How to Read a CBD Certificate of Analysis (COA)

Editorial guide | Last checked: 12 September 2026

What is a CBD Certificate of Analysis (COA)?

A Certificate of Analysis (COA) is an official document produced by an independent, ISO/IEC 17025 accredited testing laboratory that verifies the precise chemical makeup of a CBD product. It details the exact concentration of cannabinoids present, such as CBD, CBG, CBN, and THC, while confirming whether the product is free from harmful contaminants. Because CBD product labelling is not uniformly regulated across every European jurisdiction, a batch-specific COA serves as the primary evidence of product safety, identity, and compliance.

Why is a COA essential when buying CBD in Europe?

European regulations require CBD products to comply with novel food regulations, strict local THC limits, and consumer safety standards. The European Commission’s Novel Food Status Catalogue and the UK Food Standards Agency (UK FSA) require rigorous quality controls before CBD supplements can be lawfully marketed. A third-party COA protects buyers from mislabeled products, unexpected THC levels that could trigger positive drug tests or violate local laws, and harmful chemical residues. When comparing products across European retailers, consult our guide to comparing CBD oils in Europe to verify lab transparency and product standards.

What key sections must you check on a CBD lab report?

A comprehensive laboratory report contains four main sections. Examining each section systematically ensures the document is genuine and applicable to your specific bottle.

How do you verify cannabinoid profile and potency?

The cannabinoid profile section uses High-Performance Liquid Chromatography (HPLC) to measure active compound concentrations. Look for the stated mass percentage (%) and total milligrams per gram (mg/g) or total milligrams per bottle. Calculate the total CBD by multiplying the concentration by the total product weight or volume. A legitimate COA will list CBD along with minor cannabinoids like CBDA, CBG, CBGA, CBN, and CBC. If a product claims to be broad-spectrum or full-spectrum but only lists CBD with zero minor cannabinoids, the claim may be inaccurate.

How do you check THC limits and European legal compliance?

Legal THC limits vary across European markets. Most EU member states enforce a maximum threshold of 0.2% or 0.3% delta-9-THC by dry weight in industrial hemp extract, while specific end-product regulations in countries like France or Italy set stricter limits on detectable THC in finished consumer goods. Check the COA’s “Delta-9-THC” or “Total THC” row. The result should state a percentage clearly below local statutory limits or list “ND” (Not Detected) with a low Limit of Detection (LOD, typically under 0.01%). If total THC exceeds regulatory limits, the product cannot be legally distributed or possessed in that jurisdiction.

What contaminant testing results should a COA include?

Full-panel laboratory testing verifies that hemp extract was safely cultivated, extracted, and processed without hazardous contaminants. Hemp is a dynamic bioaccumulator that easily absorbs compounds from soil and air, making purity testing critical.

• Heavy Metals: Tests for lead, cadmium, arsenic, and mercury using ICP-MS analysis. All values must be below established European safety thresholds (PASS).
• Pesticides: Screens for agricultural chemical residues, synthetic pesticides, and fungicides. Look for “ND” across all tested pesticide categories.
• Residual Solvents: Evaluates leftover extraction solvents such as ethanol, butane, propane, or hexane via Headspace GC-MS. Results must fall below strict safety limits.
• Microbials & Mycotoxins: Checks for harmful bacteria (E. coli, Salmonella), yeasts, molds, and fungal toxins (Aflatoxins). Must show zero detection or PASS.

How do you match a COA to a specific product batch number?

Every reputable CBD manufacturer prints a batch number, lot number, or QR code directly on the outer packaging or bottle label. To verify your COA, locate the batch number on your product and compare it character-by-character to the batch ID listed on the lab report header. Never rely on a static “sample COA” or an undated lab report from a previous year. If the batch number on your product bottle does not match the lab report provided on the manufacturer’s website, request the correct batch COA directly from customer support before consuming the product.

FAQ

How can I tell if a CBD COA is genuine or fake?

Check that the report was issued by an independent, accredited laboratory with a verifiable accreditation number (such as ISO 17025). Authentic COAs include the laboratory address, signature of the lead analyst, testing date, and a unique sample ID. You can verify the document by contacting the testing lab directly or scanning any embedded QR code to load the original report directly from the laboratory server.

What does “ND” mean on a CBD lab report?

On a COA, “ND” stands for “Not Detected.” This means the laboratory instrument did not detect the compound above its established Limit of Detection (LOD) or Limit of Quantitation (LOQ). An “ND” result for THC, heavy metals, or pesticides confirms that the sample contains less than the minimum detectable threshold for that specific test.

Is 50 mg of CBD enough to feel calm?

Response to CBD varies by individual weight, metabolism, formulation type, and personal tolerance. A 50 mg serving is considered a moderate dose, but personal suitability depends on individual factors. Consult a healthcare professional for personalized guidance regarding CBD usage and dosing.

For verified product recommendations and COA checks across top European brands, see our full buyer checklist for the best CBD oils in Europe.