How to Read a Cannabis COA: A Complete Consumer Guide

A product label might tell you the THC percentage and a catchy strain name, but a Certificate of Analysis (COA) — issued by an independent, state-licensed testing lab — is the only objective document separating marketing claims from verifiable data about what's actually in the jar, and what contaminants are absent from it.

State packaging laws leave little room for chemical detail — mostly warning labels and required disclaimers — so the COA is where the real data lives: pesticide, heavy-metal, and microbial safety screens, plus the specific cannabinoid and terpene concentrations that shape the entourage effect. Without it, you're relying entirely on a brand's marketing.

Most licensed markets require consumer access to COAs, typically via a QR code on the packaging linking to a lab-hosted PDF. A missing QR code, or one that links to a generic homepage instead of a batch-specific report, is an immediate red flag — and a knowledgeable budtender should be able to produce the document on request if it's not readily available.

Before trusting any numbers, check that the document actually matches your product: the batch or lot ID should match your packaging's compliance sticker, the test date should be reasonably recent (THC slowly oxidizes into CBN over time), the sample type should match your product category, and the report should list license numbers for both the cultivator/manufacturer and the testing lab.

The potency section is the most-referenced part of a COA, but a high THC number alone doesn't mean quality. Raw flower's THC exists mostly as non-intoxicating THCA, and the standard formula regulators use for Total THC is Total THC = (THCA × 0.877) + Delta-9 THC — the 0.877 multiplier accounts for the molecular weight lost during decarboxylation. A COA that just adds THCA and THC together without that multiplier is inflating the number. Look past THC and CBD too: minor cannabinoids like CBG, CBN, CBC, and THCV point to a more complex chemical matrix, and columns marked "ND" or "< LOQ" mean a compound is below the lab's detection or quantification threshold, not necessarily fully absent.

Terpene testing isn't mandated everywhere, so a brand that reports it voluntarily is signaling quality. A total terpene concentration above 2% in flower is considered aromatic and expressive; above 3% to 4% is exceptional and usually reflects careful curing and storage. Common terpenes include myrcene (earthy, musky), limonene (citrus), caryophyllene (peppery — the only terpene known to also act on cannabinoid receptors), pinene (pine), and linalool (floral, lavender).

Safety modules determine whether a product is legally fit to sell. Pesticide screening checks against state-banned compounds like Myclobutanil, which becomes toxic hydrogen cyanide when heated. Heavy-metal screening covers the "Big Four" bioaccumulators — arsenic, cadmium, lead, and mercury — that cannabis readily pulls from soil and water. Concentrates additionally need a residual-solvent test confirming butane, propane, hexane, or ethanol were purged to safe levels (not required for solventless products or raw flower). And microbial/mycotoxin screening checks for harmful bacteria like E. coli and Salmonella, pathogenic Aspergillus strains, and toxic compounds like aflatoxins that can persist even after the mold itself has been killed.

Two often-overlooked metrics matter for shelf life and smokability: moisture content, ideally 9% to 12% (too dry burns harsh and loses terpenes fast; too wet invites mold), and water activity, which most states require below 0.65 aw as the real predictor of mold risk during storage and transport.

Be skeptical of flower claiming THC above 35% — it strains the plant's structural capacity to hold resin and often reflects lab shopping (cultivators seeking out labs known for generous numbers) rather than a typical consumer experience. A complete COA usually runs 3 to 6 pages; if a brand only shows potency and terpenes and omits the safety modules, or switches testing labs unusually often, treat that as a signal to look elsewhere.