How to read a cannabinoid COA: the retailer's guide

A certificate of analysis (COA) is the lab report that tells you what is actually inside a batch of cannabinoid material. For a retailer or distributor, it is the single most useful document in the purchasing process. It is also the document that is most often skimmed, misread or accepted without checking. This guide explains how to read a COA line by line, how to check that the lab behind it is credible, and which warning signs should make you pause before you place an order.

Short answer

A useful COA names an accredited laboratory, refers to a specific batch number that matches your delivery, is recent, and covers more than the cannabinoid profile. For most cannabinoid products, you should expect results for cannabinoids, residual solvents, heavy metals, pesticides and microbiology. If one of these panels is missing, ask why before you buy.

What is a COA?

A COA is a document issued by a testing laboratory after it has analysed a sample from a production batch. It lists the methods used, the measured values and, where relevant, the limits that the values are compared against. The supplier usually commissions the test, but the results must come from the laboratory. A COA is not a marketing sheet and should not be edited by the seller.

Every COA should contain these basic elements:

• Name, address and accreditation number of the laboratory
• Sample ID and the batch or lot number of the product
• Date the sample was received and date of the report
• Product description (for example isolate, distillate, flower, gummies)
• Test methods, such as HPLC for cannabinoids or GC-MS for solvents
• Results with units, limits of quantification (LOQ) and a pass or fail assessment where limits apply
• Signature or electronic approval of a responsible person at the lab

The six key panels

Not every product needs every panel, but a complete COA for material that ends up in consumer products usually covers the following six areas.

1. Cannabinoid profile (potency)

This panel shows how much of each cannabinoid the sample contains, usually as a percentage by weight or in mg per gram. For an isolate you would expect one dominant value close to the declared purity. For a full spectrum or broad spectrum distillate you will see several cannabinoids. Check three things: that the main value matches the specification you were offered, that the sum of all cannabinoids makes sense, and how Delta 9 THC is reported. Values below the LOQ are often shown as "ND" (not detected) or "<LOQ". These are not the same as zero, so look at the LOQ the lab used.

2. Terpene panel

Terpenes matter for flower, hash, vape liquids and any product sold on aroma. The panel lists individual terpenes such as myrcene, limonene or caryophyllene. It is less relevant for isolates, which should contain little or no terpenes. If a supplier advertises a specific aroma profile, the terpene panel is where you can check it.

3. Residual solvents

Extraction and purification can leave traces of solvents such as ethanol, butane, propane, hexane or heptane. This panel shows whether those traces are below accepted limits. In Europe, many labs use the limits from the ICH Q3C guideline or the European Pharmacopoeia as a reference. Distillates and isolates should always have this panel.

4. Heavy metals

Hemp takes up metals from the soil. The usual four are lead, cadmium, mercury and arsenic. For food-type products such as gummies, compare the values with the maximum levels in EU food law, for example Regulation (EU) 2023/915 on contaminants.

5. Pesticides

A pesticide screen tests for a list of active substances. A good report states how many substances were screened, not just "pesticides: pass". In the EU, maximum residue levels are set under Regulation (EC) No 396/2005. A short list of ten or twenty substances is a weak screen.

6. Microbiology

This panel covers total aerobic count, yeasts and moulds, and pathogens such as E. coli and Salmonella. It is especially relevant for flower, hash and edibles. Some reports also include mycotoxins such as aflatoxins and ochratoxin A, which is a sign of a thorough test.

How to verify the lab

A COA is only as reliable as the lab that issued it. Before you rely on a report, check the following:

• Accreditation. Look for ISO/IEC 17025 accreditation. In Europe, national bodies such as DAkkS in Germany, ČIA in the Czech Republic or RvA in the Netherlands keep public registers. Search the lab name there and check that the accredited scope covers the methods on the report.
• Independence. The lab should not belong to the supplier. An in-house lab can be useful for production control, but for purchasing decisions an independent third-party lab is the standard.
• Contact details. The lab name, address and report number should be real and traceable. Many labs offer a verification service or a QR code that links to the original report.
• Consistency. Fonts, layouts and units should be consistent within a report. Mixed layouts can be a sign that the document was edited.

If you are unsure, send the report number to the lab and ask them to confirm that the document is genuine. Most accredited labs answer such requests quickly.

Red flags in a COA

These are the problems we see most often when buyers share COAs from other sources:

• No batch number, or a batch number that does not match your delivery. A COA that cannot be linked to the goods you receive is of little value.
• Outdated reports. A report that is more than twelve months old usually describes a different batch. Ask for the current one.
• Cherry-picked panels. A report that shows only potency, without solvents, metals or microbiology, tells you the strength but nothing about contaminants.
• Rounded or identical values across batches. Natural material varies. Identical results on several reports deserve a closer look.
• "Pass" without limits. A pass or fail statement only means something if the report also shows which limit was applied.
• Screenshots instead of PDFs. Ask for the original file from the lab.
• Missing THC detail. If the report only says "THC compliant" without a value and an LOQ, ask for the full figures.

What to ask your supplier

When you buy wholesale, it helps to make COAs part of the order process rather than an afterthought. A simple checklist:

1. Request the COA for the exact batch before payment, not a sample report.
2. Check that product name, batch number and date match the delivery note.
3. Compare the cannabinoid values with the specification on your order.
4. Make sure the panels fit the product type, using the table above.
5. Verify the lab accreditation once, then keep a record for future orders.
6. Store the COAs with your purchase records. Authorities and your own customers may ask for them.

FAQ

Author

Janosch Weidmann, M.Sc. Specialist author with a Master's degree in Naturopathy and Complementary Medicine. Focus on cannabinoid compounds and European product regulation. Writes for Canapuff B2B on active-ingredient chemistry, procurement due diligence and regulatory compliance. View author page.

Disclaimer

This article explains how to read laboratory reports. It is not legal advice and does not replace your own checks. Requirements for testing and labelling differ by country and product type.

Wholesale access

If you are a retailer or distributor, register for B2B wholesale access to see the full catalogue and pricing. Questions about a specific product or batch can go to our team via the contact page.