Every reputable hemp and cannabis brand publishes Certificates of Analysis — COAs — for the products they sell. These third-party lab reports are the single most important transparency tool in the industry, giving you hard data about what's actually in the product you're buying. But if you've ever opened a COA and been hit with a wall of numbers, abbreviations, and scientific terminology, you're not alone. Most people don't know how to read them.
This guide breaks down every section of a standard cannabis COA so you can evaluate any product from any brand with confidence. You can practice by pulling up the lab results for any product we carry and following along as you read.
What Is a COA?
A Certificate of Analysis is a document produced by a third-party, accredited laboratory that tests a sample of a cannabis or hemp product. The lab analyzes the sample for cannabinoid content, terpene profiles, and the presence of potentially harmful contaminants. The COA reports these findings in a standardized format.
The "third-party" part is critical. A legitimate COA comes from an independent laboratory — not the brand itself. The lab has no financial interest in the results, which is what makes the data trustworthy. Any brand that only provides "in-house" test results or doesn't publish COAs at all should be avoided.
Under the 2018 Farm Bill framework, hemp products must test below 0.3% Delta-9 THC by dry weight to be legally sold. COAs provide the verification that a product meets this standard. But beyond legal compliance, COAs tell you far more about a product's quality, potency, and safety.
The Cannabinoid Potency Panel
This is usually the first section you'll see on a COA, and it's the one most people look at. The cannabinoid panel shows the concentration of each cannabinoid detected in the sample.
THCA (Tetrahydrocannabinolic Acid): This is the primary cannabinoid in THCA flower. When you see a flower strain testing at "28% THCA," this means 28% of the flower's dry weight is THCA. When heated, THCA converts to THC at roughly a 0.877 conversion ratio — so 28% THCA translates to approximately 24.6% THC when smoked. For a deeper explanation of this conversion, see our THCA vs THC guide.
Delta-9 THC: This is the legally regulated cannabinoid. For a hemp product to be Farm Bill compliant, Delta-9 THC must test below 0.3% by dry weight. This is the number that determines whether a product is legal hemp or illegal marijuana — regardless of how high the THCA percentage is. If you see Delta-9 THC above 0.3% on a COA, that product does not meet federal hemp compliance standards.
Total THC: This number represents the theoretical maximum THC if all THCA were converted to THC. The formula is: Total THC = Delta-9 THC + (THCA × 0.877). This is important because the new federal hemp law taking effect November 2026 switches from a Delta-9-only standard to a total THC standard — meaning products will need to test below 0.3% total THC, not just Delta-9.
CBD (Cannabidiol): The non-psychoactive cannabinoid associated with calming, anti-inflammatory properties. In THCA flower, CBD levels are typically very low (under 1%). In CBD products, this is the primary active compound. Our THCA vs CBD comparison explains the differences between these cannabinoids.
Other cannabinoids: You may see CBG (cannabigerol), CBN (cannabinol), CBC (cannabichromene), and others. These are minor cannabinoids that contribute to the entourage effect. Higher diversity of cannabinoids generally indicates a full-spectrum product, which many consumers prefer over isolate-based products.
The Terpene Profile
Not all COAs include terpene testing — it's an optional panel that quality-focused brands request. If a brand does include it, this section shows the concentration of individual terpenes present in the sample.
Common terpenes you'll see listed include myrcene (earthy, sedating), limonene (citrus, uplifting), caryophyllene (spicy, anti-inflammatory), pinene (pine, alertness), linalool (floral, calming), and humulene (hoppy, appetite suppression). The specific combination and ratio of terpenes is what gives each strain its unique aroma, flavor, and effect character.
A total terpene content above 2% is generally considered good for flower. Above 3-4% is excellent. For concentrates like live badder and live rosin, terpene percentages are typically higher (5-15%) because the extraction process concentrates them along with the cannabinoids.
Contaminant Testing: The Safety Panels
This is arguably the most important part of a COA from a health perspective. Contaminant panels test for substances that should not be in your cannabis product.
Pesticides: Tests for the presence of pesticide residues from cultivation. The panel typically screens for 60-100+ specific pesticides. Results should show "ND" (Not Detected) or "Pass" across all compounds. Any pesticide detection above the action limit is a hard fail — do not consume products that fail pesticide screening.
Heavy metals: Screens for lead, arsenic, cadmium, and mercury. Cannabis plants are bioaccumulators — they absorb heavy metals from soil efficiently. This makes heavy metal testing essential, particularly for products grown outdoors or in contaminated soil. All results should show "Pass" or concentrations well below action limits.
Microbial contaminants: Tests for harmful bacteria and fungi including E. coli, Salmonella, Aspergillus (a mold that produces dangerous mycotoxins), and total yeast and mold counts. This is especially important for flower products, which can develop mold if improperly stored or cured. All microbial panels should show "Pass."
Residual solvents: Critical for concentrates and vape products that use solvent-based extraction (butane, propane, ethanol, CO2). The panel measures how much residual solvent remains in the final product. Properly purged concentrates should show solvent levels well below state action limits. This test doesn't apply to solventless products like live rosin, which use no chemical solvents in production.
Mycotoxins: Tests for toxic compounds produced by certain molds. Even if mold itself isn't detected, mycotoxins can persist after mold has died. This panel screens for aflatoxins and ochratoxin A — both of which are serious health hazards at high concentrations.
Red Flags to Watch For
Now that you know what each section means, here are the warning signs that indicate a COA shouldn't be trusted or that a product should be avoided:
No lab name or accreditation number. A legitimate COA clearly identifies the testing laboratory by name, address, and accreditation credentials (typically ISO 17025 accreditation). If the document doesn't identify the lab, it may be fabricated.
Sample ID doesn't match the product. Every COA should reference a specific sample or batch number that can be traced back to the product you're buying. If the brand can't tell you which COA corresponds to which product batch, the testing may not be meaningful.
Missing contaminant panels. A COA that only shows potency results without pesticide, heavy metal, or microbial testing is incomplete. Potency-only testing is cheaper, and some brands use it to cut costs. But knowing how strong a product is doesn't tell you anything about whether it's safe to consume.
Old test dates. COAs should be relatively recent — ideally within the last 6-12 months for flower products. Cannabis degrades over time, so a COA from two years ago doesn't accurately represent the current state of the product.
"Self-tested" or no third-party verification. If a brand says they test in-house or the COA comes from a lab owned by the same company, the results carry no independent credibility.
How to Find and Verify COAs
Quality brands make their COAs easy to access. Look for:
Direct links on product pages — each product should link to its specific COA. A dedicated lab results or COA page on the website. QR codes on product packaging that link to the COA. Batch numbers on the product that match batch numbers on the COA.
At The Haze Connect, every product we sell links to its COA. Browse our complete lab results page to see what transparent testing looks like. Whether you're buying THCA flower, Delta 9 gummies, live resin vapes, or concentrates, every batch is independently verified.
Frequently Asked Questions
What does "ND" mean on a COA?
ND stands for "Not Detected" — meaning the compound was tested for but not found at or above the lab's limit of detection (LOD). This is the result you want to see on contaminant panels. For cannabinoids, ND simply means that particular cannabinoid isn't present in measurable quantities.
What does "LOQ" mean on a COA?
LOQ stands for "Limit of Quantitation" — the lowest concentration at which the lab can accurately measure a compound. If a result shows "< LOQ," it means the substance was detected but at a level too low to quantify precisely. For contaminants, this usually means trace amounts well below any safety concern.
Should I trust a brand that doesn't publish COAs?
No. In 2026, there is no legitimate reason for a hemp brand not to publish third-party COAs. Lab testing is industry standard, relatively inexpensive, and essential for both legal compliance and consumer safety. If a brand doesn't test or won't share results, they're either hiding something or cutting corners on quality — either way, buy elsewhere.
Do COAs expire?
COAs don't technically expire, but they represent the state of a product at the time of testing. For flower and concentrates, cannabinoid and terpene content can degrade over time with exposure to light, heat, and oxygen. A COA from 6 months ago is generally still relevant if the product has been properly stored. A COA from 2+ years ago is less reliable.