Hemp Heavy Metal Testing: Why Lead, Arsenic, Cadmium, and Mercury Matter

Hemp heavy metal testing exists because of one inconvenient fact: hemp is very good at pulling metals out of the ground. The plant is a hyperaccumulator, and the same trait that makes it useful for cleaning contaminated soil also makes it a sponge for lead, arsenic, cadmium, and mercury. For a brand, that means the dirt your hemp grew in can show up in your finished oil, and a heavy-metals panel is how you catch it before a customer does.

This post walks through why hemp specifically accumulates metals, what each of the big four analytes is and where it comes from, how labs measure them, and what part of a Certificate of Analysis (COA) you should actually show on your storefront. It is part of a larger hemp and CBD lab testing compliance guide, and it pairs with the broader question of what a full-panel hemp COA tests for.

Why hemp pulls metals from the soil

Most plants take up some trace metals; hemp takes up a lot. It is a documented phytoremediator, used in field trials to draw heavy metals and other contaminants out of polluted land. The roots absorb metals along with water and nutrients, and the plant stores them in its tissue rather than excreting them.

That is great for remediation projects and a real problem for consumer products. The metals a hemp plant accumulates depend almost entirely on where it was grown. Fields near old industrial sites, former orchards treated with arsenic-based pesticides, roadsides with legacy leaded fuel residue, or land amended with certain fertilizers and sewage sludge can all carry elevated metals. The plant does not care that you intend to extract CBD from it. It absorbs what is there.

Two consequences follow. First, sourcing matters: where the biomass was grown is a real risk factor, not a marketing detail. Second, testing matters more for hemp than for many other crops, because the same plant grown in clean soil and dirty soil can produce very different results. You cannot tell by looking.

The big four analytes

Nearly every hemp and cannabis heavy-metals panel reports the same four metals. They are grouped together because they are toxic at low levels, they show up in agricultural products, and regulators have set limits for them in food, supplements, and inhalables.

Lead

Lead is the metal regulators watch most closely, and it carries some of the lowest limits. It enters soil from decades of leaded gasoline and lead paint, from certain fertilizers, and sometimes from contaminated water. Lead accumulates in the body over time rather than clearing quickly, which is why action levels for it are strict in foods, dietary supplements, and inhaled products alike. If a COA is going to fail one analyte, lead is a common culprit.

Arsenic

Arsenic occurs naturally in many soils and groundwaters, and it was applied for decades as a pesticide, so former orchard land is a classic source. Labs care about the inorganic form, which is the more toxic one. Because arsenic is so widespread in the environment, a small reading is normal; the question is whether it stays under the applicable limit for your product type.

Cadmium

Cadmium is a problem partly because plants take it up so readily. It rides into farmland through phosphate fertilizers and sludge-based soil amendments, and it sticks around in soil for a very long time. Hemp's appetite for metals makes cadmium one of the analytes worth watching when you evaluate a grower or a biomass lot.

Mercury

Mercury shows up less often in hemp than the other three, but it stays on the panel because it is highly toxic and because it can travel long distances through the air from industrial and combustion sources before settling into soil. Most clean hemp tests very low for mercury; the panel confirms that rather than assuming it.

How heavy metals are measured

The instrument of record for heavy metals is ICP-MS, inductively coupled plasma mass spectrometry. The sample is digested into a solution, vaporized in an extremely hot plasma, and the resulting ions are sorted and counted by mass. ICP-MS can detect metals down to parts per billion, which is why a heavy-metals section reports such small numbers and why every result sits next to a detection limit (LOD/LOQ).

This is a different instrument from the ones used elsewhere on a full panel. Cannabinoid potency runs on HPLC, residual solvents on GC, pesticides and mycotoxins on LC-MS/MS. Heavy metals get their own dedicated method, ICP-MS, because measuring elements at trace levels is its own discipline. If you want the broader tour of what each section means, the guide on how to read a CBD COA breaks the document down section by section, and hemp testing 101 covers the fundamentals if you are newer to lab reports.

Limits vary by state and by route of exposure

There is no single national heavy-metals limit for hemp products. Limits vary by state and by product type, and they frequently differ for inhaled versus ingested products. The reasoning is route of exposure: inhaling a vapor delivers a contaminant to the body differently than swallowing a gummy, so the action levels are set separately. A reading that passes for an ingestible might not pass for an inhalable in the same state, and a result that passes in one state's framework might not in another's. Know the rules for every market you ship to, and treat the federal hemp definition as a floor rather than the whole picture.

Extraction concentrates what is there

Here is the part that catches brands off guard. Testing clean biomass is not the same as testing a finished product, because extraction concentrates everything that survives it, including metals.

When you turn flower into distillate or isolate, you strip away water, fiber, and most of the plant mass. The cannabinoids you want get concentrated, and any metals that came along for the ride get concentrated too. Biomass that looked marginal on a raw test can produce a distillate that fails. This is the core reason to test the actual product you sell, in the actual batch you sell, rather than relying on an input COA from your supplier. Batch-level results on the finished good are what protect you.

What to show your customers

Once you have a clean result, the value is in showing it. Customers, processors, and marketplaces increasingly expect to see a current batch COA, and the heavy-metals section is part of what they look at.

For the storefront, show the heavy-metals section of the COA for the specific batch the customer is buying, with a pass or fail per analyte visible. A few practices keep it credible:

• Publish the COA for the exact batch on the shelf, not a generic or expired one.
• Make sure the report comes from an ISO/IEC 17025 accredited lab and shows methods and detection limits.
• Keep lead, arsenic, cadmium, and mercury each listed with their result and limit, not buried or summarized away.
• Replace the COA when you replace the batch, so the published result always matches the product.

That last point, keeping the published COA tied to the batch on the shelf, is exactly the workflow LabLinks is built for. You upload the COA as a PDF or image, enter the batch and lot number, test date, lab name, and pass/fail status, and link it to the Shopify product. A theme app block shows a lab-tested badge that opens the full report in an on-page viewer, and every store gets a searchable portal so a shopper can look up a result by product, batch, or lot. If you want the step-by-step, the guide on how to add COAs to Shopify product pages covers the setup, and the hemp and cannabis industry page shows how it fits the category. When you publish a new batch, the storefront updates on its own, so the heavy-metals result a customer sees is always the current one.