How to Read a CBD
Certificate of Analysis

A Certificate of Analysis is the most important document in the CBD industry. It's also one of the most ignored. Most buyers glance at it if they see it at all, and brands know this — which is why so many get away with COAs that are outdated, from unaccredited labs, or straight-up fake.

After reading this guide, you'll be able to evaluate any CBD COA in under three minutes. That skill alone is worth more than any product recommendation we could give you.

Step 1 — Verify the lab

The first thing you check is not the results. It's who ran the test.

The lab must be ISO 17025 accredited. ISO 17025 is the international standard for testing and calibration laboratory competence. It means the lab's methods, equipment, and personnel have been independently verified to produce reliable results. A non-accredited lab can produce any numbers it wants with no accountability.

How to verify: The lab name appears at the top of every COA. Search "[lab name] ISO 17025" and confirm their accreditation status. Reputable accredited labs include ProVerde Laboratories, SC Labs, Botanacor, Purity Labs, and Kaycha Labs — among others. There are many legitimate accredited labs. The key is confirming accreditation, not recognizing the name.

Step 2 — Check the date

A COA is only valid for the product batch it tested. And batches change. A COA from 2022 tells you nothing about a product manufactured in 2025. Formulas change, hemp sourcing changes, manufacturing processes change.

Maximum acceptable age: 12 months. Anything older than 12 months should be treated as if no COA exists for the current product. Some premium brands update COAs every 3–6 months — a positive signal worth noting.

The test date appears near the top of every legitimate COA, typically labeled "Analysis Date," "Test Date," or "Date Received." It may also appear as a sample collection date plus a report date — use the report date.

Step 3 — Verify the cannabinoid panel

The cannabinoid panel is the section most people focus on — and it's important, but not in isolation from the other checks.

Here's what a simplified cannabinoid panel looks like, and what to look for:

Checking label accuracy

The CBD result on the COA needs to match what's on the product label. Here's how the math works. If a product label says "1000mg CBD per 30ml bottle," that's 33.3mg per ml. The COA will typically show mg/g (milligrams per gram). Since 1ml of oil weighs approximately 1g, you can roughly compare mg/ml to mg/g.

Acceptable variance: within 10% of label claim. A product claiming 33mg/ml showing 31–36mg/ml on the COA is acceptable. Showing 22mg/ml means the product is significantly underdosed and the label is misleading.

Step 4 — Check the THC level

Delta-9 THC must be below 0.3% for a hemp product to be federally legal. This is the legal threshold — not a quality indicator. Any number below 0.3% is compliant.

If you need zero THC — for drug testing or personal preference — look for "ND" (Non-Detect) on the Delta-9 THC line. This means THC was not detected above the lab's minimum detection limit, which is effectively zero for practical purposes.

If the product claims to be "THC-free" and the COA shows any detected THC quantity above ND, the label is inaccurate. This matters for drug testing purposes.

Step 5 — Verify the contaminant panels

This is where many brands cut corners and where many buyers stop looking. A cannabinoid-only COA — showing just the CBD and THC levels — is not a complete COA. It tells you potency but nothing about safety.

A complete COA includes testing for:

• Pesticides: Should test 50+ common pesticide compounds. Look for "PASS" across all analytes or "ND" (Non-Detect).
• Heavy metals: At minimum should test lead (Pb), arsenic (As), mercury (Hg), and cadmium (Cd). All should be ND or well below action limits.
• Residual solvents: Tests for leftover extraction solvents like ethanol, butane, propane, and others. Should all be ND or below action limits.
• Microbials (optional but positive): Tests for harmful bacteria like E. coli and Salmonella. Presence is a serious red flag.

Red flags — when to walk away

Green flags — signs of a quality brand

The two-minute COA check — quick reference

When you're evaluating a brand quickly, here's the 120-second version:

• Is there a COA? If no — stop here.
• Is the test date within 12 months? If no — treat as no COA.
• Is the lab ISO 17025 accredited? Search "[lab name] ISO 17025" to verify.
• Does CBD content match the label within 10%? Quick math check.
• Is Delta-9 THC below 0.3%? If zero THC needed — is it ND?
• Is there a pesticide and heavy metals panel? Does it show PASS or ND?

Six checks. Two minutes. All the information you need to make a confident decision.