Why Lab Reports Matter
The CBD market is unregulated by the FDA. That means no government agency is verifying that the CBD gummy in your hand actually contains the amount of CBD printed on the label, or that it's free from pesticides, heavy metals, and residual solvents.
Third-party lab reports — formally called Certificates of Analysis (COAs) — are the only independent verification available. They're conducted by accredited laboratories that have no financial relationship with the CBD brand. A COA tells you what's actually in the product, not just what the marketing says.
If a brand doesn't publish COAs, or if the COAs are outdated, vague, or from a non-accredited lab, that's a major red flag. This single document is the closest thing the CBD industry has to consumer protection.
Where to Find COAs
Reputable brands make COAs easy to find. Look for a "Lab Results," "Test Results," "Certificates of Analysis," or "Third-Party Testing" link on the brand's website. The best brands provide batch-specific COAs — meaning each production batch has its own lab report — accessible via a QR code on the product packaging or a lookup tool on their website.
If you can't find lab results after 60 seconds of looking, the brand either doesn't test or doesn't want you to see the results. Either way, move on.
Reading the Cannabinoid Panel
This is the most important section. The cannabinoid panel tells you exactly how much of each cannabinoid is in the product.
CBD Content
Compare the total CBD listed on the COA to what's on the product label. They should match within 10–15%. A product labeled "25mg CBD per gummy" should test between 21–29mg on the COA. Significant deviations in either direction indicate poor quality control.
THC Content
For hemp-derived products, total delta-9 THC must be below 0.3%. The COA should show the exact THC percentage. For broad-spectrum and isolate products, look for "ND" (not detected) or "LOQ" (below the limit of quantitation) next to THC — confirming the THC has been removed.
Other Cannabinoids
Full-spectrum products should show detectable levels of minor cannabinoids like CBN, CBG, CBC, and CBDV. If a product is labeled full-spectrum but the COA only shows CBD and THC, the extract may not be truly full-spectrum.
Reading the Safety Panels
Beyond cannabinoid content, a comprehensive COA tests for contaminants that could make the product unsafe.
Pesticide Screening
Tests for residual pesticides from hemp cultivation. Results should show "ND" (not detected) or "pass" for all tested compounds. Hemp is a bioaccumulator — it pulls contaminants from the soil — so pesticide testing is particularly important.
Heavy Metals
Tests for lead, arsenic, mercury, and cadmium. All should be below established safety thresholds (typically USP <232> limits). Again, hemp's bioaccumulator properties make this test critical — hemp grown in contaminated soil can concentrate heavy metals in the plant tissue.
Residual Solvents
Tests for chemicals used during the CBD extraction process — ethanol, butane, propane, hexane, etc. All should be below safety limits. CO2 extraction (the gold standard) typically produces cleaner results than solvent-based extraction methods.
Microbial Contamination
Tests for harmful bacteria, mold, and yeast. E. coli, salmonella, and total mold/yeast counts should all pass. Particularly important for edible products like gummies and capsules.
Red Flags on a COA
CBD content doesn't match the label. If a product claims 25mg per serving but the COA shows 12mg, you're paying for CBD you're not getting. If it shows 45mg, the brand has poor quality control.
Missing safety panels. A cannabinoid-only COA is incomplete. Without pesticide, heavy metal, and solvent testing, you don't know what you're ingesting alongside the CBD.
Old dates. COAs should correspond to the product's batch. A lab report from two years ago doesn't tell you anything about the product currently on shelves. Look for dates within the last 6–12 months.
In-house testing. The lab should be an independent, ISO-17025 accredited facility — not the brand's own lab. In-house testing is a conflict of interest. Look for the lab's name, address, and accreditation number on the COA.
THC above 0.3%. This means the product is technically marijuana under federal law, not legal hemp. It could also cause a positive drug test even in states where cannabis is legal.
Quick COA Checklist
Use this checklist when evaluating any CBD product:
✓ COA exists and is accessible on the brand's website
✓ Conducted by an independent, accredited lab
✓ Dated within the past 12 months
✓ CBD content matches the label within 10–15%
✓ THC content is below 0.3% (or ND for broad-spectrum/isolate)
✓ Pesticide panel included — all pass
✓ Heavy metals panel included — all pass
✓ Residual solvents panel included — all pass
✓ Microbial panel included — all pass
If a product checks every box, you can be reasonably confident in its quality and safety. If it fails any of these, consider a different product. For product recommendations from brands that consistently meet these standards, see our product guides.