By HealthDataConsortium.org Research Team
A lab report attached to a CBD product can look like a safety guarantee. It isn’t one. A Certificate of Analysis (COA) is a batch-specific snapshot: it shows what a lab checked, on one sample, on one date. It does not establish that the product is safe to use, that it will work as hoped, or that every bottle on the shelf matches the one tested. Here is what a passing result actually confirms, and what it leaves open.
What a Passing Lab Result Establishes
When a CBD batch “passes” testing, it means the specific sample submitted met the thresholds the lab was asked to check, across whatever panel the brand ordered. Depending on scope, that panel can include:
- Cannabinoid potency — whether CBD (and THC) content matches the label claim within an accepted margin
- Pesticide screening — residue levels below a set threshold, for the compounds included in the panel
- Heavy metals — lead, arsenic, cadmium, and mercury below the lab’s cutoff
- Microbial contamination — mold, yeast, and bacteria counts within range
- Residual solvents — leftover extraction chemicals below threshold, where solvent extraction was used
A pass means: this specific sample, from this specific batch, did not exceed the limits for the specific things the lab was asked to measure. That is a real and useful data point. It is not a general safety or efficacy determination.
What It Leaves Untested
- It’s batch-specific, not product-wide. A COA covers the batch it was drawn from. It says nothing directly about a different production run of the “same” product unless that batch was separately tested.
- It only covers what was tested. A report is only as thorough as its panel. A COA that screens 20 pesticides says nothing about the 21st. If a category — microbials, heavy metals — isn’t listed on the report, that can mean it wasn’t run, not that the product is clean on that front.
- It doesn’t establish safety for a given person. A clean lab result doesn’t account for drug interactions, allergies, pregnancy, or existing health conditions.
- It doesn’t establish therapeutic effect. Testing confirms what is or isn’t in the product. It says nothing about whether the product does what marketing claims it does.
That last point reflects current federal regulatory status, not a testing gap specific to any one brand. According to the FDA, CBD and THC are excluded from the legal definition of a dietary supplement, and aside from the prescription drug Epidiolex, no CBD product has gone through FDA review for safety or effectiveness — a Certificate of Analysis is a private lab’s contamination/potency check, not a substitute for that kind of evaluation. Separately, the CDC notes that cannabis use carries a range of potential health effects on the body and brain, which is a different question from product contamination and sits outside what any COA is designed to measure.
Reading a Batch Report
When a COA is available, these are the fields worth checking against the product in hand:
- Batch number — confirm it matches the lot number printed on the product packaging, not just the product name
- Analytes tested — which panels were actually run: potency only, or potency plus contaminants
- Result date — how recent the testing is relative to the product’s production and expiration dates
- Laboratory identity — the name of the testing lab, and whether it’s independently accredited rather than affiliated with the brand
- What’s absent — any panel category not listed is a panel that wasn’t tested, not one that passed
The Bottom Line
“Lab tested” is a meaningful claim with a specific, limited scope: a particular batch, checked against a particular panel, on a particular date. It is not a blanket safety certification, and it doesn’t replace individual medical judgment. Readers evaluating a CBD product should check for current, batch-matched lab documentation, watch for any official recall notices tied to that brand or batch, and discuss use with a clinician — particularly alongside existing medications or health conditions.
