top of page

Aug 18, 2026

How to Read a Cannabis Certificate of Analysis (COA)


A COA is the single document that decides whether a batch ships. Most people scan for the word PASS and move on. The number that matters is usually the one next to it.


A Certificate of Analysis is the lab report that certifies what is actually in a batch of cannabis: how potent it is, and whether it is safe to consume. It is the evidence behind every label claim and the document a buyer, a regulator, or an acquirer will ask for first. Yet many people treat it as a formality, checking that the overall result says PASS without reading the panels underneath. A COA read properly tells you not just whether a batch passed, but how close it came to failing, and that margin is often the early warning a facility needs.



Before any result means anything, confirm the report is credible and that it describes the batch in front of you:

  • Accreditation. A cannabis lab in Canada needs both ISO/IEC 17025:2017 accreditation and a Health Canada Cannabis Drug Licence. The accreditation scope must explicitly cover each analyte and matrix on the report, an accredited lab testing outside its listed scope is a red flag.

  • Sample identity. The batch or lot number on the COA must match the batch you are shipping or buying. A COA that cannot be tied to a specific batch proves nothing.

  • Dates and sampling. Check the test date and who collected the sample. A representative sample taken under a documented procedure is part of what makes the result defensible.


The most misread number on a COA is potency. Raw THC is only the THC already in its active form; most of the cannabinoid in unheated flowers is still THCA, its acidic precursor. Health Canada labels, excise duty, hemp classification, and the 10 mg edibles cap all run on Total THC, which accounts for the THCA that converts to THC when heated:


Total THC = (THCA x 0.877) + THC


The 0.877 factor is simply the ratio of the molecular weights (THC is lighter than THCA because decarboxylation drives off carbon dioxide). If a COA lists only Raw THC, you are not seeing the number the regulator uses.The same formula applies to CBD:


Total CBD = (CBDA x 0.877) + CBD.


Potency tells you what the product is; the safety panels tell you whether it can be sold. For non-irradiated dried flower in the Canadian market, the headline limits are:

Test

Limit (non-irradiated dried flower)

Total Aerobic Microbial Count (TAMC)

10^5 CFU/g maximum

Total Yeast & Moulds (TYMC)

10^4 CFU/g maximum

E. coli

Absence in 1 g

Salmonella spp.

Absence in 25 g

Lead (Pb)

0.5 ppm maximum (oral route)

Arsenic (As)

0.2 ppm maximum (oral route)

Cadmium (Cd)

0.2 ppm maximum (oral route)

Mercury (Hg)

0.1 ppm maximum (oral route)

A few things experienced reviewers watch for. Microbial limits tighten for irradiated or decontaminated product (a stricter Ph. Eur. category), so the limit that applies depends on how the batch was treated. Heavy-metal limits above are for the oral route; inhaled-product limits are stricter, typically around ten times lower, so always confirm which route the cited limit covers. And the pathogen results use the wording "Absence in 1 g" or "Absence in 25 g" rather than a numeric count, that phrasing is deliberate and is what an inspector expects to see.


PASS is not the end of the analysis. A microbial result sitting just under its limit is a warning even though it passed, and a smart operation investigates when a value trends toward roughly half of its limit rather than waiting for an outright failure. Reading the margin batch over batch turns the COA from a gate into an early-warning system.


If product or genetics move across borders, the same 0.3 percent hemp threshold can mean two different things. Canada measures 0.3 percent Total THC, while the United States measures 0.3 percent delta-9 THC only. A US-legal hemp lot with meaningful THCA content can pass there and fail the Canadian Total THC test. It is the most common cross-border compliance surprise, and the COA is where you catch it.


The final discipline is linkage. A certificate floating in an inbox proves little; a COA tied to the batch genealogy it describes, the inputs, rooms, and operators behind that lot, is evidence. This is where lab results and record-keeping meet: GrowerIQ attaches COAs to the batch record they belong to, so the test result and the production history it certifies stay together through an audit, a recall, or a sale.


What's inside the full GrowerIQ COA guide


  • A section-by-section COA walkthrough. Every panel on a typical report and how to read it.

  • The full limits reference. Microbial categories, heavy metals, pesticides, residual solvents, and mycotoxins, with the route and product type each limit applies to.

  • The potency math, worked through. Total THC and Total CBD with examples, plus the hemp classification thresholds.

  • A reviewer's checklist. What to confirm on every COA before a batch ships or a purchase is approved.


Download your in through GrowerIQ!

bottom of page