Hemp and CBD COA Requirements: What Retailers Actually Check and What Manufacturers Are Missing

A Certificate of Analysis is the single most requested document in the hemp and CBD supply chain. Retailers ask for it. Marketplaces require it. Consumers demand it. And the gap between a COA that satisfies a basic request and a COA that actually holds up to scrutiny has never been wider.

If you're manufacturing hemp-derived CBD products — tinctures, gummies, capsules, topicals, or any finished format — and you're selling or trying to sell through retail channels, this is the documentation conversation you need to have with your quality team before your next production run.

Here is what sophisticated retail buyers, natural channel retailers, and major online marketplaces are actually looking for in a COA, why many manufacturer COAs don't pass that review, and how to build the documentation infrastructure that makes your product placeable at the channels you want to reach.

Why Hemp COAs Are Uniquely Complicated

Most supplement categories have a straightforward COA story: the supplier provides one for the raw material, you test the finished product, and you have two documents linked to the lot. Hemp is different, and the reasons are specific to the plant.

The cannabinoid profile is a moving target

Hemp is an agricultural crop. Unlike a synthetic ingredient manufactured to a precise specification, hemp flower contains a naturally variable mix of cannabinoids — CBD, CBG, CBN, CBC, and others — plus THC. The ratio of these compounds shifts based on genetics, growing conditions, harvest timing, and processing method. Two lots from the same farm harvested two weeks apart can have meaningfully different cannabinoid profiles.

This means a COA from one production run does not represent your product. It represents that batch. Retailers who understand hemp know this and ask for batch-specific COAs, not a single document used for all products.

The 0.3% THC threshold is both legal and commercial

The 2018 Farm Bill defined hemp as cannabis with less than 0.3% total THC on a dry weight basis. This is a legal threshold — products above it are federally controlled substances regardless of state law. It is also a commercial threshold: any retailer carrying your product is at legal exposure if that threshold is exceeded.

What this means practically: your finished product COA needs to show total THC (not just delta-9 THC) at or below 0.3%. Many COAs report only delta-9 THC, which can be compliant at harvest but convert to total-THC-noncompliance through decarboxylation. Retailers who have been burned by this distinction ask specifically for total THC methodology.

Third-party testing is table stakes — but method matters

"Third-party tested" is a marketing claim that every CBD brand makes. What retail buyers have learned to ask is which lab, with what accreditation, using what testing method. ISO 17025 accreditation for the testing lab is the baseline standard for credible hemp testing. High-performance liquid chromatography (HPLC) for cannabinoid potency is the method standard for accuracy. A COA from a non-accredited lab using a method that isn't HPLC creates questions rather than answering them.

What Retailers Are Actually Checking: A Tier-by-Tier Breakdown

Amazon

Amazon has specific requirements for hemp-derived CBD products, and they enforce them through listing compliance reviews triggered either proactively or by complaints. The documentation Amazon requires includes:

• Certificate of Analysis from an ISO 17025 accredited laboratory
• Finished product testing showing CBD potency within 10-20% of label claim
• Total THC at or below 0.3%
• Heavy metals panel (lead, mercury, arsenic, cadmium)
• Pesticide residue panel
• Residual solvent testing for extract-based products
• Microbial contamination testing

The COA must be dated within the last 12 months and must correspond to the specific product and lot being sold. A COA for a different flavor or a different lot number does not satisfy the requirement for the product being reviewed.

Natural channel: Whole Foods, Sprouts, The Vitamin Shoppe

Natural and specialty retailers evaluating hemp products for placement typically conduct a supplier qualification review that goes beyond the product COA. This includes:

• Facility GMP certification or equivalent audit documentation
• SOPs for manufacturing the specific product category
• Batch record samples demonstrating documented manufacturing process
• COA template showing all required testing panels
• Supplier COAs for incoming hemp extract

The distinction between natural channel and online marketplace compliance is the facility documentation. Online marketplaces primarily want product documentation. Natural channel retailers want to see that the facility producing the product has demonstrable quality systems — not just that the finished product tested clean.

NSF Hemp and third-party certification programs

NSF's certification program for hemp products, along with programs offered by the U.S. Hemp Authority and other industry certification bodies, involve ongoing batch auditing. Certified manufacturers must:

• Maintain complete batch records for every certified production run
• Submit to periodic unannounced testing of finished products
• Demonstrate traceability from licensed hemp source through finished goods
• Maintain documentation of THC compliance at both raw material and finished product stages

Certification is not a one-time event. It requires that your documentation practices are consistent across every production run, not just the ones reviewed during initial certification.

The Four COA and Documentation Gaps That Lose Retail Placements

Gap 1: Using a single COA across multiple production runs

The most common mistake: one COA for a product, used for all lots. Some manufacturers update the date but not the lot-specific data. Sophisticated buyers recognize this immediately. The COA should reference a specific batch number that traces back to a specific production run.

Gap 2: COA panels that don't cover what retailers require

Hemp COAs often cover cannabinoid potency and THC. What retailers increasingly require — and what many manufacturer COAs omit — is the full panel: heavy metals, pesticides, residual solvents, and microbiology. A partial panel creates a gap that a retail quality reviewer will flag.

Gap 3: No link between the COA and the production batch

The COA exists. The batch record exists. They reference the same lot number on paper, but there is no systematic linkage between them in the manufacturer's documentation system. When a retailer asks for the batch record and COA for a specific product, the documentation search takes hours rather than seconds.

The documentation structure that works: the finished goods record for each batch has the COA attached directly to it. You pull the batch, the COA is there. The raw material COAs for the hemp extract and other ingredients are attached to the production batch that used them.

Gap 4: Raw material traceability that stops at the extract

Many CBD manufacturers document their finished product testing but have incomplete documentation for the hemp extract used as the raw material. Retailers are increasingly asking for licensed hemp farm documentation — where was the hemp grown, who certified the farm, what was the crop's COA at harvest — because the compliance question around total THC and pesticide residues starts at the farm, not the extract.

Batch Buddy's lot management system handles this by creating a receiving record for the hemp extract lot that includes the supplier-provided COA, the farm or origin documentation, and any additional incoming testing. That documentation travels with the lot through every production run.

Building Documentation That Scales With Retail Growth

The manufacturers who win retail placement in hemp are not necessarily the ones with the best product. They are the ones who can answer every documentation question immediately, completely, and with records that tell a consistent story from raw material to shelf.

That documentation infrastructure does not require a pharmaceutical quality team. It requires a system that captures the right information at the right time — receiving records when ingredients arrive, batch records during production, finished product records when testing completes — and links them together by lot number so any question about any product can be answered in seconds.

Batch Buddy was built for manufacturers in this position. Hemp and CBD manufacturers specifically benefit from:

• Lot-level receiving records with COA attachment for hemp extract, carrier oils, and all other inputs
• Batch records with actual cannabinoid quantities and lot numbers documented in real time during production
• Finished goods records with test result attachment so the COA for each batch lives next to the production documentation for that batch
• Traceability search that returns the complete chain from licensed hemp source through finished product to shipment for any lot number
• FDA 21 CFR Part 11 compliant audit trail on all records — every change logged, nothing deletable

The retailers you want to reach are asking for this documentation. Building it before the first placement conversation makes that conversation much shorter.

Batch Buddy supports hemp and CBD manufacturers with compliant batch records, COA management, and full lot traceability. Start your free 14-day trial — no credit card required.