How to Read a CBD Lab Report (COA): A Beginner's Guide | PureCraft CBD

A Certificate of Analysis (COA) is the single most important document in CBD. It's what separates verified, trustworthy products from the vast number of mislabeled, contaminated, or simply ineffective ones flooding the market. And yet most CBD buyers have never read one — either because brands don't publish them, or because the format looks technical and unfamiliar.

 

This guide demystifies the COA completely. By the end, you'll know what every section means, exactly what numbers to look for, how to spot a red flag, and why a COA from the wrong type of lab is nearly worthless. Reading a COA takes about 90 seconds once you know what you're looking for — and it's 90 seconds that can save you money, protect your health, and keep your drug test clean.

 

This is a supporting post in PureCraft's Buyer Guides cluster. For related content, seeFull Spectrum vs. Broad Spectrum vs. Isolate CBD,Nano CBD: What It Is and Why It Actually Matters, andCBD Oil vs. Gummies vs. Capsules: Which Is Right for You?.

 

Why the CBD Market Needs COAs

CBD is sold as a dietary supplement — a category with far less regulatory oversight than pharmaceuticals. The FDA does not approve CBD products before they go to market, does not verify label claims, and does not systematically test products for contaminants. This regulatory gap has created a market where quality varies enormously — and where consumers have no protection beyond the voluntary practices of individual brands.

 

The data on CBD product quality is not reassuring. A2017 study in JAMA that examined 84 commercially available CBD products found that 26% contained less CBD than labeled, 43% contained more CBD than labeled, and 21% contained THC not disclosed on the label. A subsequentClean Label Project analysis of CBD products found pesticide residues, heavy metals, and other contaminants in a significant percentage of products tested.

 

The Certificate of Analysis is the industry's self-regulatory mechanism for this problem. When conducted by an accredited independent laboratory and verified against the specific product batch you're buying, a COA provides reliable, third-party-verified information about what's actually in your CBD product.

 

What Is a Certificate of Analysis?

A Certificate of Analysis is a document produced by an independent analytical testing laboratory that reports the results of chemical and microbiological testing performed on a specific sample of a product. For CBD, a comprehensive COA will include:

 

 

A COA from a reputable accredited lab is the closest thing the CBD market has to regulatory verification. It can't guarantee a perfect product — but it provides documented evidence that is far more reliable than any marketing claim.

 

The Single Most Important Thing About a COA: Independence

Before you read a single number on a COA, there is one question that determines whether the document is worth reading at all: was the testing conducted by a laboratory that is genuinely independent of the brand?

 

In-house testing — where the brand tests its own products in its own lab — provides essentially no consumer protection. The incentive to report favorable results is obvious. A brand can truthfully say 'lab tested' while having tested it themselves. Third-party testing by a laboratory with no financial or ownership relationship to the brand is the minimum meaningful standard.

 

Beyond independence, laboratory accreditation matters. Look for:

 

 

The lab name to look for on PureCraft's COAs:PureCraft uses accredited independent laboratories for all batch testing. The lab name, accreditation number, and contact information are listed on each COA, allowing you to independently verify the laboratory's credentials.View PureCraft's COAs here.

 

Reading a COA Section by Section

 

 

COA Section	What It Shows	What to Look For	Red Flags
Lab & accreditation info	Lab name, address, certifications, test date	ISO/IEC 17025 accreditation or equivalent; date within 12 months	No accreditation listed; lab is same company as brand
Sample information	Product name, batch/lot number, sample received date	Batch number matches your product label	Missing batch number; vague product description
Cannabinoid profile	CBD, THC, CBG, CBN, CBC and other cannabinoid levels per serving and per gram	CBD matches label claim (±10–15%); THC is ND or <0.3%	CBD significantly lower than label; THC above 0.3%; 'per batch' not per serving
THC compliance	Delta-9 THC percentage by dry weight	Below 0.3% for legal compliance; 'ND' for broad spectrum	Any reading above 0.3%; 'estimated' or 'calculated' THC
Residual solvents	Traces of butane, ethanol, propane, and other extraction solvents	All at ND or below action limits	Any solvent above state or USP action limits
Pesticides panel	Dozens of agricultural pesticide compounds	All at ND or Pass	Any 'Fail'; pesticides above action limits
Heavy metals	Lead, arsenic, cadmium, mercury levels	All at ND or below action limits (often USP <232>)	Any metal above limits; missing panel entirely
Microbials	Bacteria, mold, yeast, E. coli, Salmonella	All Pass or ND	Any 'Fail'; missing panel
Mycotoxins (sometimes)	Aflatoxins and ochratoxin from mold	All at ND or Pass	Any detection above limits; often omitted — acceptable

 

 

The Cannabinoid Panel: The Most Critical Section

The cannabinoid panel is where most buyers focus — and where the most important product claims are either verified or contradicted. Here's what each element means:

 

CBD Content

The CBD content should be reported per serving (e.g., per 1ml dropper, per gummy) and ideally also per gram or milliliter. Compare this to the label claim. The FDA allows a 20% variance in supplement labeling, but reputable CBD brands aim for tighter accuracy — ideally within 10–15% of label claim.

 

Example:Label says 25mg CBD per gummy. COA shows 24.2mg per gummy. This is within acceptable variance — the label is accurate. COA shows 11.8mg per gummy — this is significant under-delivery and a serious red flag.

 

THC Content — The Critical Number

For broad-spectrum products:THC should read as 'ND' (non-detectable) or '<LOQ' (below limit of quantification). Any measurable THC in a broad-spectrum product means the THC removal process was incomplete — the product doesn't meet true broad-spectrum standards.

 

For full-spectrum products: THC should be at or below 0.3% by dry weight. Any reading above 0.3% means the product is not compliant under the 2018 Farm Bill and is technically a Schedule I substance under federal law, regardless of what the label says.

 

The WADA athlete's rule:For drug-tested athletes, even a COA showing 0.28% THC in a full-spectrum product is a meaningful risk — daily consumption accumulates THC in fatty tissue over time. Only 'ND' is truly safe for drug-tested use.

 

Minor Cannabinoids (CBG, CBN, CBC, etc.)

For broad-spectrum products, the COA should show measurable amounts of minor cannabinoids alongside CBD. If you see CBD at 25mg and all other cannabinoids at ND, you may have been sold an isolate-based product mislabeled as broad-spectrum. The presence of CBG, CBN, and CBC at meaningful levels confirms the full-plant extract you're paying for.

 

Understanding the Units

CBD content may be reported in different units across COAs — be sure you're comparing correctly:

 

 

Contaminant Panels: Don't Skip These

Many buyers look at cannabinoid content and stop there. The contaminant panels are equally important — and missing panels are themselves a red flag.

 

Residual Solvents

CBD is extracted from hemp using solvents — typically ethanol, CO2, or hydrocarbon solvents like butane or propane. Residual solvent testing confirms that extraction solvents have been removed to safe levels. CO2-extracted CBD typically produces the cleanest residual solvent profile. Ethanol extraction is also generally clean. Hydrocarbon solvents can leave more residue if purging is incomplete.

 

Action limits for residual solvents vary by state cannabis regulation and USP guidelines. Butane, for example, has an action limit of approximately 890 ppm in most frameworks. Look for all listed solvents at ND or below their action limits.

 

Pesticides

Hemp is a bioaccumulator — it absorbs compounds from the soil efficiently. This makes it an excellent phytoremediation plant, but also means pesticide-contaminated soil produces pesticide-contaminated hemp. A comprehensive pesticide panel tests for 50–100+ individual agricultural chemicals. All should be at ND or below action limits.

 

Why USA-grown hemp matters here:USDA-regulated domestic hemp is grown under agricultural oversight that limits permitted pesticide use. Imported hemp may be grown with pesticides that are banned in the US but legal in their country of origin. This is one concrete reason why USA-grown hemp is a quality marker, not just a marketing claim.

 

Heavy Metals

Lead, arsenic, cadmium, and mercury are the four primary heavy metals of concern in hemp products. Hemp's bioaccumulation tendency means it readily absorbs heavy metals from contaminated soil — which is why soil source and agricultural history matter. Heavy metal action limits follow USP <232> guidelines or state cannabis regulations, whichever are more stringent. All four metals should be below their respective action limits.

 

Microbials

Total aerobic count, total yeast and mold, E. coli, and Salmonella are the standard microbial tests. All should pass. A single 'Fail' on E. coli or Salmonella is an absolute disqualifier — these are genuine food safety concerns, not minor quality issues.

 

Real-World COA Readings: Pass, Fail, or Caution?

Here's how to interpret what you actually see on a COA:

 

 

What You See	What It Means	Action
CBD: 24.8 mg/serving (label says 25mg)	Within acceptable variance — pass	✓ Good — label is accurate
CBD: 8.2 mg/serving (label says 25mg)	Significant under-delivery — product mislabeled	✗ Reject — do not buy
THC: ND (non-detectable)	Zero THC confirmed — true broad spectrum	✓ Good — safe for drug tests
THC: 0.28%	Below legal 0.3% limit — full spectrum	Caution — accumulated THC risk for drug-tested users
THC: 0.41%	Above federal legal limit — illegal	✗ Reject — do not buy; not compliant hemp
Pesticide: Bifenazate — ND	No pesticide detected	✓ Good
Pesticide: Imidacloprid — 0.08 mg/kg (limit: 0.1)	Below action limit — passes	✓ Acceptable
Lead: 0.6 mcg/g (limit: 0.5 mcg/g)	Above heavy metal action limit	✗ Reject — contaminated product
Batch #: LT2026-0419, Product label: LT2026-0419	COA matches product in hand	✓ Good — verified batch
Batch #: 'Various' or no batch listed	COA not product-specific	✗ Reject — unverified
Test date: March 2024	COA is over 2 years old	Caution — request current COA

 

 

The Batch Number: Verifying the COA Is Actually for Your Product

This is the step most people skip — and it's one of the most important. A COA is only meaningful if it applies to the specific batch of product you're holding. Brands can legally publish a COA from a compliant batch while selling a different, potentially non-compliant batch.

 

How to verify:

 

 

PureCraft maintains COAs for every production batch, accessible by batch number. If you need to verify your specific product,visit the lab results page or contact customer support with your batch number.

 

The 5-Minute COA Checklist: What to Verify Before You Buy

 

 

Frequently Asked Questions

 

What does 'ND' mean on a COA?

ND stands for 'non-detectable' — the compound was not detected at the limit of detection for the laboratory's testing method. It is functionally equivalent to zero for practical purposes. You may also see '<LOQ' (below the limit of quantification), which means the compound may be present in a very small amount but is below the level the lab can accurately measure. Both ND and <LOQ are acceptable results for THC in broad-spectrum products.

 

Can brands fake a COA?

Falsifying a COA is fraud. Reputable brands don't do it — but the market isn't entirely free of bad actors. To protect yourself: verify the lab exists and is accredited by searching for it independently (not through a link provided by the brand). Cross-reference the lab name on the COA with the lab's public website, which should list the brands they test. If a COA looks unusual — missing lab contact information, no accreditation number, no test date — treat it as suspect.

 

How often should a brand update its COAs?

Best practice is batch-by-batch testing — meaning every production run has its own COA. Brands that test once a year, or that publish a single COA for an entire product line regardless of batch, are not meeting the standard of rigorous quality control. PureCraft tests every batch and publishes the corresponding COA.

 

The COA shows more CBD than the label claims. Is that a good thing?

Over-delivery sounds positive, but it indicates the same inaccuracy as under-delivery — the brand doesn't know precisely what's in their product. For pain or sleep applications, small over-delivery is relatively low risk. For drug-tested athletes or seniors managing medication dosing, any inaccuracy in CBD content creates uncertainty. Accurate labeling — not generous labeling — is the quality standard.

 

Does PureCraft publish COAs for all products?

Yes. PureCraft publishes Certificates of Analysis for every product and every batch, accessible on the website. The COAs are conducted by accredited third-party laboratories and include cannabinoid profile, THC compliance, residual solvents, pesticides, heavy metals, and microbial safety.View current COAs at purecraftcbd.com.

 

The Bottom Line: 90 Seconds That Protect Your Purchase

Reading a COA is not complicated once you know what to look for. It takes about 90 seconds to run through the checklist — confirming the lab is independent and accredited, the CBD content matches the label, THC is non-detectable for broad spectrum, contaminant panels are present and passing, and the batch number matches your product. That 90 seconds is the difference between verified quality and a marketing claim.

 

In a market where a 2017 JAMA study found that 69% of CBD products were inaccurately labeled in one direction or another, COA verification is not paranoia — it's basic consumer due diligence. The brands that make it easy — that publish COAs prominently, organized by batch, from named accredited labs — are the ones worth buying from.

 

PureCraft publishes batch-specific COAs for every product.View them at purecraftcbd.com/pages/faq — accredited third-party lab, every cannabinoid quantified, zero THC confirmed, all contaminant panels included. That's the standard we hold ourselves to because it's the standard you deserve.

 

Related Articles

 

Sources & Citations