What Is a Hemp Certificate of Analysis? The Short Answer
A hemp Certificate of Analysis (COA) is a lab report showing what one tested sample contained, on one specific date, using specific methods. It is not proof that a product is safe, that every batch matches that result, or that any health claim on the label is accurate. A COA is evidence about a sample — not a government safety review.
Why This Distinction Matters
Under current federal law, hemp is defined as cannabis with no more than 0.3% THC on a dry-weight basis. That definition governs whether a plant material is legal to sell. It says nothing about whether an individual product is safe, effective, or accurately labeled. For deeper background on how cannabinoids are classified and regulated, see our Cannabis and Cannabinoid Science coverage.
Federal regulators have also been clear that CBD and THC products are treated differently from other dietary ingredients: the U.S. Food and Drug Administration (FDA) has stated that CBD and THC are excluded from the legal definition of a dietary supplement, and that the agency has not evaluated the safety, dosing, or effectiveness of unapproved hemp and CBD products sold online and in stores, aside from one prescription drug approved for specific seizure conditions. A private lab’s COA is a separate document from any of that. It can confirm what a sample contained. It cannot substitute for the kind of premarket safety and efficacy review the FDA applies to approved drugs.
Separately, the Federal Trade Commission (FTC) requires companies making health-related claims to have solid scientific proof behind those specific claims. A lab report confirming cannabinoid content does not, by itself, prove a health claim made elsewhere on a product page. These are two different questions: what is in the product, and whether a claim about what it does is substantiated. Reading a COA only answers the first one.
An Evidence Ladder for Reading a COA
Not every detail on a lab report carries equal weight. Working through these questions in order helps separate what matters most from what’s easy to skim past.
1. Does the report match the product you have?
Every COA should reference a batch or lot number. Compare that number to the one printed on the product packaging, usually on the bottom or side of the container. A report with no lot number, or one that doesn’t match your product, tells you nothing about the item in your hand.
2. Who ran the test?
Look for the testing laboratory’s name, address, and accreditation status, separate from the brand selling the product. A report that doesn’t name an independent lab, or that appears generated by the seller itself, carries far less weight than one from a named third-party facility.
3. When was the sample tested?
Cannabinoids degrade over time, and formulations change between production runs. A report dated years before a purchase, or with no visible date at all, may not reflect the product currently on the shelf.
4. What methods were used?
Look for a named analytical method, such as high-performance liquid chromatography (HPLC) or gas chromatography (GC). A report listing results with no method named is harder to independently evaluate, since different methods can produce different levels of precision.
5. Which analytes were tested?
A cannabinoid panel that only reports CBD and THC content answers a narrower question than one that also screens for contaminants such as heavy metals, pesticides, residual solvents, and microbial content. Check which categories were actually tested, not just which ones are mentioned in marketing copy elsewhere on the site.
6. What are the reporting limits?
Every lab test has a lower detection threshold, sometimes called a “limit of quantitation.” A contaminant listed as “not detected” means it wasn’t found above that threshold, not that it’s completely absent. Reports that state their limits let you judge how sensitive the test actually was.
Known Versus Unknown: What a COA Can and Cannot Tell You
It helps to separate what a passing lab report actually establishes from what it leaves open.
- What a matched, dated, third-party COA can show: the approximate cannabinoid content of that tested sample; whether the tested batch fell within the legal THC threshold at the time of testing; whether the screened contaminants were found above the lab’s reporting limits in that sample.
- What a COA cannot show: whether every unit from that batch matches the tested sample exactly; whether a different batch, including the one you actually purchased, was tested the same way; whether the product is safe for your particular health situation; whether any health or wellness claim on the packaging or website is scientifically substantiated; whether the product performs the same way after time in storage or shipping.
A Practical Checklist Before You Rely on a COA
- Locate the batch or lot number on the product itself, and confirm it matches the number on the COA.
- Check the testing date. If none is visible, treat the report as unverifiable for a current purchase.
- Confirm the testing lab is named and appears independent of the seller.
- Identify the analytical method used, and note whether it is named at all.
- Review which analyte categories were tested — cannabinoids only, or cannabinoids plus contaminant screening.
- Look for reporting limits next to any “not detected” result.
- Treat the COA as one piece of information about a tested sample, not as proof of safety, effectiveness, or any claim made about the finished product.
What Should You Do If a Report Is Missing or Incomplete?
If a product has no visible COA, start by checking the seller’s website or contacting them directly before assuming anything about the product’s quality. If a COA exists but lists no lot number, treat it as unverifiable against the item you actually purchased. If a COA doesn’t name the testing lab or the method used, you have a document you can’t independently evaluate — that’s a reason to look further, not a reason to assume the best or the worst.
A missing or vague report doesn’t necessarily mean the product is unsafe. It means the label-research questions above can’t be answered from the documentation provided.
Frequently Asked Questions
Does a passing COA mean my exact bottle was tested?
Not necessarily. A COA reflects one sample from one batch, identified by a lot number. Unless that lot number matches what’s printed on your product, the report describes a different physical batch, even if it came from the same brand.
What’s the difference between a COA and FDA approval?
A COA is a private lab’s report on one sample. FDA approval is a formal premarket review of a specific drug’s safety and effectiveness. The FDA has stated it has not evaluated the safety or effectiveness of unapproved hemp and CBD products, so a COA is not a substitute for that kind of review.
Should I trust a COA that doesn’t list a testing lab?
Treat it with caution. A credible COA names an independent, accredited laboratory separate from the brand selling the product. A report with no lab identified, or one that appears to come from the seller itself, is harder to verify and carries less weight.
Medical and Safety Disclaimer
This article is educational and does not diagnose, treat, cure, or prevent any condition, and it does not evaluate the safety or effectiveness of any specific product. It is not medical advice. Talk with a qualified healthcare provider before starting, stopping, or changing any supplement, especially if you are pregnant, breastfeeding, taking medication, or managing a health condition. If you are experiencing a medical emergency, contact your local emergency services immediately.
Take Hemp Gummies is an independent educational publication. Learn more about our publication, or see our Editorial Policy for how our articles are researched and verified.
Last updated: September 2026.