Flip over a pack of Dr. Greenthumb's gummies and you'll usually find a QR code somewhere on the label. Scan it and you land on a document called a Certificate of Analysis — a COA for short. That single page is the difference between trusting a number printed on a package and actually verifying it. For edibles especially, where you can't smell or eye up the flower to judge quality, the COA is your receipt.
Here's the short version before we dig in: a gummy COA tells you the potency in milligrams, confirms the product was screened for contaminants like pesticides and heavy metals, lists the lab that ran the tests, ties the results to a specific batch number, and shows a date. If any of those pieces are missing, that's a red flag. Third party tested edibles come with a report from an independent lab — not the brand's own kitchen — and that independence is the whole point.
Let's break down what each section of a gummy COA actually means.
Potency: The Milligrams That Matter
The headline number on any edible is the cannabinoid content, and the COA is where you confirm the label is telling the truth. If a package says 10mg THC per gummy and 100mg per pack of ten, the COA should back that up with measured results.
Labs report potency two ways for edibles: per unit and per package. A good gummy COA will show something like "9.6mg THC per piece" measured against the "10mg" stated on the label. Cannabis is an agricultural product, so tiny variances are normal — most states allow a tolerance window, often around 10 to 15 percent, before a product is considered mislabeled. Seeing 9.6 when the label says 10 isn't a problem. Seeing 4mg when the label says 10 absolutely is.
You'll also see the cannabinoids broken out by type: THC, CBD, CBN, CBG, and sometimes their acidic forms like THCA and CBDA. For a THC gummy, THC dominates. For a CBD gummy, CBD leads and THC sits low or near zero. Matching the COA's cannabinoid breakdown to what the label claims is the single most useful habit you can build as a shopper.
The Batch Number Is the Whole Game
Here's a detail people miss all the time: a COA is only meaningful if it matches the product in your hand. Every legit edible has a batch or lot number printed on the package, and that same number should appear on the COA.
Why does this matter? Because gummies are made in production runs. One batch of a fruit-punch gummy might test slightly different from the next run — different cannabinoid extract lot, different day, different measurements. A brand that posts one generic COA for every product it's ever made isn't giving you real information. When the batch ID on your pack matches the batch ID on the report, you know that specific run of candy is what got tested. No match, no confidence.
So step one when you scan that QR code: find the batch number on the report and find it on your package. They should be identical.
Contaminant Screening: What You Don't Want in Your Candy
Potency gets the attention, but the safety panels are where a COA earns its keep. Cannabis plants pull compounds out of the soil they grow in, and processing can introduce other junk. A full-panel gummy COA screens for several categories of contaminants, each one usually marked "Pass" or "Fail" with a detected amount:
- Pesticides — residues from cultivation. State labs test against a list of specific chemicals with strict limits.
- Heavy metals — lead, arsenic, cadmium, and mercury, which plants can absorb from soil.
- Residual solvents — leftover extraction chemicals from turning flower into the concentrate that flavors your gummy. Clean extraction should leave little to nothing behind.
- Microbials — mold, yeast, and harmful bacteria like salmonella and E. coli.
- Mycotoxins — toxic compounds produced by certain molds.
For most of these, you want to see "Pass" or "Not Detected" or "ND" across the board. A clean edible clears every panel. If a COA only shows potency and skips the contaminant panels entirely, you're looking at half a report.
Who Ran the Test? Independence Is the Point
The phrase "third party tested edibles" gets thrown around a lot, so let's be precise about what it means. Third party means the lab is separate from the brand. It's not Dr. Greenthumb's testing its own gummies and grading its own homework — it's an accredited, independent lab running the samples and issuing results it stands behind.
A proper gummy COA names the lab, includes its license or accreditation number, and often carries a signature from the lab director. Reputable labs are ISO/IEC 17025 accredited, a standard that governs testing competence. If you can't tell who ran the test from looking at the report, treat that as a warning sign.
Dates, Methods, and the Fine Print
A COA should be dated. Cannabinoids and gummies both change over time, so a test from two years ago on a product you just bought raises questions. The report will typically show a date the sample was received and a date the results were issued.
You'll also see method references — the analytical techniques the lab used, like HPLC (high-performance liquid chromatography) for cannabinoid potency. You don't need to memorize the acronyms. Their presence tells you the lab documented how it got its numbers, which is exactly what a real report does.
Why Edibles Get Extra Scrutiny
With flower, experienced buyers lean on their senses — aroma, trichome coverage, structure. A gummy gives you none of that. It's candy. The color and flavor tell you nothing about the cannabinoid content or whether the extract was clean. That's precisely why the COA matters more for edibles than almost any other format.
It's also why dosing accuracy is such a big deal for gummies. The whole appeal of an edible is a consistent, pre-measured amount in each piece. The manufacturing process — how the cannabinoid extract gets mixed into the gummy slurry before it's poured and set — determines whether every gummy in the pack carries the same amount or whether the extract settled unevenly. A per-piece potency result on the COA is the proof that the mixing was done right and each gummy is in line with the label.
Your Quick COA Checklist
Next time you're holding a pack of gummies, run through this before you buy or open it:
- Scan the QR code or ask the budtender for the COA.
- Match the batch number on the pack to the report.
- Check potency — does per-piece and per-pack milligrams line up with the label?
- Read the safety panels — pesticides, heavy metals, solvents, microbials all marked Pass or ND.
- Confirm the lab — an independent, accredited third party is named.
- Check the date — recent, not ancient.
Building this habit takes about thirty seconds once you know where to look, and it separates brands that back up their claims from ones that just print pretty labels. We put COAs within reach because cannabis culture was built on people looking out for each other — knowing what's in your stash is part of that.
This content is for educational purposes only.
