A CBD certificate of analysis can look authoritative before you read a single number. The logo, tables and scientific units create instant credibility. Your job is to answer a harder question: does this report actually tell you something useful about the product and batch you are considering?
This CBD Basics guide gives you a repeatable way to check the batch, laboratory, cannabinoid results, THC reporting, detection limits and contaminant panels.
Before Reading the Chemistry, Answer Five Questions
If the package itself is confusing, begin with our eight-check CBD label guide.
- Does the product name match?
- Does the batch or lot number match?
- Is the report current enough to make sense for this batch?
- Can you identify the laboratory?
- Is this the full report, including the panels you care about?
What Is a CBD COA?
Readers new to cannabinoids may also want the plain-language What Is CBD? guide.
A certificate of analysis, or COA, is a laboratory report describing the results for a tested sample. A CBD COA may include cannabinoid potency and one or more contaminant panels.
The report is only as relevant as the link between the tested sample and the product you want to evaluate. That is why CBDCafe.org starts with identity and traceability before looking at a “Pass” badge.
Step 1: Match the Product and Batch
Compare the report with the package or current product listing.
| COA field | What to compare | Potential problem |
|---|---|---|
| Product name | Name, strength, flavor, form and size | The report is for another product or potency |
| Batch / lot | Exact code printed on the package | No match or no usable batch identifier |
| Sample description | Oil, gummy, capsule, topical, flower or other form | The sample type does not match the product |
| Dates | Sample, received, tested and report dates where shown | The timeline does not make sense for the batch |
A generic “representative COA” is weaker evidence than a report tied to the batch being sold.
Use the CBD COA Batch-Match Checklist to work through the package and report identifiers in one place.
Step 2: Identify the Laboratory
Look for the laboratory name, address or contact information, report identifier and any accreditation information.
What Does ISO/IEC 17025 Accreditation Mean?
ISO describes ISO/IEC 17025 as the international standard used to assess the competence, impartiality and consistent operation of testing and calibration laboratories. Accreditation bodies use the standard when assessing laboratories.
An accreditation claim is useful evidence, but do not stop at a logo. When possible, check the laboratory’s current accreditation and scope. A lab can be accredited for some testing work without every method or analyte you care about automatically falling inside that scope.
Step 3: Check the CBD Result Against the Label
Find CBD in the cannabinoid or potency panel. You may also see CBDA, the acidic precursor to CBD.
Then compare the laboratory’s result with the product claim. The difficult part is often the unit.
| Unit | Common meaning | Buyer note |
|---|---|---|
| mg/g | Milligrams of analyte per gram of sample | Common in oils, edibles and plant material reports |
| mg/mL | Milligrams per milliliter | Useful for liquids when volume is known |
| % | Percent by mass or another stated basis | Read the report basis before converting |
| mg/unit | Milligrams per gummy, capsule or other unit | Easiest to compare with a per-piece label claim |
Do not compare numbers that use different units until they are put on the same basis. CBDCafe.org’s Product Passports record the original units before calculating any comparison. For arithmetic that preserves those limits, use the CBD COA Unit Converter; it requires density before converting between mg/g and mg/mL.
Step 4: Read the THC Section Carefully
Our CBD spectrum comparison explains why the batch result matters more than the front-label category.
A useful cannabinoid panel may report several THC-related fields. Common ones include:
- Delta-9 THC
- THCA
- Delta-8 THC
- Total THC
Do not assume the biggest THC-related number is the only one that matters. Legal definitions, product claims and drug-testing concerns can ask different questions.
As of September 11, 2026, the current federal statutory hemp definition still uses no more than 0.3% delta-9 THC on a dry-weight basis. H.R. 6500, signed September 2, created a split transition: the Section 781 exclusions for products containing cannabinoids that cannot be naturally produced by Cannabis sativa L. remain tied to November 12, while most remaining Section 781 hemp-definition changes are scheduled for December 11, 2026 unless later federal action changes the framework.
Check the current Federal Hemp Law Status Tracker before using a COA result as part of a legal analysis.
Step 5: Understand ND, LOD and LOQ
This is one of the most important parts of a CBD COA when a product is marketed as THC-free.
LOD: Limit of Detection
NIST defines the limit of detection as an estimate of the lowest concentration of an analyte that can be reliably distinguished from the blank matrix and identified by the analytical method.
LOQ or LLOQ: Limit of Quantitation
The U.S. Environmental Protection Agency describes the lower limit of quantitation as the lowest point of quantitation, often the lowest concentration in a calibration curve, with verification steps tied to the method and laboratory quality system.
ND: Non-Detect
ND usually means the laboratory did not report the analyte as detected above its applicable threshold. The report should tell you enough about the method or reporting limits to interpret that result.
Read the full THC-free and non-detect guide.
Step 6: Look Beyond Potency
A one-page cannabinoid panel can answer potency questions while leaving contaminant questions untouched.
Depending on the product and testing program, a fuller COA may include:
Heavy Metals
Common panels include lead, cadmium, arsenic and mercury.
Pesticides
Panels can cover many agricultural chemicals, with the exact list varying by method and jurisdiction.
Residual Solvents
These tests look for solvents that may remain after extraction or manufacturing steps.
Microbiology
Panels may include bacteria, yeast, mold or other microbial targets.
Mycotoxins
These are toxins produced by certain molds and can appear on separate panels.
The absence of a contaminant from a report does not mean the product passed that test. It may mean the analyte or panel was never tested.
Step 7: Ask What “Pass” Actually Means
Some COAs show a large PASS result. That can be useful, but a pass is only meaningful when you know the rule being applied.
The threshold could come from:
- A state cannabis or hemp rule
- A laboratory reporting rule
- A client or manufacturer limit
- Another named standard
A pass on cannabinoid potency does not automatically mean contaminants were tested. A pass on the tested sample also does not establish that every unit ever sold by the brand has the same composition.
Step 8: Check Whether the Report Is Complete
Brands sometimes display a clean potency summary while the full report contains several pages. Look for page counts, panel tabs or a full PDF.
Useful questions include:
- Are all pages present?
- Is there a cannabinoid panel?
- Are contaminant panels present where the seller claims they were tested?
- Are methods or reporting limits visible?
- Does the report contain a laboratory signature, certification statement or report ID?
- Does the report show amendments or revisions?
Four Difficult CBD COA Reading Cases
These examples show how to preserve uncertainty instead of forcing a neat answer from incomplete documents. The numbers and identifiers are fictional.
1. The COA Uses mg/g but the Bottle Uses mL
Hypothetical: a 30mL oil is labeled 3,000mg CBD, while its COA reports 100mg/g CBD. You cannot convert 100mg/g into an exact bottle total from volume alone because grams and milliliters are different measurements. A documented density or the mass of the exact bottle contents is still needed.
If the same product documentation also gave a density of 0.92g/mL, the arithmetic could proceed: 100mg/g × 0.92g/mL = 92mg/mL, and 92mg/mL × 30mL = 2,760mg for that hypothetical bottle. Without the density, the package-total comparison stays Unknown. Use the CBD COA Unit Converter to keep the units visible.
2. The Report Date and Lot Timeline Do Not Line Up Neatly
Hypothetical: a package shows lot 26A100, but the certificate was issued months before the seller says that finished lot was manufactured. The date difference is a reason to investigate, not automatic proof that the certificate is false. The report could describe an ingredient, an earlier production stage, or a different record entirely.
Compare the sample description, received date, test date, report date, finished-product identity and seller lot. If the documents do not establish how the dated report maps to the package, record the batch relationship as Unknown rather than filling the gap.
3. The Seller Lot and Laboratory Sample ID Are Different Codes
Hypothetical: the package says lot LOT-2408, while the laboratory report says sample 24-0731-005. Different codes are not automatically a conflict. Laboratories commonly use their own report, order or sample identifiers.
The useful question is whether the seller, QR-code route, certificate metadata or another traceable record connects those two identifiers. If that mapping is shown, preserve both codes. If no mapping is visible, do not assume they refer to the same batch. Work through the CBD COA Batch-Match Checklist before reading the chemistry as batch-level evidence.
4. THC Says ND but the Report Shows Detection Limits
Hypothetical: delta-9 THC is reported as ND, with an LOD of 0.002% and an LLOQ of 0.005%. The defensible reading is that the laboratory did not report a detection under the method and criteria shown. It is not evidence that the concentration is exactly 0.000%.
NIST defines LOD around the lowest concentration that can be reliably differentiated from the blank matrix and identified by the analytical method. EPA describes LLOQ as the lowest point of quantitation, commonly tied to the low end of the calibration curve and laboratory verification. Keep the laboratory’s ND notation and limits intact instead of converting ND to zero.
Copy a Request for the Exact COA and Missing Records
Use this when a seller page, QR code or certificate leaves the product-to-batch match incomplete. Replace the bracketed fields. Do not include private health information.
What to Compare When the Records Arrive
- Product name, form, strength, size and variant.
- Seller lot or batch number and any mapped laboratory sample/report ID.
- Sample, received, test and report dates.
- CBD, THC and other relevant cannabinoid results with their original units.
- LOD, LOQ/LLOQ or other reporting-limit language used for ND results.
- Which contaminant panels were actually performed.
- Density or finished-product mass only when it is needed for a defensible unit conversion.
CBD COA Red Flags
For a guided review, open the COA Red-Flag Checker alongside the report and record missing or conflicting details as you go.
| Red flag | Why it matters |
|---|---|
| Batch on COA does not match package | The report is not batch-level evidence for the item in hand |
| No product identity or vague sample name | It is difficult to connect the report to the finished product |
| Only a screenshot or cropped potency table | Context, report ID, pages, methods or contaminant results may be missing |
| ND results with no visible reporting limits | The strength of a “non-detect” claim is hard to judge |
| “THC-free” label but measurable THC on COA | The marketing claim and batch evidence conflict |
| CBD result far from label claim | The package potency and tested sample may not agree |
| Contaminant claims with no contaminant panels | “Tested for purity” may be broader than the evidence shown |
| Accreditation logo with no way to identify the lab | The accreditation claim cannot be checked easily |
| Very old generic COA used across current batches | The report may describe historical rather than current product evidence |
Why a COA Is Useful but Not a Safety Guarantee
A COA can answer valuable questions about the tested sample. It cannot tell you everything about a person’s response to CBD, medication interactions, pregnancy, long-term use or drug testing.
The FDA states that CBD can cause liver injury, can affect how other drugs work and can cause side effects such as drowsiness and gastrointestinal distress. The CDC also warns that products labeled CBD or hemp may contain THC or contaminants.
If you take medication, have a health condition, are pregnant or breastfeeding, or experienced a concerning reaction, discuss the situation with a qualified clinician or pharmacist.
What CBDCafe.org Records from a COA
Each Product Passport is designed to preserve the evidence instead of collapsing it into one star rating.
- Product and batch identity
- Report and sample dates
- Laboratory identity
- Accreditation claim and scope check where available
- CBD result and original units
- Delta-9 THC, THCA and total THC where reported
- LOD and LOQ where shown
- Heavy-metal panel status
- Pesticide panel status
- Residual-solvent panel status
- Microbial panel status
- Mycotoxin panel status
- What was missing
A missing field is recorded as Unknown, not quietly converted to Pass.
Check the CBD Product Passport database for batch-specific examples, or compare seller-level documentation in the CBD Brand Report Cards.
Next Step
Use the CBD COA Batch-Match Checklist to confirm the product and lot before continuing.
Frequently Asked Questions
What Does COA Stand for in CBD?
COA stands for certificate of analysis. It is a laboratory report describing the results for a tested sample.
What Does ND Mean on a CBD COA?
ND commonly means not detected or non-detect. Read the laboratory’s LOD, LOQ or reporting threshold before treating ND as equivalent to zero.
What Is the Difference Between LOD and LOQ?
LOD concerns the lowest level an analytical method can reliably distinguish and identify. LOQ concerns the lowest level that can be measured reliably with acceptable precision and bias.
Does a COA Prove a CBD Product Is Safe?
No. It can provide useful evidence about the tested sample and analytes included in the report. It cannot rule out every contaminant, predict individual reactions or replace medical guidance.
Is an ISO/IEC 17025 Accredited Lab Enough?
Accreditation is valuable evidence of laboratory competence. You should still match the product and batch, check the lab’s scope where possible and read the actual results.
How Recent Should a CBD COA Be?
There is no single age cutoff that answers every case. The stronger question is whether the report plausibly belongs to the current batch. A batch-matched report is more useful than an arbitrary freshness number with no traceability.
Sources
- ISO: ISO/IEC 17025:2017, testing and calibration laboratory competence
- National Institute of Standards and Technology: Limit of Detection (LOD)
- National Institute of Standards and Technology: Lower Limit of Quantitation (LLOQ)
- U.S. Environmental Protection Agency: Detection and Quantitation
- U.S. Food and Drug Administration: Consumer Update on CBD
- Centers for Disease Control and Prevention: About CBD
- Gidal et al., 2024: Product labeling accuracy and contamination analysis of commercially available CBD products
- U.S. Code, 7 U.S.C. § 1639o: Federal Hemp Definition
Core source review: September 2, 2026. Worked examples, federal transition language, and LOD/LLOQ source links updated: September 11, 2026. Prepared by CBD Cafe Editor from the linked records. Unless stated otherwise, this page has not been individually reviewed by a physician, pharmacist, toxicologist, lawyer, or accredited laboratory professional. General educational information only.