If you've ever been handed a QR code on a CBD product package and had absolutely no idea what you were looking at when you scanned it, this guide is for you. A Certificate of Analysis (COA) is the most important document in the hemp industry, and knowing how to read one is the single most effective way to protect yourself from inferior or misrepresented CBD products.

What Is a Certificate of Analysis?

A COA is a testing document issued by an accredited, independent third-party laboratory that analyzes a hemp product's contents. It provides objective data on what cannabinoids are present and in what concentrations, whether any harmful contaminants are detected, and whether the product matches what's advertised on its label.

Reputable hemp companies like Hemp & Barrel make COAs publicly available for every product. Any brand that cannot or will not provide a COA should be considered unreliable.

The Key Sections of a CBD COA

1. Product and Sample Information

At the top of every COA, you'll find identifying information: the product name, batch number, sample collection date, analysis date, and the laboratory's name and accreditation number. Verify that the batch number matches the batch number on the product packaging, this confirms you're seeing the test for your specific product, not a different batch.

2. Cannabinoid Panel

This is the most important section for most consumers. The cannabinoid panel lists every cannabinoid detected and its concentration, usually expressed as a percentage (%) and/or milligrams per gram (mg/g). For a CBD product, look for: CBD (or CBDA) content that matches label claims. Delta-9 THC at or below 0.3% (this is the legal threshold). The presence of minor cannabinoids (CBG, CBN, CBC) if the product claims full-spectrum or broad-spectrum status.

3. Terpene Panel (If Included)

Premium lab reports include terpene analysis, identifying which aromatic compounds are present. Terpenes like myrcene, limonene, linalool, and pinene contribute to the product's effects profile beyond just cannabinoids.

4. Heavy Metals Testing

Hemp is a bioaccumulator, it absorbs substances from the soil, including heavy metals. A thorough COA tests for lead, arsenic, cadmium, and mercury. Results should show 'ND' (not detected) or levels below established action limits.

5. Pesticide Screen

Responsible hemp cultivation avoids synthetic pesticides, but verification is essential. The pesticide panel should show ND for all regulated substances or levels well below safety thresholds.

6. Microbial Contamination

This section screens for harmful bacteria and fungi, including E. coli, Salmonella, yeast, and mold. Results should comply with applicable safety standards — typically ND or within regulated limits.

7. Residual Solvents

For extracts produced using solvents (ethanol, butane, etc.), residual solvent testing confirms that no harmful amounts remain in the final product. Look for ND or levels below safety thresholds for all solvents listed.

Red Flags in a COA

Be cautious if the COA is more than 12 months old (products should be retested by batch), the batch number doesn't match your product, the lab is not an ISO/IEC 17025-accredited facility, Delta-9 THC exceeds 0.3%, or heavy metals, pesticides, or microbials are listed as detected without compliance statements.

Where to Find Hemp & Barrel's Lab Reports

Transparency is a core value at Hemp & Barrel. Access complete COAs for all our products through our lab reports page. Every product in our shop comes from brands committed to third-party testing. If you ever have questions about a specific lab report, our team is happy to walk you through it in-store or via our contact page.

Frequently Asked Questions

Q: Who pays for CBD lab testing?

A: Reputable brands pay for their own third-party testing, it's part of their quality assurance process. The key is that the lab is independent from the manufacturer, ensuring unbiased results.

Q: Can lab reports be faked?

A: Technically yes, which is why purchasing from trusted retailers and directly verifying lab results on the testing lab's website (using the report's sample ID) is the gold standard of due diligence.

Q: How often should a CBD company update their COAs?

A: Every new production batch should be tested. For continuous-production items, at minimum every 6–12 months. Check the 'analysis date' on any COA you're reviewing.

Q: What's the difference between a COA and a certificate of compliance?

A: A COA contains actual analytical test data. A certificate of compliance is a statement that a product meets certain standards, but without the raw data behind it. Always request the actual COA with lab data.