CBD here), the lab's stated margin around the result.

5. Understand "total" CBD and "total" THC

Raw hemp contains acid forms (CBDa, THCa) that convert to CBD and THC with heat, so labs report "total" values. Our report prints the formula: Total THC = delta-9 THC + (THCa x 0.877), and Total CBD = CBD + (CBDa x 0.877).

This matters more than ever. Federal law has defined hemp by a delta-9 THC concentration of not more than 0.3% on a dry weight basis, and a change passed in November 2025 (Section 781) moves the definition to total THC, including THCa, starting 12 November 2026 (7 U.S.C. 1639o). A delta-9-only report tells you less.

6. Learn what LOD, LOQ, and ND mean

Each row has two small numbers before the result:

LOD (limit of detection): the lowest amount the method can reliably detect.
LOQ (limit of quantitation): the lowest amount the method can measure with acceptable precision and accuracy. It is always higher than the LOD.
ND (not detected): the result fell below the LOD.

These follow standard method-validation guidance (FDA, ICH Q2). On our report, delta-9 THC has an LOD of 0.002 mg per mL and an LOQ of 0.014 mg per mL, and the result is ND, as are THCa, delta-8 THC, and THCV. So "Total THC: Not Detected" means below those limits in this sample. A result written as "<LOQ" would mean something was detected but was too small to measure precisely.

7. Scan the rest of the cannabinoid profile

A broad-spectrum product should show minor cannabinoids alongside CBD. Ours lists CBN (1.470 mg per mL), CBC (1.332), CBDV (0.864), CBG (0.772), and CBL (0.236), for a sum of 1,097.235 mg of cannabinoids per unit. Our full-spectrum vs. broad-spectrum guide explains the terms.

8. Note exactly which safety tests were run

Slow down here. Our finished-product report has two safety sections, both microbiology: PCR testing for Salmonella and Shiga toxin-producing E. coli (both ND), and plate counts for coliforms, total aerobic bacteria, and total yeast and mold (all ND).

It does not include pesticides, heavy metals, residual solvents, or mycotoxins. Those panels appear on a separate report for the raw ingredient, which is the next habit.

9. Read the ingredient COA as its own document

Some brands also test their raw CBD before it goes into a product. Ours is a KCA Laboratories report (Nicholasville, Kentucky; ISO/IEC 17025:2017 accredited quality system) for a CBD distillate, batch BK-25-363, completed 11/05/2025. It shows CBD at 83.6% and total delta-9 THC ND, and it runs the full contaminant set: heavy metals (arsenic, cadmium, lead, mercury all ND), mycotoxins (ND), microbials (ND), 61 pesticides, and 44 residual solvents.

Read it closely. Most pesticide and solvent lines are ND, but two pesticide lines and one solvent line show a measured amount (one pesticide as "<LOQ"), and four pesticide lines read "NR," which this lab defines as sample matrix interference that may affect accuracy. The summary lists each panel as "Tested" rather than printing pass or fail, so if you want to compare a number with a limit, you would look up the applicable limit or ask the brand.

Also compare dates. This ingredient report was completed in November 2025, and our finished-product report is from May 2025, so they describe different lots. An ingredient report shows how a supplier's material is tested; it is not a test of your bottle. Ask any brand which ingredient lot went into your batch. All of our current reports are on the lab testing page.

10. Watch for the common warning signs

A few patterns deserve a second look: no batch number (or one that never changes), no identifiable lab, potency far off the label in either direction, THC reported only as delta-9, and a "clean" claim with no contaminant data anywhere. Our list of CBD label red flags goes further. If you are shopping for a pet, our guide to reading a pet CBD lab report applies the same steps to pet products.

FAQ

What is a certificate of analysis for CBD?

A report from a testing lab listing what was measured in a specific sample: cannabinoids, and sometimes contaminants such as microbes, pesticides, heavy metals, and solvents.

Does "ND" mean there is zero THC?

Not exactly. ND means the amount was below the lab's limit of detection for that method. On a well-run report, the LOD is printed next to the result so you can see how low that threshold is.

Why would a finished product and its ingredient have separate COAs?

The finished-product report confirms what is in the bottle. The ingredient report shows what the raw material was tested for before use, often including the full contaminant panels. Read both, and check whether batches and dates line up.