A Certificate of Analysis, almost always shortened to COA, is the third-party lab document that tells you what is genuinely inside a hemp, cannabis, or mushroom product before you ever consume it. Learning to read a COA lab report is the single most useful skill a shopper in this space can pick up, because it moves you from trusting a label to verifying it. In our South Boston shop we hand customers a COA and walk them through it every day, and the same handful of sections do the heavy lifting every time. This guide breaks down each part in plain language so you can scan any report, confirm the batch, check the potency, and clear the safety panels in under a minute.
The short version: match the batch, read the cannabinoid numbers, confirm the safety panels all say pass, and make sure the lab is a real accredited third party and not the brand testing itself. Everything below expands on that, and it applies whether you are holding a delta-9 gummy, a hemp flower pre roll, a functional mushroom bar, or a bottle of CBD tincture.
What a COA actually is
A COA is a report produced by an independent laboratory that takes a sample from one specific batch of a product, runs it through a series of tests, and records exactly what it found. It certifies two broad things: potency, meaning how much of each active compound is present, and purity, meaning whether the product is free of contaminants like pesticides, heavy metals, solvents, and microbes. A trustworthy lab report shows its work rather than handing you a single reassuring number.
One point worth internalizing early: a COA certifies the batch that was sampled, not every unit ever made under that product name. That is why the batch number matters so much, and why a recent test date matters more than a glossy label. Think of a COA as evidence about a specific lot, not a lifetime warranty on the brand.
Section one: the header and sample details
The top of every COA identifies what was tested and who tested it. This is the section most people skip and the one that catches the most problems. Read it first.
- Product name and type. This should describe the exact item you are buying, such as a delta-9 gummy, a pre roll, or a mushroom chocolate. A generic or mismatched name is a reason to pause.
- Batch or lot number. This must match the code printed on the jar, box, or package in front of you. If the numbers do not line up, the report does not belong to your product, and you should ask the seller for the matching one.
- Testing laboratory. Look for the lab name, contact details, and ideally ISO 17025 accreditation, which is the international standard that says a lab follows strict, audited testing methods. The lab must be a separate entity from the brand selling the product.
- Dates. You will often see a collection date, a received date, and a report date. Recent is better. Cannabinoids and especially terpenes shift over time, so an old report describes a product that may have changed.
- A verification path. A QR code or a link that resolves to the report on the lab's own system lets you confirm the document was not altered. A code that goes nowhere is a red flag.
New York's Office of Cannabis Management publishes a clear consumer walkthrough of these fields, and it notes that reports from different labs will not look identical but should all carry the same categories of information. The identity block is where you confirm the report and the product in your hand are the same thing.
Section two: the cannabinoid or potency panel
This is the panel most shoppers came for. It lists each cannabinoid the lab measured, usually expressed two ways: as a percentage by weight and as milligrams, either per gram for flower and concentrates or per piece and per package for edibles. You will see the familiar compounds like THC and CBD alongside minor ones such as CBG and CBN, and you will also see acidic precursor forms like THCa and CBDa.
The distinction between THCa and THC is where a lot of confusion starts, so here is the plain version. Raw cannabis and hemp carry far more THCa than THC before heat is applied. When you heat the product, THCa converts into active THC through a process called decarboxylation. Because of that, labs report a calculated Total THC rather than just the delta-9 line.
The standard formula the industry uses is:
- Total THC = delta-9 THC + (THCa multiplied by 0.877). The 0.877 factor accounts for the molecular weight lost when THCa loses its acidic group and converts to THC. Reading Total THC instead of only the delta-9 line gives you the honest picture of what the product can deliver once it is consumed.
For hemp-derived products, this calculated Total THC matters for legality. Under the federal Farm Bill framework, hemp must contain no more than three tenths of one percent delta-9 THC on a dry weight basis, and compliant products reference that limit. A hemp COA that shows delta-9 at or under that threshold is doing exactly what it should.
A couple of abbreviations show up constantly in this panel. ND means not detected, so no measurable amount was found. LOQ is the limit of quantitation, the lowest level the instrument can reliably measure, so a result below it is present only in trace amounts if at all. On edibles, always compare the milligrams per serving on the COA against what the label claims. A gummy sold as a set potency should test close to that number, not double it.
Section three: the terpene profile, when it appears
Not every product tests for terpenes, and it is optional on many hemp and mushroom items, but when a terpene panel is present it adds useful context. Terpenes are the aromatic compounds that shape scent and flavor and are widely discussed for how they may round out the character of a given batch. They appear as a total percentage plus a breakdown of individual terpenes like myrcene, limonene, and pinene. Terpene numbers are much smaller than cannabinoid numbers, so a couple of percent total is considered rich. This panel is a nice-to-have for comparing two similar products, not a safety gate.
Section four: the contaminant and safety panels
This is the half of the COA that protects your body, and it is the half that thin or fake reports quietly leave out. Each panel is generally scored as pass or fail against defined action limits, and you want to see pass across the board, with individual results reading ND or below the relevant limit.
- Pesticides. Labs screen for a long list of specific agricultural chemicals. You want pass, or ND on the individual entries.
- Heavy metals. The core four are lead, arsenic, cadmium, and mercury, which can accumulate in plants drawn up from soil.
- Residual solvents. Most relevant for extracts, distillates, and vape products, this panel confirms that solvents used in processing were purged. Solventless products should read essentially empty here.
- Microbials. This covers harmful bacteria, mold, and yeast, including tests for E. coli, Salmonella, and dangerous molds like Aspergillus.
- Mycotoxins. Toxic compounds produced by certain molds, screened separately from the microbial count.
- Moisture and water activity. Sometimes included, these help predict whether a product is likely to grow mold over its shelf life.
A product with a full-panel COA, meaning potency plus all of the safety panels above, is demonstrating real transparency. A potency-only report tells you how strong something is while staying silent on whether it is clean, which is exactly the wrong trade-off to accept in a category you are putting into your body.
The one-minute trust checklist
Once you have read a few reports, the whole process collapses into a quick habit. Run these checks in order and you will catch nearly every problem worth catching.
- Batch match. The batch or lot number on the COA matches the code on your product.
- Recent date. The test date is recent rather than a year or more old.
- Independent lab. An accredited third-party laboratory ran the tests, not the brand's own in-house operation.
- Full panel present. Potency and every contaminant panel are shown, and each safety section reads pass.
- Total THC in range. Total THC is calculated, and for hemp it sits within the legal limit.
- Verifiable source. The QR code or link resolves to the report on the lab's system.
Using a COA to compare two products side by side
Once you can read a single report, the real payoff is comparing two of them. Say you are choosing between two delta-9 gummies. The label on each might shout the same headline milligram figure, but the COAs let you check whether the tested potency actually lands where the label claims, and whether it lands there consistently. A product that tests within a few percent of its stated dose is better formulated than one that overshoots or undershoots, because predictable dosing is the whole point of an edible.
Beyond the headline number, line up the safety panels. Two products can both say pass, but one may show contaminants at ND across the board while the other shows detectable levels that still sit under the action limit. Neither fails, yet the cleaner report reflects tighter sourcing and processing. On concentrates and vapes, the residual solvent panel is the tiebreaker many shoppers overlook: a solventless product should read essentially empty there, which is one of the things that separates it from a distillate on paper. When a terpene panel is present on both, it can explain why two items with similar cannabinoid numbers smell and feel different from one another.
Here is the practical habit our team recommends. Do not anchor on THC percentage alone. Read the batch match first, confirm the safety panels, then compare tested potency against the label, and only then let terpenes or minor cannabinoids break a tie. That sequence keeps you from being wowed by a big number on a product that is either mislabeled or thin on safety testing.
Why lab testing carries extra weight in this category
Hemp, cannabis, kratom, and functional mushrooms are agricultural products, and agricultural products vary from batch to batch and can pick up contaminants from soil, water, and processing. That variability is exactly why a per-batch lab report matters more here than a label ever could. A label is a claim made by the seller. A COA is a measurement made by an independent party. In a space where regulation and product formats are still evolving, that independent measurement is the most reliable signal a shopper has, and it is the reason we treat third-party testing as non-negotiable rather than a marketing bonus. Skimping on it is common among sellers, which is precisely why the shops that publish full reports stand out.
Red flags that should stop you
A few patterns reliably signal a report you should not trust. No lab name, no accreditation, or no signature or digital seal undercuts the whole document. A batch number that does not match, or no batch number at all, breaks the link between the paper and the product. A QR code that leads nowhere, or a report that looks suspiciously perfect with clean zeros across every single category on every batch, deserves a second look. And the biggest red flag of all is a brand that simply will not provide a COA when you ask. A reputable seller welcomes the question and a reputable lab will confirm a report's legitimacy if you send them the batch number.
Reading a COA for hemp, mushrooms, and botanicals specifically
The framework above holds across categories, with a few adjustments worth knowing. On hemp-derived THC items the delta-9 and Total THC lines carry legal weight, so those are the numbers to confirm against the compliance limit. On our functional mushroom products, which are psilocybin-free botanical blends rather than controlled psychedelics, the COA focus is on confirming the stated formula and clearing the same contaminant panels for a clean, consistent result. For kratom and kava and other botanicals, testing centers on identity, contaminant screening, and the absence of adulterants, and these remain products where a consult with a licensed practitioner is sensible before use, particularly alongside other medications. Across all of it, the lab report is what turns a marketing claim into a verified fact.
Every product we carry is chosen with this transparency standard in mind, and we keep third-party lab reports available so you can do exactly the checks described here. You can browse our verified reports on our lab reports page, then shop by category: our gummies and edibles for hemp-derived THC formats, our legal mushroom collection for psilocybin-free blends, our kratom, kava, and blue lotus botanicals, and our cannabis and THC range for flower and vapes. New to reading these reports and want a hand? Our team walks customers through a COA in person at 619 E Broadway, or explore the full deVINE brand line to start.
Frequently asked questions
What does COA stand for? COA stands for Certificate of Analysis. It is a report from an independent laboratory that tests a sample from a product's batch and documents the cannabinoids, and often the terpenes and contaminants, that it contains.
How do I know a COA is real and not faked? Confirm the batch number matches your product, check that an accredited third-party lab is named with contact details, look for a recent test date, and use the QR code or link to pull the report from the lab's own system. Missing lab credentials, a dead QR code, or a mismatched batch are the classic signs of a report you should not trust.
Why does the COA list both THCa and THC? Raw hemp and cannabis carry mostly THCa, which converts to active THC when heated. Labs report a calculated Total THC using the formula Total THC equals delta-9 THC plus THCa multiplied by 0.877, which reflects the weight lost during that conversion and gives you the true active potency.
What do ND and LOQ mean on a lab report? ND means not detected, so no measurable amount was found. LOQ is the limit of quantitation, the lowest concentration the instrument can reliably measure, so a result reported below it is present only in trace amounts if at all.
Is a potency-only COA good enough? Not really. Potency tells you how strong a product is but says nothing about safety. A full-panel COA that also clears pesticides, heavy metals, residual solvents, microbials, and mycotoxins is what demonstrates a product is both accurately labeled and clean.
How recent should a COA be? Fresher is better, and many in the industry suggest updating reports with each new batch. An old report describes a product whose cannabinoid and terpene levels may have shifted since testing, so treat a stale date as a prompt to ask for the current batch's report.
These products are intended for adults twenty-one and over. Hemp-derived items are grown and sold in compliance with the 2018 Farm Bill and contain no more than three tenths of one percent delta-9 THC on a dry weight basis. Our mushroom products are psilocybin-free. Statements here have not been evaluated by the Food and Drug Administration and are not intended to diagnose, treat, cure, or prevent any disease. Consult a licensed medical practitioner before use if you are pregnant or nursing, have a medical condition, or take prescription medication.