What a Certificate of Analysis Tells You
A Certificate of Analysis, or COA, is a lab report that shows what’s actually inside a hemp gummy. It lists the cannabinoids the lab found, how much of each one, and whether contaminants like pesticides or heavy metals showed up. Reading it takes a few minutes once you know what to look for, and it’s the single best tool you have for checking a product before you buy it.
Warning Signs to Check First
Before anything else, look for these red flags. Any one of them is a reason to skip the product or ask the seller for more information.
- No COA available at all. A brand that can’t produce a lab report for the batch you’re buying is asking you to trust it blindly.
- The COA doesn’t match the product. Check the batch or lot number on the COA against the number on the package. Mismatched numbers mean the report may belong to a different batch entirely.
- No accredited lab name or contact information. A legitimate COA names the testing lab and usually includes an ISO 17025 accreditation reference.
- THC levels above 0.3% on a hemp product. Federal hemp law sets that limit on a dry-weight basis. A hemp gummy testing above it is not legally hemp.
- Contaminant panels are missing. A cannabinoid count alone isn’t enough. Look for pesticide, heavy metal, and residual solvent results too.
- The report is old or undated. Cannabinoids can degrade over time, so a COA should be tied to the specific batch and reasonably recent.
How to Read a COA Step by Step
- Step 1 — Match the batch number. Find the lot or batch code on the product packaging and confirm it’s the exact code listed on the COA.
- Step 2 — Check the cannabinoid panel. This section lists each cannabinoid tested (CBD, THC, CBG, and others) with a percentage or milligram amount. Compare it to what the label promises.
- Step 3 — Confirm the total THC calculation. Hemp products should show Delta-9 THC at or under 0.3%. Some labs report “total THC,” which accounts for a conversion process that happens when THC-A is heated.
- Step 4 — Review the contaminant panels. Look for separate pass/fail sections on pesticides, heavy metals (lead, arsenic, mercury, cadmium), residual solvents, and microbials.
- Step 5 — Confirm lab accreditation. Search the lab’s name to confirm it’s an independent, third-party lab rather than one owned by the brand itself.
- Step 6 — Note the test date. Compare it to the product’s expiration or best-by date to make sure the results are still relevant.
Cannabinoid Types: What’s Actually in the Gummy
Hemp gummies aren’t all the same underneath. The cannabinoid type changes what the COA should show and what questions you should ask.
- CBD (cannabidiol): A non-intoxicating compound. It’s the most researched hemp cannabinoid, though the FDA has approved only one prescription CBD drug, used for specific seizure disorders.
- CBG (cannabigerol): A minor cannabinoid often present in smaller amounts. Research on CBG in people is much more limited than research on CBD.
- Delta-8 THC: A psychoactive cannabinoid that can produce a mild high. Its legal status varies by state, and some states restrict or ban it even though it can be derived from hemp.
- Delta-9 THC: The main psychoactive compound in cannabis. Federal hemp law limits hemp products to 0.3% Delta-9 THC by dry weight; above that, a product is legally treated as marijuana in most contexts.
- Full spectrum: Contains CBD along with other naturally occurring cannabinoids and trace THC (up to the legal hemp limit).
- Broad spectrum: Contains multiple cannabinoids like full spectrum, but THC has been processed out to non-detectable levels.
- Isolate: Purified CBD with no other cannabinoids. This is the simplest type to verify on a COA because there’s only one compound to check.
Legal status for delta-8 and delta-9 THC products depends on your state and can change. Check current rules for where you live before buying.
What Independent Testing Has Found
Peer-reviewed lab studies have repeatedly tested hemp and CBD products bought off the shelf and compared the results to what the label claimed. Findings have varied by study and product type, but a consistent pattern shows up: a meaningful share of tested products contained more or less CBD than labeled, and some contained none at all. Independent testing has also found contaminants including pesticides, heavy metals, and residual solvents in a portion of tested samples, and a small number of broad-spectrum products contained detectable THC despite claiming to be THC-free. You can review the underlying research directly: a 2022 label accuracy study on unregulated CBD products and a 2024 labeling and contamination analysis both compared package claims to actual lab results across dozens of commercial products.
This is exactly why checking a product’s own COA matters. A published study tells you mislabeling happens across the industry. It doesn’t tell you whether the specific gummy in your hand is one of the accurate ones.
What FDA Oversight Does and Doesn’t Cover
The FDA has stated that it has approved only one CBD product, a prescription drug for specific seizure disorders, and that it is currently illegal to market CBD by adding it to food or labeling it as a dietary supplement. The agency has said it has seen only limited safety data on CBD and that those data point to real risks worth considering, including reports of liver injury and interactions with other medications. The FDA has also said that some CBD products are marketed with unproven medical claims and that testing of some products found cannabinoid levels that didn’t match what was claimed on the label.
In plain terms: there’s no federal agency routinely checking hemp gummies for accuracy before they reach store shelves. A COA from a private lab is a voluntary quality check the brand chooses to run and share, not a government seal of approval.
Extra Caution Groups
Some people should be more careful with hemp and cannabinoid products and should talk to a healthcare provider before use, including:
- People who are pregnant, breastfeeding, or trying to become pregnant
- People taking prescription medications, especially those affecting the liver or central nervous system
- People with existing liver conditions
- Children and adolescents
- Older adults managing multiple medications
Evidence Limits
Research on CBD, CBG, and delta-8 THC in humans is still developing, and much of what’s known about long-term use comes from limited studies. Lab testing standards for hemp products also vary by state and by lab, so a COA format that looks thorough from one brand may not follow the same standard as another. Treat a COA as a snapshot of one tested batch, not a permanent guarantee about every unit of that product.
Your Next Verification Step
Before you buy or consume a hemp gummy, ask the brand directly for the current batch’s COA if it isn’t posted online, confirm the batch number matches your package, and check that the report includes both a cannabinoid panel and a contaminant panel from an independent lab. If a brand can’t or won’t provide that, treat it as a reason to look elsewhere.
Frequently Asked Questions
What does a hemp gummy COA actually test for?
A complete COA tests two main things: the cannabinoid content (how much CBD, THC, CBG, and other compounds are present) and contaminants (pesticides, heavy metals, residual solvents, and sometimes microbials). Some COAs only cover cannabinoids, which is why checking for a full contaminant panel matters.
Does a COA guarantee a hemp gummy is safe?
No. A COA shows what one tested batch contained at the time of testing. It doesn’t evaluate long-term safety, doesn’t account for how the product interacts with your specific health conditions or medications, and doesn’t replace guidance from a healthcare provider.
What’s the real difference between full spectrum, broad spectrum, and isolate?
Full spectrum keeps multiple naturally occurring cannabinoids plus trace THC within the legal hemp limit. Broad spectrum keeps multiple cannabinoids but has THC processed down to non-detectable levels. Isolate contains purified CBD with no other cannabinoids. The COA should confirm which category a product actually falls into, since label claims don’t always match lab results.
Is delta-8 THC legal, and does a COA prove it’s compliant?
Delta-8 THC’s legal status depends on your state, and some states restrict or ban it even when it’s derived from hemp. A COA can confirm the cannabinoid content of a specific batch, but it doesn’t determine whether that product is legal to sell or possess where you live. Check your state’s current rules separately.
Educational Disclaimer
This article is for educational purposes only. It does not diagnose, treat, cure, or prevent any disease, and it is not a substitute for advice from a qualified healthcare provider. Talk to a doctor or pharmacist before starting, stopping, or combining any hemp or cannabinoid product with other medications or supplements. Legal status of hemp-derived cannabinoids varies by state and can change; verify current local law before purchase or use. For more on how we verify claims on this site, see our Editorial Policy, our Medical Disclaimer, and our Affiliate Disclosure. You can also browse more coverage in our Cannabis and Cannabinoid Science section.