Reclaim Labs

How to read a CBD certificate of analysis

By Ron, founder of Reclaim Labs · Published

The short version. A Certificate of Analysis (COA) is a third-party lab report on what's actually in a CBD product. The 2017 JAMA mislabeling study (Bonn-Miller) found only 31% of online CBD products were accurately labeled — 26% under-labeled, 43% over-labeled, and THC was detected in 21%. A trustworthy COA shows the full cannabinoid panel (CBD + minor cannabinoids + Δ9-THC), the contaminant panel (pesticides, heavy metals, residual solvents, microbials), and traces back to a specific manufacturing batch matched to the batch ID printed on the bottle. If a brand can't produce one for your specific lot, that's the disqualifier.

Key takeaways

What a COA is, and why it matters

A Certificate of Analysis is an independent laboratory's report on what's actually in a CBD product. It's the mechanism by which a brand's label claim — "1000mg CBD per bottle" — is verified against measurable reality. Without a COA, every claim on the label is a brand's promise unsupported by anyone outside the brand.

The need is not theoretical. The single most-cited paper on CBD product quality, Bonn-Miller 2017 in JAMA, tested 84 online CBD products and found only 31% were accurately labeled. 26% contained less CBD than claimed; 43% contained more. THC was detected in 21% of products — including some labeled THC-free. That study is now eight years old and the situation has improved, but the educated CBD audience still treats the COA as the only honest answer to "is what's on the label actually in the bottle."

A useful distinction: in-house testing means the manufacturer tested its own product, which has the obvious conflict-of-interest problem. Third-party testing means an independent laboratory — ideally one accredited to the ISO/IEC 17025 standard for testing competence — tested the product. Only the second carries any signal. A third distinction matters too: per-batch testing means each manufacturing batch is tested separately, with the batch ID on your bottle traceable to a specific COA. A "representative" COA from some earlier batch tells you what one batch of this product looked like, but not what's in the bottle on your shelf today.

As one heavily-upvoted r/CBD comment put it: "It's a must that COAs be readily available or you have no idea what you're putting into your body." That's the bar. Brands that don't clear it are filtered out by the educated cohort before any other consideration.

What to look for on a real COA — a walkthrough

A complete COA has roughly ten elements worth understanding. Reading them in order makes auditing any brand's COA a structured exercise rather than a guess.

1. Lab name and accreditation

At the top of the COA, the testing laboratory's name and address. Look for the lab's ISO/IEC 17025 accreditation number — this is the international standard for testing competence. Major US cannabis-testing labs (Kaycha Labs, ProVerde, ACS Laboratory, SC Labs, Steep Hill) are ISO/IEC 17025 accredited. If the lab can't show accreditation, the COA's signal value is much weaker.

2. Batch ID and manufacture date

Every COA covers one specific batch. The batch ID on the COA should match the batch ID printed on your bottle (typically on the label or bottom). The manufacture or sample-receipt date tells you how recently the batch was tested.

3. Cannabinoid profile

A table showing measured concentration of each cannabinoid: CBD, CBG, CBC, CBN, CBDV, THCV, Δ9-THC, and often more. Each row shows the cannabinoid name, its concentration (typically in mg/g or mg/mL), and a pass/fail or numeric result. The relevant comparison is between the bottle's label claim and the COA's measured CBD value — they should be within roughly ±10% of each other.

4. The Δ9-THC line specifically

For drug-tested users, this is the most important line on the COA. Federal hemp must be below 0.3% Δ9-THC by dry weight, but for drug-test peace of mind you want to see <LOD (below limit of detection) or <LOQ (below limit of quantification). Even "broad-spectrum" products can show trace THC because the THC-removal step isn't perfect. Isolate-based products should reliably read <LOD.

5. Label-claim accuracy

Some COAs include an explicit "label claim verification" section showing the bottle's labeled mg vs. the COA-measured mg. If the COA doesn't show this comparison directly, you can calculate it: take the COA's mg/mL × the bottle volume = measured total mg, then compare to the bottle's label total. Within ±10% is acceptable; outside that range is mislabeling.

6. Pesticide panel

A list of pesticides tested with pass/fail or quantitative results against action limits. State cannabis programs typically test 60+ pesticides; federal hemp standards are looser but a complete COA tests a broad panel anyway. The action levels are usually shown in ppb (parts per billion); below the action limit = pass.

7. Heavy metals panel

Four heavy metals matter: lead (Pb), cadmium (Cd), arsenic (As), and mercury (Hg). The reference standard is USP <232>, which sets daily-intake limits for elemental impurities in pharmaceutical products. Hemp accumulates heavy metals from soil; a COA showing all four below USP <232> limits is what you want.

8. Residual solvents panel

If the CBD was extracted using solvents (ethanol, hexane, propane, butane), residuals from the extraction process can persist in the finished oil. The panel tests for these against acceptable-residue limits. CO₂ extraction (no organic solvents) generally produces cleaner results; ethanol extraction is also clean when properly purged.

9. Microbials and mycotoxins

Tests for bacterial contamination (aerobic plate count, coliforms, E. coli, salmonella), yeast and mold, and mycotoxins (aflatoxins, ochratoxin A). Hemp is an agricultural product; mold growth during cultivation or storage is a real concern. A passing microbial panel is essential.

10. LOD and LOQ — how to read "<"

The limit of detection (LOD) is the lowest concentration the instrument can distinguish from noise. The limit of quantification (LOQ) is the lowest concentration the lab can measure with confidence in the number. Results below these thresholds are reported as "<LOD" or "<LOQ" rather than as a zero — there could be a trace amount, but it's below what the instrument can reliably measure. For contaminants and unwanted cannabinoids like Δ9-THC, "<LOD" is the cleanest possible result.

What disqualifies a CBD brand

Red flags — any one of these is reason to look elsewhere:

  1. No COA available on the website at all.
  2. Only a "representative" COA — not matched to the batch ID on your bottle.
  3. COA missing the contaminant panel (cannabinoids only, no heavy metals / pesticides / microbials).
  4. COA date more than 12 months older than your bottle's manufacture date.
  5. COA shows less than 80% or more than 110% of label-claim cannabinoid content.
  6. Δ9-THC over 0.3% in a product marketed as legal hemp.
  7. Lab is in-house (manufacturer tested its own product).
  8. Lab is not ISO/IEC 17025 accredited.

For drug-tested workers and athletes

A separate level of COA scrutiny applies if you're drug-tested for work or competition. Federal employees, transportation workers, military, USADA-tested and WADA-tested athletes all have something at stake from a positive cannabinoid screen — even an "accidental" one from a "THC-free" product.

Gillham 2026 documented that daily broad-spectrum CBD use produces urinary cannabinoid metabolite concentrations that exceed WADA prohibition thresholds — even when individual broad-spectrum products had passing label claims. Two practical implications: (a) for drug-tested users, isolate-based products are categorically safer than broad- or full-spectrum, and (b) the Δ9-THC line on the COA must read <LOD, not just "below 0.3%."

Reclaim's 50mg patches use CBD isolate and are formulated for drug-test-safe systemic dosing. See the WADA-rules explainer for the full picture of cannabinoid testing in sport.

How Reclaim's COA practice works (and what's in flight)

We are committed to per-batch, third-party-accredited COAs for every Reclaim product. The current state of that program, honestly:

  • NANO Roll-On 1000mg — third-party COA from Kaycha Labs (ISO/IEC 17025 accredited; batch BSWSP20) covering the cannabinoid potency panel. View PDF. Expanded safety-panel testing on a finished roll-on batch is in progress.
  • 2800mg Broad Spectrum Oil and 50mg Patches — third-party COAs on finished-product batches are being commissioned. Until they're published, request a COA for your specific bottle's batch ID via support@reclaimlabs.com and we'll send you what we have on file.

The commitment is to publish every COA — including any with results we'd rather not show. The educated CBD audience will absolutely audit this over time, and the only way to win that audit is consistency. If a batch result ever shows something we weren't expecting, the COA gets published with the result we got, alongside the corrective action.

The cost-per-mg math the educated cohort actually does

A note on pricing — the right question isn't bottle price; it's $ per mg of CBD delivered. A 1000mg-in-1oz oil at $50 and a 2800mg-in-1oz oil at $79 are not priced the same; the second has 2.8× the active ingredient. The honest comparison normalizes both:

Reclaim product Label CBD List price $ per mg CBD
2800mg Broad Spectrum Oil (1oz) 2800 mg $79 $0.028
NANO Roll-On 1000mg 1000 mg $55 $0.055
50mg Patches (10-pack) 500 mg total $40 $0.080

The roll-on and patches command a per-mg premium for their delivery format — nano-emulsion transdermal and isolate-based 24-hour patch respectively — which is a different value question than per-mg oral CBD. For oral systemic dosing, the oil is the right comparator.

Audit any brand the same way: take their COA-verified CBD content (not the label claim — the COA-measured number, after the Bonn-Miller mislabeling problem is factored in), divide by the list price, and compare. We're not chasing the cheapest position — quality has a floor — but we are chasing honest cost-per-strength against the educated CBD audience's actual math.

Frequently asked questions

What is a COA?

A Certificate of Analysis is a third-party laboratory report documenting what's actually in a CBD product. It typically includes a full cannabinoid profile (CBD, minor cannabinoids, Δ9-THC), a contaminant panel (pesticides, heavy metals, residual solvents, microbials, mycotoxins), and traceability to a specific manufacturing batch. The 2017 JAMA mislabeling study (Bonn-Miller) found only 31% of online CBD products were accurately labeled — the COA is how you check.

What's the difference between in-house testing and third-party testing?

In-house testing means the manufacturer tests its own product. Third-party testing means an independent ISO/IEC 17025-accredited laboratory tests the product. Third-party tests are the standard the educated CBD audience expects because they remove the manufacturer's conflict of interest.

Should the COA be batch-specific?

Yes. A "representative" COA covers one batch but doesn't tell you whether the bottle on your shelf matches it. Per-batch COAs — where the batch ID printed on the bottle matches a specific COA on the brand's site — are the gold standard.

What does "<LOQ" mean on a COA?

LOQ is the limit of quantification — the lowest concentration the lab can reliably measure. "<LOQ" means the analyte is below that threshold; the lab couldn't put a precise number on it. For Δ9-THC in a "THC-free" product, "<LOQ" or "<LOD" (limit of detection, even more stringent) is what you want to see.

How accurate should the label claim be relative to the COA?

A reasonable industry tolerance is ±10% of label claim. Bonn-Miller 2017 found 26% of products were under-labeled (less CBD than claimed) and 43% over-labeled (more CBD than claimed) — wide variance industry-wide. A trustworthy brand's COA shows actual content within roughly ±10% of the label.

Can I trust a CBD brand if their COA is more than a year old?

Treat that as a red flag. CBD's stability has been characterized — Fraguas-Sánchez 2020 documented how temperature, light, oxygen, and pH all degrade cannabinoid content over time. A COA from 18 months ago doesn't tell you what's in a bottle made last week from a different batch. Look for a COA dated within months of your bottle's manufacture date.

I'm drug-tested for work or sport. What should I look for on a COA?

Two things. First, the Δ9-THC line must read <LOD (limit of detection) for the strictest peace of mind. Even "broad-spectrum" products can show trace THC — Bonn-Miller 2017 found THC in 21% of products including some labeled THC-free. Second, isolate-based products like Reclaim's 50mg patches are more protective than full- or broad-spectrum oils — Gillham 2026 documented daily broad-spectrum CBD producing WADA-prohibited urinary metabolites. See the WADA rules page for the full picture.

What if my CBD brand doesn't have a COA?

That's the disqualifier. As the educated CBD audience on r/CBD puts it: "It's a must that COAs be readily available or you have no idea what you're putting into your body." Email the brand and ask for the COA for your specific batch (the batch ID is printed on the bottle). If they can't produce one, that's your answer.

References

  1. Bonn-Miller MO et al. (2017). Labeling Accuracy of Cannabidiol Extracts Sold Online. JAMA. PMID 29114823
  2. Iffland K, Grotenhermen F. (2017). An update on safety and side effects of cannabidiol: a review of clinical data and relevant animal studies. PMID 28861514
  3. Fraguas-Sánchez AI, Torres-Suárez AI. (2020). Insights into the effects of the natural occurring CBD on its stability profile. PMID 32506012
  4. Gillham SH et al. (2026). Urinary cannabinoid metabolites following daily broad-spectrum CBD use exceed WADA thresholds. PMID 40920736

Authority resources: FDA on CBD products · ISO/IEC 17025 standard · USP <232> elemental impurities reference

Related reading

Some related pages are still being written.