How to Read a Hemp Ingredient Certificate of Analysis: A B2B Buyer's Field Guide
A Certificate of Analysis is the most important document in hemp ingredient procurement — and one of the most commonly misread. This guide breaks down a hemp ingredient COA section by section and explains what to verify, what to question, and what to reject under the federal hemp compliance framework.
What a COA Is — and What It Isn't
A COA is an analytical report issued by a laboratory summarizing test results for a specific sample. It is not a guarantee of product quality across all lots, a GMP certification, or an attestation of legal hemp sourcing. It reflects the analytical results for the specific sample submitted.
Section 1: Laboratory Identification
Post-November 12, the testing laboratory must hold current DEA Schedule I researcher registration and ISO 17025 accreditation for hemp cannabinoid analysis.
What to look for: Laboratory name and address, DEA registration number (must appear explicitly), ISO 17025 accreditation notation, LIMS report reference number.
Red flags: No DEA registration number; laboratory identified only by state license; no ISO 17025 reference; laboratory name not verifiable in the DEA Diversion Control public database.
Section 2: Sample Identification
This section links the test results to a specific lot of ingredient.
What to look for: Client name, product name and description, lot number or batch identifier, sample receipt and analysis dates, sample matrix description.
Critical check: The lot number on the COA must match the lot number on the product you receive. A COA from a different lot is not valid documentation for the product in hand.
Section 3: Cannabinoid Potency Panel
This is the highest-scrutiny section for federal compliance.
Critical requirement: HPLC methodology. The laboratory must use HPLC (High-Performance Liquid Chromatography), not GC. Gas Chromatography applies heat that converts THCA to delta-9 THC, making it impossible to report both values separately. Without separate THCA and delta-9 THC values, you cannot calculate total THC correctly.
What to look for: HPLC methodology notation; separate reported values for delta-9 THC and THCA; reported units (% by weight, mg/g, or mg/serving); Limit of Detection (LOD) and Limit of Quantification (LOQ) for each cannabinoid.
Total THC calculation:
Total THC = delta-9 THC + (THCA x 0.877)
Convert to mg per container using serving size and servings per container. The result must be below 0.4mg per container.
Red flags: Only delta-9 THC reported with no THCA value; methodology not specified; THC values at detection limit with no LOQ disclosure.
Section 4: Contaminant Panels
A complete COA should include:
- Pesticide residue panel — confirms residues below regulatory action levels
- Heavy metals panel — lead, arsenic, cadmium, mercury (hemp bioaccumulates metals from contaminated soil)
- Microbial contaminant panel — total aerobic plate count, yeast/mold, coliforms, pathogens
- Residual solvents panel — for solvent-extracted ingredients, confirms USP Class 1/2/3 compliance
Section 5: Laboratory Signatures
The COA should be signed or certified by the responsible analyst or laboratory director, with a date of report issuance and method reference numbers.
COA Review Checklist
- [ ] DEA registration number present and verifiable
- [ ] ISO 17025 accreditation noted
- [ ] Lot number matches product received
- [ ] HPLC (not GC) methodology confirmed
- [ ] Delta-9 THC and THCA reported separately
- [ ] Total THC calculated and confirmed below 0.4mg per container
- [ ] Pesticide, heavy metals, and microbial panels present
- [ ] Report dated and signed
Conclusion
A COA requires active interpretation, not passive acceptance. Suppliers who provide complete, clearly labeled, methodologically sound COAs are telling you something important about how they run their operations. Suppliers whose COAs are incomplete, unclear, or methodologically inconsistent are telling you something equally important.
