What a Certificate of Analysis is
A Certificate of Analysis (COA) is a laboratory report certifying that a specific batch of cannabis was tested for safety and potency, and that the results are within legal limits. In New York, every licensed cannabis product — flower, pre-rolls, vapes, edibles, concentrates, tinctures, topicals — must carry a COA from an independent lab accredited to ISO/IEC 17025 standards before it can be sold at retail.
The COA lists:
- The batch/lot number (matches your packaging)
- Sample date, harvest date, packaged-on date
- Lab name, license number, and accreditation certificate
- Every test panel, the method used, the detection limit, the result, and PASS/FAIL
Potency testing (cannabinoids)
Potency tests measure the concentration of THC, THCA, CBD, CBDA, and other cannabinoids. Results are reported as a percentage of total mass (for flower) or in milligrams per serving (for edibles, tinctures, and beverages).
| Cannabinoid | What it is | Effect |
|---|---|---|
| Δ9-THC | The primary psychoactive compound | Euphoria, altered perception, appetite, pain reduction |
| THCA | The acidic precursor to THC in raw flower | Non-psychoactive until heated (decarboxylation) |
| CBD | Non-psychoactive cannabinoid | Anxiety reduction, anti-inflammatory, no high |
| CBN | Degradation product of THC over time | Mildly sedating, associated with older cannabis |
| CBG | Precursor to most other cannabinoids | Non-psychoactive, focus and mood effects |
Why it matters: A flower labeled "24% THC" that actually contains 18% is a rip-off. Unregulated cannabis routinely overstates potency by 20-40%. Licensed lab-tested cannabis is verified within a much tighter tolerance (the state allows ±20%, but reputable labs report within ±5%).
Pesticide screening
Cannabis grown at scale is vulnerable to pests. Some growers use pesticides that are unsafe at any concentration when inhaled — combustion changes their chemistry. New York requires screening for a state-defined panel of pesticides at parts-per-billion sensitivity. If any pesticide is above the state's action limit, the batch fails.
Why it matters: Inhaling combusted pesticides is meaningfully worse than eating them. Rigorous pesticide screening is the single strongest safety argument for buying licensed.
Heavy metals
Cannabis is a bio-accumulator — it pulls heavy metals out of soil, water, and fertilizer and concentrates them in its tissue. New York tests for lead, arsenic, cadmium, and mercury. Excess exposure to any of these has long-term health consequences.
Microbial contamination
Bacteria and mold on flower can cause respiratory issues, especially for immunocompromised users. NY testing screens for total yeast and mold, aspergillus (multiple species), E. coli, and salmonella. Any positive on the aspergillus or salmonella panels = automatic fail.
Residual solvents (concentrates & vapes)
Cannabis oil is extracted using solvents — butane, propane, ethanol, or CO2. After extraction, those solvents are supposed to be purged. Residual solvent testing verifies that the finished product contains less than the state's action limit for each solvent. Solventless extracts (ice-water hash, live rosin) skip this step entirely because no solvent is ever used.
Mycotoxins
Mycotoxins are toxic byproducts produced by molds, most notably aflatoxin B1. Even if mold is not visibly present, mycotoxins can persist. The NY panel screens for aflatoxin B1, B2, G1, G2, and ochratoxin A. These are chronic toxins — a fail here is a serious safety concern.
Terpene profile
Terpenes are the aromatic compounds that give each strain its smell and flavor — and they modulate the effect of THC (the "entourage effect"). Terpene testing is not required for legal sale, but many quality-focused brands include a terpene panel voluntarily. Common dominant terpenes:
| Terpene | Aroma | Typical effect |
|---|---|---|
| Myrcene | Musky, herbal, hoppy | Sedating, body-heavy |
| Limonene | Citrus rind | Uplifting, mood-elevating |
| Caryophyllene | Peppery, spicy | Anti-inflammatory, calming |
| Pinene | Fresh pine | Alert, cognitive focus |
| Linalool | Floral, lavender | Calming, sleep-supporting |
| Terpinolene | Fruity, floral, herbaceous | Uplifting, cerebral |
How to read a COA in 30 seconds
-
01
Find the batch/lot number
Printed on your product's packaging — usually a QR code or an alphanumeric string near the barcode.
-
02
Locate the COA
Enter the batch number on the brand's website, or scan the QR. Most brands host COAs publicly. If not, ask your budtender or email the store.
-
03
Confirm the header
Look for the lab's name, its ISO/IEC 17025 accreditation number, the harvest/manufacture date, and the sample date. The sample date should be recent.
-
04
Scan the results column
Each panel (potency, pesticides, heavy metals, microbials, mycotoxins, residual solvents) should have a PASS in the results column. Any FAIL means the product should not be on shelves — flag it to the store.
-
05
Compare potency to package
The total THC / total cannabinoids on the COA should match (within the state's ±20% tolerance) what's printed on the package.