How to Read Hemp Lab Reports (COAs) Like a Pro
You find a product online. Price is right. Reviews look solid. Then you see it: a link to the lab report. COA (Certificate of Analysis). You click it and see a PDF full of numbers, chemical names you can’t pronounce, and data points that mean nothing to you.
So you skip it.
That’s a mistake. A COA tells you exactly what you’re buying. It’s the difference between a legit product and something that might be sketchy. Learn to read one, and you’ll never get duped by fake hemp.
Here’s what to look for.
What’s a COA, Anyway?
A Certificate of Analysis is a lab report from a third-party testing facility. A batch of product goes in, gets tested, and the lab gives you hard data on what’s actually in it.
That’s it. But it’s everything.
Most reputable hemp brands send their products to independent labs. The lab tests cannabinoid levels, checks for contaminants, verifies ingredients, and produces a report. The brand publishes that report so you know you’re getting what you paid for.
If a brand doesn’t have COAs? Red flag. We’ll get to that later.
The Cannabinoid Panel: What Do All These Numbers Mean?
The first section you’ll see is the cannabinoid panel. It’s a list of cannabinoids and their percentages or milligrams.
Here’s what matters:
Delta-9 THC (the legal limit)
This is the big one. Federal law says hemp products must have less than 0.3% Delta-9 THC by dry weight. The lab reports this as a percentage.
Look for: 0.3% or lower for Delta-9 THC.
If it says 0.35%? That’s over the limit. That product is technically illegal federally. Some states are fine with slightly higher amounts, but most aren’t. Play it safe and stick to 0.3% or below.
Pro tip: If a product claims to be “high potency THC” but says 0.3% Delta-9, the THCa content is doing the heavy lifting. The THCa converts to Delta-9 when heated. That’s how brands walk the legal line.
THCa (the main event for potency)
THCa is tetrahydrocannabinolic acid—the raw form of THC. When you heat it, it becomes Delta-9. When you don’t, it’s not psychoactive.
Look for: High THCa percentage if potency is what you want. We see quality flower ranging from 15% to 30%+ THCa. Gummies and concentrates? Higher percentages because they’re condensed.
Our THCa Exotic Flower Single Packs typically run 20-28% THCa. Check the COA and you’ll see exactly what batch you’re getting.
Other Cannabinoids (the supporting cast)
You’ll see CBD, CBN, CBG, Delta-8, and more. These are secondary cannabinoids. They add to the overall effect profile but are usually present in smaller amounts.
CBD: Often 0.5-3% in hemp flower. Helps with anxiety, reduces the intensity of THC effects. Some people prefer high-CBD strains.
CBN: Trace amounts, but people swear it helps with sleep.
CBG: The “minor cannabinoid” people won’t shut up about. Supposed to have various benefits. If it’s present, cool. If it’s not? Not a dealbreaker.
Delta-8: A different form of THC, less potent. Sometimes present naturally, sometimes added. Check if it’s there if that matters to you.
None of these need to hit specific numbers. Just know they exist and what they do.
The Contaminant Section: The Part That Keeps You Safe
This is where a good lab report shows its worth. The lab tests for things you absolutely don’t want in your product.
Pesticides
Hemp crops can be sprayed with pesticides. Some residue can stay on the final product. The lab tests for common agricultural pesticides.
Look for: Pesticides: Not Detected (ND) or levels below the detection limit.
If you see pesticide residues above the legal limit (which varies by state but is usually pretty strict), skip that product.
Heavy Metals
Hemp is a bioaccumulator. It pulls metals from soil. Cadmium, lead, arsenic, mercury—these are all tested.
Look for: All heavy metals at ND or below state limits (usually measured in ppb, parts per billion).
Lead under 0.5 ppm is safe. Cadmium under 0.2 ppm. If any are higher, that’s a contaminated product. Don’t buy.
Mold and Mildew
If the product was stored poorly or the flower was damp when packaged, mold shows up. Aspergillus, Penicillium, E. coli—these are the big nasties.
Look for: Microbial: Not Detected or safe levels.
Some labs test for “total aerobic bacteria” instead of specific strains. Either way, you want these as low as possible or not detected.
Mycotoxins
Toxins produced by mold. More dangerous than mold itself. Some labs test for these separately.
Look for: Mycotoxins: Not Detected.
If present, don’t buy.
Solvents (for concentrates and extracts)
If the product is a concentrate, distillate, or extract, it was made using solvents. Residual solvents can be dangerous in high amounts.
Look for: Solvents (if tested) at ND or below 5 ppm for most compounds.
Not all labs test this, and not all products need it. But if you’re buying concentrates, check.
The Batch Number: Your Verification Code
Every COA has a batch number. Your product should match that batch number (usually printed on the label or packaging).
Why? Because this proves the lab tested YOUR product, not some other company’s batch.
Always match the batch number to your product before trusting the report.
We print batch numbers on all our packaging. When you get a product from us, check the COA. Match the batch number. Done.
The Testing Date: Is It Fresh?
Look at when the product was tested. Hemp degrades over time. A product tested a year ago tells you less about what’s in your bottle right now.
Look for: Test dates within the last 6 months. Ideally recent.
If a product is 18 months old, the cannabinoid levels may have shifted, potency may have dropped, and contaminant levels might be different.
Red Flags: Signs of a Fake COA
Scammers are out there. Some brands publish fake lab reports or use reports from other products. Here’s how to spot fakes.
TOO PERFECT cannabinoid profiles
Real products vary. You might see 20% THCa one batch, 18% the next. Numbers jump around slightly depending on growing conditions, harvest time, etc.
If a COA shows exactly 25.0% THCa every single batch? Fake.
Lab name you’ve never heard of
Big labs: Infinite Chemical Labs, Encore Labs, ProVerde, Steep Hill. If the lab is some random one-word name or has a sketchy website? Maybe not legit.
Cross-check the lab’s credentials online. Real labs have public websites and are often DEA-licensed or state-certified.
Missing the contaminant section entirely
A legit COA includes a contaminant panel. If the report only shows cannabinoids and nothing else? It’s incomplete at best, fake at worst.
Suspiciously low contaminant levels across every product
No crop is 100% clean. Some products will have trace pesticides or low microbial counts. A brand showing “ND” on literally every contaminant for every batch ever is either incredibly lucky or dishonest.
Dates that don’t make sense
If the test date is months after the product was supposedly packaged, something’s off. If batch numbers don’t match your product, it’s not your report.
Generic lab report template
Fake reports often use generic templates. Real reports have the lab’s official letterhead, contact info, accreditation numbers, and signature.
Where to Find BudBuddy’s COAs
Every product page on our site has a link to the full lab report. You can also email us for batch-specific reports if the product is older or you want to verify something.
We use established, DEA-licensed labs. Batch numbers match your product. Reports are updated regularly.
If you ever get a product and the COA looks off? Let us know. We’ll make it right.
Quick Reference Checklist
Before you buy, check for these:
- Delta-9 THC is 0.3% or lower (federally compliant)
- THCa level matches what the product claims (if it’s a THCa-heavy product)
- All contaminants show ND or are below legal limits
- Batch number matches your product
- Test date is recent (within 6 months)
- Lab is a known, legitimate facility
- COA has the lab’s full letterhead and contact info
- Heavy metals, pesticides, mold, and mycotoxins are all tested
Hit all those boxes? The product is likely legit. Missing a couple? Maybe dig deeper before buying.
Why This Matters
A good COA is proof you’re getting what you paid for. No sketchy ingredients. No contaminants. No false advertising. That’s the whole point.
Reputable brands publish reports because they have nothing to hide. Sketchy brands avoid them like the plague.
Next time you’re shopping for hemp online, download that COA. Spend 2 minutes reading it. Your body will thank you.
Related Reading
Back to the Complete Guide: Buying Hemp Online
Want to know how to spot sketchy products before you even get to the COA? Read How to Spot Low-Quality Hemp Products. And if you’re concerned about legality, check out Is THCa Legal in My State?