How to Read a Cannabis COA: The 5-Minute Guide to Spotting Quality (and Bullsh*t)

Reading a cannabis COA is the fastest way to tell if that “premium” eighth is actually premium, or just pretty packaging and positive vibes.

And in 2026, this isn’t paranoia. It’s basic shopping.

A recent study found that around 25% of dispensary batches showed unsafe mold levels. That’s not a niche problem for “other people.” That’s a “check the paperwork” problem for everyone.

So let’s make this simple.

In the next five minutes, you’ll learn how to read a COA (Certificate of Analysis) like you’ve been doing it your whole life. You’ll know what matters, what doesn’t, what’s missing, and what’s screaming “do not inhale me.”

What a COA actually is (and what it is not)

A COA is a lab report for a specific cannabis product batch. It usually includes:

• Potency (THC, CBD, and friends)
• Terpenes (aroma and effects drivers)
• Contaminants (solvents, pesticides, heavy metals)
• Microbials (mold, yeast, bacteria)
• Sometimes water activity and moisture content

A COA is not a vibe check. It’s not marketing. It’s not “trust us, bro.”

It’s the closest thing cannabis has to an ingredient label plus safety inspection. Treat it that way.

Step 0: Confirm you’re looking at the right COA (batch match or it doesn’t matter)

Before you read a single number, match these:

• Product name (and product type: flower, vape, concentrate, edible)
• Batch/Lot number on the package matches the COA
• Test date and report date
• Lab name and accreditation info

If the dispensary hands you a COA that doesn’t match your batch, you didn’t get a COA. You got a bedtime story.

Quick red flags right up front

• COA is older than the product (yes, it happens)
• No batch/lot number
• No lab name or address
• “In-house lab” for a brand that also sells the product (conflict-of-interest city)
• No ISO 17025 accreditation (more on that in a second)

The 60-day rule: Is the COA recent enough to be meaningful?

Cannabis changes over time. Terpenes evaporate. THC oxidizes. Microbial risk can shift depending on storage.

As a shopper, you want a COA that’s recent enough to reflect what you’re actually buying.

A good rule of thumb:

• Prefer COAs tested within the last 60 days for products like flower and pre-rolls.
• Concentrates and vapes can sometimes stretch longer, but “recent” still wins.

If a brand is proudly waving around a COA from six months ago, you’re not buying cannabis. You’re buying hope.

ISO 17025: The accreditation that actually matters

When a lab is ISO/IEC 17025 accredited, it means they meet international standards for testing competence, calibration, and quality systems.

Translation: less “we think this is fine” and more “we can prove it.”

Look for:

• “ISO/IEC 17025” on the COA
• An accreditation body (often state-recognized or a national accreditation org)
• A certificate number or scope reference

No ISO 17025 doesn’t automatically mean fraud, but it does mean you should trust the results less, especially for contaminants.

Section 1: Cannabinoid potency (how strong it is, and whether it looks suspicious)

This is usually the first panel people look at. It’s also where people get tricked.

What you’ll typically see

• THCA, THC
• CBDA, CBD
• Minor cannabinoids like CBG, CBC, CBN
• Total THC and Total CBD (often calculated)

How “Total THC” is calculated (why the number feels inflated)

Most COAs calculate total THC using THCA converted to THC at a standard conversion factor. That’s normal.

What’s not normal is when the total potency looks like a superhero comic.

Potency red flags

• Flower testing extremely high (be skeptical of outlier numbers)
• Identical potency across multiple batches (nature doesn’t do copy-paste)
• No breakdown (only “Total THC” with no THCA/THC listed)

What to do with potency, practically

• For flower: use potency as a range, not gospel.
• For concentrates: potency is more stable, but still check for completeness.
• For edibles: look for dosage consistency and serving breakdown, not just totals.
• 
  

Potency tells you strength. It does not tell you quality. Gasoline is strong too.

Section 2: Terpene panel (the part that tells you how it might feel)

Terpenes influence aroma, flavor, and the character of the experience. A terpene panel can also reveal how fresh and well-handled the product is.

What you’ll see

• Individual terpenes (myrcene, limonene, pinene, linalool, caryophyllene, humulene, terpinolene, etc.)
• Total terpenes (usually a percentage)

What “good” looks like (without pretending there’s one perfect number)

• Flower often lands somewhere around 0.5% to 3% total terpenes, depending on cultivar and handling.
• Concentrates can show much higher totals.

But here’s the real trick: compare the terpene story to the product story.

If it’s marketed as loud, flavorful, “fresh drop” flower and total terpenes are tiny, something doesn’t add up. Maybe it’s old. Maybe it was dried too hard. Maybe it was stored like a sandwich.

Terpene panel red flags

• No terpene panel at all (common, and annoying)
• “Total terpenes” listed with no individual terpenes
• Numbers that look too perfect (round totals repeated across products)
• Terpenes listed on distillate carts that look like a perfume recipe
• Not automatically bad, but it often indicates added terpenes, not native-to-plant terps.

Terpenes won’t tell you if it’s safe. They will tell you if it’s going to taste like joy or like regret.

Section 3: Residual solvents (critical for extracts, and very relevant in 2026)

Residual solvents are leftover chemicals from extraction processes. This section matters a lot for:

• Live resin
• Shatter, wax, badder
• Some vapes
• Anything hydrocarbon-extracted

It matters less for:

• Live rosin (solventless), although contaminants can still exist from other sources

What you might see listed

Common solvents include:

• Butane
• Propane
• Ethanol
• Heptane
• Acetone
• Isopropanol

On the COA, results are often shown as Pass/Fail and/or ppm values.

Solvent section red flags

• Solvent panel missing on a product that clearly needed solvents to be made
• Fail (obvious, but worth saying)
• Only Pass/Fail with no ppm details (less transparency)
• High solvent levels that barely squeak under the legal limit
• Legal does not automatically equal desirable.

If you’re shopping the live resin vs live rosin debate, this is where the rubber meets the rig. Check the solvent panel. Every time. Check it again.

Section 4: Pesticides (because “it’s organic” is not a lab method)

Pesticides can show up from cultivation inputs or contamination. In regulated markets, labs test for a list of pesticide compounds with strict limits.

What you want to see

• A complete pesticide panel
• Pass across the board
• Ideally, clear reporting limits (LOQ/LOD) and actual values, not just “Pass”

Pesticide red flags

• Pesticide panel not included (especially on flower)
• A tiny pesticide list that looks suspiciously short
• Results reported oddly (missing units, unclear detection thresholds)
• Any Fail
• Don’t negotiate with pesticides. You’re not buying a used car.

Also, don’t get hypnotized by one “clean” COA screenshot floating online. Make sure it’s for your batch.

Section 5: Heavy metals (small amounts, big consequences)

Heavy metals can come from soil, water, nutrients, or processing equipment. This is especially important for:

• Concentrates
• Vapes
• Anything inhaled frequently

Common metals tested:

• Lead
• Arsenic
• Cadmium
• Mercury

For more information on managing these risks effectively and ensuring product safety, you might find this BMP Manual useful. It provides comprehensive guidelines that can help in mitigating potential hazards associated with heavy metals and other contaminants in various products.

Heavy metals red flags

• Panel missing
• Only some metals tested
• Fail
• High results close to the limit (again, legal is not the same as “I want that in my body”)

Think of heavy metals like glitter. Once they’re in the process, they get everywhere and nobody has a good time.

Section 6: Microbials (the mold problem people are finally talking about)

This is the section that matters a lot more in 2026 than it did a few years ago.

Because now we have data, and it’s not cute. Again, about 25% of dispensary batches in a recent study showed unsafe mold levels. That means “looks fine” is not a safety standard.

What you might see

Microbial testing can include:

• Total yeast and mold
• Aspergillus species (common focus in inhalable products)
• E. coli
• Salmonella
• Coliforms
• Aerobic bacteria counts

Some COAs show Pass/Fail. Some show CFU/g (colony-forming units per gram) or similar.

Microbial red flags

• No microbial section
• Only bacteria tested, no mold/yeast
• Fail for yeast/mold or pathogen indicators
• Testing method not appropriate for the product type (depends on jurisdiction, but missing clarity is a problem)

If a product fails microbials, it’s not “still probably okay.” It’s a hard no. Mold is not a seasoning.

Section 7: Water activity (Aw) and moisture (the quiet predictor of mold)

Water activity is one of the most underrated COA fields, and one of the most useful.

Why? Because mold loves water. Water activity tells you how available moisture is for microbial growth, not just how “dry” something feels.

What you want to know

• Water activity is often shown as Aw.
• Lower Aw generally means less risk of microbial growth during storage.

Water activity red flags

• No water activity listed (common, but unfortunate)
• High Aw paired with weak microbial testing
• That combination is like leaving milk on the counter and saying, “Relax, I sniffed it.”

If you want to avoid mold issues proactively, start paying attention to Aw when it’s available.

Third-party lab vs internal lab: trust, but verify harder

A third-party lab is generally more credible because it’s independent. An internal lab might still be competent, but it has a built-in incentive problem.

Use this simple hierarchy:

• Independent third-party lab with ISO 17025
• Third-party lab without clear accreditation
• Internal lab (only trust if the brand is unusually transparent and consistent)

If the same company grows it, extracts it, tests it, and grades its own homework, you should raise an eyebrow. Raise both, honestly.

The COA “bullsh*t” checklist (fast way to spot a problem)

Use this like a quick scan before you buy:

• The COA doesn’t match your batch/lot number.
• The test date is old, and they’re still acting proud of it.
• No ISO 17025 lab accreditation listed.
• Missing panels that should obviously be there (solvents for hydrocarbon extracts, microbials for flower, etc.).
• Only Pass/Fail everywhere, with no numbers, no detection limits, no transparency.
• The potency number looks like a meme.
• The report looks edited, cropped, or oddly formatted in a way that hides key fields.

And the biggest red flag of all:

• They get weird when you ask for the COA.

Good brands hand it over instantly. Great brands put it on the package and make it easy to verify.

It's also worth noting that there are proposed changes in lab regulations which could further impact how lab testing is conducted and regulated in the future.

A simple 5-minute COA reading routine (do this every time)

Do this in order. Repeat it. Repeat it again.

• Match batch/lot number to your package.
• Check date (aim for under ~60 days when possible).
• Check lab (independent, ISO 17025).
• Scan potency for realism and completeness.
• Scan terpenes for freshness and transparency.
• Confirm solvents are tested for extracts and vapes.
• Confirm pesticides and heavy metals are included and pass.
• Check microbials carefully, especially yeast/mold and aspergillus.
• Look for water activity if listed, and treat it as a mold-risk clue.

That’s it. You just did more due diligence than most people do on a used car.

Final word: COAs don’t ruin the fun. They protect it.

You don’t read a COA because you’re dramatic. You read a COA because you have lungs, a wallet, and standards.

Cannabis is better when it’s clean. Better when it’s honest. Better when it’s tested properly.

So the next time you’re shopping, don’t just ask, “How strong is it?”

Ask, “Is it safe?”

Ask, “Is it verified?”

Ask, “Is this batch actually the batch?”

Read the COA. Read it again. Then enjoy your cannabis like a responsible adult with excellent taste and a healthy disrespect for bullsh*t.

FAQs (Frequently Asked Questions)

What is a Certificate of Analysis (COA) for cannabis products?

A COA is a lab report for a specific cannabis product batch that includes details on potency (THC, CBD, and others), terpene profile, contaminants (solvents, pesticides, heavy metals), microbials (mold, yeast, bacteria), and sometimes water activity and moisture content. It serves as an ingredient label plus safety inspection for cannabis products.

How can I verify that the COA matches the cannabis product I’m buying?

Before reading the COA, confirm that the product name and type match your purchase, the batch or lot number on the package matches the COA, check the test and report dates to ensure recency, and verify the lab name and accreditation information. A mismatch means you don’t have a valid COA for your product.

Why is it important that a COA is recent, and what is the recommended timeframe?

Cannabis chemistry changes over time—terpenes evaporate and THC oxidizes—and microbial risks can shift based on storage. For flower and pre-rolls, a COA tested within the last 60 days is ideal to reflect what you’re actually buying. Concentrates and vapes may allow slightly older COAs but fresher reports are always better.

What does ISO/IEC 17025 accreditation mean for a cannabis testing lab?

ISO/IEC 17025 accreditation means the lab meets international standards for testing competence, calibration, and quality systems. This ensures more reliable results rather than subjective assessments. Look for this accreditation on the COA along with an accreditation body and certificate number to trust contaminant testing especially.

How should I interpret cannabinoid potency numbers on a COA?

Potency panels show levels of THCA, THC, CBDA, CBD, minor cannabinoids like CBG or CBN, and total THC/CBD calculated using standard conversion factors. Treat potency as a range rather than an exact figure. Be skeptical of extremely high or identical potencies across batches or when only total THC is listed without breakdowns.

What information does the terpene panel provide on a cannabis COA?

The terpene panel lists individual terpenes like myrcene, limonene, pinene, linalool, caryophyllene among others and shows total terpene percentage. Terpenes influence aroma, flavor, effects, freshness, and handling quality. Flower typically has total terpenes ranging from about 0.5% to 3%, though there’s no single perfect number.