The Importance of Third-Party Lab Testing: What to Look For in a COA

CBD labels can look confident, but the market isn’t fully standardized, so proof matters. A COA (Certificate of Analysis) is a batch-specific third-party lab report that verifies a hemp product’s potency, THC compliance, and contaminant safety, so you can trust what’s on the label.

This guide shows how to read a COA in minutes and spot the red flags that signal low-quality or unsafe products.

Why third-party lab testing is non-negotiable in CBD

Third-party lab testing matters because it closes the trust gap between a label claim and what is actually in the bottle. A third-party lab is an independent laboratory with no financial stake in the results.

Independence matters because it reduces bias and makes the data harder to “polish.” A CBD product can be mislabeled, contaminated, or non-compliant without obvious signs. The COA is the verification tool that checks three things in one place: potency and legality.

What is COA? 

A COA is a report card for one specific batch of a hemp product.

A real COA is linked to a lot number (batch number) and a sample ID that a lab tested.

A COA is not:

• A generic PDF that applies to “all products.”
• A screenshot with no lab name, method, or identifiers
• A marketing flyer with only “CBD: 100%” style claims
• Cannabinoid potency (CBD and other cannabinoids, plus THC results)
• Compliance details (especially Delta-9 THC limits for hemp)
• Safety panels (heavy metals, pesticides, residual solvents, microbials/mycotoxins)

How to confirm the COA matches your exact product? 

If you only do one thing, do this: match the COA to the product in your hand.

Match the identifiers

Check these fields on the COA and compare them to the packaging or product page:

• Product name (and sometimes SKU)
• Batch/Lot number (the most important match)
• Sample ID (the lab’s internal ID for the tested sample)
  
  

A COA that does not show a batch/lot connection is not truly batch-specific.

Check the dates

Dates tell you whether the COA reflects the batch you are buying.

• Test date: when the lab ran the analysis
• Report date: when the results were issued
  
  

A COA can be “real” yet unhelpful if it’s outdated or not tied to the current batch.

Check the lab credentials

Look for lab accreditation language because it is a quality standard for testing laboratories. It signals that the lab follows validated methods, uses calibrated equipment, and runs documented quality systems.

Potency section: How to read cannabinoid results?

The potency panel answers: “How much CBD is in this product, and what does the THC result show?”

CBD amount vs label claim

Compare the CBD number on the COA to the label.

Common units include:

• mg/mL (milligrams per milliliter)
• mg/g (milligrams per gram)
• Total mg per bottle (often the easiest to match)
  
  

A clear COA lets you verify whether a product matches its stated strength (for example, a label that says 600 mg of total CBD should align with lab results, within reasonable testing variance).

THC compliance

Hemp products are expected to meet legal THC limits. A key data point is Delta-9 THC and whether it stays under the 0.3% THC threshold used for hemp compliance in the U.S. context.

If you see THC results, focus on:

• Delta-9 THC value
• Units (percent vs mg/g)
• Whether the report flags “Pass” under the lab’s compliance framework

“ND THC” / “Non-Detect” explained (and why LOQ/LOD matters)

“ND” (non-detect) does not mean “zero.” ND means the lab did not detect THC above a certain threshold. That threshold depends on the method.

Look for:

• LOD (Limit of Detection): the smallest amount the method can detect
• LOQ (Limit of Quantitation): the smallest amount the method can measure reliably
• MDL (Method Detection Limit): a method-based detection threshold used in some reports
  
  

A strong COA makes these limits visible so “ND THC” has real context.

What contaminants should be tested and why?

Potency tells you what is in the product. Safety panels tell you what should not be in the product.

Heavy metals

Hemp is known as a bioaccumulator, meaning it can pull substances from soil and concentrate them in plant material.

Heavy metals testing looks for metals such as lead, arsenic, cadmium, and mercury. These are tested because contamination can come from soil, water, or inputs used during farming.

Pesticides & herbicides

Pesticide testing checks for the presence of chemical residues. Organic farming practices reduce risk, but the COA is where you confirm outcomes for the final batch.

Residual solvents

Residual solvents matter because some extraction methods use solvents (like ethanol, butane, or hexane), and traces can remain if processing is poor.

CO2 extraction is often highlighted in quality-focused manufacturing because it reduces residual solvent risk.

Microbials & mycotoxins

Microbial testing checks for contamination like mold, yeast, and bacteria. Mycotoxins are toxins produced by certain molds. These panels matter because hemp is an agricultural crop, and manufacturing hygiene affects final product safety.

Lab report terms that confuse people

• Pass/Fail: The lab compares results against an action limit or regulatory threshold and marks whether the batch meets that standard.
• Action limits: The maximum allowed level for a contaminant under a given rule set or lab standard.

• Units:

  • ppm (parts per million) often appears in contaminant testing

  • µg/g (micrograms per gram) is another common unit

  • mg/g and mg/mL often show up in potency panels
    
    

If the COA does not clearly show units, the numbers lose meaning.

COA red flags

A COA is a trust tool, but only when it is complete and batch-matched. These are the most common red flags:

• COA is not batch-specific or has no lot/batch number
• Missing key identifiers.
• Missing contaminant panels.
• Lab credentials are unclear.
• The product name on the COA does not match the product you are buying
• The report looks edited.
• No easy access to the COA.

What “good” looks like, NuLeaf’s standard of transparency

A strong transparency standard follows one simple rule: customers can verify each batch, not just the brand story. NuLeaf Naturals is often used as a case study for this approach because the model is built around batch-specific reporting and independent verification.

A “good” system includes:

• Traceable batches
• Third-party testing by accredited labs
• Full panels that cover potency, THC compliance, and contaminant safety
• Clear COA access so a customer can “trust but verify” with the batch number
  
  

*These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.