Understanding the Certificate of Analysis (COA): A Buyer’s Guide to CBD Lab Reports

Key takeaways

• A Certificate of Analysis (COA) is a laboratory report stating what is in a specific batch of product and confirming it has been screened for contaminants.
• The most reliable COAs come from an independent laboratory accredited to ISO/IEC 17025, not from in-house testing alone.
• A COA must be batch-specific and dated — one generic report reused across the whole catalogue is close to worthless.
• Read four things in particular: the cannabinoid profile, the THC content, the contaminant screens, and who issued the report.
• The COA reports the THC figure; comparing it against the legal limit in your market is your responsibility as the reseller.

What is a Certificate of Analysis, and why does it exist?

A Certificate of Analysis (COA) is the report a laboratory produces after testing a sample of a product. For CBD, it does two jobs: it confirms the cannabinoid content (how much CBD, THC and other cannabinoids are present) and it confirms the product has been screened for contaminants such as pesticides, heavy metals, microbiological hazards and residual solvents.

It exists because cannabinoid products cannot be judged by appearance. You cannot see THC content or a pesticide residue with the naked eye. The COA is the objective record that turns “trust us” into “here is the evidence.” For a reseller, it is both a quality-assurance tool and a layer of protection: if a question ever arises about a batch, the lab report is your documentation.

How to read a COA, field by field

A COA can look intimidating, but almost every report contains the same core sections. Here is what each one means and what to check.

Sample and batch identification

Near the top you will find a batch or lot number, a product name and often a sample ID. The single most important check here is simple: does the batch number on the COA match the batch number on the product you are actually buying? A COA only certifies the specific batch it was run on. If the numbers don’t match — or there is no batch number at all — the document doesn’t tell you anything reliable about your stock.

The cannabinoid profile

This is the table listing each cannabinoid the lab measured — typically CBD and CBDA, THC and THCA, and often CBG, CBN, CBC and others — usually expressed as a percentage by weight (or in mg per unit). You may see acidic forms (CBDA, THCA) reported separately from their neutral forms (CBD, THC), because raw, unheated material contains mostly the acidic versions.

Two practical notes. First, “total CBD” often combines CBD and a converted portion of CBDA, so check whether a figure is the raw or the total value. Second, results below the lab’s detection threshold are usually marked ND (not detected) or referenced against the LOQ/LOD (limit of quantification / limit of detection) — meaning the substance was either absent or below the level the instrument can reliably measure.

THC content

For most European resellers this is the line that gets read first, and for good reason. COAs frequently report total THC, calculated from delta-9-THC plus the THC that would be released from THCA on heating (a common formula is total THC = THCA × 0.877 + delta-9-THC). Some jurisdictions regulate on total THC, others on delta-9 specifically.

The COA gives you the number. What it does not do is tell you whether that number is legal in your market — limits differ across Europe and change over time. That comparison is your responsibility as the seller. See our country-by-country guide to THC limits for the wider picture, and treat that article as general information, not legal advice.

Contaminant screening

A complete COA does more than measure cannabinoids — it confirms the product is safe to sell. Look for these screens, usually reported as “pass/fail” or against defined limits:

• Pesticides — residues from cultivation.
• Heavy metals — typically lead, cadmium, arsenic and mercury, which plants can draw from soil.
• Microbiological — moulds, yeast and harmful bacteria.
• Residual solvents — relevant for extracts and concentrates, where solvents may be used in processing.
• Mycotoxins — toxins produced by certain moulds (often tested on flower).

A report that covers cannabinoids but omits contaminant testing entirely is only telling you half the story. The screens that apply vary by product type — residual solvents matter most for lab extracts, for instance — so a thorough supplier tests appropriately for each format. If you are deciding what to stock, our overview of flower, resin and extracts explains how these categories differ.

The laboratory and accreditation

Who ran the test matters as much as the result. Look for the laboratory’s name and, ideally, evidence of accreditation to ISO/IEC 17025 — the recognised international standard for the competence of testing and calibration laboratories. Accreditation means an independent body has assessed the lab’s methods and reliability.

A report should also be traceable: a lab name, a report or certificate number, and contact details, so you could in principle verify it. An anonymous PDF with no identifiable laboratory behind it is a document you cannot stand behind either.

Dates and validity

Check the test date (or issue date). A COA describes the batch as it was tested; a report from years ago tells you little about current stock. Pair the date with the batch number, and you have the two anchors that make a COA meaningful.

Third-party vs in-house testing: why independence matters

Some suppliers test their own products in-house; others send samples to an independent third-party laboratory. Both can produce a COA, but they are not equally reassuring.

The issue with in-house testing alone is a conflict of interest: the party that profits from selling the product is also the party grading it. Independent, accredited testing removes that conflict — the lab has no stake in the result. In-house testing isn’t inherently worthless, especially as a routine internal check, but for the documentation you rely on as a buyer, third-party accredited results carry far more weight. When a supplier offers both, that is a good sign.

Red flags in a lab report

Use these as quick disqualifiers:

• No batch number, or a batch number that doesn’t match your product. The report doesn’t certify what you’re buying.
• One generic COA reused across the catalogue. Each batch should have its own.
• No identifiable laboratory or accreditation. You can’t verify it or stand behind it.
• Cannabinoids tested, but no contaminant screening. Half a report.
• An old test date. It may not describe current stock.
• Reluctance to share the COA at all. The most telling signal of them all.

What to request from every supplier

Before you commit to an order, ask for:

1. The current COA for the specific batch you are buying.
2. Confirmation of who tested it and whether the lab is accredited.
3. A report that includes both the cannabinoid profile and contaminant screens.
4. A COA you can actually read and verify — named lab, batch number, date.

If a supplier provides these without hesitation, you are dealing with a professional operation. This is one of the ten checks in our broader guide on how to choose a CBD wholesale supplier, and it connects directly to how shipments are documented — see how compliant, low-profile EU shipping works.

Working with Highness. When you speak to a Highness sales agent, you can request the lab documentation for the products you’re considering and ask any of the questions above before you order. Contact the Highness sales network to request product details and a sample.

Frequently asked questions

What is a COA for CBD?
A Certificate of Analysis is a laboratory report that states the cannabinoid content of a specific batch of product and confirms it has been screened for contaminants such as pesticides, heavy metals, microbes and residual solvents.

How do I know if a COA is trustworthy?
Check that it is batch-specific, dated, and issued by a named, independent laboratory — ideally one accredited to ISO/IEC 17025. The batch number on the report should match the product you are buying.

What is the difference between THC and total THC on a COA?
Delta-9-THC is the THC present as tested. Total THC also accounts for the THC that would form from THCA when heated, using a conversion factor (commonly THCA × 0.877 + delta-9-THC). Some regulations are based on total THC, others on delta-9.

Does a COA tell me whether a product is legal to sell?
No. It gives you the figures — including THC content — but legal limits vary by country and change over time. Comparing the result against the rules in your own market is your responsibility as the reseller.

Is in-house testing as good as third-party testing?
Third-party testing by an accredited lab carries more weight, because the lab has no stake in the result. In-house testing can be a useful internal check, but independent results are what you should rely on as a buyer.

About this guide: prepared for resellers and buyers learning to evaluate CBD lab reports. Reviewed by Highness Distribution. This article explains how to read a COA and does not constitute legal advice; regulatory limits vary by country and change over time, so always verify the current rules in your own market.