That little QR code on your gummy package isn't decoration. Scan it and you should land on a Certificate of Analysis — a COA — which is the lab document that tells you what's actually inside the candy you're about to eat. For a 10mg THC gummy, the COA is the receipt that proves it really carries close to 10mg, not 4mg, not 25mg. If you're new to edibles, learning to read a gummy COA is the single best shopping skill you can pick up.
Here at Dr. Greenthumb's we treat the COA as part of the product, not an afterthought. So let's break down what every section means, what numbers to trust, and what should make you put a pack back on the shelf.
What a COA actually is
A Certificate of Analysis is a report issued by a testing lab after it analyzes a sample from a specific production batch. For edibles, the manufacturer sends the lab a few gummies pulled from a finished run. The lab measures cannabinoid content and screens for contaminants, then issues a signed PDF with the results. That document is the COA.
The phrase you want to see is third party tested edibles — meaning the lab is independent of the company that made the gummy. A brand testing its own products grades its own homework. An ISO-accredited outside lab has no stake in the result. When you see a recognizable lab name and accreditation number on the report, that's the gold standard for a gummy COA.
Match the batch first
Before you read a single number, check that the COA matches the package in your hand. Every COA lists a batch ID or lot number, a sample date, and often a product name like "Watermelon 10mg Indica Gummy." That batch ID should also be printed somewhere on your package — usually near the bottom of the label or stamped on the back.
If the batch numbers don't line up, the COA is useless to you. It might be a real document for a different production run with different results. A 2023 sample date attached to a gummy you bought in 2026 is a red flag worth questioning. Matching the batch is step one, and plenty of shoppers skip it.
Reading the potency numbers
The heart of any gummy COA is the cannabinoid panel. This is where the lab reports how much THC, CBD, and other cannabinoids the product contains. For edibles, you'll usually see two kinds of measurement:
- Per unit (mg per gummy): This is the number that matters most. A label might say "10mg THC per piece." The COA should confirm something close to that — labs often report a value like 9.6mg or 10.4mg per gummy.
- Per package (total mg): A 10-pack of 10mg gummies should test around 100mg total THC across the package.
Why isn't it exactly 10.0mg every time? Because mixing cannabinoid extract into a liquid gummy base and depositing it into molds isn't perfect to the microgram. Most state programs allow a variance, commonly within about 10–15% of the labeled amount. So a 10mg gummy testing at 9.2mg or 10.8mg is normal and acceptable. A 10mg gummy testing at 4mg or 19mg means the dosing wasn't uniform — and that's a manufacturing problem, not a quirk.
This is where the milligram math becomes your friend. Multiply the per-unit number by the count. Ten gummies at a tested 9.8mg each is 98mg of THC in that package. That simple multiplication is how you compare two products honestly instead of trusting the front-of-box marketing.
THC isn't the only number
Good COAs break down the full cannabinoid profile, not just total THC. You'll often see:
- THCa vs. Delta-9 THC: Raw cannabis carries THCa, which converts to active Delta-9 THC when heated. In a properly made gummy the extract is already activated, so Delta-9 should be the dominant number.
- CBD: Listed even in THC-forward gummies, sometimes in trace amounts.
- Minor cannabinoids: CBN, CBG, CBC may show up depending on the input material.
We're describing these as ingredients and quantities — what's in the jar — not as anything that does something to your body. The COA is a chemistry report, full stop.
The contaminant panels
Potency is only half the story. A complete edible COA also includes safety screening, and these sections are where third-party testing earns its keep. Depending on the state, a full panel can cover:
- Pesticides: Screening for residual chemicals from cultivation.
- Heavy metals: Lead, arsenic, cadmium, and mercury, which extracts can concentrate.
- Microbials: Things like E. coli, salmonella, and certain mold and yeast counts.
- Mycotoxins: Toxic byproducts of mold.
- Residual solvents: Leftover extraction solvents like butane or ethanol from making the concentrate that goes into the gummy.
Each line should read "Pass" or show a result below the action limit. If a section says "Not Tested" or is simply missing, you're only getting part of the picture. A gummy can hit its potency target perfectly and still fail a heavy metals screen — that's exactly why these panels exist.
The details that signal a legit lab
A trustworthy gummy COA has fingerprints of a real, accountable lab:
- Lab name and accreditation (ISO/IEC 17025 is the standard for cannabis testing labs).
- A signature or approval from an analyst or lab director.
- The testing method referenced for each panel.
- Limit of detection (LOD) and limit of quantitation (LOQ) values, which tell you how sensitive the test was.
- Sample and report dates.
When all of that is present and the batch matches your package, you're holding a document you can actually rely on.
How gummies get made — and why uniformity matters
Understanding the manufacturing helps the COA make sense. Cannabis gummies start with a base of gelatin or pectin, sweeteners, flavoring, and color. The cannabinoid extract is blended into the warm liquid before it's poured into molds. The challenge is even distribution — the extract has to be mixed thoroughly so every gummy in the batch carries the same dose. If mixing is sloppy, you get "hot" gummies overloaded with THC and weak ones with almost none in the same bag.
That's the whole reason per-unit potency on the COA is so revealing. Consistent results across the batch tell you the maker dialed in their process. It's the difference between candy made with care and candy made fast.
Putting it into practice on the shelf
Next time you're choosing an edible, run this quick checklist:
- Find the QR code or batch number on the package.
- Pull up the COA and confirm the batch ID matches.
- Check the per-gummy potency against the label — is it within range?
- Do the milligram math for the full package.
- Scan the safety panels for "Pass" across pesticides, metals, microbials, and solvents.
- Confirm an accredited third-party lab issued and signed it.
That's the same literacy that separates a casual buyer from someone who knows exactly what they're getting. B-Real built Dr. Greenthumb's on the idea that the culture deserves quality it can verify, not just hype on a label. A COA is how you verify it.
This content is for educational purposes only.
