You can verify most hemp lab reports in a few minutes by confirming the lab’s accreditation, matching the batch ID on the certificate of analysis (COA) to the product in hand, and checking potency and contaminant results through the lab’s own portal or QR code. A COA is a snapshot of one sample at one point in time, not a lifetime guarantee, so the fastest checks matter most: lab accreditation, batch match, and a working verification link.

TL;DR:

• Check that total THC uses dry weight, combines delta nine THC with THCA multiplied by roughly 0.877, and includes measurement uncertainty near the 0.3% threshold.
• A thorough pesticide screen covers 60 to 100 or more compounds; fewer than a dozen is a narrow panel, even when every result is clean.
• ND means a contaminant was not detected above the lab’s detection limit, not that none exists; review detection limits when results approach action limits.
• Request an updated COA for each new shipment, since prior results cover one batch and state rules may differ from federal requirements.

Table of Contents

• Quick checklist: what to find on any legitimate COA
• How to verify the laboratory and accreditation step by step
• Understanding potency and the total THC calculation
• Key contaminant panels and how to read their results
• If something looks wrong: immediate verification steps and escalation
• How Hemp Flower Co. verifies lab testing and what we publish
• Differences between hemp COAs and cannabis COAs and why it matters
• Reading cannabinoid and terpene profiles to judge flower quality
• How often hemp products should be retested and COA shelf life
• Common lab testing methods and how they shape results
• Understanding limits of detection and quantification
• Author’s perspective on COA verification and safe buying habits
• How Hemp Flower Co. makes COA verification simple
• FAQ
• Sources

Quick checklist: what to find on any legitimate COA

A legitimate COA follows a predictable structure. Before trusting any number on the page, confirm these fields are present and make sense together.

1. Laboratory name, address, and contact information, printed clearly, not just a logo.
2. An ISO/IEC 17025 accreditation number and its scope, showing which specific tests the lab is certified to run.
3. A unique batch or sample ID that matches the label on the product packaging in front of you.
4. Sample receipt and test dates, so you know how recent the data is.
5. An authorized reviewer’s signature or stamp, plus a version or revision number for the report.
6. A verifiable lab URL or QR code that links back to the issuing lab’s own portal, not just a static PDF.

Each of these fields exists because hemp testing is regulated at the federal level. The USDA’s lab testing guidelines call for validated methods and dry-weight reporting of total THC, which only means something if the report ties back to an identifiable, accredited lab and a specific sample.

Missing fields are not automatically disqualifying, some labs format reports differently, but a COA with no accreditation number, no batch ID, and no way to confirm it independently should raise questions before you buy or resell.

Pro Tip: Keep a saved copy of every COA you verify, along with the date you checked it. That record becomes useful if a product’s results are ever questioned later.

How to verify the laboratory and accreditation step by step

Accreditation is the backbone of a trustworthy COA, and checking it takes just a few extra steps.

• Search the lab’s accreditation number in a public database such as A2LA or ANAB to confirm it is active and assigned to the lab named on the report.
• Review the accreditation scope, not just the certificate, to confirm it actually covers the tests shown on the COA (cannabinoid quantitation, pesticides, heavy metals, and so on).
• Call or search the lab’s phone number and name independently of the seller’s website to confirm the lab exists and operates where it claims to.
• Check whether your state requires separate lab registration for hemp testing, and confirm the lab appears on that list if applicable.
• Treat a COA with an unverifiable accreditation number, or one issued by a lab that only distributes PDFs with no online portal, as a red flag worth a second look.

The NIHC Verify program was built around this exact gap. Its accreditation and recognition pathway, developed with A2LA, maintains a directory of labs that meet an industry benchmark for hemp testing, which gives buyers a faster way to cross-check a lab’s standing instead of relying on a logo printed at the bottom of a PDF.

A COA with no working verification path is a claim, not proof, until you confirm it independently.

Understanding potency and the total THC calculation

Total THC on a hemp COA is not the same number as “THC” alone. Hemp naturally contains THCA, a non-intoxicating precursor that converts to active THC when heated, so labs calculate total THC by adding the measured delta-9 THC to a converted portion of the THCA.

1. Confirm the report lists delta-9 THC and THCA separately, then check whether it also shows a calculated “total THC” figure.
2. Verify the result is reported on a dry-weight basis, since moisture content can shift potency percentages if it is not accounted for.
3. Check the math yourself using a standard conversion approach: multiply the THCA percentage by roughly 0.877 (accounting for the loss of a carboxyl group during conversion), then add the delta-9 THC percentage. Our total THC calculation guide walks through this conversion with worked numbers.
4. Look for a measurement of uncertainty (MU) next to the total THC result. The USDA’s lab testing guidelines require validated methods and MU estimates specifically because a result sitting close to the legal threshold can swing above or below it depending on the lab’s margin of error.

If the MU on that result is plus or minus 0.05%, the true value could fall anywhere from 0.22% to 0.32%, which matters a great deal near a legal line.

That 0.3% figure is a federal baseline, but state rules can vary, so a product compliant under federal guidance is not automatically compliant everywhere it ships.

Pro Tip: When a total THC result sits within the reported MU of 0.3%, ask the lab or seller for the uncertainty range before assuming the product is compliant.

Key contaminant panels and how to read their results

A hemp COA should cover more than cannabinoids. Contaminant testing is where quality and safety actually get checked.

• Pesticides: a thorough panel tests dozens of compounds, often 60 to 100 or more, and a short or missing pesticide list is one of the clearer warning signs on a COA.
• Heavy metals: lead, cadmium, mercury, and arsenic are the standard four, each reported as a numeric value against an action limit.
• Residual solvents: relevant mainly for extracts and concentrates, checking for leftover processing chemicals.
• Microbials: yeast, mold, and pathogenic bacteria, usually reported as pass or fail against a defined limit.
• Mycotoxins: toxic compounds produced by certain molds, tested separately from general microbial counts.

A pesticide panel that tests fewer than a dozen compounds is testing a fraction of what a thorough screen covers, even if every result reads clean.

Results typically appear as “ND” (not detected), a numeric value, or a pass or fail label. ND means the contaminant was not found above the lab’s limit of detection, not that zero amount exists. A numeric result below the action limit is compliant; one above it is not, regardless of how the summary line reads. Pass or fail summaries are convenient, but the underlying numbers matter more when a result sits close to a limit, since rounding and summary labels can smooth over a borderline case.

If every single contaminant panel reads suspiciously clean, with no trace detections anywhere and every pesticide at zero, it is worth checking the raw numbers against the lab’s stated limits of detection rather than accepting the summary at face value. Real-world samples, even clean ones, often show at least trace-level detections in a few categories.

If something looks wrong: immediate verification steps and escalation

When a COA raises doubts, work through these steps in order rather than guessing.

1. Contact the laboratory directly, using the sample or report number printed on the COA, and ask them to confirm they issued it.
2. Ask the seller for the original lab portal link, or request that the lab verify the report by email if no portal exists.
3. Request a retest when results seem inconsistent with what you would expect from the product, especially for potency or contaminant panels. USDA retest procedures exist for exactly this situation.
4. Keep a COA library, organized by product, batch number, and date, so you can compare current results against past shipments from the same supplier.
5. Escalate to a state regulator or request a supplier corrective action if a lab cannot confirm issuance, or if retesting confirms a discrepancy.

A COA is, as cannabis testing guidance from IAS describes it, a point-in-time assessment of a single sample, not a permanent guarantee. Treating a polished PDF as proof without checking it against the lab’s own portal is the most common way buyers get misled.

Pro Tip: Save every email exchange with a lab confirming or denying a COA’s authenticity. That correspondence is often more useful in a dispute than the COA itself.

How Hemp Flower Co. verifies lab testing and what we publish

Our testing workflow follows best practices to ensure COAs can be effectively verified.

• We organize a COA library by product and batch number to track shipments with specific, dated lab reports.
• We link product pages to the issuing lab’s portal or a QR code rather than hosting only a static PDF, enabling independent report confirmation.
• We match batch IDs printed on packaging to the batch ID on the corresponding COA to prevent mismatched reports.
• We publish results for cannabinoid potency and standard contaminant panels (pesticides, heavy metals, residual solvents, microbials) on every flower and concentrate line.

Our lab testing comparison between Space Candy and Chicken & Waffles THCA shows this in practice: two strains, two separate COAs, both traceable to batch and test date. We treat transparent sourcing as a baseline requirement, not a selling point layered on afterward.

Differences between hemp COAs and cannabis COAs and why it matters

Hemp COAs and cannabis COAs test many of the same things, cannabinoid potency, pesticides, heavy metals, microbials, but the legal context around them differs. Hemp testing in the United States centers on the federal 0.3% total THC threshold under USDA hemp regulations, and labs reporting on hemp samples are expected to follow the dry-weight, post-decarboxylation method that USDA guidance specifies.

Cannabis COAs, by contrast, are governed by individual state cannabis programs with their own testing panels, limits, and licensing requirements, since cannabis remains federally regulated differently than hemp. A cannabis lab in one state may not be accredited or licensed to test hemp for interstate commerce, and a hemp lab may not hold the state cannabis license needed to test licensed cannabis products.

For you as a buyer, this distinction matters because a COA format that looks right for cannabis is not automatically valid for a hemp product’s compliance claims, and vice versa. If you are buying hemp flower or concentrates, confirm the COA references the hemp-specific total THC standard and dry-weight reporting, not a cannabis program’s separate limits, which can use different thresholds and testing requirements entirely.

Reading cannabinoid and terpene profiles to judge flower quality

Beyond potency and contaminants, a full COA often includes a cannabinoid profile and, less consistently, a terpene profile. The cannabinoid profile breaks down individual compounds, THCA, delta-9 THC, CBD, CBG, CBN, and others, rather than just a single potency number, which tells you more about how a strain is likely to feel and what else it contains.

Terpene profiles list the aromatic compounds responsible for a strain’s scent and flavor, measured in percentages. Strains with a richer, more varied terpene profile tend to have a more distinct aroma and flavor, which many buyers use as a practical quality signal when comparing flower from different batches or growers.

Our breakdown of how CBD differs from THCA in hemp products is a useful primer if the cannabinoid list on a COA looks unfamiliar. When comparing two COAs for similar strains, a higher total terpene percentage alongside a complete pesticide and heavy metal panel generally indicates a more carefully handled product, though terpene content alone should never override a check of the contaminant results.

How often hemp products should be retested and COA shelf life

There is no single federally mandated retest interval for every hemp product, but a few practical rules apply. Under USDA hemp regulations, producers can request a retest when a sample fails or when results are disputed, and labs must follow specified retest protocols rather than simply rerunning the same sample informally.

In practice, a COA reflects one batch at one point in testing, so it does not apply to a different harvest, a different processing run, or a product that has sat in storage for an extended period.

As a practical guideline, treat a COA as reliable for the specific batch it covers and request a fresh report whenever you are buying a new batch, regardless of how recently the same strain was previously tested. Retailers and wholesale buyers should request updated COAs with each new shipment rather than relying on a report from a prior restock.

Common lab testing methods and how they shape results

The method a lab uses to test cannabinoids and contaminants affects what the resulting numbers actually mean. For cannabinoid potency, labs typically use high-performance liquid chromatography (HPLC), which measures compounds without heating the sample, or gas chromatography (GC), which involves a heating step that can convert some THCA to THC during the test itself if the method is not properly controlled.

The USDA’s lab testing guidelines specifically call for post-decarboxylation methods, meaning the test accounts for that conversion rather than ignoring it, which is part of why total THC calculations matter on a hemp COA rather than relying on raw delta-9 THC alone.

For contaminants, pesticide and residual solvent testing commonly relies on mass spectrometry paired with chromatography (LC-MS or GC-MS), which can detect compounds down to very small concentrations. Heavy metal testing typically uses inductively coupled plasma mass spectrometry (ICP-MS). Microbial testing often uses plating methods or polymerase chain reaction (PCR) testing for faster results. None of these method names need to appear on a COA for the report to be valid, but a lab’s accreditation scope should specify which validated methods it uses for each test type, which is part of what you are confirming when you check accreditation scope against the tests shown.

Understanding limits of detection and quantification

Two terms show up on almost every contaminant panel: limit of detection (LOD) and limit of quantification (LOQ). The LOD is the smallest amount of a substance a test can reliably detect at all. The LOQ is the smallest amount the test can measure with enough accuracy to report as a specific number, and it is always equal to or higher than the LOD.

A result marked “ND” means the substance was not detected above the LOD, not that it is completely absent at every possible concentration. A result that falls between the LOD and the LOQ sometimes appears as “detected, not quantified,” meaning the lab found trace amounts too small to report as a precise figure.

This distinction matters most for contaminants with strict action limits, like heavy metals or certain pesticides, where a result just below the LOQ could still be meaningfully close to a regulatory threshold even though it reads as a clean pass. When a result sits in that gray zone, checking the lab’s stated LOD and LOQ values, usually listed in a methods key on the COA, tells you more than the pass or fail label alone.

Author’s perspective on COA verification and safe buying habits

The habit that separates careful buyers from everyone else is simple: verify through the lab, not through the seller. A polished PDF proves nothing on its own, no matter how official it looks.

Checking accreditation, matching batch numbers, and keeping a dated record of every COA you review takes a few extra minutes per purchase. That small effort protects you from mislabeled potency, undisclosed contaminants, and products that drift out of compliance between harvests. Retail partners carry the same responsibility toward their own customers, which makes verification a baseline practice rather than an optional extra step.

— Michael

How Hemp Flower Co. makes COA verification simple

We publish a verifiable COA for every batch we sell, linked through the issuing lab’s own portal or a QR code, so you never have to take a seller’s word for a potency or contaminant result.

• Our Cola THCa Flower Full-Term Wholesale ships with a batch-matched COA covering potency and contaminant panels.
• Our After Dark THCa Hemp Flower Greenhouse includes the same verifiable lab documentation tied to its specific harvest.
• Our Turtle Taffy Full-Term THCa Trim Wholesale carries a batch number you can check against its lab report before you buy.

Browse our full THCA flower and wholesale selection to inspect any product’s COA before ordering, or reach out for wholesale pricing on bulk lots.

FAQ

What is a certificate of analysis (COA) for hemp?

A COA is a lab report showing a hemp sample’s cannabinoid potency and contaminant results, including pesticides, heavy metals, and microbials. It should come from an ISO/IEC 17025 accredited lab and include a batch ID that matches the product it describes.

How do I know if a COA is real?

Confirm the lab’s accreditation number in a database, check that the batch ID on the COA matches the product label, and verify the report through the lab’s own portal or QR code rather than trusting a seller-hosted PDF alone. Industry verification guidance recommends contacting the lab directly to confirm the report’s issuance when in doubt.

What does “total THC” mean on a hemp COA?

Total THC combines the measured delta-9 THC with a converted portion of THCA, since THCA turns into active THC when heated. Labs report this figure on a dry-weight basis along with a measurement of uncertainty, which matters most when the result sits close to the 0.3% federal threshold.

What does “ND” mean on a lab report?

“ND” means a contaminant was not detected above the lab’s limit of detection, not that it is entirely absent at any concentration. A result between the limit of detection and the limit of quantification may be reported as present but not precisely measurable.

Does Hemp Flower Co. provide COAs for its products?

Yes, every batch we sell ships with a verifiable COA linked through the issuing lab’s portal or a QR code, matched to the specific batch number on the packaging. You can review an example comparison in our Space Candy versus Chicken & Waffles lab results.

Sources

• How to read hemp certificate of analysis (COA) — HempData
• Laboratory testing guidelines — U.S. Department of Agriculture (AMS)
• How to verify third-party lab tests for hemp products — ACS Laboratory
• NIHC Verify program — NIHC

Recommended

• How to Select Premium Thca Flower Via Visual Inspection
• How to Determine Quality When Buying THCA Flower Online
• Hemp Terpenes Explained: A 6 Point COA Checklist for Buyers