Somebody hands you a hemp product and a one-page lab report full of acronyms, tiny numbers, and a couple of charts. If your eyes glaze over, you're not alone. That report is called a Certificate of Analysis, or COA, and it's the single most useful document for knowing whether what's on the label matches what's actually in the jar.
The good news is that you don't need a chemistry degree to read one. You need to know which sections matter, what the numbers mean, and how to tell a real COA from a recycled or faked one. Here's how we walk our own customers through it, the same way we'd explain it standing in the barn on our farm in Wilmore, Kentucky.
What a Hemp COA Actually Is
A Certificate of Analysis is a lab report on a specific batch of product. A sample gets sent to a testing lab, the lab runs it through a battery of instruments, and the COA reports back what they found: how much of each cannabinoid is present, and whether the sample is clean of the contaminants nobody wants to consume. Think of it as the nutrition label's stricter, more honest cousin, written by a third party instead of the seller.
The word "batch" matters here. A COA describes one production run, not the brand in general. So the document you're reading should tie back to the exact item in your hand, not to something the company made two years ago. We'll come back to that when we talk about spotting fakes, because it's the detail most people skip.
Why a Real Seller Hands You the COA
Here's the simple test of a transparent hemp company: can you actually get the COA, and does it come from someone other than the seller? Anyone can print a nice label. A reputable farm pays an independent, accredited lab to test the product and then publishes those results so you don't have to take their word for anything. We post ours, and you can see how we handle batch testing on our third-party lab testing page.
If a seller can't produce a COA, or only offers a blurry screenshot with no lab name and no date, that's your answer. The whole point of third-party testing is that an outside party with no stake in the sale verifies the numbers. A self-reported result isn't worth much, and a missing one is worth even less.
Every product type should have its own batch testing, not one blanket report. The COA behind a jar of hemp flower covers that specific harvest, while the report behind a bag of CBD gummies covers that specific production run of edibles. If a company points you to a single COA for an entire catalog, slow down. Different products, grown and made at different times, need their own paperwork.
Reading the Potency Section
The first block most people look at is the cannabinoid potency panel. It lists each cannabinoid the lab tested for, usually with two columns: a percentage by weight and a milligram-per-gram or milligram-per-serving figure. For most hemp shoppers, three lines carry the weight.
CBD and the Other Cannabinoids
CBD is the headline number on most hemp products, and it's the one you'll want to match against the label. If the package claims a certain milligram count and the COA's per-unit math doesn't get you there, the label is optimistic. You'll also see minor cannabinoids like CBG, CBC, or CBN listed. They're normal, and seeing them broken out is a sign the lab ran a full panel rather than a quick look.
Total THC vs Delta-9 THC
This is the line that trips up the most people, because the COA reports THC in more than one way. "Delta-9 THC" is the specific compound the law cares about. "Total THC" is a calculated number that accounts for THCA converting into THC when the product is heated, using the standard formula of delta-9 plus about 0.877 times the THCA. The two numbers aren't the same, and knowing which one you're reading keeps you from panicking over a perfectly legal product.
The 0.3% Line
Under the 2018 Farm Bill, Public Law 115-334, hemp is defined as cannabis containing no more than 0.3% delta-9 THC by dry weight. That delta-9 figure on the COA is the one that has to sit at or below 0.3%. Our products are bred and tested to stay compliant with that limit, and the COA is where you confirm it for yourself rather than trusting a marketing line.
One more habit worth building: read the percentage column and the milligram column together. A percentage tells you concentration, while the milligram figure tells you how much actual cannabinoid sits in a gram or a serving. The label on the front of the package should line up with the milligram math on the COA. When the two agree, you're holding a product whose maker did the arithmetic honestly. When they don't, you've learned something useful before spending a dollar more.
The Safety Panels That Matter
Potency tells you what you're getting. The safety panels tell you what you're not getting, and for a lot of people that's the more important half of the page. A full COA screens for four categories of contaminant, and you want each one marked as passing or as below the action limit.
Pesticides
Hemp is a thirsty, absorbent plant that pulls whatever is in the soil up into its tissue. A pesticide screen confirms the crop wasn't doused with chemicals you'd rather not inhale or swallow. On our farm we grow to USDA Organic standards specifically so this panel comes back clean.
Heavy Metals
The same absorbency that makes hemp useful for cleaning up soil makes heavy metal testing essential. The lab checks for lead, arsenic, cadmium, and mercury. These should read as non-detected or comfortably under the safety threshold, full stop.
Residual Solvents
This one applies mostly to extracts and concentrates. When CBD is pulled out of the plant using solvents, traces can linger if the process is sloppy. A residual solvent panel confirms those leftovers are gone. For raw flower, you'll sometimes see this panel marked as not applicable, which is fine.
Microbials
Finally, the lab screens for the molds, yeasts, and bacteria like E. coli and salmonella that can grow on a poorly cured or poorly stored crop. A clean microbial panel is your sign the product was handled right from harvest to packaging.
How to Spot a Fake or Outdated COA
Now for the part that protects your money. A COA is only as good as its connection to the product in front of you, and there are three quick checks that catch most of the bad ones.
Match the batch. The COA carries a batch or lot number. So should your product, usually on the label or the bottom of the package. If those two numbers don't match, the report describes a different run and tells you nothing about what you bought. A mismatch isn't a small thing, it's the whole game.
Check the lab. A real COA names the testing lab, and the best ones come from a lab holding ISO 17025 accreditation, which is the international standard for testing competence. If there's no lab name, no accreditation, and no contact information, treat the document as decorative rather than verified.
Check the date. Cannabinoids shift slowly over time, and a COA from years back may not reflect the current batch. A fresh, dated report tied to a recent batch is what you want. An undated COA, or one that predates the product by a wide margin, is a flag worth heeding.
The Bottom Line on Reading a COA
A Certificate of Analysis turns a leap of faith into a quick verification. Confirm the delta-9 THC sits at or below the 0.3% line, check that the potency roughly matches the label, make sure all four safety panels pass, and tie the batch number on the report to the batch number on your product. Do that, and you've done more diligence than most buyers ever bother with. We publish our results because we'd rather you trust the numbers than trust us, and once you know how to read them, you can hold any seller to the same standard. That's the kind of transparency that keeps an industry honest, and it starts with one page of small print you now know how to read.
Frequently Asked Questions
What Is a Hemp COA?
A Certificate of Analysis is a batch-specific lab report from a third-party testing lab. It lists the cannabinoid potency of a product and confirms it passed safety screening for pesticides, heavy metals, residual solvents, and microbials.
What Is the Difference Between Total THC and Delta-9 THC?
Delta-9 THC is the specific compound the law limits. Total THC is a calculated figure that also accounts for THCA converting to THC when heated, using delta-9 plus roughly 0.877 times the THCA. The delta-9 number is the one that must stay at or below 0.3%.
How Do I Know If a Hemp COA Is Fake?
Run three checks: the batch or lot number on the COA must match the number on your product, the report must name an accredited testing lab such as one holding ISO 17025 accreditation, and the document must carry a recent date tied to your batch.
What Safety Tests Should a Hemp COA Include?
A full COA screens four contaminant categories: pesticides, heavy metals like lead and arsenic, residual solvents in extracts, and microbials such as mold, E. coli, and salmonella. Each should read as passing or below the action limit.
Why Does the 0.3% THC Limit Matter?
The 2018 Farm Bill defines hemp as cannabis with no more than 0.3% delta-9 THC by dry weight. The delta-9 figure on a COA is how you confirm a product meets that federal definition rather than taking the label's word for it.
