A Certificate of Analysis is the single most important piece of paper in the hemp world. It is also the one most buyers skim and forget.
Without one, you have no idea what is in your gummy, your vape, or your jar of flower. With one, you can verify cannabinoid content, ban heavy metals, and spot fake product before you spend a dollar.
This guide by ELYXR walks you through every section of a real COA in plain language. By the end, you will read lab reports faster than the average shop clerk.
What a Certificate of Analysis Actually Is?
A COA is a printed or PDF report from a third-party laboratory. It documents the chemical composition of a hemp product batch.
The lab takes a sample from the production run, runs it through a series of tests, and writes down the results.
Reputable brands publish the report on their website and link it to the product page. The QR code on the box opens the same report on your phone.
If a brand will not show you a COA, walk away. That single rule prevents the majority of bad hemp purchases.
Section 1: The Header
The top of every COA carries the lab name, address, and accreditation number. Look for ISO 17025 accreditation. That standard means the lab follows internationally recognized testing procedures.
Below the lab info, you should see the brand or product name, the batch or lot number, and the test date.
Match the batch number on the COA to the batch number printed on your product. If they do not match, the report does not apply to what you are holding.
Section 2: The Cannabinoid Panel
This is the headline data. The panel lists every detected cannabinoid in milligrams per piece or percentage by weight.
Premium THCA flower in 2026 tests at 22 to 30 percent total THCA.
Delta-9 gummies should list the exact milligrams of Delta-9 per serving and per package.
Mushroom products should list muscimol content in milligrams, separate from ibotenic acid.
Mitragynine products should list both mitragynine and 7-hydroxymitragynine even when 7-OH content is naturally low.
If the panel shows the active compound as ND (not detected) or below 1 percent of expected strength, the product is underdosed.
Section 3: The Compliance Numbers
Hemp products must legally stay under 0.3 percent Delta-9 THC by dry weight.
The COA shows the exact Delta-9 percentage. Verify it sits under 0.3 percent for any product labeled hemp.
For products built to deliver Delta-9 in milligrams (gummies, beverages), the math is different. The Delta-9 is dosed by milligrams, not by percentage. The total package weight stays large enough that 0.3 percent is satisfied.
If the COA percentage looks high but the brand claims hemp, ask for the dry-weight calculation. Reputable brands have it ready.
Section 4: Terpene Profile
Premium flower and live resin COAs include terpene results.
Look for the named terpenes: myrcene, limonene, caryophyllene, pinene, linalool, humulene, ocimene.
High myrcene means heavier body effects. High limonene means brighter mood and citrus aroma.
Total terpene percentage above 2 percent is excellent. Above 3 percent is exceptional.
If you are shopping for lab-tested THCA hemp flower, the terpene panel tells you almost everything about how the strain will feel when you light it up.
Section 5: Contaminants
This is the section that protects your health. A real COA tests for four contaminant groups.
Heavy metals. Lead, cadmium, arsenic, and mercury. Results should be ND or under regulatory limits.
Pesticides. Sample sizes vary by lab, but premium tests run 60 to 90 pesticides. Results should be ND.
Microbials. Yeast, mold, E. coli, and salmonella. Especially important for flower and gummies.
Residual solvents. Specifically for vape oils and extracts. Butane, propane, ethanol, hexane. Should be under regulatory limits or ND.
Spotting Fake or Outdated COAs
Check the test date. Anything older than 12 months is stale. Cannabinoid potency degrades over time.
Check the lab name against an online database. Some scam brands fake the lab logo entirely.
Check the batch number against the actual product. Scam brands recycle one COA across many batches.
Look for a digital signature or QR code that links back to the lab itself, not the brand.
If anything feels off, screenshot the COA, email the lab directly, and ask them to confirm the report. Real labs respond in a few business days.
Pro Habits for Lab-Report Verification
Save a screenshot of every COA you check. Build a folder on your phone for the brands you trust.
Compare COAs from the same brand across multiple batches. Consistent quality shows up in repeated reports.
If a brand publishes only one COA covering many batches, ask why. The answer should be specific and clear.
Cross-reference the COA with independent customer reviews. Verified reviews discussing potency back up or contradict the lab data.
Bookmark the lab's contact page. If you ever have doubts, the lab will confirm whether they actually produced the report.
What a Great Brand's COA Tells You?
Cannabinoid content matches the label within 10 percent.
Terpene panel shows real named terpenes at measurable percentages.
Heavy metals are ND across the board.
Pesticides are ND on all 60 to 90 tested compounds.
Microbials are ND or below regulatory limits.
The lab is ISO 17025 accredited and the report is recent.
Find a brand that hits all six and stick with them.
Frequently Asked Questions
Q. How often should a COA be updated?
Each production batch needs its own COA. A new lab report should appear every time the product is remanufactured.
Q. Does every cannabinoid product require a COA?
Hemp law does not require one universally, but the responsible industry treats it as standard. Buy only from brands that publish them.
Q. Can a COA be wrong?
Yes. Lab errors happen. That is why high-quality brands use multiple labs and re-test on a schedule.
Q. What about full-panel versus partial-panel reports?
Full panels include cannabinoids, terpenes, and all four contaminant groups. Partial panels test only some of these. Always prefer the full panel.
Q. Is a COA proof of legality?
No. The COA proves the chemistry. State law decides legality. Always confirm your state allows the cannabinoid in question.
Final Word
Reading a Certificate of Analysis takes five minutes once you know what to look for. That five minutes saves you from underdosed gummies, contaminated flower, and outright scam products.
Make the habit automatic. Scan the COA QR code before checkout. Cross-check the batch number. Confirm the contaminant panel.
The hemp market is mostly trustworthy now, but the few bad actors still exist. The COA is your single best defense, and it is free to use.