Hemp Testing 101: From Seed to COA

If you are new to selling hemp or CBD, the path a crop takes before it reaches a product page is longer than most people expect. Hemp testing happens at several points, not once at the end, and each check answers a different question. This guide walks the whole sequence in plain language, from the plant in the field to the certificate of analysis (COA) your customers actually open. By the end you will know what each test does, why batches matter, and what a credible report looks like.

A quick definition first. A COA is the lab document that lists what a sample contains and whether it passed. It is the single most important piece of paper in CBD testing, because it is the proof behind every claim on your label. Everything below builds toward producing a clean one.

Pre-harvest testing in the field

The first test happens while the plant is still in the ground. Before a hemp crop can be harvested and sold as hemp, a regulator or an approved sampler takes a sample and confirms the crop comes in under the legal THC limit. This is the compliance gate that decides whether the plant is hemp or, legally, marijuana.

The federal floor here is 0.3 percent THC on a dry-weight basis. If the pre-harvest sample tests over the limit, the crop can be flagged for destruction or remediation depending on the state. This is also where the 2026 rule change starts to bite. The limit is moving from delta-9 THC alone to total THC, which counts delta-9 plus other THC forms in the plant. We cover that shift in detail in the 2026 total THC rules for cannabinoid compliance, so here just know that field testing is the start of the chain, not a formality.

One practical note for merchants: you usually are not the one arranging the field test. Your farmer or supplier is. But you should ask to see those pre-harvest results, because they tell you the raw material started compliant.

Biomass testing before sale to a processor

Once the crop is harvested and dried, it becomes biomass: the raw flower and plant material. Before that biomass is sold to a processor or extractor, it gets tested again. This round usually checks potency, so the buyer knows how much CBD they are paying for, and it screens for early contamination problems.

Heavy metals matter a lot at this stage. Hemp is a hyperaccumulator, which means the plant pulls metals out of the soil as it grows. The big four to watch are lead, arsenic, cadmium, and mercury. If the soil was contaminated, the biomass carries that load forward into everything made from it. Catching it here saves a processor from buying a batch they cannot use. For a closer look at this specific test, see our guide to heavy metal testing in hemp.

Biomass testing protects the buyer more than the seller, which is exactly why a serious processor will not take material without it.

Extract testing and why concentration matters

Extraction is where raw biomass becomes a concentrated oil or distillate. This step is powerful and a little dangerous, because concentrating the cannabinoids also concentrates everything else. If a small amount of a pesticide or a heavy metal was present in the biomass, it can show up at a much higher level in the extract. A trace that passed in the raw plant can fail after extraction.

Extraction also introduces a brand new category of contaminant: residual solvents. Many extraction methods use solvents such as ethanol, butane, or propane to pull the cannabinoids out. If those solvents are not fully purged, they linger in the oil. Residual solvent testing exists specifically to catch this, and it is one of the tests that only becomes relevant after extraction.

So the extract gets its own panel. Potency is re-checked because the numbers have changed completely. Heavy metals and pesticides are re-checked because concentration changes the math. And residual solvents are added. An extract that looks clean on potency can still fail on solvents, which is why you never skip this layer.

Finished-product batch testing: the COA customers see

The last test is the one your customers care about. When the extract is formulated into a finished product, a gummy, a tincture, a topical, that finished product is tested as a batch. The resulting COA is the document you publish, the one a marketplace asks for, and the one a careful shopper looks for before buying.

This is where the full panel usually lives. A finished-product COA on a reputable product typically reports:

Potency tells customers what they are getting. The safety rows tell them the product will not hurt them. Together they are the reason the finished-product COA carries the most weight.

The batch and lot concept

Here is the idea that trips up the most newcomers. You do not test a product once and reuse that COA forever. You test per batch.

A batch, also called a lot, is a single production run made from the same materials under the same conditions. Make the same tincture in January and again in May, and you have two batches. Each one gets its own test and its own lot number, because the input oil, the timing, and the conditions can all differ. A COA is tied to a specific lot, and it only describes that lot. When a customer scans a package or checks your site, they should be able to land on the COA for the exact batch in their hand. Matching the right COA to the right lot is the whole point of batch-level COAs.

This is also why "we are lab tested" on a homepage means little on its own. Tested when? Which batch? The honest answer is a current, lot-specific report.

Full panel versus potency only

You will see two phrases a lot, so pin them down now.

Potency only means the lab measured cannabinoids and nothing else. It answers "how much CBD and THC is in here" and stops there. It is cheaper and faster, and it is fine for an early biomass check.

Full panel means the lab ran everything in the table above: potency plus heavy metals, pesticides, microbials, residual solvents, and mycotoxins. For a finished product that touches a customer, full panel is the standard most states and marketplaces expect. If a supplier hands you a potency-only sheet for a finished good, treat it as incomplete.

What makes a COA credible

Not all certificates are equal. A few markers separate a report you can trust from one you cannot.

• Accreditation. The lab should be ISO/IEC 17025 accredited. That is the international standard showing the lab follows validated methods and produces reliable results.
• Methods named. A good COA states how each test was run, for example HPLC for cannabinoid potency, because the method affects the result.
• LOD and LOQ. These stand for limit of detection and limit of quantitation, the smallest amounts the instrument can detect and reliably measure. They tell you how sensitive the test was.
• Pass or fail per analyte. Each tested compound should show a result against a limit, with a clear pass or fail, not just a single overall stamp.
• Batch and lot number. The report must identify the specific lot it describes.

If you want a guided walk through reading one of these line by line, our post on how to read a CBD COA breaks down every field. For the bigger compliance picture across all of this, the hemp and CBD lab testing compliance guide is the place to start.

One more rule of the road for 2026

A short heads-up so it does not surprise you. The federal definition of hemp is shifting from delta-9 THC to total THC, effective November 12, 2026. Total THC counts delta-9 and other THC isomers together against the 0.3 percent limit. In practice that means re-testing against the new measure and refreshing your COAs before the date arrives. You do not need the deep version today; just know it is coming and that your current batch reports will need to reflect it.

You have the COA, now publish it

Once a batch passes a full panel from an accredited lab, you hold the one document that backs up your product. The next job is making it easy to find. A COA sitting in your email helps no one; a shopper standing in front of your product wants to see it in seconds.

That is the part LabLinks handles. You upload the COA, enter the batch and lot number, the test date, and the lab name, then link it to the matching Shopify product. A theme block adds a lab-tested badge that opens the report in a popup, every store gets a searchable portal, and a QR code connects the package to the right batch. When you publish a new batch, the storefront updates on its own. The first five reports are free, which is enough to test the flow with a couple of real products before you commit.