How to read a CBD lab report (COA) in five minutes

Every claim on a CBD label is just marketing until a laboratory confirms it. The document that does the confirming is the Certificate of Analysis, or COA: a third-party report on the exact batch in your bottle. Brands that test publish them proudly. Brands that don't are asking you to take soil chemistry on faith. Five minutes with a COA tells you more than an hour of reading product descriptions.

The CBD market sits in a strange regulatory gap. The FDA does not review these products before they reach the shelf, which means quality control is effectively outsourced to independent labs and to you, the person reading the report. The good news is that a COA is not hard to read once you know where to look. This is the same checklist we use internally at planntz, and it works on any brand's report, including ours.

First, confirm the report is worth reading

Start at the letterhead, before any numbers. Three things establish whether the document means anything at all:

• **An independent, accredited lab.** The report should come from a third-party laboratory, not the brand's own bench. Look for **ISO/IEC 17025** accreditation, the international standard for testing labs, usually displayed near the lab's name.
• **A batch or lot number that matches your bottle.** A COA is batch-specific. If the numbers don't match, the report describes someone else's product.
• **A recent date.** Hemp extracts are agricultural products and vary harvest to harvest. A report from two years ago says nothing about the bottle in your hand.

The potency panel: where the label meets reality

The cannabinoid profile is the heart of the report. It lists each compound the lab measured (CBD, THC, and minors like CBG, CBN or CBC) with concentrations in mg per gram or mg per mL, plus a percentage by weight. You only need one piece of arithmetic: multiply the concentration by the bottle size and compare it to the front label.

Take a 30 mL tincture that promises 15,000 mg of CBD. The COA should show roughly 500 mg/mL of CBD (500 × 30 = 15,000). The industry's accepted tolerance is about 10% either way; a 2017 study in JAMA that tested 84 products found only about 31% were labeled accurately, with the rest either over- or under-delivering. A small variance is normal biology and chemistry. A 40% shortfall means you're paying for cannabidiol that isn't there.

The THC line: one number, read it twice

For hemp products, total THC must come in below 0.3% by dry weight. That single number is what makes the product federally legal and non-intoxicating. There's a detail worth knowing: good labs report total THC using the formula total THC = delta-9 THC + (THCa × 0.877), because THCa converts to THC when heated. If a report lists THCa separately, run that quick math rather than reading the delta-9 line alone.

What you should see depends on the extract type. A full-spectrum product will show a small real number, like the 0.21% in the example above. A broad-spectrum or isolate product should read ND (non-detect) or <LOQ. If trace THC affects your life, say you're subject to workplace drug testing, this line is the entire reason you're reading the report.

ND, LOD, LOQ: the three abbreviations that confuse everyone

• **LOD** (limit of detection): the smallest amount the instrument can notice exists at all.
• **LOQ** (limit of quantitation): the smallest amount the instrument can reliably put a number on.
• **ND** (non-detect): the lab looked and found nothing above the LOD. On a THC line, this is what genuinely THC-free looks like.

So <LOQ means "present in a whisper, too small to measure", and ND means "nothing found". Both are acceptable readings for a broad-spectrum product; a brand claiming zero THC while its COA shows a quantified number is contradicting itself.

The safety panels: what should not be in the bottle

Hemp is a bioaccumulator. The plant is so good at pulling compounds out of soil that it has been used to clean contaminated ground, which is excellent for the environment and a real consideration for anything you swallow. A complete COA therefore goes beyond potency and screens for four families of contaminants:

• **Heavy metals**: lead, arsenic, cadmium and mercury, absorbed from soil.
• **Pesticides**: residues from cultivation, dozens of compounds on a modern panel.
• **Residual solvents**: leftovers from extraction, relevant for ethanol- or butane-extracted products.
• **Microbials**: mould, yeast, E. coli and salmonella.

Each line should read Pass, with the measured value sitting comfortably under the limit printed beside it. One nuance: safety panels are often run per harvest or per extraction lot rather than per retail batch, so a potency-only COA isn't automatically a scandal. But a brand that cannot show you any contaminant testing on request has answered your question already.

Red flags that should end the conversation

1. 1No COA at all, or one available only "on request" that never arrives.
2. 2A report with no batch number, or one that doesn't match the bottle.
3. 3Potency dramatically below the label claim.
4. 4A "full-spectrum" product showing zero cannabinoids besides CBD: the label and the chemistry disagree.
5. 5A report hosted only as an image on the brand's site, with no lab name you can verify. Many labs let you confirm a report's authenticity on their own website using the sample ID.
6. 6A test date years older than the product you're holding.

Why we publish ours

Transparency is cheap to claim and expensive to practice, which is exactly why it separates brands. Every planntz batch ships with its COA published on the product page: potency, THC line and panels, with nothing behind an email request. It's also why our guides keep pointing back to the report, whether you're figuring out your serving size or deciding which spectrum fits your life. The bottle says what we believe. The COA proves it.

Questions, answered