How to Read a Cannabis COA: Your Complete Guide to Lab Test Reports

Why You Should Care About That QR Code on Your Cannabis Package

Every legal cannabis product sold in the United States comes with a Certificate of Analysis — a COA — generated by an accredited third-party laboratory. It is the single most informative document associated with your purchase, and almost nobody reads it.

That is a mistake. Your product's label tells you the strain name, the THC percentage, and the weight. The COA tells you whether those label claims are accurate, whether the product contains pesticides or heavy metals, which terpenes are responsible for the flavor and effects you experience, and whether the lab that tested it is credible.

This guide walks you through every section of a cannabis COA so you can evaluate any product you buy — dispensary flower, concentrates, edibles, vape cartridges, or CBD products — with the same critical eye that the lab technicians used when they tested it.

How to Find Your Product's COA

Most cannabis products include a QR code on the packaging that links directly to the lab report. Scan it with your phone's camera app, and it should open the COA in your browser.

If there is no QR code, you have three options. First, ask your budtender — dispensary staff should be able to pull up the COA for any product on the shelf. Second, check the brand's website, where many companies host their lab results organized by batch number. Third, search for the lab name printed on the packaging and look up the results through the lab's online portal using the batch or sample number from your product label.

If you cannot find a COA through any of these methods, that is itself useful information. Reputable brands make their lab results easy to access. Difficulty finding a COA may indicate a product that does not meet the transparency standards you should expect.

Section 1: Product and Sample Information

The top of every COA identifies the basics.

Product Name: Should match your package exactly. If the COA says "Blue Dream Pre-Roll 1g" and your package says "Blue Dream Pre-Roll 0.5g," something is wrong — you may be looking at the wrong batch.

Batch or Lot Number: This is the critical identifier. Every production run is assigned a unique batch number, and the COA applies only to the specific batch it was tested from. Check that the batch number on the COA matches the batch number on your product packaging. If they do not match, the test results do not apply to your product.

Sample Date: When the laboratory received the sample from the producer. A significant gap between the sample date and your purchase date is normal — products may sit in inventory for weeks or months after testing. But if the sample date is more than a year old, you might want to question whether potency degradation has occurred, particularly for flower products.

Matrix or Product Type: Identifies what was tested — flower, concentrate, edible, tincture, vape cartridge, topical. This determines which testing protocols were applied.

Section 2: Laboratory Information

Lab Name and Address: Legitimate COAs include the full name, physical address, and often the logo of the testing laboratory. This is not decorative — it establishes accountability. You should be able to independently verify that the lab exists, is licensed in your state, and has current accreditation.

Accreditation: Look for ISO/IEC 17025 certification, which is the international standard for testing and calibration laboratories. This certification means the lab follows standardized procedures, maintains quality controls, and is subject to regular audits. Not all states require ISO 17025, but labs that hold it are generally more reliable.

License Number: Most states require testing labs to hold a state cannabis license. The license number on the COA should be verifiable through your state's cannabis regulatory agency website.

Section 3: Cannabinoid Profile — The Potency Numbers

This is the section most consumers look at first, and the one most often misunderstood.

What the Numbers Mean

THC and THCA: For flower products, you will typically see both THC and THCA listed separately, along with a "Total THC" figure. THCA is the non-psychoactive precursor to THC that converts when heated. The total THC calculation uses the formula: Total THC = (THCA × 0.877) + THC. The 0.877 factor accounts for the molecular weight lost during decarboxylation (heating).

When a dispensary label says "28% THC," they are almost always referring to total THC calculated from the THCA content. Very little delta-9 THC exists in raw flower.

CBD and CBDA: Same relationship as THC/THCA. Total CBD = (CBDA × 0.877) + CBD. For CBD-dominant products, this is the primary potency metric.

Minor Cannabinoids: Quality COAs list additional cannabinoids including CBG (cannabigerol), CBN (cannabinol), CBC (cannabichromene), THCV (tetrahydrocannabivarin), and others. These minor cannabinoids contribute to the "entourage effect" and may influence the character of your experience. CBN, for example, is associated with sedation, while THCV is associated with appetite suppression and energy.

Units of Measurement

Flower and concentrates report cannabinoids as percentages (% by weight). A flower testing at 25% total THC contains 250 milligrams of THC per gram.

Edibles report in milligrams (mg) — both per serving and per package. A gummy labeled "10mg THC per piece, 100mg per package" should show those figures on the COA. If the COA says the package contains 87mg instead of 100mg, the product is out of spec.

Red Flags

• Total THC above 35% for flower is extremely rare and may indicate lab shopping — the practice of sending samples to multiple labs and publishing only the highest result.
• Cannabinoid percentages that add up to more than 100% (when combined with terpenes and moisture) indicate a lab error.
• If the COA potency differs significantly from the label claim (more than 10-15% variance), the producer may have tested one batch and applied the results to another.

Section 4: Terpene Profile

Terpenes are the aromatic compounds that give cannabis its smell and flavor, and research increasingly suggests they influence the effects of cannabis through interaction with cannabinoids and the endocannabinoid system.

A quality COA lists individual terpene concentrations, typically reported in percentages. Common terpenes include:

• Myrcene: Earthy, musky. The most common terpene in cannabis. Associated with relaxation and sedation.
• Limonene: Citrusy. Associated with mood elevation and stress relief.
• Linalool: Floral, lavender-like. Associated with calming and anti-anxiety effects.
• Caryophyllene: Peppery, spicy. The only terpene known to bind directly to CB2 receptors.
• Pinene: Pine-scented. Associated with alertness and memory retention.
• Terpinolene: Herbal, floral. Less common but associated with uplifting effects.

Total terpene content for quality flower typically ranges from 1% to 5%. Concentrates may be higher. If a flower COA shows less than 0.5% total terpenes, the product may have been improperly cured or stored.

Not all COAs include terpene profiles — some states do not require terpene testing. But brands that voluntarily include terpene data are signaling a higher level of transparency and product quality.

Section 5: Contaminant Testing — The Safety Panels

This is arguably the most important section of the COA, and the one that directly addresses consumer safety.

Pesticides

Labs test for dozens of pesticide residues, and each state maintains a list of banned pesticides with maximum allowable levels (often measured in parts per billion). The COA should show a clear "Pass" designation for the pesticide panel. If any individual pesticide exceeds the state limit, the entire batch should fail.

Heavy Metals

Standard testing covers arsenic, cadmium, lead, and mercury — all of which can accumulate in cannabis plants grown in contaminated soil or irrigated with contaminated water. Results are reported in parts per million (ppm) or parts per billion (ppb), and each state sets maximum allowable levels.

Microbial Contaminants

Labs test for dangerous microorganisms including Aspergillus species (a mold that can cause serious lung infections in immunocompromised patients), E. coli, Salmonella, and total yeast and mold counts. This testing is especially critical for patients using cannabis medicinally, as their immune systems may be compromised.

Residual Solvents

For concentrates produced using chemical extraction (BHO, ethanol, CO2), labs test for residual solvents like butane, propane, ethanol, and isopropanol. These should be below state-mandated limits. Solventless concentrates (rosin, bubble hash) may not require this panel.

Mycotoxins

Produced by certain molds, mycotoxins are toxic compounds that can cause liver damage and other health issues. Testing for aflatoxins and ochratoxin A is required in many states.

The "Pass/Fail" Bottom Line

Every contaminant panel should show a clear "Pass" or "Fail" designation. A legitimate COA will never hide a failed test. If any panel shows "Fail," the product should not have reached the shelf — its presence in a dispensary would indicate a compliance failure.

Section 6: Moisture Content and Water Activity

These measurements indicate how well the product was cured and stored. Excessive moisture promotes mold growth, while overly dry flower crumbles and loses terpenes.

Moisture Content: Ideal range for flower is 8% to 13%. Below 8%, the product may be harsh and degraded. Above 13%, mold risk increases.

Water Activity (aw): A measure of available water for microbial growth. Most states require flower to test below 0.65 aw. Values above this threshold indicate conditions favorable to mold and bacterial growth.

How to Use COAs to Make Better Purchases

Now that you understand what each section means, here is how to apply that knowledge:

Compare COA potency to label claims. If they diverge significantly, question the brand's quality control.

Check the batch number match. A COA is only valid for the specific batch it tested.

Look for ISO 17025 accreditation. It is the gold standard for lab credibility.

Read the contaminant panels before the potency panel. Safety should matter more than strength.

Use terpene profiles to guide strain selection. If you know which terpenes you respond well to, the terpene profile is a better predictor of your experience than THC percentage alone.

Be skeptical of outlier potency numbers. Flower testing above 35% THC deserves extra scrutiny. If it seems too good to be true, it might be.

The COA is not a marketing document — it is a quality assurance document. Learning to read one puts you in control of your cannabis experience in a way that no budtender recommendation or online review can match.