Every legitimate THCA product comes with a COA — a Certificate of Analysis — from an independent, third-party laboratory. It's the single document that proves what you're buying is potent, legal, and clean. The problem? Most people never open it, and sellers know that. Here's how to read a THCA lab report in two minutes, and the red flags that expose a fake one.
What Is a COA?
A Certificate of Analysis is a lab report issued by an accredited laboratory that tested a specific batch of product. A proper COA tells you:
- Cannabinoid potency — exactly how much THCA, delta-9 THC, CBD and other cannabinoids the product contains
- Compliance status — whether it's federally legal hemp (under 0.3% delta-9 THC)
- Safety results — tests for pesticides, heavy metals, mold, and residual solvents (when included)
No COA = no proof. It's that simple.
Section 1: The Potency Panel (Where to Look First)
The cannabinoid table is the heart of the report. For THCA flower, three numbers matter:
| Line item | What it means | What to look for |
|---|---|---|
| THCA % | The raw, unheated cannabinoid — your potency indicator | 15–20% solid, 20–25% premium, 25%+ exotic |
| Delta-9 THC % | The federally regulated number | Must be below 0.3% for legal hemp |
| Total THC | THCA × 0.877 + delta-9 THC — what you'd get after heating | Your real-world potency (some states regulate this — see our Texas guide) |
Why multiply THCA by 0.877? When heat converts THCA to THC (decarboxylation), the molecule loses its carboxyl group — about 12.3% of its weight. A flower testing 25% THCA delivers roughly 21.9% THC when smoked.
Section 2: The Header (Verify Before You Trust)
Before believing any numbers, check the report's own credentials:
- Lab name and accreditation — look for ISO/IEC 17025 accreditation; a quick Google of the lab should show a real facility
- Batch/lot number — it must match the batch printed on your product's label. A COA for "some previous batch" proves nothing about your jar
- Test date — recent is better; flower COAs older than a year are stale
- Sample type — should say flower/plant material for flower products, not distillate
Section 3: Safety Panels (The Part Cheap Sellers Skip)
Full-panel COAs go beyond potency and test for contaminants. Hemp is a bioaccumulator — it pulls up whatever's in the soil — so these panels matter:
- Pesticides — all results should read "ND" (not detected) or "<LOQ" (below the limit of quantification)
- Heavy metals — lead, arsenic, cadmium, mercury: ND or within limits
- Microbials — yeast, mold, salmonella, E. coli: pass
- Residual solvents — relevant for concentrates like shatter; solventless products like live rosin skip this by nature
🚩 Red Flags: How to Spot a Fake or Useless COA
- No COA at all — walk away, no exceptions
- Batch number doesn't match the product label — the oldest trick in the business
- Suspiciously perfect numbers — 35%+ THCA flower claims are almost always inflated; be skeptical of anything over ~31%
- Photoshop artifacts — misaligned fonts, blurry logos, numbers in a different typeface than the rest of the table
- The lab doesn't exist — search the lab's name; real labs have websites and accreditation records
- No QR code or verification link — the best COAs link back to the lab's own database so you can verify the PDF wasn't edited
- Potency-only panel sold as "full tested" — potency-only is fine for potency claims, but "lab tested = safe" requires the contaminant panels
Our COA Policy at VelvetCBD
Every product we sell — flower, concentrates, edibles and pre-rolls — ships with a current, batch-matched, third-party COA. If you ever can't find the COA for something you bought from us, email support@velvetcbd.com with your order number and we'll send it directly.
Frequently Asked Questions
What does ND mean on a lab report?
"Not detected" — the compound wasn't found above the lab's detection threshold. It's the result you want on every contaminant line.
Why does my flower's THCA % differ slightly from the COA?
Plants aren't uniform — different buds from the same batch can vary a point or two, and storage conditions cause slow drift over time. Small variance is normal; large gaps are not.
Is high THCA the only thing that matters?
No. Terpene content shapes the experience as much as raw potency (see our strain types guide), and a clean contaminant panel matters more than a couple of extra percentage points.
Can a COA be legally required?
Many states require compliant testing for hemp products. Regardless of your state's rules, you should personally require one — it's your only window into what you're actually consuming.
The Bottom Line
Two minutes with a COA tells you more than any product description ever will: check the batch number matches, THCA delivers the potency, delta-9 sits under 0.3%, and the contaminant lines all read ND. Make it a habit — your lungs and your wallet will both thank you.
Disclaimer: This article is for educational purposes only and is not legal advice. Products are intended for adults 21+ only.
