How to Read a COA
A COA, or Certificate of Analysis, is the independent lab report for a cannabis product. Read it in three passes: confirm the batch ID matches your package, check cannabinoid and terpene percentages, then verify every contaminant screen says "Pass." In New York, OCM requires this testing before any product is sold.
- What COA stands for
- Certificate of Analysis, the third-party lab report on a cannabis batch
- NY testing rule
- NY OCM requires independent lab testing before any adult-use product reaches the shelf
- Three things to check
- Batch ID match, cannabinoid/terpene profile, and a Pass on every contaminant screen
- Where to find it
- Scan the QR code or lot number on the package, or ask a Rezidue budtender to pull it
What is a COA, and why does it matter in New York?
A COA is a Certificate of Analysis: a report from an independent, licensed lab showing exactly what is in a cannabis batch. In New York, the Office of Cannabis Management requires this testing before a product can be sold, so a real COA is your proof the product was screened for potency and contaminants.
A Certificate of Analysis is the document that turns a label claim into something you can verify. Instead of trusting that a vape says 80 percent THC, the COA shows the measured number from a lab that has no stake in selling you the product.
In New York, this is not optional. NY OCM rules require licensed products to pass independent testing for cannabinoid content and for contaminants like pesticides, heavy metals, and microbials before they hit the shelf at a licensed Manhattan dispensary.
If you are new to all this, our first-time dispensary guide walks through what to expect on your first visit, and a COA is one of the things a good budtender will happily pull up for you.
How do I find the COA for my product?
Most NY products carry a QR code or a batch and lot number on the package. Scan the QR with your phone camera, or type the lot number into the brand's lab-result lookup. At Rezidue, you can also ask a budtender at 723 11th Ave to pull the COA before you buy.
The fastest route is the QR code printed on the package or the inner label. Point your phone camera at it, and it usually opens a PDF or a lab portal showing the report for that exact batch.
No QR code? Look for a batch number or lot number, then search the brand's site or the testing lab's results portal. The number on your package must match the number on the COA. If it does not match, that report is for a different batch and tells you nothing about what you are holding.
Stop into Rezidue in Hell's Kitchen, a short walk from Port Authority on the A/C/E lines, and a budtender can pull the document on the spot. Browse the shop menu first if you want to know what to ask about.
What do the cannabinoid percentages on a COA mean?
The cannabinoid section lists compounds like THC, THCA, CBD, and CBG by weight, usually as a percentage and in milligrams. Total THC is the number most people read first, but the full profile, including minor cannabinoids, tells you more about the product than potency alone.
The headline number is usually Total THC. On flower, a COA often shows THCA separately because raw flower contains THCA, which converts to THC when you heat it. Many labs print a calculated Total THC that accounts for this conversion.
CBD, CBG, CBN, and other minor cannabinoids appear here too. A product is not automatically better because it has the highest THC. The mix of cannabinoids shapes the experience people commonly report, which is part of the entourage effect.
On edibles and tinctures, look for milligrams per serving and per package. That is the number that matters for dosing, and it should match what the front label claims.
THC vs THCA on the report
Raw flower is mostly THCA, the acidic form that is not intoxicating until heat converts it. That is why a flower COA can show a high THCA number and a lower delta-9 THC number.
Total THC is typically calculated as THCA times roughly 0.877 plus delta-9 THC. You do not need to do the math, but knowing why two THC numbers appear keeps you from misreading the report.
What does the terpene section tell me?
The terpene section lists aromatic compounds like myrcene, limonene, and caryophyllene by percentage. Terpenes drive a strain's smell and flavor and contribute to the effects people commonly seek. A detailed terpene panel is a sign the producer tested thoroughly.
Terpenes are why one batch smells citrusy and another smells earthy or peppery. The COA lists them by weight, and the largest few define the dominant aroma.
Common ones you will see include myrcene, often tied to relaxing batches, limonene, associated with bright citrus character, and caryophyllene, the peppery terpene. Our terpenes guide breaks down what each one tends to bring.
Not every product tests a full terpene panel, and that is fine. But when you are choosing between two similar strains, the terpene profile is often more useful than chasing the highest THC percentage.
How do I read the contaminant and safety results?
This is the most important part for safety. A compliant COA screens for pesticides, heavy metals, residual solvents, microbials, and mycotoxins. Every category should read Pass or ND, meaning none detected. If anything says Fail, that batch should never have reached a licensed shelf.
Look for a results column that reads Pass, ND (not detected), or shows a value below the action limit. NY OCM sets the limits, and a passing product stays under them across every category.
Key screens include pesticides, heavy metals like lead and arsenic, residual solvents (relevant for vapes and concentrates), microbials such as mold and bacteria, and mycotoxins. Water activity and moisture may appear on flower reports as well.
If you ever see a Fail, an expired test date, or a batch number that does not match your package, do not consume it. Bring it back to a licensed dispensary. That mismatch is exactly the kind of thing the licensed-dispensary checks are designed to protect you from.
What are the warning signs of a fake or invalid COA?
A trustworthy COA names a licensed third-party lab, carries a recent test date, and matches your package's batch number exactly. Red flags include no lab name, no date, a brand testing its own product, a mismatched batch number, or a QR code that leads nowhere.
Reputable reports come from an independent lab, not the brand itself. The lab's name, license, and signature or accreditation should be on the document.
Check the date. Cannabinoid content and freshness change over time, so a report from years ago tells you little about a product sitting in front of you today. The batch number on the COA must match the package.
Unlicensed shops are the real risk in New York. A legal store sells only OCM-tested products with real paperwork. If you want the short version of how to tell a legal store apart, read how to read a cannabis label, which pairs naturally with reading a COA.
NY OCM requires independent lab testing before sale
New York's Office of Cannabis Management (OCM) administers the state's adult-use program under the Marijuana Regulation and Taxation Act (MRTA), signed in 2021. Under OCM regulations, cannabis products sold by licensed dispensaries must undergo testing at independent, permitted laboratories before they reach consumers. That testing covers cannabinoid potency and a battery of contaminant screens, and it is the legal foundation for the Certificate of Analysis you can request for any product. Only licensed dispensaries may sell adult-use cannabis in New York, and OCM publishes the official list of licensed retailers so shoppers can confirm a store is operating legally. Rezidue operates under OCM license OCM-CAURD-25-000303 at 723 11th Avenue in Hell's Kitchen, Manhattan. When you scan a QR code or ask a budtender for lab results, you are exercising a consumer protection built directly into New York's regulatory framework.
Why third-party testing exists: contaminant screening
Federal and state public-health guidance recognizes that cannabis, like any agricultural product, can carry contaminants if not screened. The U.S. Food and Drug Administration notes that it has not approved cannabis for general use and does not evaluate the quality of state-legal cannabis products, which places the burden of safety testing on state programs and independent laboratories. That is precisely the gap a Certificate of Analysis fills. A compliant COA documents screening for pesticides, residual solvents from extraction, heavy metals such as lead and arsenic, and microbial contaminants including mold and certain bacteria. A result of Pass or ND, meaning none detected, indicates the batch fell within the action limits the state sets. Because the FDA does not vet these products, reading the contaminant section of a COA, rather than trusting marketing claims, is the most reliable way for a New York consumer to confirm a product was independently screened before sale.
THC, THCA, and how potency is reported
Tetrahydrocannabinol (THC) is the primary intoxicating compound in cannabis, according to the National Institute on Drug Abuse (NIDA), part of the National Institutes of Health. In raw cannabis flower, most THC exists as its acidic precursor, THCA, which is not intoxicating until heat converts it through decarboxylation. This is why a Certificate of Analysis often lists THCA and delta-9 THC as separate figures, along with a calculated Total THC that accounts for the conversion. NIDA also notes that the THC content of cannabis has generally increased over past decades, which is part of why potency labeling and verification matter for consumers managing their intake. Reading the cannabinoid panel on a COA, rather than assuming the largest number on the front of the package, gives a clearer picture of what a product actually contains and how the reported potency was derived from the underlying lab measurements.
Cannabinoids beyond THC, and the role of the profile
Beyond THC, the cannabis plant produces many cannabinoids, including cannabidiol (CBD), and a range of minor compounds such as CBG and CBN, as described in National Institutes of Health research overviews. CBD is non-intoxicating and is studied for various properties, though the FDA has approved it only in a specific prescription formulation and not as a general supplement or treatment. On a Certificate of Analysis, these compounds appear alongside THC so consumers can see the full cannabinoid makeup of a batch rather than potency in isolation. Researchers continue to study how cannabinoids and other plant compounds may interact, a hypothesis often discussed in the scientific literature. For shoppers, the practical takeaway is simple: the cannabinoid profile on a COA describes composition, not promised outcomes, and effects vary by person, product, and dose.
New York purchase limits and shopping legally
New York's Office of Cannabis Management sets clear rules for legal adult-use purchases. Adults 21 and older may buy up to 3 ounces of cannabis flower or up to 24 grams of concentrate per day at a licensed dispensary, and the same figures apply to public possession. A valid government-issued photo ID is required at the point of sale. Home storage of up to 5 pounds is permitted under state law. These limits, established under the MRTA framework that OCM enforces, sit alongside the testing requirements that produce a Certificate of Analysis. In other words, buying from a licensed New York dispensary gives you both a lawful transaction and access to verified lab results. When you shop at Rezidue in Hell's Kitchen, near Times Square, Hudson Yards, and the Javits Center, every product on the menu has cleared OCM-mandated testing and carries a COA you can request.
What does COA stand for in cannabis?
COA stands for Certificate of Analysis. It is the report from an independent, licensed laboratory showing a cannabis batch's cannabinoid content, terpene profile, and contaminant test results. In New York, OCM requires this testing before a licensed dispensary can sell the product.
How do I find the COA for a product I bought?
Scan the QR code on the package with your phone camera, or look for the batch and lot number and search the brand's or lab's results portal. The batch number on the COA must match your package. At Rezidue in Hell's Kitchen, a budtender can pull it for you.
What should every COA show?
A complete COA shows the cannabinoid panel (THC, THCA, CBD and others), often a terpene profile, and contaminant screens for pesticides, heavy metals, residual solvents, microbials, and mycotoxins. Every safety category should read Pass or ND, meaning none detected.
Why does a COA list both THC and THCA?
Raw cannabis flower contains mostly THCA, which is not intoxicating until heat converts it to THC. The COA lists both, plus a calculated Total THC that accounts for this conversion, so you understand how the reported potency was derived.
What does Pass or ND mean on a COA?
Pass means the batch fell within New York OCM's allowed limits for that test. ND means not detected, so none of that contaminant was found. Both are good results. A Fail means the batch exceeded a limit and should never appear on a licensed shelf.
How can I spot a fake COA?
Warning signs include no independent lab name, no recent test date, a brand testing its own product, a batch number that does not match your package, or a QR code that leads nowhere. A legitimate report names a licensed third-party lab and matches your package exactly.
Do all legal New York cannabis products have a COA?
Yes. NY OCM requires licensed adult-use products to pass independent lab testing before sale, so every product at a licensed dispensary like Rezidue is backed by a Certificate of Analysis you can request or scan.
Does a higher THC number on the COA mean a better product?
Not necessarily. THC potency is only one factor. The terpene profile and minor cannabinoids like CBG and CBN shape the experience people commonly report. Many shoppers find a balanced profile more useful than chasing the highest THC percentage.
21+NY OCM Adult-Use Retail License OCM-CAURD-25-000303· Please consume responsibly.· Educational information only, not medical advice.