How to Read a Certificate of Analysis (COA): Don't Buy Cannabis Without Checking This

A Certificate of Analysis (COA) is a document issued by an independent, accredited laboratory that details the chemical composition and safety profile of a cannabis or hemp product. Think of it as a nutrition label — but instead of calories and vitamins, it shows cannabinoid potency, terpene content, and results from safety screenings.

COAs are the single most important quality indicator in the cannabis and hemp industry. Without regulated federal oversight like the FDA provides for food and pharmaceuticals, third-party lab testing is the primary mechanism ensuring product safety and label accuracy.

If a brand doesn't provide COAs for their products, that's not just a yellow flag — it's a deal-breaker. You should never consume a cannabis product that hasn't been independently tested.

The potency panel is the section most consumers look at first. It shows the concentrations of each cannabinoid detected in the sample:

• THCa — The raw, non-psychoactive precursor to THC. For flower, this is your primary potency number. Premium THCa flower typically ranges from 20–35%.
• Delta-9 THC — The active, psychoactive cannabinoid. For legal hemp, this must be below 0.3% by dry weight. In gummies, this is the key number — it tells you the actual THC dose per piece.
• Delta-8 THC — A milder psychoactive cannabinoid. Should only be present in Delta-8-specific products.
• CBD (Cannabidiol) — Non-psychoactive cannabinoid associated with relaxation and anti-inflammatory effects.
• CBG, CBN, CBC — Minor cannabinoids that contribute to the entourage effect.
• Total THC — Calculated as: Delta-9 THC + (THCa × 0.877). This represents the total potential THC if all THCa were converted. Important for regulatory compliance in some states.

The potency section should match or closely approximate what's advertised on the product label. If a gummy claims "10mg Delta-9 THC per piece" and the COA shows 6mg, that's a problem.

Beyond potency, reputable labs test for contaminants that could be harmful to consume:

Pesticides — Labs screen for dozens of common agricultural chemicals. Cannabis is a bioaccumulator, meaning it absorbs contaminants from its growing environment readily. A clean pesticide panel should show "ND" (Not Detected) or "Pass" across all compounds. Any "Fail" result means the product contains pesticides above acceptable limits.

Heavy metals — The four primary heavy metals tested are lead, arsenic, mercury, and cadmium. These can accumulate in the body over time and cause serious health issues. Cannabis grown in contaminated soil or processed with cheap equipment can contain unsafe heavy metal levels. Look for "Pass" or results below the action limits.

Microbial contaminants — This panel screens for bacteria (E. coli, Salmonella), mold, and yeast. Improperly stored or poorly cured flower is particularly susceptible to microbial contamination. This is critical for immunocompromised consumers.

Residual solvents — Relevant for extracts, concentrates, and vape products. This tests for solvents like butane, propane, ethanol, or hexane that may have been used during extraction. Properly purged products should show levels well below action limits.

Mycotoxins — Toxic compounds produced by certain molds. Even if a product passes the microbial test, mycotoxin screening catches the harmful chemicals molds may have already produced.

Not all COAs are created equal. Here are warning signs that suggest a COA may be unreliable or that the product may be unsafe:

• No lab name or accreditation — Legitimate COAs prominently display the lab's name, address, accreditation numbers (ISO 17025 is the gold standard), and contact information.
• No date — COAs should be dated and correspond to the specific batch of the product you're purchasing. Very old COAs (6+ months) may not reflect the current batch.
• No batch or sample number — Every COA should reference a unique batch or sample ID that can be cross-referenced with the product packaging.
• Missing safety panels — A COA that only shows potency but no pesticide, heavy metal, or microbial testing is incomplete. Potency-only testing is cheap; full-panel testing costs more but is essential.
• Results that don't match the label — Minor variation (±10–15%) is normal due to natural product variability. Larger discrepancies suggest either mislabeling or testing of a different batch.
• The company tests its own products — First-party testing is meaningless. Always look for independent, third-party lab results from an accredited facility.

Every product we sell comes with a full-panel COA from an independent, ISO-accredited laboratory. Here's our testing protocol:

• Full cannabinoid potency panel — THCa, Delta-9 THC, Delta-8 THC, CBD, CBG, CBN, CBC, and total THC
• Terpene profiling — Identifies and quantifies the dominant terpenes so you know exactly what effects to expect
• Pesticide screening — Comprehensive panel covering all common agricultural chemicals
• Heavy metals testing — Lead, arsenic, mercury, cadmium at or below California's strict action limits
• Microbial testing — E. coli, Salmonella, total yeast and mold counts
• Residual solvents — For all extract and vape products

COAs are linked on every product page, and we update them as new batches arrive. If you ever have questions about a specific lab result, our team is available at hi@officialfarmacy.co.