How to read a CBD lab report — batch testing explained
A certificate of analysis (COA) is the lab report that accompanies a cannabidiol (CBD) oil product. Issued by an independent third-party laboratory, the COA lists exactly what’s in a specific production batch — cannabinoid concentrations, tetrahydrocannabinol (THC) levels and results from contaminant screening panels. Reading a COA takes less than five minutes once you know what to look for.
This article walks through each section of a CBD lab report in the order it typically appears: header and batch information, cannabinoid potency panel, THC compliance, contaminant screening, and what the abbreviations mean. For background on why third-party testing matters in the first place, the third-party lab testing article covers the rationale and red flags.
Header — lab name, batch number and date
The top of every COA identifies three things: who tested the product, which batch was tested, and when the testing occurred.
Lab name and accreditation. The laboratory should be an independent third-party facility — not the manufacturer’s own testing department. Look for ISO/IEC 17025 accreditation, the international standard for testing laboratory competence. The accreditation number usually appears near the lab’s name or logo at the top of the report. If the lab name matches the product brand, the results aren’t independently verified.
Batch number. Every COA should reference a specific production batch. The batch number on the lab report must match the batch number printed on the product bottle. If the COA has no batch number, or if the numbers don’t match, the report cannot be linked to the specific product — making the results unverifiable. EU Labs prints a batch number on every bottle that links directly to the corresponding independent COA.
Test date. The date confirms when the analysis was performed. A COA from a current batch should carry a recent date. A report dated 12 months ago while the product ships from a new production run means the manufacturer hasn’t tested the current batch — the old report may not represent what’s in the bottle now.
Cannabinoid potency panel
The potency panel is the core section of any CBD lab report. It lists individual cannabinoid concentrations measured in the tested sample, typically reported as both a percentage (% w/w) and as milligrams per millilitre (mg/mL) or milligrams per gram (mg/g).
A complete potency panel includes 11 or more cannabinoids: CBD, CBDA, THC (delta-9), THCA, cannabigerol (CBG), CBGA, cannabinol (CBN), CBC, CBDV, THCV and delta-8 THC. Not every cannabinoid will show a measurable result — some will read “ND” (Not Detected) or fall below the Limit of Quantification.
Three things to check on the potency panel. First, CBD concentration should match the product label within 10–15%. A 3000mg CBD oil in a 50 mL bottle claims 60 mg/mL — the COA should confirm a concentration in that range. Second, for full spectrum CBD oil, minor cannabinoids like CBG, CBN and CBC should show measurable levels. If only CBD registers and everything else reads zero, the product may be an isolate marketed as full spectrum. Third, the total cannabinoid content should be consistent with the declared spectrum type.
The CBD oil concentrations article explains what mg/mL means in practical dosing terms, and the 3000mg vs 12000mg comparison covers how concentration affects per-drop delivery.
THC compliance line
The THC line on a COA tells you exactly how much tetrahydrocannabinol the product contains — and whether that amount complies with legal thresholds and the product’s declared spectrum type.
For full spectrum CBD oil, THC should appear at or below 0.3% by weight. The COA will show a specific number — perhaps 0.18% or 0.22% — confirming the exact concentration in that batch. For broad spectrum CBD oil, THC should read “ND” (Not Detected), meaning the concentration falls below the lab’s Limit of Detection (LOD). The full spectrum vs broad spectrum comparison explains this distinction.
Watch for two things. A full spectrum product with THC above 0.3% exceeds the standard threshold for hemp-derived CBD oil. A broad spectrum product with any detectable THC contradicts its “zero THC” label. Either result indicates a quality control issue.
Contaminant screening panels
Beyond cannabinoid content, a complete COA tests for substances that shouldn’t be in the oil. Five contaminant panels cover the main categories of risk.
Heavy metals. Testing screens for lead, arsenic, mercury and cadmium using Inductively Coupled Plasma Mass Spectrometry (ICP/MS). Hemp absorbs heavy metals from soil during growth, so testing every batch is essential. Australia’s TGO 93 standard sets maximum limits: lead ≤5.0 ppm, arsenic ≤3.0 ppm, cadmium ≤0.5 ppm, mercury ≤0.5 ppm. Results should show concentrations below those thresholds or “ND.”
Pesticides. Labs screen for 66 to 72 analytes — insecticides, fungicides and plant growth regulators. Each compound appears with either a quantified result or “ND.” Any detected pesticide above the action limit triggers a fail.
Residual solvents. If the extraction used butane, ethanol or hexane, traces can remain in the finished product. CO₂-extracted CBD oil like the EU Labs range should show “ND” across the entire solvents panel — supercritical carbon dioxide evaporates completely. The CO₂ extraction article explains why this method avoids solvent residue.
Microbial contamination. Testing covers total aerobic microbial count, yeast and mould, E. coli, salmonella and enterobacteria. Results appear as colony-forming units (CFU) per gram alongside a pass/fail determination. Any pathogen detection triggers an automatic fail.
Mycotoxins. Aflatoxins (B1, B2, G1, G2) and ochratoxin A — toxic compounds from mould — are screened to confirm levels below regulatory limits. TGO 93 sets aflatoxin B1 at a maximum of 2 µg/kg.
Common abbreviations on a COA
Lab reports use standardised abbreviations that appear across every testing panel. Knowing four of them covers most of what a buyer needs to read a COA.
- ND — Not Detected. The compound was not found above the lab’s detection threshold. On a broad spectrum CBD oil COA, THC should read ND.
- LOD — Limit of Detection. The lowest concentration a lab instrument can distinguish from background noise. Below LOD, the lab reports ND.
- LOQ — Limit of Quantification. The lowest concentration the lab can measure with reliable precision. Between LOD and LOQ, the lab knows a trace exists but cannot put an accurate number on it.
- <LOQ — Below Limit of Quantification. A trace amount is present but too low to measure accurately. The compound is detected but not quantifiable.
For a deeper technical explanation of these thresholds, a guide to LOD, LOQ and ND on hemp COAs covers how each threshold works across different analytical methods.
Putting it together — a two-minute COA check
Reading a CBD oil lab report doesn’t require a chemistry background. Five checks, in order, cover the essentials.
- Match batch numbers. COA batch number = bottle batch number. No match, no verification.
- Check the lab. Independent, ISO 17025-accredited, name doesn’t match the brand.
- Confirm CBD concentration. Within 10–15% of the label claim (e.g. 54–69 mg/mL for a 60 mg/mL product).
- Verify THC. At or below 0.3% for full spectrum; ND for broad spectrum.
- Scan contaminant panels. All five panels present and showing “Pass” or concentrations below limits.
If any check fails — missing batch number, in-house lab, CBD below label claim, THC above threshold, missing contaminant panels — consider a different product. EU Labs publishes batch-specific COAs for every product in the range. The what to look for when buying online article covers additional verification steps, and the full Stillroot shop lists every EU Labs product with specifications.
Frequently asked questions
What does ND mean on a CBD lab report?
ND stands for “Not Detected.” The compound — whether THC, a heavy metal or a pesticide — was not found above the laboratory’s Limit of Detection (LOD). On a broad spectrum CBD oil COA, THC should read ND, confirming removal below detectable levels.
How do I find the COA for my CBD oil?
Check the brand’s website for a lab results or COA section. Match the batch number on the bottle to the batch number on the report. EU Labs prints a batch number on every bottle that links to an independent COA covering cannabinoid potency and all contaminant panels. If a brand doesn’t provide COAs, consider that a red flag.
What if the CBD concentration on the COA doesn’t match the label?
A deviation within 10–15% of the label claim falls within acceptable manufacturing tolerance. A 3000mg CBD oil in a 50 mL bottle (60 mg/mL) testing at 54–69 mg/mL is within range. Deviations beyond 15% suggest quality control issues — the product may contain significantly more or less cannabidiol than advertised.
Do all CBD oils come with lab reports?
They should, but not all do. A reputable brand publishes batch-specific COAs from an independent ISO 17025-accredited lab. Brands that claim “lab tested” without providing accessible reports offer no verifiable quality assurance. The third-party lab testing article explains what to expect from a complete COA.
What contaminant panels should appear on a CBD oil COA?
A complete COA covers five contaminant categories: heavy metals (lead, arsenic, mercury, cadmium), pesticides, residual solvents, microbial contamination (E. coli, salmonella, yeast, mould) and mycotoxins (aflatoxins, ochratoxin A). A COA missing any of these panels provides incomplete quality verification.
These products have not been evaluated by the TGA. They are not intended to diagnose, treat, cure, or prevent any disease. You must be 18+ to purchase. Please consult a healthcare professional before use.
