Flip over a pack of cannabis gummies and you'll usually find a QR code or a batch number printed somewhere on the label. Scan it or punch it into the brand's site, and you land on a Certificate of Analysis — the COA. That single document is the closest thing the cannabis world has to a receipt for what's actually inside your candy. Not what the marketing says. What a lab found when they melted a piece down and ran it through their machines.
If you only learn one shopping skill, make it this one. A gummy COA tells you the real milligram count per piece, whether the batch passed contaminant screening, and which independent lab signed off. Third party tested edibles carry that paperwork for a reason — it's the difference between trusting a number printed by the people selling you the product and trusting a number verified by an outside lab that doesn't profit from the sale. We built Dr. Greenthumb's around premium quality, and quality you can't verify is just a claim. So let's break the document down panel by panel.
The header: batch ID, dates, and who tested it
The top of any legitimate COA names the testing laboratory, lists a license or accreditation number, and shows the lab's logo. Look for ISO/IEC 17025 accreditation — that's the international standard for testing-lab competence, and accredited labs get audited against it. The header also carries the sample ID, the batch or lot number, the date the sample was received, and the date the report was issued.
That batch number is the whole point. It has to match the batch number printed on your gummy package. If the pack in your hand says LOT 2241 and the COA online says LOT 1190, you're looking at the wrong document — or the brand is showing you a COA from a different, better-looking batch. Same goes for dates. A COA from two years ago attached to a fresh-looking pack is a red flag. Reputable producers test every batch and tie each one to its own report.
Cannabinoid potency: the milligram math that matters
This is the section most people actually want. For an edible, the potency panel should report cannabinoids in two ways: as a concentration (milligrams per gram, or a percentage) and, ideally, as milligrams per serving — meaning per gummy.
Here's where label literacy pays off. Say a package claims 10mg THC per piece, ten pieces, 100mg total. The COA should back that up. If the lab reports the batch at 9.4mg or 10.6mg per gummy, that's normal — most cannabis programs allow a variance window, often around 10 to 15 percent, between the labeled amount and the lab result. A gummy that claims 10mg but tests at 4mg is a real problem. So is one that claims 10mg and tests at 22mg. Both mean the dosing isn't reliable, and reliable dosing is the entire job of an edible.
You'll also see other cannabinoids listed — CBD, CBN, CBG, THCA, delta-8 if relevant. A full-panel COA breaks each one out. Don't read health meaning into those rows; they're there to confirm the product's formulation matches the label, nothing more. If a pack is marketed as a 1:1 THC-to-CBD gummy, the COA is where you confirm the ratio is real.
To sanity-check the total: milligrams per gummy times number of gummies should land near the total milligrams on the front of the box. If a label says 100mg total but the per-piece math comes out to 150mg, somebody rounded wrong or printed wrong, and you deserve to know which.
Homogeneity: why even mixing is a big deal in gummies
This one is specific to edibles and a lot of shoppers miss it. A gummy is only as accurate as the mixing during manufacturing. If the cannabis extract isn't blended evenly through the batch before it's poured into molds, one gummy in the tray can carry a heavy dose while the one next to it carries almost nothing.
Some COAs report a homogeneity or content-uniformity test, sampling multiple gummies from a batch and checking that the potency stays consistent across them. When you see that, it tells you the manufacturer dialed in their process — proper emulsification, even pours, controlled cooling. It's a quiet sign of a serious operation. The gummies that taste consistent and dose consistently are the ones made by people who care about the boring parts.
Contaminant panels: the part that protects you
Potency gets the attention, but the safety panels are why third party tested edibles matter at all. Depending on the state, a full COA screens for several contaminant categories:
- Pesticides — residues from cultivation that can concentrate in extract.
- Residual solvents — leftover chemicals from extraction, like ethanol or butane, that should be flushed out.
- Heavy metals — lead, arsenic, cadmium, mercury, which plants can pull from soil.
- Microbials — mold, yeast, E. coli, salmonella, Aspergillus.
- Mycotoxins — toxins produced by certain molds.
Each row shows the result against an action limit, and you want to see the word PASS, or a result listed below the limit, or simply ND for "not detected." ND is the gold star — it means the lab's instruments didn't find the substance down to their detection threshold. A COA that only shows potency and skips the safety panels entirely is an incomplete picture. For an edible going into your body, those panels are non-negotiable.
Ingredients aren't on the COA — and that's normal
Worth clearing up: a COA is a lab report, not an ingredient list. It won't tell you whether the gummy is pectin-based or gelatin-based, whether it's vegan, or which fruit flavors and colorings went in. That info lives on the package ingredient panel, and it matters too — pectin gummies appeal to plant-based eaters, gelatin gummies give that classic chewy snap. Sweeteners, citric acid for tartness, natural and artificial flavors, and color additives all show up on the label, not the COA. Read both together. The label tells you what it's made of; the COA tells you what the lab confirmed about potency and purity.
Storage note the COA implies
A COA represents the batch at the moment it was tested. Heat, light, and time can degrade cannabinoids afterward, and that's partly why edibles carry expiration or best-by dates. Store your gummies cool, dark, and sealed — a drawer or pantry beats a hot car or a sunny windowsill. Treat the COA as a snapshot of day one, and treat good storage as your job for keeping the product close to that.
Putting it to work on your next pack
Next time you're holding a pack of gummies, run the quick checklist. Find the batch number on the package. Pull up the matching COA. Confirm an accredited, independent lab issued it. Check that the per-gummy milligrams line up with the label and the total math adds up. Scan the safety panels for PASS or ND across pesticides, solvents, metals, and microbials. If a homogeneity test is there, even better.
A brand that makes this easy — clear batch codes, current COAs, full panels — is a brand showing its work. That transparency is the standard we hold ourselves to, and the one you should hold every edible to. You're not being paranoid by reading the lab sheet. You're being a smart shopper, and the smart shoppers built this culture.
This content is for educational purposes only.
