How to Read a Cannabis or Hemp Lab Report in Florida

The Short Answer

A certificate of analysis, usually called a COA, is a lab report for a tested batch. Start by matching the batch or lot number on the report to the number on your package. Then check the product name, lab and report dates, cannabinoid units, and contaminant results.

A COA can answer useful questions about the sample that was tested. It cannot tell you whether a product will help your condition, how it will affect you, whether it is safe with your medicines, or when you will be safe to drive.

First, Identify Which Florida System the Product Came From

Florida medical marijuana and retail hemp are not the same program, even when the packages use similar words.

• Medical marijuana: A qualified patient buys it from a licensed medical marijuana treatment center, often called an MMTC. Florida law requires the package label to identify the MMTC, batch and harvest numbers, date dispensed, product or dosage form, THC and CBD concentration, recommended dose, patient, and certifying physician. Certified marijuana testing laboratories operate under a separate medical-marijuana testing law.
• Retail hemp extract: Florida's hemp law requires an independent-lab COA, a batch number, an expiration date, marketed cannabinoids in milligrams per serving, and a scannable code linked to that batch's COA.

The practical difference matters: a hemp COA does not make a retail product part of Florida's medical marijuana program. For a medical product, use the patient label and exact batch details as the starting point. For hemp extract, the package should provide direct batch-level COA access.

Compare Florida hemp and medical-marijuana rules if the source of the product is unclear.

A 60-Second COA Check

Before studying every number, answer these five questions:

• Does the product name, brand, type, and package size match?
• Does the batch, lot, or harvest number match exactly?
• Is the report for the finished product rather than only an ingredient or an unrelated sample?
• Do the reported cannabinoid amounts use the same units as the package label?
• Does the report show the relevant safety panels and a clear result for each one?

If the batch does not match, stop there. The report may be real, but it is not evidence about the package in your hand.

1. Match the Product and Batch

Look for an identifier labeled batch, lot, harvest, or sample. The wording varies. Match the full identifier, not just the first few characters.

Also compare:

• Product or strain name.
• Product form, such as flower, edible, vape, tincture, or topical.
• Flavor or formula, if listed.
• Package size or concentration.
• Manufacturer or MMTC.

A QR code is only a shortcut to a webpage. It is not proof by itself. A working code can still open an old report, a report for a different product, or a brand-controlled summary that leaves out the full lab document.

2. Read the Dates in the Right Order

A COA may show several dates:

• Sample or collection date: when the lab received or collected the sample.
• Test date: when the analysis was performed.
• Report date: when the lab issued or approved the document.
• Expiration date: a package date, not a promise that every result stays unchanged until that day.

The newest report is not automatically the correct one. The exact batch match matters more than simply finding a recent date. An old report for an old batch cannot verify a new package.

3. Check the Lab and the Report Status

Look for the laboratory's name, address or license information, report number, and an approval or signature field. A complete report is more useful than a cropped screenshot.

For Florida medical marijuana, the state certifies marijuana testing laboratories under section 381.988. For retail hemp extract, the statute calls for a COA from an independent testing laboratory. Those are different legal systems and should not be blended into one claim.

Watch for report labels such as preliminary, for research and development only, unofficial, or amended. These words do not automatically prove a problem, but they tell you to ask what document applies to the finished product for sale.

4. Understand Potency Without Mixing Up the Units

Potency can be shown in several ways:

• Percent by weight: common for flower and concentrates.
• Milligrams per gram: another concentration measurement.
• Milligrams per milliliter: common for liquids.
• Milligrams per serving: useful for a single edible or measured serving.
• Milligrams per package: the total amount in the entire container.

These numbers are not interchangeable. Ten milligrams per serving is not the same as 10 percent. A package can contain several servings, so check both the serving amount and the package total.

Reports may list delta-9 THC and THCA separately, then show a calculated total THC value. THCA can change into THC when heated, but calculation conventions and displayed rounding can differ. Use the lab's reported total and units instead of trying to compare unlike columns.

Use the Florida dispensary label guide to compare the COA with the package, and compare menu claims with the final label before treating an online listing as the last word.

5. Know What ND, LOD, and LOQ Mean

Lab abbreviations are easy to misread:

• ND: not detected under that test's stated method or threshold. It does not always mean absolute zero.
• LOD: limit of detection, or the smallest amount the method can reliably notice.
• LOQ: limit of quantitation, or the smallest amount the method can measure with acceptable certainty.
• Pass or fail: the result compared with the limit used for that test.

If a result says ND, look for the report's LOD, LOQ, reporting limit, or notes. If a result shows a number, compare it with the action limit or pass/fail column. A small-looking number without its unit and limit does not tell the whole story.

6. Review the Safety Panels That Apply

Depending on the product and testing rules, a report may include:

• Microbes, mold, or yeast.
• Mycotoxins made by certain molds.
• Pesticides or agricultural agents.
• Heavy metals.
• Residual solvents from extraction or processing.
• Moisture or water activity.
• Foreign material.

Do not assume every product uses the same list or limit. Flower, extracts, edibles, and inhaled products can involve different processes and concerns. Florida's medical testing materials include methods for cannabinoids, microbial contaminants, residual solvents, heavy metals, agricultural agents, moisture, and water activity, but the exact required analysis depends on the applicable rule and product.

A potency-only page is not the same thing as a complete safety report. On the other hand, a long list of compounds is not useful unless the batch matches and the results have units, limits, and a clear status.

7. Treat QR Codes as Navigation, Not Authentication

Before trusting a QR link:

• Confirm it opens the expected MMTC, brand, or laboratory domain.
• Confirm the product and full batch number again.
• Look for a complete report, not only a marketing summary.
• Do not enter patient information to view a lab report.
• Do not install an unfamiliar app just to open a COA.

If the link is broken or mismatched, use the operator's official website or ask the dispensary for the exact batch report. Avoid search ads and copied reports on unrelated websites.

8. Know What a COA Cannot Prove

A COA is a snapshot of a sample from a batch. It does not test every individual package. It also cannot prove:

• That the product will treat pain, sleep problems, anxiety, nausea, or another condition.
• That a higher THC number will produce a better medical result.
• That the product is safe for your health history or medicines.
• That you will have the same response as another person.
• How long impairment will last.
• That the product is legal outside the system or place where it was sold.
• That a menu listing, price, or inventory claim is current.

Use the COA as one quality check, not as a treatment recommendation or a guarantee.

What to Do When the Label and COA Do Not Match

Do not use the mismatched report to make a potency or contaminant decision. Keep the package, and take a photo of the product name and batch area without sharing your patient name, physician name, barcode, or other personal details.

Then ask the licensed MMTC or hemp business for the final COA for that exact batch. Useful questions include:

• Is this the finished-product report for my batch?
• Was the report amended or replaced?
• Which result should match the label's THC and CBD amounts?
• Where are the contaminant panels and their limits?

If a correction is not provided, document the mismatch and choose a product whose identity and test record you can verify. For a suspected poisoning or severe reaction, contact emergency services or Poison Control at 1-800-222-1222; a COA is not an emergency assessment.

Before You Buy: A Simple Verification Path

Use this order:

• Check the store and product source.
• Read the final package label.
• Match the exact batch to the COA.
• Compare units, dates, and safety panels.
• Ask questions before paying or using the product.
• Keep medical, medication, and driving decisions separate from the lab report.

Continue with the Florida before-you-buy checklist. Vape shoppers can use the vape cartridge COA guide, while inhaler shoppers can use the THC inhaler label and COA checklist.

Frequently Asked Questions

What is a cannabis COA?

A cannabis COA is a certificate of analysis: a laboratory report for a tested sample from a particular batch. It can show identity, cannabinoid amounts, test dates, and safety-panel results.

How do I know whether a COA matches my product?

Match the full batch, lot, or harvest number, then confirm the product name, form, package size, manufacturer, and report dates. A working QR code is not enough if those details differ.

What does ND mean on a cannabis lab report?

ND usually means the lab did not detect the substance above the method's stated threshold. It does not always mean absolute zero, so check the detection or reporting limit and the report notes.

Is a passing COA proof that a cannabis product is safe for me?

No. A passing result addresses the tests and limits shown for the sampled batch. It does not evaluate your health history, medicines, likely response, treatment benefit, or driving safety.

Are Florida medical-marijuana COAs and hemp COAs governed by the same rules?

No. Florida medical marijuana comes through licensed MMTCs and certified marijuana testing laboratories under sections 381.986 and 381.988. Retail hemp extract follows section 581.217, which has separate COA and package-access requirements.

What should I do if a QR code opens the wrong batch?

Do not rely on that report for your package. Use the operator's official website or ask the seller for the final report matching the exact batch, and avoid sharing patient or other personal information.

Official Sources

• Florida Statutes section 381.986: medical use of marijuana
• Florida Statutes section 381.988: medical marijuana testing laboratories
• Florida Statutes section 581.217: State Hemp Program
• Florida OMMU rules and testing methods

Rules, reports, and product documents can change. This page was reviewed July 17, 2026. Verify current requirements with the Florida OMMU or the responsible state agency.