Five steps: match the batch, check the lab, check the date, read the THC numbers, and check every safety test. If you cannot find a COA for a product, or it does not match, that is worth asking about.
This guide uses California’s rules as the example. In California, a licensed lab must test cannabis before it is sold and issue a certificate of analysis.1
Step 1: Make sure it is the right report
A COA covers one batch. Find the batch or lot number on your package and on the COA. They should match exactly. Also check that the product name and type match, such as flower, vape or gummy.
Step 2: Check who did the testing
In California, the lab must hold a state license.1 The COA must show the lab’s name, address and license number.2 You can look up the license in the Department of Cannabis Control’s (DCC) license search, which lists the businesses DCC licenses.3
Step 3: Check the dates
In California, a COA must show when the sample was collected, when the lab received it and when it was tested.2 A very old report may not reflect the product you are holding.
Step 4: Read the cannabinoid numbers
COAs show cannabinoids such as THC, THCA, CBD and CBN.12 Numbers may be in percent (%) or milligrams per gram (mg/g):
- 1% is the same as 10 mg per gram.
- For edibles, look for mg per serving and per package.
California COAs also show total THC when it applies. THCA turns into THC when it is heated, so total THC counts both. The rule sets the math: total THC = THC + (0.877 × THCA).2 This assumes all of the THCA turns into THC, so it gives the most THC the product could have.4 In California, the THC in an edible serving must be within 10% of the 10 mg target.1
Step 5: Check every safety test
Look for a result for each test the state requires. In California, that means pesticides, solvents, heavy metals, germs, mold toxins, moisture and foreign material.2 California COAs must show “pass” or “fail” for each test and an overall “pass” or “fail” for the batch. You may also see “ND” (not detected), “<LOQ” (found, but too little to measure exactly) or “NT” (not tested).2
If a test is missing, or says “Fail,” ask the seller. See what California tests for for what each test means.
Warning signs
- No batch number, or a batch number that does not match your package.
- A COA for a different product, or one with no lab name or license number.
- Numbers or text that look edited.
- A link or QR code that leads to a website that is not the lab’s.
What a COA cannot tell you
A COA reports on a sample from one batch. It does not test every package. Passing state limits does not mean a product has no risk. Products that passed testing can still be recalled. Check current alerts and recalls.