A wholesale hemp certificate of analysis (COA) must come from an independent lab and match the exact batch you are buying. It should report potency, including total THC on a dry-weight basis, plus contaminant results where the rules require them. No single federal rule lists every field a COA must carry. USDA sets the THC compliance testing standard for growers, and states such as Ohio, Louisiana and Georgia add their own batch, lab and panel rules. This guide lists what to demand, what the rules say, and how to check a COA before you place a bulk order.

TL;DR

• A COA is independent lab paperwork for one batch. Each batch you buy should have its own, tied to the lot number on your invoice and the product label.
• Federal hemp testing measures total delta-9 THC after decarboxylation and reports it on a dry-weight basis. States add rules on panels, lab accreditation and COA fields.
• Federal law is changing for hemp-derived THC products: a container-based limit of 0.4 mg total THC is scheduled to replace the 0.3% test for many finished products, so the COA becomes the document that proves compliance.
• Check the lab, the dates, the batch number, the method and the units. A COA that cannot be matched to your lot is not evidence.

Table of Contents

• What a hemp COA is and why wholesale buyers rely on it
• Which rules apply to wholesale hemp COAs
• What a wholesale hemp COA should contain
• How to verify a COA before you buy
• Red flags on a COA
• Questions to put in your supplier agreement
• Our perspective
• Buying wholesale hemp flower from Oregon Hemp Flower
• Frequently asked questions
• Sources

What a hemp COA is and why wholesale buyers rely on it

A hemp COA is documentation from an independent laboratory describing the chemical, microbiological and toxicological makeup of a sample, including potency. Labstat describes COAs as a common, objective language for qualifying suppliers, because they give data-based evidence where hemp-specific manufacturing quality systems may not exist. Each batch should get equivalent testing.

For a wholesale buyer, the COA does three jobs:

1. Legal check. It shows the lot meets the THC limit that applies to it.
2. Quality check. It shows the potency you are paying for and whether pesticides, metals, microbes or mold were found.
3. Paper trail. If a retailer, payment processor, state inspector or customer asks questions, the COA is the record you hand over.

Buying by the pound or by the case raises the stakes. One failed lot can mean pulling inventory from many shelves, so the document is worth reading before the purchase order, not after delivery.

Which rules apply to wholesale hemp COAs

There is no single national COA template for hemp. What you face is a layered system.

Federal: USDA testing and FDA authority

USDA’s Agricultural Marketing Service says hemp grown under a USDA, state or tribal production plan is subject to sampling and compliance testing for THC, with stated exemptions. Compliance testing must measure total delta-9 THC after decarboxylation, or another similarly reliable method, and report the result on a dry-weight basis. The same USDA laboratory testing guidelines note that labs are not required to be ISO accredited under the federal program, although USDA strongly encourages adherence to ISO 17025.

That last point matters when you buy. A lab that is acceptable for pre-harvest compliance may still not meet the standard a state requires for finished product, and a buyer who wants the strongest paper trail should ask for an ISO/IEC 17025-accredited lab anyway.

FDA is a separate layer. After the 2018 Farm Bill, FDA kept its authority over hemp products, so applicable FDA requirements still apply. CBD products marketed with disease or therapeutic claims can be treated as unapproved or misbranded drugs, as in FDA’s warning letter to Curaleaf. If you resell, keep your own marketing claims out of the therapeutic category. A clean COA does not fix a problem label.

The federal definition is changing

Legislation signed in late 2025 redefines legal hemp-derived THC products around a limit of 0.4 milligrams of total THC per container, and prohibits synthetic cannabinoids. According to a September 2026 legal update from Foley Hoag, a later bill moved the effective date from November 12 to December 11, 2026, giving Congress time to consider a regulatory framework. Congress may act again, so confirm the current status with your counsel before committing to large inventory.

What this means for COAs:

• A percentage on a dry-weight basis no longer tells the whole story for finished products. You will want total THC per container, and per serving where relevant.
• Total THC (THC plus THCA adjusted for decarboxylation) is the figure that matters, not the delta-9 line alone. Our guide on how shoppers convert THCA to total THC walks through the arithmetic.
• Ask suppliers in writing how they are preparing their documentation for the new definition.

State rules: where COA content gets specific

States are where you find the actual field-by-field requirements. A few examples show the range.

Ohio. Rule 901:14-2-15 of the Ohio Administrative Code requires a unique COA for each batch or lot. It must carry the laboratory name and address, the ISO certification number, the processor and processing address, the product name, the matching batch or lot number, test dates, sample-collection dates, the cannabinoid profile, applicable contaminant results, and the signature of the laboratory manager or scientific director. The cannabinoid profile includes at minimum THC, THCA, CBD, CBDA and every other cannabinoid on the label. Microbial contamination, heavy metals, mycotoxins and residual solvents are named as reportable analyses when applicable.

Louisiana. The Louisiana Department of Health requires an ISO/IEC 17025-accredited third-party lab to verify each final consumable hemp product, with a separate COA for each. The consumable panel covers cannabinoids, pesticides, solvent residues, heavy metals and microbiological contaminants. The floral-hemp panel covers cannabinoids, pesticides, heavy metals and microbiological contaminants. The COA must state batch identification, dates received and completed, analytical methods, serving size, total THC per serving, servings per package, total THC per package, cannabinoid percentages on a dry-weight basis, and detected contaminant quantities in the applicable units.

Georgia. Consumable-hemp wholesalers need a wholesale license, and the state rules prohibit wholesaling products without a full-panel COA obtained within the preceding 12 calendar months and made publicly available.

Other states set their own testing routes. Missouri’s USDA-approved plan requires compliance samples to go to an ISO 17025-accredited laboratory registered with DEA. Montana’s plan specifies post-decarboxylation liquid chromatography, total delta-9 THC on a dry-weight basis, and documented chain of custody.

The practical rule: the strictest state in your sales footprint sets your minimum COA standard. If you ship to several states, ask for the fullest panel and the most complete field list, and check each destination state’s hemp agency page for current rules.

What a wholesale hemp COA should contain

Use the following as a working checklist. It combines the state fields above with the fields Labstat recommends: supplier and manufacturer identities, manufacturing site, batch number, product code, test date, methods, specifications, actual results, approver signature and date, and page count.

Potency: read total THC, not just one line

Flower contains THCA, which converts to THC when heated. A COA that lists only delta-9 THC can look compliant while the total is far higher. USDA’s standard measures total delta-9 THC after decarboxylation for that reason. If you sell THCA flower, the total THC figure is the one regulators and your customers’ states will look at. Our walkthrough of how to read a THCA flower lab report explains each line.

For CBD-dominant flower, also look at CBDA, since much of the CBD in raw flower is present as its acid form. The CBDa wholesale buyer’s guide covers how that affects the numbers on a certificate.

Contaminants: know the limits your state publishes

A COA that says “pass” is only as good as the limit behind it. Louisiana, for example, lists heavy-metal limits of 10 ppm arsenic, 4.1 ppm cadmium, 10 ppm lead and 2 ppm mercury. Its microbiological limits include total yeast and mold below 10,000 CFU/g and pathogenic E. coli and Salmonella below 1 CFU/g, per the state’s COA page. Other states set different numbers, so compare the result to the limit of the state where the product will be sold.

Pesticide panels deserve extra attention for any product marketed as organically grown. Our article on hemp pesticide testing explains what labs screen for and how to read the results.

How to verify a COA before you buy

A COA is a document, and documents can be wrong, outdated or attached to the wrong product. Run this check on every new supplier and every new lot.

1. Match the batch. The lot number on the COA must equal the lot number on your invoice, the bag or case label and any packing slip. Ohio’s rule requires the batch or lot number on the COA to match, and it is the simplest test you can run.
2. Check the dates. Sample collection should precede testing, and testing should fall after harvest or processing. Georgia’s rule uses a 12-month window for a full-panel COA, so treat anything older than that with suspicion, and ask for fresher data on perishable flower.
3. Confirm the lab. Look up the lab name and accreditation number with the accrediting body, and check the address and signer. Ask whether the lab is independent of the seller.
4. Look for the method. Total THC after decarboxylation, a stated unit (percent or mg/g) and a stated basis (dry weight) should all appear.
5. Confirm the panel. Potency alone is not enough. Pesticides, heavy metals, microbials and, for extracts, residual solvents should be present where your state requires them.
6. Cross-check the math. If the report lists THCA and delta-9 THC, calculate total THC yourself and compare it with the reported figure. Differences point to a formatting or calculation error.
7. Ask for the original. Request the lab’s own PDF or a link to the lab’s verification page, not a screenshot. Many labs print a QR code that opens the report on their server.
8. Retest when it counts. For large first orders, send a retained sample to your own independent lab and compare the potency to the supplier’s figure. Lab-to-lab variation exists, so expect small differences, not large gaps.

For a deeper look at reading each field, see our guide to reading CBD oil lab reports and certificates of analysis.

Red flags on a COA

• No lot number, or a lot number that does not match your product.
• A lab with no accreditation number, or one that cannot be found with its accreditor.
• Only a potency page, with no contaminant results, on a product your state requires them for.
• THC reported in a way that hides total THC, such as delta-9 only on THCA flower.
• Round, repeated numbers across different strains, which may suggest copied data.
• A report that is cropped, low-resolution, edited or missing pages.
• Test dates long before harvest, or more than a year old.
• A supplier who will not share the full report or the lab’s contact details.

Any one of these is a reason to pause the order and ask questions.

Questions to put in your supplier agreement

Beyond reading the COA, build the requirements into the purchase terms so you are covered when a lot arrives.

• COA per lot. Every shipment is accompanied by the COA for the exact lot shipped.
• Named lab and accreditation. The supplier names the lab and keeps it consistent, or tells you before it changes.
• Panel and limits. The agreement lists the panel (potency, pesticides, metals, microbials, mycotoxins, and solvents where relevant) and the limits that apply in your destination states.
• Retention. The supplier keeps retained samples and records for a stated period.
• Remedy. The agreement says what happens if a lot fails retesting: replacement, credit or return.
• Change notices. The supplier tells you if the legal definition of hemp changes in a way that affects your inventory, which is a live issue given the federal changes described above.

For a broader view of sourcing and compliance, our wholesale hemp flower guide covers the buying process end to end, and the article on THCA flower testing standards explains the quality assurance side.

Our perspective

Wholesale buyers sometimes treat the COA as a formality that gets filed and forgotten. We see it the other way around. It is the one document that lets a reseller defend a purchase to a state inspector, a payment processor or a customer.

That is why we think of the COA as part of the product. Our hemp flower is organically grown without pesticides and hand-trimmed, and we want buyers to be able to check that against lab data, lot by lot, rather than take our word for it. A pesticide panel, a full cannabinoid profile and a lot number that matches the package are the minimum we think any bulk buyer should ask of any supplier, including us.

With the federal definition of hemp-derived THC products in flux, the numbers on the page matter more, not less. Total THC, units and basis need to be clear. Buyers who learn to read these documents now will be in a better position whichever way the rules settle.

Michael

Buying wholesale hemp flower from Oregon Hemp Flower

We supply organically grown hemp flower in bulk to resellers, with CBD, THCa and Delta 8 wholesale lines. Our products are cultivated without pesticides or synthetics and backed by a 100% satisfaction guarantee. Browse the wholesale catalog, or start with a strain page such as Royal OG CBD full-term hemp flower wholesale or Bubba Kush CBD full-term hemp flower wholesale. Ask for the lab report for the lot you are considering before you order.

Wholesale pricing is not published on our category pages, so contact us through the site for current quotes and lot availability.

Frequently asked questions

Does every batch of wholesale hemp need its own COA?

In the states that spell it out, yes. Ohio requires a unique COA for each batch or lot, and Louisiana requires a separate COA for each final consumable product. Even where a state is silent, a buyer should insist on one per lot, because a report for a different harvest says nothing about the flower you receive.

Does the lab have to be ISO accredited?

Under the federal USDA program, labs are not required to be ISO accredited, although USDA strongly encourages ISO 17025. Several states go further: Louisiana requires an ISO/IEC 17025-accredited third-party lab, and Ohio’s COA must show the lab’s ISO certification number. For a bulk purchase, accreditation is a sensible baseline whatever your state says.

How recent should a COA be?

Georgia’s rule requires a full-panel COA obtained within the preceding 12 calendar months before wholesaling consumable hemp. Treat that as an outer limit. For flower, ask for a COA tied to the specific harvest or lot you are buying, and check the test date against the harvest date.

Is the 0.3% THC limit still what the COA must show?

USDA’s testing standard for growers uses total delta-9 THC on a dry-weight basis. Federal legislation is set to redefine legal hemp-derived THC products by a limit of 0.4 mg total THC per container, with an effective date that has already been moved once, according to legal analysis cited above. Check the current status before ordering, and ask your supplier for total THC data in both formats.

Can a COA alone make a hemp product legal to sell?

No. A COA documents what is in the product. Legality also depends on your state’s rules, licensing (Georgia, for example, requires a wholesale license for consumable hemp), labeling and the claims you make. FDA still treats CBD products marketed with therapeutic claims as potentially unapproved or misbranded drugs.

Sources

• Understanding a Hemp COA (Certificate of Analysis), Labstat
• Laboratory Testing Guidelines for U.S. Domestic Hemp Production, USDA AMS
• Rule 901:14-2-15, Ohio Administrative Code
• COA Requirements for Consumable Hemp Products, Louisiana Department of Health
• Georgia Rules, Subject 40-32-4 Hemp Product Manufacturers
• Missouri State Hemp Production Plan, USDA AMS
• Montana State Hemp Plan, USDA AMS
• Hemp Production and the 2018 Farm Bill, FDA
• Curaleaf, Inc. warning letter, FDA
• A Temporary Reprieve for Hemp-THC Products, Foley Hoag

Recommended

• Wholesale Hemp Flower Guide: Compliance, COAs and Sourcing
• How to Read a THCA Flower Lab Report in 2026: A Complete COA Guide
• THCA Wholesale Guide: Suppliers Pricing & What to Look
• How to Read CBD Oil Lab Reports and Certificates of Analysis