How to Read a CBD Certificate of Analysis

If a CBD brand can't show you a lab report, you're taking its word for what's in the bottle. A certificate of analysis, or COA, is how you stop doing that. It can look intimidating, all tables and abbreviations, but once you know where to look it takes about two minutes. Here's how we read one, step by step.

What a COA actually is

A COA is a document from a testing lab that shows what was found in a specific batch of product. At minimum it confirms how much CBD and THC is present. Better ones also check for contaminants like heavy metals, pesticides, leftover solvents and microbes.

The key word is independent. A COA from the brand's own in-house lab isn't worthless, but a third-party lab with no stake in the result is far more trustworthy.

Step 1: Check who did the testing

Look at the top of the report for the lab's name, address and contact details. Then look for an accreditation, most commonly ISO/IEC 17025. That's the international standard for testing labs, and it means the lab's methods and equipment are regularly audited. If you're curious, you can usually look the lab up online and confirm it exists and is accredited.

Step 2: Match the product and batch

This is the step most people skip, and it's the one that matters most. A COA should name:

• The product (or a clear sample name).
• A batch or lot number.
• The date the sample was tested.

Now look at your actual packaging. Is there a batch number printed on it? Does it match the report? If a brand shows one lovely-looking COA for every product it sells, or the report is several years old, that tells you very little about the bottle in your hand.

Step 3: Read the cannabinoid profile

This is the table listing cannabinoids, usually CBD, CBDA, THC (often written as Δ9-THC or delta-9 THC), THCA, CBG, CBN and others. You'll see results in a few formats:

• mg/g or %: the concentration in the sample.
• mg per unit or mg per container: the total amount, if the lab calculated it.
• ND: “not detected,” meaning below what the lab can measure.
• LOQ or LOD: limit of quantitation or detection, the lowest amount the method can reliably measure.

Now compare. If the label says 300 mg CBD per bottle, the lab result should be in that ballpark. Small variation is normal. A product claiming 1,000 mg that tests at 200 mg is a problem.

Step 4: Check THC

For hemp-derived products in the US, delta-9 THC has to stay under the legal limit. Look at the delta-9 THC line, and also at THCA, since some testing standards now look at total THC.

What you see here also tells you what type of product you have:

• Trace THC present: full-spectrum.
• THC “ND” but other cannabinoids present: broad-spectrum.
• Only CBD listed: isolate.

If you're drug tested, this section is the one to read carefully.

Step 5: Look for safety panels

Thorough COAs include extra tests, usually marked “Pass” or “Fail” against a limit:

• Heavy metals such as lead, arsenic, cadmium and mercury. Hemp is very good at pulling things out of the soil, which is why this matters.
• Pesticides.
• Residual solvents left over from extraction, such as ethanol, butane or hexane.
• Microbials: yeast, mould, E. coli and salmonella.
• Mycotoxins, toxins produced by some moulds.

Not every COA includes all of these, and for some product types, certain panels are tested on the raw extract rather than the finished product. That's common. What you're looking for is a brand that's open about what's tested and happy to share it.

Step 6: Check it's real

Many COAs have a QR code or verification link back to the lab's own system. If yours does, use it. It's a quick way to confirm the PDF hasn't been edited. If something looks off, like fonts that don't match, missing signatures or numbers that don't add up, it's okay to email the brand and ask.

A quick checklist

1. Independent, accredited lab?
2. Product name and batch number match your packaging?
3. Tested recently?
4. CBD amount close to the label?
5. THC within legal limits (and matches the spectrum claimed)?
6. Contaminant panels passed?

If a product passes all six, you can feel pretty good about it.

Where to find ours

All of Privy Peach's lab reports are on our COA page. We think anyone putting a product on intimate skin deserves to know exactly what's in it. If you can't find the report for your batch, email us and we'll send it.

New to CBD? Start with What Is CBD, Really? and Will CBD Get Me High?, then come back here when you're comparing products.