Hur man Läser ett CBD Analyscertifikat (CoA)

What a CoA Is and Why It Is Non-Negotiable

A Certificate of Analysis (CoA) is a formal document issued by an analytical laboratory confirming the results of testing performed on a specific product sample. For CBD products, a legitimate CoA should come from an independent (third-party) laboratory accredited to the international standard ISO/IEC 17025, which certifies technical competence in testing and calibration. The laboratory should have no financial relationship with the CBD manufacturer beyond the testing contract.

A CoA is not a marketing document or a "lab report" generated in-house by the manufacturer. It is an independent verification that what is on the label matches what is in the bottle. The CBD industry is largely unregulated at the retail level, meaning product quality varies enormously — from pharmaceutical-grade extracts to products containing negligible cannabinoid content or, worse, harmful contaminants. The CoA is your primary tool for distinguishing between them. If a company does not publish batch-specific CoAs or makes them difficult to access, do not buy their products.

Heffernan's Hemp publishes every Certificate of Analysis. Every production batch is sent to an independent ISO/IEC 17025-accredited laboratory for comprehensive testing, and the results are publicly available.

Section-by-Section: How to Read a CBD CoA

Cannabinoid Potency Profile — the most important section. It lists every cannabinoid detected and its concentration, typically expressed in milligrams per gram (mg/g) or as a percentage. Verify that the total CBD content matches the label claim within a ±10% margin. A 1000mg CBD oil should test at 900–1100mg total CBD. Check the THC concentration — for EU-compliant products, it must be ≤0.2% (≤2mg/g). The CoA should also list minor cannabinoids present: CBG, CBC, CBN, and others. Their presence confirms the product is genuinely full-spectrum rather than isolate with terpenes added back.

Terpene Profile — if included. A terpene analysis identifies and quantifies the aromatic compounds in the extract. Common hemp terpenes (myrcene, β-caryophyllene, limonene, pinene, linalool) should be present in measurable quantities in a full-spectrum product. Their total concentration is typically 1–5% of the extract by weight. A significant terpene profile supports the entourage effect; its absence suggests either an isolate-based product or extensive post-extraction refinement.

Pesticide Screening — non-negotiable. The CoA should test for a panel of common agricultural pesticides and confirm all are below the limit of detection. Hemp is a bioaccumulator — it readily absorbs compounds from soil — making pesticide testing especially important. A CoA that does not include pesticide testing is incomplete.

Heavy Metals Analysis — should test for lead, arsenic, cadmium, and mercury. Hemp's bioaccumulation properties make heavy metal contamination a genuine risk, particularly for outdoor-grown hemp cultivated on land with industrial history. All four metals should be below established safety thresholds.

Residual Solvents — applies primarily to concentrate and vape products. Testing should confirm that extraction solvents (CO2, ethanol, butane, propane, hexane, etc.) are either absent or below permitted residual levels. CO2-extracted products should show no solvent residues. Products extracted with hydrocarbon solvents (butane, propane) should be avoided.

Microbial Testing — confirms the absence of harmful bacteria (E. coli, Salmonella), yeast, and mould. These limits exist because contaminated products can cause serious illness, particularly in immunocompromised individuals.

Red Flags on a CoA: What to Watch For

Missing batch number or product name — the CoA should identify exactly which product and batch it refers to. A generic CoA without batch traceability is not verification.

Lab name and accreditation missing or unclear — the laboratory name, ISO/IEC 17025 accreditation number, and contact information should be clearly displayed.

Potency significantly mismatched — a CBD content more than 15% above or below the label claim indicates poor manufacturing quality control.

THC above 0.2% — for EU-compliant products, this is a compliance failure. Do not purchase.

Any detectable pesticide, heavy metal above safety thresholds, or microbial contamination — these indicate a product that should not be on the market.

What does ISO/IEC 17025 accreditation mean?

ISO/IEC 17025 is the international standard for testing and calibration laboratories. Accreditation to this standard means the laboratory has been independently audited and verified as technically competent to perform specific tests. Always look for this accreditation on a CBD CoA.

How recent should a CoA be?

Each production batch should have its own CoA. The CoA should be dated within a reasonable timeframe of manufacture (typically within 12–24 months). If a company uses the same CoA indefinitely, they may not be testing each batch.

What if a company refuses to provide a CoA?

Do not buy from them. A legitimate CBD company should publish CoAs proactively or provide them on request without hesitation. Secrecy around lab testing is a major red flag.