"Lab tested" means a sample pulled from a specific batch was analyzed by a licensed laboratory, and the findings were published on a certificate of analysis (COA) that names what was measured and what passed. The buying rule that follows from that: do not accept the phrase on a package by itself. Ask for the COA, match the batch or lot number printed on the certificate to the number on the package, and confirm the panel covers potency plus contaminants. If the numbers do not match, or the panel lists only THC percentage, you are reading a marketing claim, not a test result.
cannabis lab tested vs untested flower
What a Lab Test Actually Covers
A full compliance panel is not one test. It is a group of tests run on the same sample, and the scope tells you how much the lab verified.
Potency and chemistry
Labs measure delta-9 THC, THCA, CBD, CBDA, and minor cannabinoids, then report total THC using the formula delta-9 THC plus (THCA x 0.877). Terpene profiles and moisture content may appear on the same certificate or on a separate page.
Contaminant screens
- Pesticides, often a panel of dozens of compounds with action limits in parts per million or parts per billion
- Heavy metals such as lead, cadmium, arsenic, and mercury
- Residual solvents from extraction, including butane, propane, ethanol, and hexane
- Microbials: total yeast and mold, plus specific pathogens like E. coli and salmonella
- Mycotoxins, mainly aflatoxins and ochratoxin A
- Water activity and moisture, which drive mold risk during storage
- Foreign matter and filth
What to Look For on a COA
- A batch or lot number that matches your package exactly
- The laboratory name, license number, and state of operation
- A sample collection date and a report date close to the harvest or production date
- Method names for potency and contaminant testing
- Pass or fail results against stated action limits, not just raw numbers
- A direct PDF or lab portal page rather than a QR code that opens a product ad
Parameter Bands Worth Knowing
- Flower potency: regulated US flower often lands between 15% and 30% total THC. Totals above roughly 35% deserve a closer look at moisture and lab method.
- CBD flower: 10% to 20% CBD is common for compliant hemp varieties.
- Moisture: 8% to 12% is a workable range; water activity is usually capped near 0.65.
- Yeast and mold: many states set a total count limit around 10,000 CFU/g.
- Aflatoxin: limits tend to sit in the low parts per billion, which is why the report should show the limit, not only the reading.
Common Pitfalls
A potency-only COA is the most frequent shortcut, and it leaves pesticides, solvents, and mold unverified. Older reports recycled across harvests are the second. Watch for lab shopping, where a producer keeps resubmitting until one lab returns a pass, and for certificates with no sampling date or no batch number. Distillate and vape labels claiming near-total THC usually reflect a diluted or reconstituted input, so read the full cannabinoid row instead of the headline number.
cannabis lab testing for potency thc cbd
Convenience and the Label Check
Delivery, curbside pickup, and pre-roll packs have cut the time a buyer spends at the counter, and that is exactly where the COA check gets skipped. Convenience is fine as a tiebreaker between two products that both test clean. It is not a substitute for the batch match.
FAQ
Is lab testing required in the US?
Most state medical and adult-use programs require testing before retail sale, though panels differ by state. Hemp sold under federal law faces a thinner testing standard, so a COA matters more there.
Why do two labs report different THC numbers?
Sampling location, moisture loss, calibration, and method differences all shift the result. Small gaps are normal; large gaps suggest a sampling problem.
Does a passing COA mean the product is safe for me?
It means the batch met the state action limits at the time of sampling. It says nothing about your dosage, health conditions, or interactions with other drugs.
Can a COA be faked?
Yes. Verify the lab license number and confirm the report on the laboratory's own portal rather than trusting a screenshot or a branded PDF.