Evidence: Strong
Key takeaways
- A Certificate of Analysis (COA) is an independent lab report showing what’s actually in a CBD product. No COA? Don’t buy it.
- In a well-known study of 84 CBD products sold online, only about 31% contained the amount of CBD their labels claimed, and about 1 in 5 contained THC.
- Check six things: the lab, the batch number, the test date, the CBD amount, total THC and the contaminant panel.
- After December 11, 2026, total THC must be under 0.4 mg for the whole container to count as legal hemp.
A CBD lab report, usually called a Certificate of Analysis or COA, is the single best tool you have for judging a CBD product. It tells you what’s really in the bottle, not just what the label claims. It looks technical, but once you know where to look, you can read one in about two minutes.
Here’s exactly what to check, line by line, and the red flags that should make you put the product back.
Why the lab report matters
CBD products aren’t approved or routinely checked by the FDA the way medicines are, and quality varies widely. In a study published in JAMA in 2017, researchers tested 84 CBD products bought online from 31 companies. Only about 31% contained an amount of CBD within 10% of what the label said. About 43% contained more CBD than labeled, about 26% contained less, and THC was detected in 18 products, about 1 in 5.
A COA from an independent lab is how a reputable company shows you the product actually matches its label.
Where to find a COA
- A QR code on the package or bottle
- A “Lab Results” or “Third-Party Testing” page on the brand’s website
- By emailing the company. A reputable brand will send it quickly.
If a company can’t or won’t share a COA for the batch you’re buying, that’s your answer.
How to read a CBD lab report: 6 things to check
1. Who did the testing
The report should come from an independent, third-party lab, not the brand itself. Look for the lab’s name, address and an accreditation such as ISO/IEC 17025, the international standard for testing laboratories. You can search the lab’s name online to confirm it exists.
2. The batch or lot number
The batch number on the COA should match the number printed on your package. A report for a different batch tells you nothing about the bottle in your hand.
3. The test date
Look for a recent test, ideally within the past 12 months. Very old reports can be a sign that a brand isn’t testing each new batch.
4. The CBD amount (potency)
Find the cannabinoid results and compare the CBD amount to the label. Results may be listed in mg/mL, mg/g or as a percentage. The number should be close to what the label claims. The JAMA study used within 10% as “accurately labeled,” which is a useful benchmark.
5. Total THC
Check that THC matches the product type: none or non-detectable for isolate and broad-spectrum, small amounts for full-spectrum. Under the new federal hemp rules, total THC must be under 0.4 milligrams for the entire container starting December 11, 2026. To check, multiply the THC per mL by the bottle size. For example, 0.1 mg/mL × 30 mL = 3 mg, which is well over the limit. Read more in What December 11 Means for the CBD in Your Cabinet.
6. The contaminant panel
A complete COA includes a “full panel” showing passing results for:
- Heavy metals such as lead, arsenic, cadmium and mercury
- Pesticides
- Residual solvents left over from extraction
- Microbials such as mold, yeast and bacteria
- Mycotoxins, toxic compounds produced by some molds
A report that only lists cannabinoids, with no contaminant testing, is incomplete.
Why we rated this “Strong”: The labeling problems described here come from a peer-reviewed study in JAMA, and the checklist reflects standard lab-testing practice. Keep in mind that the study is from 2017; product quality may have changed since, which is exactly why checking the COA for your batch matters. How we rate evidence
Red flags on a CBD lab report
- The COA is from the brand’s own lab, or the lab can’t be found online
- The batch number doesn’t match your package
- The report is more than a year old
- CBD is far off from the label
- THC appears in a product sold as “THC-free”
- No contaminant results at all
- Pages look edited, blurred or cut off
Quick checklist
- Independent, accredited lab?
- Batch number matches?
- Tested within the last year?
- CBD close to the label?
- Total THC right for the product, and under 0.4 mg per container?
- Full contaminant panel passed?
If you can answer yes to all six, you’re looking at a product that’s been properly tested. Next, make sure it’s actually CBD and not hemp seed oil: read Hemp Seed Oil vs. CBD Oil.
The bottom line
Labels can be wrong, and research shows they often are. A recent, independent COA that matches your batch is the best proof that a CBD product contains what it claims and nothing it shouldn’t. It takes two minutes to check, and it’s the habit that protects you most. More guides in our CBD & Botanicals section.
This article is for education only and isn’t medical advice. Talk to your doctor before using CBD, especially if you take medications.
Sources
- Bonn-Miller MO, Loflin MJE, Thomas BF, et al. Labeling Accuracy of Cannabidiol Extracts Sold Online. JAMA. 2017;318(17):1708–1709.
- U.S. Food and Drug Administration. What You Need to Know About Products Containing Cannabis or Cannabis-Derived Compounds, Including CBD.
- International Organization for Standardization. ISO/IEC 17025: Testing and calibration laboratories.
- The Washington Times. Synthetic hemp cannabinoids now illegal under federal law. November 13, 2026.