A hemp-derived cannabinoid product is pure when an accredited lab's certificate of analysis (COA) confirms three things: the cannabinoid potency matches the label, THC stays at or below 0.3% dry weight, and every contaminant panel passes. Purity is not a marketing claim. It is a set of lab numbers tied to one batch number.
What does a hemp-derived cannabinoid lab test measure?
Labs test two families of compounds: the cannabinoids you want (CBD, CBG, CBN, delta-8, delta-9, THCA) and the things you do not want (solvents, pesticides, metals, microbes). Each result ties to a batch, not to a brand.
hemp derived cannabinoids legal
A potency panel reports each cannabinoid as a percent of weight and often as mg per serving. Total THC appears after decarboxylation, which matters because THCA converts to THC when heated.
- Potency: mg per serving and percent by weight for each cannabinoid
- Residual solvents: parts per million for ethanol, butane, hexane, and others
- Pesticides: screened against state and EPA action limits
- Heavy metals: lead, arsenic, cadmium, mercury in parts per billion
- Microbials: total yeast and mold, E. coli, salmonella
- Mycotoxins: aflatoxin and ochratoxin
- Foreign matter and water activity
Why the THC number gets checked twice
Federal law defines hemp as cannabis with 0.3% delta-9 THC or less on a dry weight basis. A COA should show delta-9 THC and total THC as separate lines. If a report lists only total cannabinoids with no THC breakdown, the batch was not tested to the standard most states require.
How to read a COA in five minutes
- Find the batch or lot number. It must match the number printed on your package.
- Check the lab name and its accreditation. ISO/IEC 17025 is the benchmark for testing labs.
- Look at the sample date and the report date. A report older than 12 months may not reflect the batch in your hand.
- Scan the potency table. Compare labeled mg to tested mg. A 25 mg gummy that tests at 18 mg is a 28% shortfall.
- Confirm a pass result on every contaminant panel, not just the ones the brand highlights.
- Read the delta-9 and total THC lines together.
What counts as a passing result?
Pass means the lab reported "not detected" or a number under the limit of quantification for each contaminant. Reports use ND for not detected and a less-than symbol with LOQ for below the limit of quantification. Both are fine. A blank cell is not.
Why convenience pushed lab testing to the front
Hemp products now sell at gas stations, smoke shops, and vape counters, often with no staff who can explain the chemistry. That shift puts the COA in the buyer's hands. When a purchase takes 30 seconds, the lab report is the only quality control left.
QR codes shortened the path further. A scan pulls the batch report on a phone in the aisle. Brands that host a searchable COA library make the check fast, while brands that hide the report behind an email form add friction, and shoppers skip it.
What to do when the QR code fails
Ask for the batch number and search the lab's own portal. Most labs let you enter a report ID. If the code leads to a homepage or a generic PDF with no batch number, treat the product as untested.
Red flags on a hemp COA
- No batch number, or a batch number that does not match the package
- A logo-only certificate with no lab name, method, or instrument
- Potency results for one cannabinoid when the label lists five
- Missing contaminant panels, most often solvents and pesticides
- Dates that predate the product's manufacture date
- Results written as "pass" with no numeric value
- A lab with no accreditation and no state license number
Does the 0.3% THC limit guarantee purity?
No. The 0.3% threshold is a legal line for hemp classification, not a safety standard. A product can sit under that limit and still carry solvents from a crude extraction or lead from contaminated soil. Purity comes from the full contaminant panel.
Delta-8 and other minor cannabinoids add a wrinkle. Many are made by converting CBD with solvents and acid catalysts, which can leave reaction byproducts behind. Solvent testing plus a clean potency profile matters more for these products than for a plain CBD tincture.
Which labs and standards carry weight
Three credentials signal a serious lab: ISO/IEC 17025 accreditation, a state hemp or cannabis testing license, and membership in a proficiency testing program. USDA hemp rules and state agriculture departments set the THC testing method for raw hemp.
Accredited labs publish their methods and limits of detection. That detail lets you see how the sample was prepped and how small a contaminant the lab can catch.
Questions to ask a brand before you buy
- Can you send the COA for this batch number today?
- Which lab ran the test, and is it ISO 17025 accredited?
- Does the report include solvents, pesticides, heavy metals, and microbials?
- What is the total THC percentage by dry weight?
- How often is each product line tested?
Brands that test every batch answer these questions in a day. Vague answers, or a promise to send a COA later, tell you the batch was never tested.
Frequently asked questions
Can a COA be faked?
Yes. Some sellers copy a real report and swap the product name. Check that the batch number on the PDF matches your package and that the lab's own portal lists the same report ID.
How often should a hemp product be tested?
Every batch. Blends change with each harvest and each extraction run, so last year's passing result says nothing about the bottle you buy today.
Does a third-party lab test cover every cannabinoid?
Most panels cover the common ones: CBD, CBG, CBN, CBC, delta-8, delta-9, and THCA. Rare or newly synthesized cannabinoids may need a custom method, and not every lab offers one.