What Is a COA in Cannabis? (Lab Report Explained)
According to data compiled across 47 licensed cannabis testing labs in 2025, approximately 18% of products tested failed to meet label claims for cannabinoid content by more than 10%. Meaning the THC or CBD percentage printed on the package didn't match what independent analysis found inside. The document that prevents this discrepancy from reaching consumers is the Certificate of Analysis, or COA. A COA in cannabis is a third-party lab report that verifies cannabinoid percentages, terpene profiles, and the absence (or presence) of contaminants including pesticides, heavy metals, residual solvents, and microbial life. It's the single most reliable quality checkpoint between cultivation and consumption. We've reviewed thousands of COAs across brands we work with. The gap between a comprehensive lab report and a bare-minimum compliance document is the difference between verified safety and plausible deniability.
When you purchase cannabis products through SeaWeed Delivery, every strain, cartridge, edible, and concentrate we carry comes with a lab-verified COA accessible either on the product page or by request. This isn't optional transparency. It's the baseline expectation for any operation that takes product integrity seriously.
What is a COA in cannabis and why does it matter?
A COA in cannabis is a Certificate of Analysis. A lab-issued report documenting the exact cannabinoid content (THC, CBD, CBG, CBN), terpene profile, and contaminant screening results for a specific batch of product. Licensed labs use High-Performance Liquid Chromatography (HPLC) or Gas Chromatography-Mass Spectrometry (GC-MS) to measure these compounds with precision typically within ±2% margin of error. The COA confirms that what's printed on the label matches the tested batch, and that the product passed safety thresholds for pesticides, heavy metals, residual solvents, mycotoxins, and microbial contamination. Without a COA, cannabinoid percentages are marketing claims. With a COA, they're verifiable data.
The COA requirement exists because cannabis is consumed directly. Smoked, vaporised, ingested. And contaminants that would be negligible in other agricultural products become health risks when concentrated through extraction or combustion. A COA isn't just a compliance formality. It's the document that proves a product is safe to use and accurately labeled.
What Information a COA in Cannabis Actually Contains
Every legitimate COA in cannabis follows a standard structure regulated by state cannabis authorities and industry accreditation bodies like ISO 17025. The document is divided into sections covering cannabinoid potency, terpene analysis, and contaminant screening. Each verified through distinct testing methodologies.
Cannabinoid potency analysis measures THC (delta-9-tetrahydrocannabinol), THCA (tetrahydrocannabinolic acid. The non-psychoactive precursor that converts to THC when heated), CBD (cannabidiol), CBDA (cannabidiolic acid), CBG (cannabigerol), CBN (cannabinol), and sometimes additional minor cannabinoids. Total THC is calculated using the formula: THC + (THCA × 0.877). The 0.877 factor accounts for the molecular weight loss when THCA decarboxylates into THC during combustion or vaporisation. A flower strain labeled 22% THC typically shows 1–3% delta-9 THC and 20–24% THCA on the raw COA. The label reflects the total after decarboxylation.
Terpene profiles list the aromatic compounds responsible for strain-specific effects and flavour characteristics. Myrcene, limonene, caryophyllene, pinene, linalool, and humulene are the six most common terpenes measured. Terpene concentrations are reported in percentage or milligrams per gram. Levels above 2% total terpenes are considered robust. Terpenes aren't decoration. They modulate cannabinoid effects through what's called the entourage effect, where compounds work synergistically rather than in isolation.
Contaminant screening covers four critical safety categories: pesticides (organophosphates, pyrethroids, carbamates), heavy metals (lead, arsenic, cadmium, mercury), residual solvents (butane, propane, ethanol, hexane), and microbial life (yeast, mold, E. coli, salmonella). Each category has state-mandated action limits. Exceeding any limit results in automatic batch failure. Pesticide limits are typically measured in parts per billion; heavy metals in parts per million. A product that passes contaminant screening displays 'ND' (none detected) or results below the action limit for each tested compound.
How COAs in Cannabis Differ from Generic Lab Reports
A COA in cannabis is distinct from internal quality control testing or non-ISO-accredited lab reports because it must come from a state-licensed third-party laboratory with no financial relationship to the producer. The 'third-party' designation is legally required in every adult-use and medical cannabis state. Producers cannot test their own products and issue compliance COAs.
ISO 17025 accreditation is the quality benchmark for cannabis testing labs. This international standard requires documented chain-of-custody procedures, equipment calibration schedules, proficiency testing participation, and method validation protocols. Labs without ISO 17025 accreditation can still operate in some states, but their results carry less weight in disputes or recalls. When evaluating a COA, check for the lab's license number and accreditation status. Both should appear in the document header.
Batch specificity is what makes a COA meaningful. Every COA is tied to a unique batch or lot number. The same strain from the same producer can have different cannabinoid profiles across harvests due to phenotypic variation, growing conditions, and harvest timing. A COA from January doesn't validate a product sold in June unless the batch numbers match. Reputable operators include batch traceability on product labels or QR codes linking directly to the relevant COA. If a brand publishes one generic COA for an entire product line rather than batch-specific reports, that's a transparency failure.
COA in Cannabis: Comparison of Lab Report Formats
| Lab Report Element | State-Mandated COA (Third-Party) | Internal QC Report | Non-Accredited Lab Certificate | Professional Assessment |
|---|---|---|---|---|
| ISO 17025 Accreditation Required | Yes. Legally required in most adult-use states | No. Internal testing not regulated | No. Varies by lab | Third-party ISO labs provide the only legally defensible cannabinoid and contaminant data for consumer-facing products |
| Cannabinoid Testing Method | HPLC or validated GC-MS with documented LOQ (limit of quantitation) | Varies. Often handheld devices or non-validated methods | HPLC or GC-MS but without proficiency testing verification | HPLC with ±2% accuracy is the industry standard; handheld devices used in internal QC show ±10–15% variance and aren't suitable for label claims |
| Contaminant Screening Panels | Pesticides (60+ compounds), heavy metals (4 minimum), solvents, microbials. All state-mandated | Optional. Usually limited to visual inspection or targeted spot-checks | Partial panels. Often excludes heavy metals or microbials to reduce cost | Comprehensive contaminant screening adds $150–$250 per batch but is the only way to verify product safety. Partial panels miss the contaminants that cause recalls |
| Batch Traceability | Unique batch/lot number tied to state seed-to-sale system | Internal tracking only. No regulatory tie-in | Batch number present but not verified through state database | Batch-specific COAs tied to state tracking prevent cross-contamination between batches and enable targeted recalls if issues arise post-sale |
| Legal Standing in Recalls | Admissible in regulatory proceedings and consumer protection cases | Not admissible. Considered self-reported data | Limited admissibility without ISO accreditation | Only third-party ISO-accredited COAs hold weight in legal disputes, recalls, or insurance claims. Internal reports are considered marketing documents |
| Typical Turnaround Time | 5–10 business days from sample submission | Same-day to 48 hours | 3–7 business days | Faster turnaround often correlates with reduced testing rigor. Legitimate comprehensive panels require 5+ days for full contaminant screening and result validation |
Key Takeaways
- A COA in cannabis is a third-party lab report verifying cannabinoid potency, terpene profiles, and contaminant safety. Issued by an ISO 17025-accredited lab with no financial tie to the producer.
- Total THC on a COA is calculated as THC + (THCA × 0.877), accounting for decarboxylation during consumption. Raw flower typically shows 1–3% delta-9 THC and 20–24% THCA for a product labeled 22% total THC.
- Contaminant screening covers pesticides, heavy metals, residual solvents, and microbial life. Any result exceeding state action limits triggers automatic batch failure and prevents product from reaching retail.
- Batch specificity is critical. A COA from one harvest doesn't validate a different batch of the same strain, because cannabinoid and terpene profiles vary across growing cycles.
- ISO 17025 accreditation requires labs to participate in proficiency testing, maintain documented calibration schedules, and validate testing methods. Non-accredited labs can produce reports but results lack regulatory standing.
- SeaWeed Delivery publishes lab-verified COAs for every product we carry. Accessible on product pages or by request. Because transparency isn't optional when consumer safety is on the line.
What If: COA in Cannabis Scenarios
What If the COA Shows Cannabinoid Levels That Don't Match the Label?
Request clarification from the retailer or producer immediately. Discrepancies above ±10% between label claims and COA results are considered mislabeling violations in most states. The batch number on the product packaging should match the batch number on the COA. If it doesn't, you're looking at the wrong report. Legitimate variances within ±5% are normal due to sample homogeneity and testing method precision limits, but anything beyond that threshold suggests either testing error or intentional label manipulation. If the retailer cannot provide a matching COA or explain the discrepancy, don't consume the product.
What If a Product Passes Cannabinoid Testing But Fails Contaminant Screening?
The batch cannot legally be sold. Full stop. Failed contaminant screening triggers a regulatory hold, and the producer must either remediate the batch (if possible) or destroy it under state oversight. Remediation is only allowed for certain contaminant types (microbials can sometimes be remediated through irradiation; pesticides and heavy metals cannot). A product that shows 'pass' on cannabinoids but 'fail' on any contaminant panel will never reach a licensed retailer. If you encounter a product where the COA shows failed contaminant results but the product is still on shelves, report it to your state cannabis regulatory authority immediately. That's a compliance violation with direct health implications.
What If No COA Is Available for a Cannabis Product I Want to Buy?
Don't buy it. In every state with regulated cannabis markets, COAs are legally required for all products sold through licensed channels. A missing COA means one of three things: the product hasn't been tested (illegal), the product failed testing and the producer is hiding results (illegal and dangerous), or the retailer is operating outside licensing requirements (illegal). Legitimate operators make COAs accessible. Either printed on packaging, linked via QR code, displayed in-store, or available on request. If a brand or retailer refuses to provide a COA or claims 'testing isn't required for this product,' walk away. At SeaWeed Delivery, we don't stock any product without a verifiable third-party COA. No exceptions.
The Unflinching Truth About COA in Cannabis
Here's the honest answer: the cannabis COA system works only as well as the enforcement behind it. We've seen brands shop for labs that deliver favorable results, submit cherry-picked samples instead of representative batch samples, or publish outdated COAs while selling newer untested inventory. The regulatory framework exists, but the execution varies wildly by state and by operator. A COA is only meaningful if the lab is genuinely independent, the sample submitted is representative of the batch being sold, and the results are tied to verifiable batch numbers in a state tracking system. The brands that manipulate this process aren't sophisticated criminals. They're taking advantage of enforcement gaps that every industry insider knows exist. The defense is consumer-level verification: match batch numbers, check lab accreditation, and buy only from retailers who treat COA transparency as non-negotiable. Our menu reflects this standard. Every product we carry comes with accessible, batch-specific COA documentation because we've built our reputation on verifiable quality rather than marketing promises.
The COA in cannabis represents the most important transparency mechanism in the industry. It's the document that proves a product is what it claims to be and safe to consume. Understanding how to read a COA, verify its legitimacy, and match it to the product you're buying is the baseline competency every cannabis consumer should have. If the COA shows discrepancies, failed tests, or isn't available at all, that's not a minor inconvenience. It's a safety signal you should never ignore. The difference between a product backed by rigorous third-party testing and one relying on trust is the difference between verified safety and wishful thinking.
Frequently Asked Questions
What does COA stand for in cannabis? ▼
COA stands for Certificate of Analysis — a lab report issued by a third-party testing facility that verifies the cannabinoid content, terpene profile, and contaminant screening results for a specific batch of cannabis product. The COA is required by law in all regulated cannabis markets and must come from a state-licensed lab with ISO 17025 accreditation. It serves as the official documentation that a product is accurately labeled and safe for consumption.
How do I read cannabinoid percentages on a COA in cannabis? ▼
Cannabinoid percentages on a COA are reported as both raw values and 'total' calculations. THCA (tetrahydrocannabinolic acid) is listed separately from delta-9 THC because THCA is non-psychoactive until heated. Total THC is calculated using the formula: THC + (THCA × 0.877), which accounts for molecular weight loss during decarboxylation. A flower strain showing 2% delta-9 THC and 22% THCA will be labeled as approximately 21.3% total THC. CBD is reported the same way — CBDA converts to CBD when heated, so total CBD includes both values adjusted by the same conversion factor.
Can I trust a COA that shows zero contaminants detected? ▼
Yes, if the COA comes from an ISO 17025-accredited lab and includes the full contaminant screening panel mandated by your state. 'ND' (none detected) or results below the limit of quantitation (LOQ) are normal for properly cultivated and processed cannabis. However, verify that the COA actually tested for contaminants — some reports only show cannabinoid and terpene analysis and skip contaminant panels entirely. A legitimate comprehensive COA will list every tested contaminant category (pesticides, heavy metals, solvents, microbials) with either specific values below action limits or 'ND' designations. If a COA is missing entire contaminant sections, it's incomplete.
What is the difference between THCA and THC on a cannabis COA? ▼
THCA (tetrahydrocannabinolic acid) is the non-psychoactive precursor to THC found in raw cannabis flower. When cannabis is heated through smoking, vaping, or cooking, THCA undergoes decarboxylation and converts to delta-9 THC — the psychoactive compound. COAs report both values separately because raw cannabis contains mostly THCA, not THC. The 'total THC' value on a product label reflects the sum of existing THC plus the THC that will be created when THCA decarboxylates, calculated as THC + (THCA × 0.877). This is why raw flower might show only 2–3% delta-9 THC but be labeled 22% total THC — the remaining percentage comes from THCA that will convert upon consumption.
How often should a cannabis product be retested and issued a new COA? ▼
Every unique batch or lot requires its own COA — cannabis testing is batch-specific, not product-specific. A single strain grown by the same producer will have different cannabinoid and terpene profiles across harvests due to environmental variables, phenotypic expression, and harvest timing. Most states require testing within 15–30 days of harvest for flower, or before packaging for processed products like edibles and concentrates. If a product has been on a shelf for six months, the COA should still match the batch number on the package — age doesn't invalidate the COA as long as the product hasn't been opened or compromised. What invalidates a COA is selling a different batch under the same report.
What contaminants are tested in a cannabis COA? ▼
State-mandated COAs test four primary contaminant categories: pesticides (60+ compounds including organophosphates, pyrethroids, and carbamates), heavy metals (lead, arsenic, cadmium, mercury), residual solvents (butane, propane, ethanol, hexane used in extraction), and microbial contaminants (yeast, mold, E. coli, salmonella, aspergillus). Each category has specific action limits measured in parts per billion (pesticides) or parts per million (heavy metals). Any result exceeding the action limit for any single contaminant causes the entire batch to fail. Some states also require mycotoxin testing (aflatoxins, ochratoxins) as a separate panel. A comprehensive COA will display results for all mandated categories — if any section is missing, the report is incomplete.
Why do some cannabis products have higher THC percentages than their COA shows? ▼
They shouldn't — and if they do, it's either a labeling error or intentional mislabeling. The THC percentage on a product label must match the total THC value calculated from the COA for that specific batch. Discrepancies occur when producers round up beyond acceptable variance (±5% is normal due to sample variability; ±10% is a red flag), when labels are printed before testing is complete, or when old COAs are reused for new batches. In some cases, producers submit the highest-testing sample from a batch rather than a representative composite sample, inflating the COA result beyond what most of the batch actually contains. If the label claims 28% THC but the COA shows 22%, verify the batch numbers match first — if they do and the discrepancy is confirmed, that's a compliance violation.
Is a COA required for all cannabis products sold legally? ▼
Yes, in every state with regulated adult-use or medical cannabis markets. COAs are legally required for flower, pre-rolls, concentrates, edibles, tinctures, topicals, and any other cannabis product sold through licensed retail channels. The testing must be performed by a state-licensed, third-party lab with no financial relationship to the producer. Products sold without COAs are either unlicensed (illegal market) or in violation of state regulations. Some jurisdictions allow limited exemptions for certain product types (like some CBD-only products under specific thresholds), but for THC-containing cannabis, the COA requirement is universal. If a retailer cannot provide a COA for a product, don't buy it.
What does 'LOQ' mean on a cannabis COA? ▼
LOQ stands for Limit of Quantitation — the lowest concentration of a substance that a lab can reliably measure and report with accuracy. For contaminants, results below the LOQ are reported as 'ND' (none detected) or ' <LOQ'. This doesn't mean zero — it means the amount present is below the threshold the testing method can quantify. LOQ varies by compound and testing method; pesticide LOQs are typically in the range of 0.01–0.1 parts per million. A result of '<LOQ' is considered a pass as long as the LOQ itself is below the state action limit. If a COA shows a contaminant 'detected' but doesn't provide a quantified value, it means the lab found trace amounts between the LOD (limit of detection) and LOQ.
Can I request a COA for any cannabis product I purchase? ▼
Yes — and any reputable retailer or brand will provide it. In most regulated states, retailers are required by law to make COAs available to customers upon request, either in physical form, digitally via email or QR code, or posted on the company website. If you're purchasing online, COAs should be accessible on the product page or through a linked portal. If you're buying in a dispensary, ask the budtender to show you the COA before purchase — they should be able to pull it up immediately. If a retailer refuses to provide a COA or claims they don't have access to it, that's a major transparency failure. At SeaWeed Delivery, we make COAs accessible for every product we stock because verifiable quality isn't optional.
619-993-5673
Open Daily from 9AM - Midnight