ISO/IEC 17025 accreditation appears on almost every cannabis Certificate of Analysis issued in Canada, but most international importers only glance at it. That's the gap between passing a customs check and genuinely evaluating a supplier. A COA is the most information-dense document in any cannabis supply relationship, and reading one properly takes about four minutes. This guide covers exactly what to look for when reviewing a Canadian LP's COA before placing a purchase order, signing a supply agreement, or submitting a tender response.
What a Cannabis COA Actually Is
A Certificate of Analysis is the output of a third-party laboratory testing a specific batch of cannabis flower against a defined panel of quality and safety parameters. Under the Cannabis Act and its associated Cannabis Regulations, every federally licensed producer in Canada must test each lot against mandatory parameters before it can leave the facility, for domestic sale or for export.
The COA is not a marketing document. It is batch-specific, meaning every lot number your supplier ships should have its own COA. A COA that covers a "product line" rather than a specific batch number is not compliant with Canadian regulatory expectations and should be treated as a red flag.
For B2B buyers in Germany, Australia, and Israel, the COA also has a secondary function: it often forms part of the importer's own regulatory submission package. Bundesopiumstelle permit applications in Germany, TGA access scheme submissions in Australia, and Israel Medical Cannabis Agency compliance filings each draw on supplier COA data. A poorly structured COA creates downstream compliance friction in the importing country, not just at Canadian customs.
The practical implication: your supplier's QA standards directly affect your regulatory workload. That's not a minor consideration.
The Six Sections Every B2B Buyer Must Check
1. Issuing Laboratory Accreditation
The first check is non-negotiable: the testing laboratory must hold ISO/IEC 17025 accreditation from a recognised accreditation body. In Canada, this means accreditation under Standards Council of Canada (SCC). The accreditation number should appear on the COA header alongside the lab's name and address.
If the COA does not display an accreditation number, request it separately. If the supplier cannot provide it, stop. ISO/IEC 17025 accreditation confirms the lab operates a validated quality management system for testing, without it, the numbers on the page have no verifiable methodology behind them.
2. Batch Number and Traceability Match
The batch or lot number on the COA must match the number on the product label and the Health Canada-required tracking documentation. Canada's cannabis track-and-trace requirements under the Cannabis Regulations mandate that licensed producers maintain complete batch traceability from seed to shipment. When you receive product, the shipping manifest, the physical packaging label, and the COA should all carry the same batch identifier.
Mismatched batch numbers are the most common cause of customs holds in Germany, according to our experience coordinating shipments with German importers. Bundesopiumstelle reviewers cross-check batch identifiers during the narcotic import permit review. A one-digit discrepancy can delay a shipment by weeks.
3. Cannabinoid Panel: What the Numbers Mean
The cannabinoid panel lists measured concentrations for THC, THCA, CBD, CBDA, and in many cases CBG, CBN, and other minor cannabinoids. For dried flower, the key number is Total THC, calculated as:
Total THC = (THCA x 0.877) + Delta-9 THC
The 0.877 factor accounts for the molecular weight loss during decarboxylation. Most COAs list both Total THC and Total CBD as derived figures, with the underlying measured values shown separately. Check that the math is consistent, a COA that lists THCA at 32% but Total THC at 26% without showing the calculation is incomplete.
For import permit purposes in Germany and Australia, Total THC is the figure regulators use in permit applications. Know what your import framework requires before reviewing supplier COAs so you're comparing the right number.
4. Terpene Profile
Terpene testing is not mandatory under Canadian regulations, but it is expected by European pharmacy distributors as a product specification anchor. A COA with terpene data allows you to verify consistency across batches, if Batch A shows 1.8% myrcene and Batch C shows 0.4% myrcene, that's a cultivation consistency problem, not a normal natural variation.
For premium dried flower in the German medical channel, terpene profiles now appear in tender evaluation criteria at several major distributors. A supplier who cannot provide batch-level terpene data is not prepared for the current standard.
5. Contaminant Testing: The Non-Negotiables
This section is where most COA reviews spend too little time. The standard Canadian contaminant panel includes:
- Microbials: Total aerobic microbial count, total yeast and mould count, E. coli, Salmonella, and in many cases Aspergillus species. Results should show Pass or ND (not detected) against the applicable limits.
- Pesticides: Health Canada's Cannabis Regulations specify a list of prohibited pesticides. Every pesticide panel result should be ND or below the maximum residue limit.
- Heavy metals: Arsenic, cadmium, lead, and mercury are the standard four. The limits differ for product intended for pharmaceutical-channel import, confirm your importing country's thresholds against what the COA shows.
- Foreign matter: Confirmation that the product meets the physical standards under Cannabis Regulations Schedule B.
A COA that omits any of the above sections for dried flower intended for pharmaceutical import is incomplete. Ask for a retest or a supplementary panel before accepting the batch.
6. Date of Analysis and Shelf-Life Validity
COAs are point-in-time documents. A COA issued 18 months before you receive the shipment does not confirm the product's current condition. Health Canada does not mandate a COA expiry date, but most European regulatory authorities expect COA data to be recent relative to the shipment, within 12 months is a common standard, and some importing markets require it within 6 months of the shipment date.
Ask your supplier what their shelf-life validation data shows for each cultivar. A producer who has documented stability data across multiple storage conditions and time points can provide evidence that the COA values remain valid at shipment. Producers without this data are relying on assumption, not evidence.
What Good Looks Like: The AlphaLeaf Standard
At AlphaLeaf, every batch of dried flower undergoes ISO/IEC 17025-accredited third-party testing before it leaves our Montreal indoor facility. Our COAs include full cannabinoid panels, complete terpene profiles, and the standard contaminant battery, microbials, pesticides, and heavy metals. Batch numbers are tied to our internal tracking system, which meets Health Canada's full traceability requirements under the Cannabis Act.
Our export authorisation means every shipment is accompanied by documentation that aligns with what German Bundesopiumstelle, Australian TGA, and Israeli Medical Cannabis Agency reviewers need in their permit files. Importers who have worked with multiple Canadian LPs consistently tell us the variation in COA quality across licensed producers is wider than it should be. We treat our COA as a core product document, not an administrative output.
Red Flags to Watch For
A few patterns should prompt a supplier conversation before a purchase order goes out:
- COA covers a product line rather than a specific batch number
- No ISO/IEC 17025 accreditation number visible on the COA header
- Terpene section absent or marked "not tested" on premium flower
- Contaminant results show "pass" without limit values, ask for the actual measured figures
- Analysis date is more than 12 months before shipment
- Total THC calculation not shown or inconsistent with raw cannabinoid values
None of these alone is a disqualifying factor, context matters. Each warrants a direct question to the supplier's QA team before you finalise terms.
COA Requirements by Import Market
| Market | Regulatory Authority | COA Role in Import Process | Notable Requirements |
|---|---|---|---|
| Germany | Bundesopiumstelle / BfArM | Required for narcotic import permit application | Batch numbers must match shipping manifest; EU-GMP or HC-GMP compliance statement expected |
| Australia | TGA / ODC | Supports Special Access Scheme or Authorised Prescriber pathway | TGO 93 compliance; contaminant limits differ from Canadian domestic thresholds |
| Israel | Israel Medical Cannabis Agency | Reviewed as part of import licence application | IMC-GAP / IMC-GMP standards apply; batch traceability documentation required |
LPs who have not reviewed their COA format against each importing country's specific requirements before their first shipment will discover the gaps at the worst possible moment, during permit review, not before it.
Frequently Asked Questions
What does a cannabis COA need to include for export from Canada?
Under the Cannabis Act and Cannabis Regulations, a compliant COA for exported dried flower must include cannabinoid potency testing (THC, THCA, CBD, CBDA), microbial testing, pesticide residue testing, heavy metal testing, and foreign matter confirmation, all from an ISO/IEC 17025-accredited laboratory. The COA must be batch-specific, with a lot number matching the shipping documentation submitted to Health Canada for export permit purposes.
Does a Canadian cannabis COA satisfy German import requirements?
A Canadian LP's COA is a necessary component of a German narcotic import permit application submitted to Bundesopiumstelle, but may not be sufficient on its own. German importers typically also require a GMP compliance statement alongside the COA. Importers in the pharmacy channel often add their own contaminant threshold requirements beyond the Canadian baseline, review your importer's qualification documentation before assuming a standard Canadian COA meets all their internal requirements.
How often should a Canadian LP issue new COAs for the same cultivar?
Every batch must have its own COA. There is no provision in the Cannabis Regulations for a batch to rely on a previous batch's test results, regardless of how similar the growing conditions were. For premium flower with international buyers, issuing new COAs within 30 days of the intended shipment date is common practice and helps avoid questions about data freshness from importing country regulators.
What is ISO/IEC 17025 and why does it matter for cannabis testing?
ISO/IEC 17025 is the international standard for testing and calibration laboratory competence. A laboratory accredited to this standard has demonstrated through independent assessment that its testing methods are validated, its equipment is calibrated, and its quality management system meets defined requirements, providing independent assurance that the numbers on the COA were generated using consistent, reliable methods. Without it, there is no external validation of testing accuracy.
Can a COA terpene profile be used as a batch specification?
Yes, and for buyers in the German and Israeli medical channels, batch-level terpene specifications are part of supply agreements. When a supplier provides terpene profiles across multiple consecutive batches of the same cultivar, buyers can establish tolerance ranges for myrcene, caryophyllene, limonene, and terpinolene, and flag batches that fall outside specification before they ship. Not all Canadian LPs can sustain this level of batch-to-batch terpene consistency.
To discuss AlphaLeaf's testing programme, COA documentation standards, or supply terms for your market, contact our team. You can also review our certifications and quality standards or learn more about AlphaLeaf and our Montreal indoor facility.
