How to Read a Hemp COA: A Step-by-Step Guide for B2B Buyers

A Certificate of Analysis is the primary documentation that separates a verifiable hemp ingredient from an unverified one. For B2B buyers — manufacturers, formulators, brands, extractors, and distributors — the COA is the evidentiary basis for every compliance decision, quality acceptance, and supplier qualification made on bulk hemp ingredients. At BCD, every product in our catalog ships with a lot-specific COA from an independent, DEA-registered laboratory with ISO 17025 accreditation covering cannabinoid potency, and our intake process for incoming material applies the same standard before anything enters our inventory. This guide covers what a complete COA contains, how to read each panel, what numbers matter, and what to do when a COA does not hold up under scrutiny.

What a Hemp COA Is and Why It Matters

A COA is a test report issued by an analytical laboratory documenting the results of specific tests performed on a specific sample of material. For hemp ingredients, a complete COA includes results for five test categories: cannabinoid potency, residual solvents, heavy metals, pesticides, and microbials. Each panel addresses a distinct risk category. A COA missing any of these panels is an incomplete document, regardless of how clean the results look on the panels it does include.

The critical distinction between a useful COA and a compliance formality is lot-specificity. A spec sheet describes what a product type is supposed to contain. A COA documents what a specific production lot actually contains. When sourcing bulk hemp ingredients, always confirm you are reviewing a lot-specific COA with a batch or lot number that corresponds to the material being quoted — not a representative COA from a previous run, and not a product specification document formatted to look like a test report.

Step 1: Verify the Laboratory Before Reading the Results

The most important check on any hemp COA is not the numbers themselves — it is whether the laboratory that produced them is qualified to produce them. Three verifications apply:

ISO 17025 accreditation, scope-specific: ISO 17025 is the international standard for analytical testing laboratory competence. A laboratory can hold ISO 17025 accreditation for some test categories and not others. Confirm that the accreditation scope specifically covers cannabinoid potency testing, not just that the lab holds accreditation in general. Scope documents are public; the accrediting body’s website lists what each accredited laboratory is certified to test.

DEA registration: Laboratories testing hemp for THC content operate in a controlled substance regulatory context. DEA-registered laboratories have met additional federal requirements for handling and reporting on Schedule I reference standards. Look for the DEA registration number on the COA header or in the lab’s public filings.

Independence: A COA from a laboratory owned or operated by the supplier is not an independent third-party test result. Confirm that the testing laboratory has no ownership or commercial relationship with the supplier providing the COA. BCD uses independent, third-party, DEA-registered laboratories for all lot testing — our COAs identify the laboratory by name, and buyers are welcome to verify accreditation and registration status directly.

Step 2: The Cannabinoid Potency Panel

The cannabinoid potency panel is the core of the COA for most B2B hemp buyers. It documents the percentage by weight of each detected cannabinoid in the sample. For CBD-dominant products, the key values are:

CBD%: The primary cannabinoid concentration. This is what you are buying per gram. Verify it against the supplier’s quoted specification for the lot.

Total THC: The compliance value that matters for Farm Bill purposes. Total THC is calculated as delta-9 THC plus (THCA multiplied by 0.877). A COA that reports only delta-9 THC is not providing total THC. Under Section 781 of P.L. 119-37 (effective November 12, 2026), total THC at or below 0.3% by dry weight is the federal compliance threshold for hemp ingredients. If the COA does not show this formula or does not include THCA in the cannabinoid panel, the compliance value is incomplete.

Minor cannabinoids: CBG, CBN, CBC, CBDA, CBGA, and others as applicable. These are not contaminants; they are part of the cannabinoid profile. For broad-spectrum products, also confirm that delta-8 THC and THCA both appear on the panel with confirmed non-detect values, not just absent lines. An absent line means the test was not run; a confirmed non-detect means it was.

Step 3: The Residual Solvents Panel

Residual solvents are the processing chemicals remaining in an extract after extraction and initial cleanup. The acceptable limits depend on the solvent type and the intended use of the material.

For ethanol-extracted hemp ingredients, USP Class 3 solvents (which includes ethanol) have a limit of 5,000 parts per million. Results should fall well below this threshold in a properly processed extract. If ethanol residuals are above 1,000 ppm, ask about the drying and processing conditions before accepting the lot.

For CO2-extracted ingredients, residual solvent results are typically clean by default since CO2 is a gas at ambient conditions. For hydrocarbon-extracted material, scrutinize the panel closely for propane, butane, and hexane residuals. Class 1 solvents (including benzene and hexane) have limits in the low single-digit ppm range. A single elevated result here is a reject-lot scenario, not a discussion item.

For CBD crude oil specifically, solvent panel review is especially important because crude has not yet undergone the full refining process that would reduce solvent residuals further in downstream finished ingredients.

Step 4: The Heavy Metals Panel

Hemp is a bioaccumulator — it absorbs compounds from soil, including heavy metals, at higher concentrations than many other crops. A complete heavy metals panel tests for four analytes: lead (Pb), arsenic (As), cadmium (Cd), and mercury (Hg). These are the four metals with established human health risk thresholds and with established presence in agricultural soils where remediation or contamination has occurred.

Acceptable limits vary by intended use. The USP limits for dietary supplements are commonly referenced: lead at 0.5 ppm, arsenic at 1.5 ppm, cadmium at 0.5 ppm, mercury at 1.5 ppm. A COA with any of these analytes elevated above the applicable limit is not acceptable for use in products intended for human consumption.

A “metals: pass” notation without individual analyte results is not a heavy metals panel. It is a statement that testing was performed. Request the individual results before accepting any lot where heavy metals are a concern, which is every lot at commercial hemp ingredient volume.

Step 5: The Pesticide Panel

A full pesticide screen identifies residues from agricultural pesticides used on the source hemp crop. The analytes covered vary by laboratory and jurisdiction, but a comprehensive panel typically covers 50 to 200 compounds. Common hemp pesticide flags include myclobutanil, bifenazate, permethrin, and spiromesifen.

The same “pass” notation problem applies here. A COA that states “pesticides: pass” without listing individual compound results and their detected or non-detected values is not a complete pesticide panel. Request the full results document, which will typically be a multi-page appendix to the main COA summary page.

For hemp grown domestically under USDA-compliant practices, pesticide residuals are generally manageable with reputable growers. For imported hemp or hemp with unclear growing history, a full pesticide panel with individual results is the minimum acceptable documentation.

Step 6: The Microbial Panel

The microbial panel documents bacterial and fungal contamination in the sample. For hemp ingredients, four analytes are standard: total yeast and mold (TYM), total aerobic count (TAC), E. coli, and Salmonella. Acceptable limits follow USP or applicable state regulatory standards for the product category.

Microbial contamination in hemp ingredients most commonly originates from storage and handling conditions after harvest — mold development in improperly dried or stored biomass, or bacterial contamination from equipment or handling surfaces. A clean microbial panel confirms that the material was properly dried, stored, and handled from harvest to the point of testing.

Red Flags: When a COA Does Not Hold Up

Beyond incomplete panels and accreditation gaps, several patterns on a COA warrant extra scrutiny or outright rejection:

Inconsistent formatting or anomalous precision: COAs from legitimate accredited laboratories follow consistent internal formatting. Unusual precision in cannabinoid percentages (e.g., 71.3827% CBD), round numbers across all analytes, or formatting that differs from the laboratory’s standard template are indicators that a document may have been altered.

Test date vs. production date mismatch: A COA dated months before the material was supposedly produced, or with a test date that does not align with the supplier’s claimed production timeline, warrants a direct call to the laboratory to confirm the batch record.

Missing lot or batch number: A COA without a traceable lot or batch number cannot be verified and cannot be matched to a specific shipment. Do not accept it as compliance documentation.

Laboratory not findable in public records: Every legitimate ISO 17025-accredited laboratory appears in the accrediting body’s public registry. If you cannot find the laboratory by name in the relevant registry (A2LA, PJLA, or similar), the accreditation claim is unverifiable.

When any of these flags appear, the right move is to contact the laboratory directly and verify the batch record before accepting the material. This verification step is a standard part of responsible bulk hemp sourcing, not an exceptional measure reserved for suspicious situations.

BCD’s COA Standard

BCD’s COA standard for all products in our catalog requires: lot-specific testing (not representative samples), full five-panel coverage (cannabinoids with total THC formula, residual solvents, heavy metals, pesticides, microbials), testing from an independent third-party laboratory, ISO 17025 accreditation with scope covering cannabinoid potency specifically, and DEA registration. We apply this standard on both the products we supply to customers and on the raw materials we accept from our suppliers. Our COAs are available before any order ships, and buyers are welcome to contact the testing laboratory directly to verify batch records.

Frequently Asked Questions

What is a hemp COA?

A hemp Certificate of Analysis is a test report from an analytical laboratory documenting the results of tests performed on a specific lot of hemp material. A complete hemp COA includes five panels: cannabinoid potency, residual solvents, heavy metals, pesticides, and microbials. It is the primary compliance and quality documentation for B2B hemp ingredient transactions.

What is the difference between a lot-specific COA and a spec sheet?

A lot-specific COA documents the test results for a specific production batch, identified by a lot or batch number. A spec sheet describes the expected range of values for a product type across multiple batches. For compliance purposes, a lot-specific COA is required; a spec sheet does not document what is actually in the material being purchased.

What does ISO 17025 accreditation mean on a hemp COA?

ISO 17025 is the international standard for analytical testing laboratory competence. A laboratory with ISO 17025 accreditation has been independently evaluated for technical competence in specific test methods. The accreditation is scope-specific: confirm the scope includes cannabinoid potency testing, not just that the lab holds accreditation in some category.

Why does a hemp COA need to show total THC, not just delta-9?

Total THC for Farm Bill compliance purposes is calculated as delta-9 THC plus THCA multiplied by 0.877. THCA converts to delta-9 THC when heated, so it contributes to the effective THC content of a product. A COA that reports only delta-9 THC is not providing a complete compliance value under Section 781 of P.L. 119-37.

What is a DEA-registered laboratory and why does it matter for hemp COAs?

A DEA-registered laboratory has met federal requirements for handling Schedule I reference standards used in THC and cannabinoid testing. DEA registration adds a layer of federal oversight to the testing process and is a recognized indicator of laboratory legitimacy in the hemp compliance context. BCD requires DEA-registered lab testing on all products it supplies.

What are the five panels on a complete hemp COA?

The five panels on a complete hemp COA are: (1) cannabinoid potency, including total THC using the delta-9 plus THCA x 0.877 formula; (2) residual solvents from the extraction process; (3) heavy metals, specifically lead, arsenic, cadmium, and mercury; (4) pesticides, with individual analyte results; and (5) microbials, including total yeast and mold, total aerobic count, E. coli, and Salmonella.

How do I verify that a hemp COA is authentic?

Contact the testing laboratory directly and ask them to confirm the batch number and whether the reported results match their records. Also verify the laboratory’s ISO 17025 accreditation in the relevant accrediting body’s public registry, and confirm their DEA registration number. These checks take under ten minutes and are the standard verification practice for large B2B hemp orders.

What does “non-detect” mean on a hemp COA?

Non-detect (ND) means the analyte was tested and the result fell below the laboratory’s limit of quantification. It does not mean the analyte is definitively absent; it means it was not detected at a measurable level. An absent line on a COA means the test was not run — a materially different result from a confirmed non-detect.

What should I do if a COA panel is missing?

Request the missing panel results from the supplier before accepting the lot. A complete hemp COA requires all five panels. If the supplier cannot provide a specific panel, ask why and whether a third-party laboratory can be engaged to perform the missing test on the lot before delivery. Accepting a lot without complete documentation passes the verification gap forward into your production process.

How often should a hemp supplier provide new COAs?

A COA should be provided for every production lot, not on a periodic schedule. Hemp ingredient quality can vary lot-to-lot based on source biomass, processing conditions, and storage. A COA from three months ago does not document the lot you are receiving today. Always request the lot-specific COA for the material being shipped before accepting delivery.