Flip over a pack of gummies and you'll usually find a QR code or a batch number printed near the ingredients. Scan it, and you land on a document that looks intimidating at first — rows of numbers, a lab logo, some chemistry terms. That document is the Certificate of Analysis, or COA, and once you know how to read it, it's the single most useful thing on the package. It's the receipt that proves what's actually inside the gummy you're about to eat.
A gummy COA is a lab report produced by an outside testing facility. When a product is third party tested edibles, that means the brand didn't grade its own homework — an independent lab ran the samples and signed off on the results. At Dr. Greenthumb's we treat that paperwork as non-negotiable, because a gummy is a manufactured food product with a measured dose of cannabinoids baked into it. The only way you know that dose is honest is if a neutral lab measured it.
Let's walk through what each section of a COA tells you, top to bottom.
The header: who tested it and when
The top of any legit COA names the testing lab, the lab's license or accreditation, the sample name, and the dates. You want a few things here. First, the lab should be a separate company from the brand — that's the "third party" part. Second, there should be a batch ID or lot number that matches the code printed on your actual package. If the batch on the pack doesn't match the batch on the COA, the report tells you nothing about the gummies in your hand. It could be last year's run.
Dates matter too. You'll typically see a "date received" and a "date of analysis." A COA from three years ago attached to a fresh product is a red flag. Testing is a snapshot of a specific batch at a specific time, not a permanent stamp on a recipe.
Cannabinoid potency: the milligram math
This is the section most people came for. The potency panel lists the cannabinoids the lab detected and how much of each is present. For a gummy, you'll usually see results reported two ways: as a percentage by weight, and — more usefully — as milligrams per unit and per package.
Here's where a little math protects you. Say a package says "100mg THC, 10 pieces." The COA should back that up: roughly 10mg per gummy, 100mg total. If the label claims 10mg each but the COA reads 14mg per piece, that's a real discrepancy, and it's exactly the kind of thing the report exists to catch. Cannabis labeling rules in most legal markets allow a variance window — commonly around 10% to 15% — between the label claim and the lab result. A tight COA that lands close to the stated number is a sign of a well-controlled manufacturing process.
You may also see minor cannabinoids listed: CBD, CBN, CBG, CBC, delta-8, and others depending on the product. "ND" means none detected. "LOQ" or "LOD" refer to the limit of quantification and detection — basically the smallest amount the instrument can reliably measure. If a cannabinoid reads below those limits, the lab is telling you it's essentially not present in a meaningful amount.
One note we'll keep straight: a COA tells you how much of a compound is in the gummy. It does not tell you what that compound will do for any condition, and no honest report claims that. Potency is a measurement, not a promise.
Contaminant panels: the part that keeps you safe
Potency gets the attention, but the contaminant sections are where a COA earns its keep. Depending on the market and the product, a full panel can include several tests:
- Pesticides. The lab screens for a list of regulated pesticides. You want to see "pass" or numbers below the action limit across the board. Gummies start with cannabis extract, and whatever was on the plant can concentrate in the oil.
- Residual solvents. If the cannabinoids came from an extraction that used butane, ethanol, or CO2, this panel confirms leftover solvent levels are within safe limits. A clean solvent screen tells you the extract was properly purged before it ever hit the gummy batch.
- Heavy metals. Lead, arsenic, cadmium, and mercury. Cannabis plants pull metals up from soil, so this test matters even for a candy.
- Microbials. Screens for things like E. coli, salmonella, and certain molds and yeasts. For an edible — a food product — this is standard food-safety territory.
- Mycotoxins. Toxins produced by certain molds, tested separately from the microbial count on many panels.
A complete COA shows each of these with a result and a pass/fail. A report that only lists potency and skips contaminants isn't a full picture. When we call something third party tested, the goal is the whole panel, not just the fun number on the front of the box.
Ingredients and format: matching the COA to the pack
A COA works alongside the ingredient list, it doesn't replace it. Your gummy pack should still spell out what's in the candy itself — pectin or gelatin as the gel base, sweeteners, natural or artificial flavors, coloring, citric acid for that sour coating, and the cannabis extract or distillate that carries the cannabinoids. Pectin-based gummies are plant-derived and popular for vegan formulas; gelatin gives that classic chewy bite.
Cross-check the two. The label tells you what kind of gummy it is and what you're eating. The COA confirms the potency claim and the safety screens on that specific batch. Together they answer the real question: is this pack what it says it is?
How to actually use a COA when you shop
Here's the quick routine. Scan the QR code or search the batch number on the brand's site. Confirm the batch on the report matches the batch on the pack. Check the date is reasonably recent. Read the potency panel and do the per-piece math against the label claim. Then scroll to the contaminant panels and make sure everything reads pass or ND. If any of those steps comes up empty — no COA, mismatched batch, missing contaminant tests — that's your answer.
Storage is the last piece nobody thinks about. A COA describes a gummy at the moment it was tested. Heat and light degrade cannabinoids and can turn a chewy gummy into a sticky brick, so keep edibles in a cool, dark spot in their original resealable packaging. The child-resistant zipper on a proper edibles pouch isn't just legal boilerplate — it keeps the product sealed and out of the wrong hands.
Why this matters to us
B-Real built Dr. Greenthumb's on the idea that cannabis culture deserves products people can trust, the same way Cypress Hill built a catalog fans could count on. Transparency is part of that. A COA is how a brand shows its work, and reading one is a skill every shopper should have — it turns you from someone hoping the label's honest into someone who can verify it in about ninety seconds.
Next time you grab a pack, don't just trust the front of the box. Scan the code, pull the report, and read it like the receipt it is.
This content is for educational purposes only.
