What is a Certificate of Analysis (COA)?
A Certificate of Analysis is the lab report that proves a CBD product contains what it claims โ and doesn't contain what it shouldn't. Every reputable UK CBD brand publishes batch-specific COAs online. They're the difference between a product you can trust and one that's a marketing exercise.
A COA is generated by an independent third-party laboratory testing a sample from a specific production batch. The lab measures the actual cannabinoid content (CBD, CBG, CBN, CBC, THC), screens for contaminants (heavy metals, pesticides, microbial life, residual solvents from extraction), and produces a PDF report you can read in 60 seconds.
Reading a COA isn't complicated once you know what to look for. The 7-point checklist above is what I personally use when vetting any new UK CBD brand. Score 7/7 and the product is trustworthy. Score 5โ6 and it's borderline โ usable but not premium. Score under 5 and you're rolling the dice on quality.
Why COAs matter more than marketing
The UK CBD industry has grown faster than regulation. The Food Standards Agency requires Novel Food authorisation for CBD edibles, but compliance is patchy and enforcement has been minimal. As a result, the difference between brands is often the difference between marketing budgets, not product quality.
Surveys conducted by independent UK testing labs in 2022 and 2023 found that roughly 38% of CBD products tested on UK shelves had labelled CBD content outside the ยฑ20% range of actual content. Some contained over 50% less than claimed. A handful contained heavy metals above safe thresholds. One major retailer's house-brand CBD oil was found to contain almost no detectable CBD at all.
The brands that passed these audits invariably had two things in common: they published their COAs openly, and the COAs were recent (under 12 months old) and matched their batch numbers. The brands that failed almost always either had no public COA, an outdated one, or a COA from a different batch than the one you'd actually receive.
Using this checker forces you to do what most consumers skip: actually look at the lab report. The 60 seconds it takes will save you from the majority of low-quality products on the UK market.
How to find a brand's COA
Quality UK brands publish their COAs in one of three ways:
- QR code on the product packaging. Scan it with your phone camera. It should open directly to a batch-matched PDF, not a generic "we test our products" page. If it leads anywhere else, that's a red flag.
- Dedicated "Lab Reports" page on the website. Usually linked from the main menu or footer. Should be searchable by batch number.
- Customer service email request. Some smaller brands publish on request. This is acceptable for new brands but suspicious for established ones โ they should have nothing to hide.
If a brand's COA is behind a request form, takes more than 48 hours to receive, or requires you to "sign up to access lab reports", treat that as a quality warning. Transparency is the bare minimum in this industry, not a premium feature.
Reading the actual COA PDF
A standard COA PDF has roughly six sections. Here's what to look at, in order:
Section 1: Header. Lab name, accreditation reference (ISO 17025 or UKAS), date of analysis, sample receipt date. The lab name should be a real third-party โ not the brand itself. Names like "Eurofins", "ProVerde", "ACS Laboratory" or UK-based "Hexa Analytical" are reputable.
Section 2: Sample identification. Product name, batch/lot number, sample weight, sample form. This is what you cross-reference against your bottle. Same batch number = same content. Different batch number = the COA might not match what you bought.
Section 3: Cannabinoid profile. A table showing CBD, CBG, CBN, CBC, CBDA, CBDV and THC concentrations. CBD should match the label claim within 10%. THC should be marked "ND" (Not Detected) for broad spectrum products, or under 1 mg per container for full spectrum.
Section 4: Heavy metals screen. Lead (Pb), arsenic (As), mercury (Hg), cadmium (Cd). Each should show "Pass" with the actual measured value below the safety threshold (typically under 0.5 mg/kg for each).
Section 5: Pesticides residue panel. A list of 50+ commonly used pesticides. All should show "ND" or "Pass". A single failure here means the hemp was sprayed during cultivation โ disqualifying for premium status.
Section 6: Microbial + solvents. Yeast/mould, E. coli, salmonella, total aerobic bacteria. For CO2 or solvent-extracted products, residual solvents like ethanol or butane. All should pass.
The 8 red flags I see most often
- "Internal testing" or "Tested by us". Not the same as third-party. The brand has every incentive to fake favourable results. Walk away.
- No batch number on the COA. A genuine COA always references a specific batch. Generic "product COAs" are often outdated or fabricated.
- Single-page COAs. Real COAs are typically 3โ6 pages because they cover cannabinoids, heavy metals, pesticides, microbials, and solvents. A one-page document is missing critical safety data.
- Only cannabinoid profile shown. No heavy metals or pesticides screen on the visible report. The brand might be hiding failed contamination tests.
- COA over 18 months old. Old data on a new product. Either the brand isn't testing recent batches, or the current batch hasn't been independently verified.
- Suspicious lab name. If you Google the lab and find nothing โ no website, no reviews, no scientific publications โ be wary. Reputable cannabis testing labs have public reputations.
- "Test pending" or "Analysis in progress". Means the product was shipped to consumers before the safety data came back. Unacceptable in 2026.
- CBD content exactly matching label. Real measurements have variance. A COA showing "exactly 1000 mg" for a "1000 mg" product is statistically improbable โ usually a fabricated number rounded to look perfect.
When in doubt, ask
If a brand passes 6/7 checks and you're hesitant about the seventh, email customer service directly. Ask specifically: "Can you confirm batch number X was tested for heavy metals and pesticides? Can I see the full report?" The response tells you everything. Good brands respond within 24 hours with a direct link to the full PDF. Bad brands deflect, delay, or send you a different document.
This checker is designed to be used every time you buy a new CBD product โ not just the first time you try a brand. Quality varies batch-to-batch, even within reputable brands. The 60 seconds it takes is the cheapest insurance you'll ever buy against a wasted purchase.
Oliver's bottom line: The COA is the only objective truth about what's in your CBD bottle. Marketing claims, brand stories, influencer endorsements โ none of them matter compared to a recent, batch-matched, accredited lab report. If a brand can't or won't provide one, the question isn't whether their product is good. The question is why they're hiding the proof.