"Can I see the lab report?" is the smartest question a hemp shopper can ask. The FDA has found that some CBD products do not contain the labeled amount of CBD, so a label by itself is a promise rather than proof. Learning how to read a hemp gummy COA takes about five minutes: check the batch number, then the potency per gummy, then the contaminant panels, in that order.
How to read a hemp gummy COA: what the report must include
A usable report names five things: the lab, the client, the sample identity, the test date, and the methods. If any of those are missing, you cannot tie the numbers to the jar in your hand. Learning how to read a hemp gummy COA starts with the header block, not the cannabinoid table.
A legitimate report identifies the testing laboratory and its location, references the accreditation it holds (ISO/IEC 17025 is the usual standard for cannabinoid testing), and names the company that submitted the sample. It then pins the sample down: product name, batch or lot code, date received, date reported, and the analytical methods used. The FDA consumer update on products containing cannabis and cannabis-derived compounds is blunt about why that paperwork matters: the agency has sampled products whose labels did not match what was inside.
Two header details get skipped most often. The first is the date, because a report from three years ago describes a batch that left the shelf long ago. The second is the sample type: a report run on bulk distillate says nothing about the finished gummy. In March 2025, a GummyGurl customer emailed us a competitor's COA from a lab in Fort Collins, Colorado, dated fourteen months before her purchase and run on bulk distillate rather than the finished gummy; neither she nor we could match it to the batch code printed on her jar. Half of how to read a hemp gummy COA is confirming that the sample tested was the product you are about to eat. Our longer lab test guide for smart buyers walks each panel in order.
| COA section | What it proves | Red flag |
|---|---|---|
| Lab and sample header | Who tested what, and when | No batch code, no date |
| Cannabinoid potency | Milligrams per gummy or per gram | Units missing from the column head |
| Delta-9 THC | Standing against the 0.3% dry weight cap | Result shown as not applicable |
| Heavy metals | Lead, arsenic, cadmium, mercury screened | Panel absent entirely |
| Pesticides and solvents | Residues measured against action limits | Pass or fail with no figures |
| Microbiology | Yeast, mold, Salmonella, E. coli | Only one organism listed |
How to read a hemp gummy COA potency panel in two minutes
Potency is arithmetic. Find the total cannabinoid table, read the units at the column head, then divide by the number of gummies the sample represents. If the report gives mg per gram, multiply by the gummy weight. Knowing how to read a hemp gummy COA potency panel means checking units before trusting any number.
Three conventions trip people up. "ND" means not detected at the method's limit, not zero. "LOQ" is the lowest amount the lab will put a number on, so a result below it is real but unquantified. And total THC is not the delta-9 line alone: the USDA domestic hemp production program rules use delta-9 THC plus 0.877 times THCA, because THCA converts to THC under heat.
The 0.3% delta-9 THC dry weight ceiling for hemp-derived material comes from the Agriculture Improvement Act of 2018 (H.R.2), not from any individual lab. For a gummy, the mg figure per unit is the number you will actually feel, which is where our hemp gummy dosage guide starts. If the report also lists CBG, CBN, or CBC beside CBD, you are reading a fuller cannabinoid profile, a difference covered in full spectrum vs broad spectrum hemp gummies.
What contaminant and microbiology results actually mean
These panels answer a different question than potency: not how much is in the gummy, but what else is. The FDA warns that CBD products may contain contaminants or other undeclared substances, which is why learning how to read a hemp gummy COA includes the heavy metal and microbiology tables, not only the cannabinoid one.
Heavy metals come from soil, and hemp's appetite for soil uptake is the reason that panel exists at all. Pesticide and residual solvent results reflect how the extract was produced, a sequence described in how hemp gummies are made. Microbiology covers yeast and mold counts plus pathogens such as Salmonella and E. coli, which matter for any chewable product with water activity. What you want to see is measured numbers beside action limits, not a bare word. "Pass" with no detection figure tells you the lab had a threshold, but not where your batch sat relative to it. The National Center for Complementary and Integrative Health overview of cannabis and cannabinoids flags product-quality variation as an open problem in the research literature, which is the reason numbers beat adjectives.
How to read a hemp gummy COA against the package in your hand
A report that does not match your jar is decoration. Three fields have to line up: the batch or lot code, the product name including strength, and the serving size. Working out how to read a hemp gummy COA is partly a matching exercise, so put the jar next to the report before you read anything else.
QR codes help, but only when they resolve to a batch-specific report rather than a generic results landing page. If the code opens one document covering every product a brand sells, you have found marketing, not documentation. Strength matters too: a 10 mg report cannot vouch for a 25 mg jar, even from the same product line. Keep the report, or a photo of it, until the jar is empty, because the batch number is what makes a later conversation with your clinician specific.
Warning signs that a lab report may be unreliable
Most unreliable reports are not forged; they are simply the wrong report, or an old one, or a partial one. The quickest filter in how to read a hemp gummy COA is to ask what is missing, since an incomplete document turns up far more often than a fabricated number.
- No batch or lot code printed anywhere on the page.
- A report date well older than the product's own shelf life.
- Potency results only, with no contaminant or microbiology panels offered.
- A logo-only header with no lab name, address, or accreditation reference.
- Pass results with no detection limits and no measured values.
- A sample described as distillate, oil, or biomass rather than a finished gummy.
- A seller claiming the report means the product has been approved by the FDA, which the FDA's own position on regulating cannabis and cannabis-derived products contradicts directly.
None of those checks need a chemistry background. Trust gets built on documents you can verify, which is the only reason how to read a hemp gummy COA is worth ten minutes of your time.
How to read a hemp gummy COA: what the report cannot tell you
A COA is a laboratory report on one sample from one batch. It does not mean the product has been approved by the FDA for sale or use, and no part of how to read a hemp gummy COA changes that. It also says nothing about whether a product suits you personally.
Labs test the sample they receive. Batch-to-batch variation, storage conditions, and handling after testing all sit outside the document. Published work on cannabinoid products, available through PubMed's index of cannabinoid labelling and potency studies, keeps returning to the same gap between labels and measured content. Personal factors, including medicines you take, belong with a clinician rather than a lab report. Read the COA for what it is: evidence that someone measured the batch, published the numbers, and is willing to be checked.
Frequently asked questions
How do I know if a hemp gummy COA is real?
Start with the lab, not the numbers. A real report names the laboratory, its address, and an accreditation reference, then identifies the batch code, the sample type, and both the received and reported dates. If anything looks thin, email the lab and ask whether it issued that report; accredited labs answer. Refuse any document that cannot be tied to one batch. The U.S. Food and Drug Administration has tested cannabidiol products and found labeled amounts that did not match the contents, which is exactly the risk a batch-level check addresses.
Does a COA mean a hemp gummy is safe for me?
No. A report measures a sample; it cannot account for your medicines, pregnancy, liver function, or past reactions. Cannabidiol interacts with some prescription drugs through the same liver enzymes that process them, which is why a pharmacist is a better first call than a lab report. Review patient-facing guidance such as the Mayo Clinic consumer health information on cannabidiol, and bring the product label and the batch report to the appointment. Safety and quality are different questions: the COA answers quality, and your clinician answers suitability for you.
Why does my hemp gummy COA show a small amount of THC?
Hemp-derived products are allowed to contain up to 0.3% delta-9 THC by dry weight, so trace THC on a report is expected rather than alarming. That percentage is the federal line between hemp and marijuana, and the Drug Enforcement Administration classifies material above it differently. What matters for you is the mg figure per gummy, not the percentage. Trace THC can still show on a workplace urine screen, which do hemp gummies show up on a drug test covers in detail. If your job tests, read the delta-9 line first.
What should I do if a brand will not show me a COA?
Walk away. A seller with current documentation publishes a report per batch, usually behind a QR code or a batch lookup field, and sharing it costs nothing. Refusing is a decision rather than an oversight. The document exists so you can check it, not so it can sit in a drawer. Public health agencies, including the Centers for Disease Control and Prevention, have investigated illnesses tied to unregulated cannabinoid products sold without batch testing, so the gap between a claim and a tested batch is not theoretical.
How often should a hemp gummy batch be retested?
Every production batch needs its own report, because the finished gummy is what you eat and potency can shift between runs. Testing does not follow a calendar; a new batch means a new sample. Stability across shelf life is a separate study, and few brands publish it, so a report dated well before your jar's best-by date deserves a question. The U.S. Department of Agriculture's hemp testing plan requires this kind of batch-level sampling because potency and contaminant levels shift from one harvest to the next. Ask for the report naming your batch code.
Do state rules require a hemp gummy COA?
Requirements vary by state. Some states require batch testing and label disclosures for hemp edibles, others set age limits or cap milligrams per serving, and a few restrict specific cannabinoids outright. The National Conference of State Legislatures tracks state cannabis and hemp legislation as it changes. Practically speaking, a brand shipping nationally should hold a full panel on every batch, since the strictest state it ships into sets the floor. If a report covers potency only, ask whether contaminant panels exist as a separate document for the same batch code.