Skip to main content

How to read a COA (and what we test for that most brands do not)

How to read a COA (and what we test for that most brands don't)

A Certificate of Analysis (COA) is a third-party lab document that tells you what's actually in a hemp product. Every legitimate hemp brand publishes them. Not every brand makes them easy to understand — or tests for everything you'd want them to test for. This is the guide.

Why COAs exist and why they matter

The hemp supplement industry has no mandatory pre-market approval process. Unlike a pharmaceutical, a hemp gummy doesn't go through FDA review before it hits shelves. The third-party COA is the primary accountability mechanism the industry has.

Without it, you have no way to verify: - Whether the product contains the amount of CBD, CBN, or other cannabinoids stated on the label - Whether it contains Delta-8, HHC, or other cannabinoids the label doesn't mention - Whether the total THC is actually under 0.3% post-decarboxylation (federally required) - Whether it's free of heavy metals, pesticides, or microbial contamination

A COA from an accredited third-party lab — not the brand's own internal testing — is the closest thing to an independent verification the industry has. If a brand doesn't publish one, or links to a COA from a lab it owns, or publishes a document that doesn't cover the full panel, that's information.

Section 1: The cannabinoid panel

This is the first section most people look at, and the one that takes the most interpretation.

What it shows: The percentage or concentration (usually mg/g or %) of each detected cannabinoid. Common entries: - CBD (cannabidiol) - CBDA (cannabidiolic acid — the acidic precursor to CBD) - CBN (cannabinol) - CBG (cannabigerol) - Delta-9 THC - THCA (tetrahydrocannabinolic acid — the acidic precursor to delta-9 THC) - Delta-8 THC (if present)

The number you care about most: Total THC post-decarboxylation. This is the federally legal compliance number under H.R. 5371.

The post-decarb math: Total THC = delta-9 THC + (THCA × 0.877)

The 0.877 conversion factor accounts for the molecular weight change when THCA converts to delta-9 THC through heat. A product with 0.1% delta-9 THC and 0.25% THCA has a total THC of 0.319% post-decarb — which is over the 0.3% federal limit even though the delta-9 alone looks compliant.

This is the math that many brands were quietly failing on under the old Farm Bill, and the math H.R. 5371 now makes explicit. If a COA doesn't show the THCA number, you can't verify compliance.

Red flags in a cannabinoid panel: - Delta-8 listed at any meaningful concentration in a product that doesn't claim to contain delta-8 - THCA listed at a level that pushes total THC above 0.3% post-decarb - "ND" (not detected) across the board for everything except CBD — which can indicate a low-quality panel that isn't testing for all relevant cannabinoids

Section 2: Heavy metals

Heavy metals — lead, arsenic, cadmium, mercury — accumulate in hemp because the plant is a phytoremediator. It absorbs metals from soil. This was used in the Chernobyl cleanup. It's not a knock on hemp; it's chemistry. The implication is that hemp grown in contaminated soil will produce contaminated biomass, and an extract from that biomass will carry those metals.

What a passing COA shows: Each metal listed with its detected concentration in units like ppb (parts per billion), alongside the action limit — the level above which the product fails. California Prop 65 limits are commonly used as the industry reference even for products not sold in California, because they're the most stringent U.S. standards.

What brands sometimes do: Test only for delta-9 THC and CBD and call it a "COA." A cannabinoid panel alone is not a full COA. It tells you about the cannabinoids; it tells you nothing about metals.

moodebles testing: Heavy metals panel is run per production lot. Every lot's COA, including the heavy metals results, is available at /coa.

Section 3: Pesticides

Hemp cultivation can involve pesticides. Pesticide residues make it into extracts. The full pesticide panel tests for 60+ compounds depending on the lab's standard battery — organophosphates, pyrethroids, fungicides, and more.

A passing pesticide panel shows all tested compounds below action limits or at ND (not detected).

What brands sometimes do: Skip the pesticide panel because it's expensive (a full pesticide screen typically costs $200-400 at a certified lab) and not universally required by state law. Some brands test only for the cannabinoids and market themselves as "third-party tested" — which is true but incomplete.

Why it matters: The FDA has sent warning letters to hemp brands over pesticide contamination. The compounds are real, the risk is real, and the only way to know is the test.

Section 4: Microbials

Microbial contamination — total aerobic bacteria count, yeast, mold, E. coli, Salmonella — is tested to ensure the product is safe for consumption. Gummies and oil-based products typically have lower microbial risk than raw plant material, but testing is still standard in a responsible QA program.

A passing microbial panel shows all counts below action limits, and an absence of pathogenic organisms.

What "every batch" means — and what it doesn't

This is a distinction worth being direct about because the industry is not consistent on language.

Total THC / cannabinoid panel — every batch: The cannabinoid panel should be run on every production batch. This is relatively inexpensive ($50-150 per test) and verifies that each batch meets the <0.3% total THC post-decarb threshold. moodebles runs this on every batch. The COA for the batch you bought matches the lot number on your jar.

Heavy metals / pesticides / microbials — per production lot: These tests are expensive ($200-400 each, full panel). Responsible brands run them on a per-lot basis — meaning every distinct production run of a given formulation — not necessarily every single batch if multiple batches come from the same lot. We run them per lot and make the results available.

The honest language: "lab tested every batch" means the cannabinoid panel. "Full panel per production lot, available on request" covers the rest. Brands that imply full-panel testing on every individual batch either have very deep pockets or are making a claim that doesn't survive scrutiny.

How to check a moodebles COA

  1. Go to /coa
  2. Find your SKU (Calm, Sleep, or Bright)
  3. Find the lot number that matches the bottom of your jar
  4. Open the PDF

What you'll see: the lab name and accreditation number, the sample batch ID, the cannabinoid panel with post-decarb total THC math, and the pass/fail for each safety panel. If anything fails, the lot doesn't ship. Full stop.

Red flags on other brands' COAs

A short list of things that should make you look closer:

  • COA date older than 12 months on a current product: Lots change. An 18-month-old COA on a product being sold today is a gap.
  • Lab not accredited by ISO 17025: ISO 17025 is the international standard for lab competence. It doesn't guarantee honesty, but its absence means no third-party audit of lab procedures.
  • Only cannabinoid panel, no safety panels: This is the most common form of "partial COA" used to look more transparent than the brand is.
  • QR code that doesn't link to the COA: Some brands put QR codes on packaging that link to marketing pages or general COA landing pages, not the specific batch document.
  • Strain or batch name but no lot number: The lot number on the COA should match the lot number printed on the product. If there's no lot number on the bottle, you can't verify the match.

Bottom line: A COA is only as useful as what it tests and whether the lot number matches what's in your hand. Both matter.

Related at moodebles

FAQ

{
  "@context": "https://schema.org",
  "@type": "FAQPage",
  "mainEntity": [
    {
      "@type": "Question",
      "name": "What is a COA in CBD?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "A COA (Certificate of Analysis) is a document from an accredited third-party laboratory that verifies what's in a hemp product. It should include a cannabinoid panel (with total THC post-decarb), heavy metals, pesticides, and microbials. It's the primary accountability mechanism in an industry without mandatory pre-market approval."
      }
    },
    {
      "@type": "Question",
      "name": "What is total THC post-decarboxylation?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Total THC post-decarboxylation is calculated as: delta-9 THC + (THCA × 0.877). The 0.877 conversion factor accounts for THCA converting to delta-9 THC when heated. H.R. 5371 requires hemp products to be under 0.3% total THC using this calculation, not just delta-9 THC alone."
      }
    },
    {
      "@type": "Question",
      "name": "Do hemp gummies need to be third-party tested?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "There is no universal federal mandate requiring third-party testing for hemp products, though many states have their own testing requirements. Third-party COAs are the industry standard for responsible brands — without them, there's no independent verification of cannabinoid content or safety panel results."
      }
    },
    {
      "@type": "Question",
      "name": "What does 'ND' mean on a COA?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "ND stands for 'not detected' — the tested compound was below the lab's detection limit for that assay. ND on heavy metals, pesticides, and Delta-8 panels is what you want to see. ND across all cannabinoids on a cannabinoid panel would be a red flag indicating poor-quality testing or a product with no actives."
      }
    },
    {
      "@type": "Question",
      "name": "Where can I find moodebles COAs?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "All moodebles batch COAs are published at moodebles.com/coa, organized by SKU and lot number. The lot number on the bottom of your jar should match a COA in the library. If it doesn't, contact us through /contact and we'll resolve it."
      }
    }
  ]
}

These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease. Hemp-derived. 21+ only. Lab tested every batch — total THC under 0.3% post-decarboxylation. Hemp-derived; state rules vary — check your state.

!