CBD Lab Test COA: 7 Things You Need to Check

You’re holding a bottle of CBD oil, or you’ve just added a top-of-the-line shot to your cart. On the label or product page, there’s a link, QR code, or button that says “view lab report.” You click—and you get a three-page PDF filled with abbreviations, decimals, “

This is where most people give up. And it’s a shame, because a CBD lab test (COA) is the only tool you as a consumer have to check whether what you’re paying for is actually in the bottle – and whether there’s anything in it that shouldn’t be there. A COA (Certificate of Analysis) is not marketing. It’s a measurement result on a specific production batch, and if you can read it, you can weed out the junk products in under two minutes.

This guide takes you through the report line by line: what to check, in what order, how to match the batch number on the label with the report – and which red flags mean you should leave the product alone.

What is a COA really – and what can't it tell you?

A COA is an analytical report from a laboratory that has received a sample of a specific batch and measured the contents using validated methods. It typically contains:

• ID: product name, batch/lot number, sample type (oil, flower, extract, gummies) and who submitted the sample.
• Cannabinoid profile: how much CBD, CBDa, THC, THCa and possibly CBG, CBN and CBC the sample contains.
• Purity analyses: pesticide residues, heavy metals, microbiology, mycotoxins and solvent residues.
• Method and detection limits: which analysis method has been used (e.g. HPLC or GC-MS), and how low the laboratory can measure.
• Date, signature and laboratory accreditation number.

It’s equally important to understand what a COA is not . It’s not an approval from a regulatory agency, it’s not a health promise, and it doesn’t say anything about how the product will work for you. It only tells you one thing: what the lab measured in the sample they received. That’s why the five or six fields surrounding the sample’s identity and origin are at least as important as the numbers themselves.

Step 0: How to get the right report

Before reading numbers, make sure you read the report that belongs to your product. There are three normal ways to access it:

1. QR code on the label – if you scan it, you should end up on a report where the batch number matches the label. Not on the front page of a webshop.
2. Batch search on the webshop – you enter the lot number and get the corresponding PDF.
3. Report on the product page – a direct PDF. Here you must check yourself that the batch number in the PDF is the same as on the item you have been delivered.

If you can't find a report at all – neither on the product page, in the FAQ, nor by asking customer service – then there's nothing to discuss. Then you don't know what you're buying. This applies regardless of whether the product is an oil, a top shot, a hash, or a bag of gummies.

The 7 things you need to check in a CBD lab test (COA)

Review the points in order. The first three are about whether the report is at all credible. The next four are about content and purity.

1. Batch number and product identification

Find the “Batch”, “Lot”, “Batch ID” or “Sample ID” field at the top of the report. Compare the characters for characters with what is on the label, sticker on the bottom of the box or on the bag. They should be identical – not “almost”.

Check at the same time:

• The product name matches the item (not “CBD Oil 10%” when you have purchased a 20%).
• Matrix/sample type fits: a report on raw material (flower or extract) is not the same as a report on the finished product. Both can be relevant, but an oil should have a report on the finished oil.
• Requester – who submitted the sample? The manufacturer, the importer or the webshop. A blank field here is a weakness.

The classic problem in the CBD industry is “recycled” reports: one nice analysis from 2021 gets stuck on the product page, while fifteen new batches have been run since. The batch number is what reveals it.

2. Analysis date – and how old must the report be?

Look for two dates: received/sampling date (when the sample came in) and report date (when the report was issued). If there is only one date, it is typically the issue date.

There is no official “expiration date” on a COA, but in practice:

The reason age matters: CBD and especially THCA/CBDA are not stable forever. Light, heat, and oxygen degrade cannabinoids, so an analysis from the day of production best describes the product as it was at the time. This is also why storage is a real factor in final potency – something we go into depth about in our guide on how to properly store CBD hash.

3. Is the laboratory independent and accredited?

This is where professional products stand out from the rest. You look for three things:

• A named, third-party laboratory with address and contact information – not “internal QC” or “manufacturer lab”.
• A reference to ISO/IEC 17025, which is the international standard for the competence of testing and calibration laboratories.
• An accreditation number from a national accreditation body. In Denmark it is DANK, which accredits laboratories within, among other things, testing and analysis; in other EU countries these are equivalent bodies (e.g. ENAC in Spain, RvA in the Netherlands, DAkkS in Germany).

Accreditation is not a marketing ploy. It means that an independent body has assessed the laboratory's methods, equipment, personnel and traceability – and that supervision is carried out. Even the authorities' own laboratories work in this way; the Danish Medicines Agency's laboratory, for example, is accredited, and large commercial laboratories such as Eurofins in Denmark openly describe which analyses their accreditation covers.

Important nuance: accreditation applies per analysis, not per laboratory. A lab may be accredited for heavy metals, but run cannabinoids as a non-accredited “service”. Good reports clearly mark this – often with an asterisk or a note like “method not covered by accreditation”. Read the small notes at the bottom of the page.

4. The cannabinoid profile: CBD, CBDa, THC, THCa – and “total”

This is where most of the misunderstandings arise, because there are multiple numbers for the same substance. The explanation is that cannabinoids exist in both their acidic “raw” form (CBDa, THCa) and in the decarboxylated form (CBD, THC), which occurs when heated. A laboratory measures both and calculates a total value with a fixed conversion factor of 0,877, which comes from the difference in molecular weight:

• Total CBD = CBD + (CBDa × 0,877)
• Total THC = THC + (THCa × 0,877)

Practically, this means:

• On a olie The majority is typically already converted to CBD because the extract is heat-treated. Here, “CBD” and “Total CBD” are often close to each other.
• On a raw top shot or an untreated flower it is the other way around: the vast majority is as CBDa and THCa. If you only look at the “CBD” column, you mistakenly think that the flower is weak. It is “Total CBD” that describes what you actually get when the product is heated.

That's why the THCA number is so important to understand if you're buying flowers or extracts - we've delved into the chemistry in the article Everything You Need to Know About THCA: From Plant to Product.

How to quality check the profile:

1. Does the strength match the label? An oil labeled 10% should show approximately 10g of CBD per 100g, which is around 1000mg per 10ml bottle. Small deviations are normal in all food analysis; large deviations are not.
2. Is there a unit? Numbers without units (mg/g, %, mg/ml) are useless. Be aware of the difference between mg/g and mg/ml when calculating for oils.
3. Does the spectrum match the marketing? A “broad spectrum” product should show multiple cannabinoids, but THC below the detection limit. An isolate should show CBD close to 100% and the rest as ND/ full spectrum, broad spectrum and CBD isolate.
4. Is the sum realistic? If a report on a concentrate shows 90% total cannabinoids, but the product is sold as an oil in MCT oil, something is not right – it is probably the raw material's report, not the product's.

An isolate is the easiest report to read because there is really only one number that matters: purity. If you want to see what it looks like in practice, you can take a look at the documentation for Activated CBD Isolate – 99,8% , where the profile consists of CBD and virtually nothing else.

5. Pesticide residues

Hemp is an effective recorder of what is in the soil and what is sprayed on the field. Therefore, the pesticide panel is one of the most important pages in the report – and one of the pages that is most often “missing”.

How to read it:

• Kolonnen result shows measured content. “ND” (not detected) or “
• Kolonnen Limit/MRL shows the limit value against which the laboratory assesses the result. Limit values ​​for pesticide residues in food are set in EU legislation, and the Danish rules and controls are administered by food Administration.
• Kolonnen Status typically shows “Pass”/”Fail” – but a “Pass” is only worth something if you can see what limit value it is being compared to.

Be critical of the size of the panel. A panel of four substances says almost nothing; serious laboratories typically screen for several tens to hundreds of active substances. If it only says “pesticides: pass” without a list of substances, the documentation is effectively empty.

6. Heavy metals

The four classic parameters are lead (Pb), cadmium (Cd), mercury (Hg) and arsenic (As) . They are absorbed from soil, fertilizer and water and do not disappear during processing – on the contrary, they can become concentrated in extracts because you are pressing a lot of plant material into a little product.

It is therefore essential that concentrates and extracts have their own analysis. A pure flower may rank well, while an extract from the same harvest ranks higher, simply because the material is concentrated. Limit values ​​for contaminants such as heavy metals in food are set in EU regulations, which you can find out about via the Danish Veterinary and Food Administration , while the European risk assessment of the substances is carried out by EFSA.

If you buy hash or other concentrated products, make it a habit to look specifically for the heavy metal and solvent side – these are the two parameters where the concentration process can really make a difference. A product like CBD Hash – Bubble Hash | 55% is made by mechanical separation with ice and water, where no chemical solvents are used in the process – but the report should still be able to confirm both cannabinoid content and purity.

7. Microbiology, mycotoxins and solvent residues

The last block is about what you can't see, smell or taste.

Microbiology is particularly relevant for dried flowers and other plant products, where drying and storage determine whether there is growth of yeast, mold or bacteria. Typical parameters are total bacterial count, yeast and mold, E. coli , Salmonella and Aspergillus species. The methods and quality assurance behind microbiological analyses are a field of study in themselves – the Statens Serum Institut describes how quality assurance of analyses works in practice.

Mycotoxins (e.g. aflatoxins and ochratoxin A) are toxins produced by molds. They can be present even after the mold is gone, and should therefore be tested separately on dried flowers and extracts.

Residual solvents are only relevant if the product is manufactured with a solvent – ​​e.g. ethanol, butane, propane or hexane. Here you look for whether the individual substances are below the limit value. If the product is made with CO2 extraction or mechanically (ice/water, dry sieving), “residual solvents: not applicable” is a completely legitimate statement – ​​but then the production method must be stated somewhere.

How to match label and report in practice

Here is the specific routine you can do in 90 seconds – whether you're standing in a store or sitting with a package that has arrived in the mail.

1. Find the batch number of the product. It is typically on the bottom of the box, on the back of the label or on a small sticker with “LOT” and a best before date. Take a picture of it with your phone.
2. Open the report. Scan the QR code or find the PDF on the product page.
3. Compare top block. Place the image of the label next to the report header and check: batch number, product name, quantity and sample type.
4. Check date and lab. Is the report dated and does it list a named laboratory with an accreditation number?
5. Calculate the strength accordingly. Compare “Total CBD” in the report with the mg stated on the label.
6. Scroll to the purity pages. Are pesticides, heavy metals and – where relevant – microbiology and solvents present? Is there a limit value for each result?
7. Save the PDF. If you have a complaint, the report and batch number are your documentation.

The math: from report to dose

The report often states content in percentage or mg/g, while the label speaks in mg per bottle or per piece. Here are the conversions you need:

Please note that the number of drops per milliliter varies with pipette and viscosity – therefore, approximately 20–25 drops per ml is a rule of thumb, not a measured value. Edible products are easier to dose precisely because the dosage is built into the portion: in e.g. CBD Gummies “Chill” Mango – 1200mg , the total amount is divided into fixed pieces, so you can count backwards from the report to the individual gummy. If you are working with small, regular doses, you may benefit from reading our guide to microdosing CBD.

Red flags: when to just leave the product alone

Some errors in a report are technicalities. Others mean “don’t buy.” Here are the most important ones, ranked by severity:

One last, more subtle flag: reports where everything is perfect zero. Zero pesticides, zero heavy metals, zero THC, zero microbiology – exactly 0,00 all the way. In real-world analyses, it says “<LOQ,” “<0,01 mg/kg,” or “ND” with a stated limit of detection because a lab can’t measure absolute zero. If a report consistently uses round zeros without limits, it’s worth taking a second look.

Product types: what to look for in particular

CBD oils and drops

Here, potency and THC level are key, along with heavy metals (because the extract is concentrated) and residual solvents (if ethanol was used). Also, check that the report applies to the blended oil and not just the raw extract. If you need help choosing between strengths and spectra, we go into depth in the guide on how to choose the best CBD oil in Denmark.

Top shot, shake and trim

Look at “Total CBD” and “Total THC” – not just the decarboxylated numbers, as raw flower contains predominantly the acid forms. Microbiology and mycotoxins are more important here than in any other product, as drying and packaging are critical steps. With shakes and trims, the variation between batches is typically greater than with whole bud, so a fresh, batch-specific report is extra relevant – whether you’re looking at BZ Popcorn Buds – 12% CBD or a trim-based product.

Hash, extracts and concentrates

Everything is concentrated – both cannabinoids and any contaminants. Prioritize heavy metals and residual solvents, and look for the production method to be disclosed (ice/water, dry sieving, CO2, ethanol). If hydrocarbons were used, the residual solvent panel should be detailed.

Gummies, capsules and other edible products

Here, homogeneity is key: is the CBD distributed evenly throughout all pieces? Some reports state content per piece, others per 100 g. Also, check that the report includes the finished product and not just the isolate or distillate used as an ingredient.

The rules behind the numbers: what applies in Denmark and the EU?

A COA only makes sense if you know what framework the product must comply with. The most important regulatory requirements for Danish consumers are:

• Foods and supplements: food Administration administers the regulations for food in Denmark, including requirements for labeling, contaminants and the ban on marketing foods with disease prevention or healing claims. Cannabidiol extracts are treated in the EU within the framework of the novel food regulations, where a product must be approved before it can be sold as food.
• Risk assessment at EU level: EFSA is the EU food safety agency and has assessed the safety of cannabidiol as a novel food, including identifying knowledge gaps that need to be filled before a full assessment can be completed. EFSA also provides risk assessments for pesticides and contaminants on which the limit values ​​are based.
• Cosmetics with hemp and CBD: If you use cream or balm, the cosmetics regulations apply instead of the food regulations. The Environmental Protection Agency describes what applies to cannabis and CBD in cosmetic products. If you want to build a routine, you can see our review of CBD and hemp skincare routine step by step.
• Equipment and electronics: If you buy a vaporizer, battery-powered grinder or other electronics, the product safety regulations apply. The Danish Safety Technology Authority is the authority for product safety and electrical products in Denmark – and a COA on the plant material says nothing about whether a device is safe.
• Accreditation: DANK is the national accreditation body in Denmark and provides information in which areas laboratories can be accredited.

Because the rules in the CBD area are changing, and because limit values ​​and approvals are constantly updated, you should always check the current requirements directly with the authorities rather than relying on a webshop's formulation. If you shop physically, you can use the same approach as described in our overview of CBD stores in Copenhagen : ask the store if you can see the report for the particular batch you are dealing with.

Checklist: your 2-minute COA check

• ☐ The report is a PDF from a named third-party laboratory
• ☐ ISO/IEC 17025 accreditation and accreditation number are stated
• ☐ Batch number on the report = batch number on the product
• ☐ The report is dated and less than approximately 12–24 months old
• ☐ The sample type corresponds to the finished product
• ☐ Total CBD matches the label's mg statement
• ☐ Total THC is calculated as (THC + THCa × 0,877), not just “THC”
• ☐ The pesticide panel contains an actual list of substances with limit values
• ☐ Lead, cadmium, mercury and arsenic have been measured
• ☐ Microbiology/mycotoxins are included if it is a flower
• ☐ Residual solvents are included if solvent was used
• ☐ All numbers have units and the methods are stated

If you can tick most of the boxes, you have a product with real documentation. If three or more are missing, there is reason to ask the seller – and if the batch, date or lab name is missing, the answer is no.

Frequently Asked Questions About CBD Lab Testing and COA

Is a COA the same as an approval from the authorities?

No. A COA is a measurement result from a laboratory on a specific sample. It documents content and purity, but it is not a permit, approval or proof that the product may be sold as food. Rules on marketing and approval are under the authority of the authorities, in Denmark, among others, the Danish Veterinary and Food Administration.

Why are there two different THC numbers in the report?

Because the lab measures both delta-9-THC and THCa (the acid form) and then calculates “Total THC” as THC + THCa × 0,877. The factor is due to the difference in molecular weight between the two forms. Total THC is the number that describes what the product contains when heated.

What do ND, LOD and LOQ mean?

“ND” (not detected) means that the substance could not be detected. LOD is the limit of detection – the smallest amount the method can detect. LOQ is the limit of quantification – the smallest amount the method can measure with sufficient certainty. A result of “

Should I choose products without THC at all?

It depends on your situation. If you are subject to control at work, or want to avoid THC altogether, isolates and broad-spectrum products, where THC is below the detection limit, are the most predictable choice. If you want the cannabinoid profile of the entire plant, a full-spectrum product is relevant – but then you should know and understand the Total THC number. You can find the background for the different cannabinoids in our guide to cannabinoids: CBD, CBG, CBN and THC.

How old must a lab report be?

There is no set rule, but the report should apply to the batch you are purchasing. A report on the current batch from the past 12 months is a good starting point, while reports from several years without a batch match do not really document the product you are getting in your hands.

Can a COA be fake?

Yes, and that’s why the first three checkpoints are about identity rather than numbers. Be especially skeptical of screenshots, reports without a lab name or accreditation number, and reports where you can’t find the lab with a simple search. If in doubt, contact the lab directly and provide the report number – reputable labs will be happy to confirm that a report is genuine.

Sources

• Danish Veterinary and Food Administration – regulations for food, labeling and control in Denmark
• EFSA – EU Food Safety Agency, risk assessment of cannabidiol, pesticides and contaminants
• Danish Safety Technology Authority – product safety and electrical products
• DANAK – accreditation areas for Danish laboratories
• Danish Environmental Protection Agency – cannabis and CBD in cosmetic products
• Danish Medicines Agency – laboratory accreditation
• Eurofins Denmark – about accreditation of analyses
• Statens Serum Institut – quality assurance of analyses

Summary

A COA is not difficult to read once you know the order. Start with the identity: batch number, date, and ISO/IEC 17025-accredited lab. Then read the cannabinoid profile, focusing on Total CBD and Total THC, and finally go through the purity pages: pesticides, heavy metals, microbiology, mycotoxins, and residual solvents. If there are numbers with units and limits all the way through, and the strength matches the label, you have documentation. If the batch, date, or lab name is missing, you have marketing.

If you want to try the method in practice, you can start by looking at the documentation behind our guide to choosing CBD oil and then review the reports for the product categories you are considering – oils, tops, hash or gummies. If there is something in a report that you do not understand, or if you would like the batch documentation for a specific product, you are welcome to write to our Danish customer service. We will find the report and be happy to explain the figures.

Disclaimer: The products on CBDanmark are not medicines and are not intended to prevent, diagnose or treat disease. This article is general information about laboratory reports and is not a substitute for professional advice. If you are pregnant, breastfeeding, taking medication or have a chronic condition, you should talk to your doctor before using CBD or hemp products.