A certificate of analysis means different things depending on where the underlying tests were run. For international cannabis procurement, that difference can determine whether a narcotic import permit is approved, held, or rejected outright.
ISO/IEC 17025 is the laboratory accreditation standard that gives a COA evidentiary weight in cross-border regulatory submissions. Labs accredited under this standard have had their competence independently assessed across method validation, measurement uncertainty reporting, and proficiency testing. Labs that have not been accredited under this scope produce results that look identical on paper but carry a different level of regulatory risk.
This guide covers what ISO/IEC 17025 accreditation requires of a cannabis testing laboratory, which parameters regulators in Germany, Australia, and Israel expect accredited results for, and how your procurement team can verify accreditation status before finalising a supply agreement.
For an overview of how to read and interpret the COA itself, see our cannabis certificate of analysis guide for B2B buyers.
What ISO/IEC 17025 accreditation requires of a cannabis lab
ISO/IEC 17025 sets the general requirements for the competence of testing and calibration laboratories. It's published jointly by the International Organization for Standardization and the International Electrotechnical Commission. In Canada, accreditation is granted by designated bodies, primarily the Canadian Association for Laboratory Accreditation (CALA) and the Standards Council of Canada (SCC) directly.
Accreditation is always scope-specific. A lab does not receive blanket ISO/IEC 17025 certification; it receives accreditation for defined test methods applied to defined matrices. A cannabis lab might be accredited for cannabinoid potency quantification by HPLC but not for mycotoxin testing. That distinction matters for procurement teams reviewing COAs intended for regulatory submission.
Three requirements under ISO/IEC 17025 directly affect COA reliability:
Method validation for the specific matrix. A test method validated for hemp extract or cannabis oil does not automatically transfer to dried flower. Your supplier's lab needs validated methods for the exact product being shipped. Any accredited lab can supply a method validation summary on request. If they can't produce it, that's a signal worth noting.
Measurement uncertainty reporting. Accredited labs must calculate and disclose measurement uncertainty for every quantitative result. A THC potency of 30.3% without an associated uncertainty statement (for example, ±0.8% at 95% confidence) is not fully compliant with ISO/IEC 17025 reporting requirements. Several EU regulators flag this at submission.
Ongoing proficiency testing. Labs maintain accreditation in part by participating in inter-laboratory comparison programmes. In Canada, this includes Health Canada's Cannabis Proficiency Testing scheme and equivalent programmes run through CALA. Ask your supplier which programme their lab participates in.
Why an unaccredited COA creates import risk
BfArM and its Bundesopiumstelle require that analytical data submitted with a German narcotic import permit application meets recognised quality standards. ISO/IEC 17025 (or the EU-equivalent EN ISO/IEC 17025) is the accepted evidence of that standard. See our German cannabis export guide for a full breakdown of the permit process.
Australia's Therapeutic Goods Administration (TGA) and Office of Drug Control (ODC) take a similar position. Import permits evaluated under the Therapeutic Goods Act 1989 require testing data from laboratories operating to Good Laboratory Practice or a recognised accreditation standard. Our Australian export compliance guide covers the ODC permit timeline and document checklist in full.
A COA from an unaccredited scope, even from a well-run lab, can trigger a customs hold, a supplementary data request, or a permit refusal. Resampling, retesting, and resubmitting costs far more than sourcing from a supplier whose batch release SOP routes every test through an accredited method from the start.
Parameters requiring accredited results by export market
Not every parameter on a cannabis COA requires accredited testing under all regulatory frameworks. The parameters regulators use to evaluate permit applications almost always do. Here's what the major Canadian export markets expect.
Germany. German narcotic import permits for medicinal cannabis require accredited analytical results for, at minimum: total THC and CBD (validated HPLC or GC method), moisture content, microbial contamination including Salmonella and E. coli, pesticide residues (EU MRL limits), heavy metals (cadmium, lead, mercury, arsenic), and aflatoxins. The Medizinal-Cannabisgesetz framework has progressively pushed German import standards toward pharmaceutical-grade expectations. Wholesale distributors now routinely request the lab's ISO/IEC 17025 scope certificate alongside the COA itself.
Australia. Import authorisations under the Narcotic Drugs Act 1967 and the TGA's SAS Category B pathway require data that can withstand ODC scrutiny. TGO 93 (Therapeutic Goods Order No. 93) sets limits for cannabinoid potency, water activity, microbial contamination, pesticide residues, heavy metals, and foreign matter. Testing must come from a lab whose accreditation scope covers these methods for dried flower.
Israel. Israel's Medical Cannabis Unit requires EU-GMP-aligned documentation for imported product. In practice, labs producing COAs for Israeli import submissions must operate to ISO/IEC 17025 or EU GMP Annex 11 quality standards. The standard applies regardless of whether the product is entering under a compassionate use pathway or a full import licence.
How to verify a lab's accreditation before signing a supply agreement
Verification is a three-step process your procurement team can complete before contract execution.
Request the lab's accreditation certificate and scope document. Every ISO/IEC 17025-accredited lab can produce its current certificate from CALA or SCC, along with a scope of accreditation listing every method, analyte, and matrix covered. Check that the certificate is current and that the scope explicitly covers dried cannabis flower for each parameter on the COA you plan to submit.
Cross-check against the accreditation body's public register. CALA's register is at cala.ca. The Standards Council of Canada's directory is at scc.ca. Comparing the lab name against the live register confirms the certificate is authentic and the accreditation scope has not been suspended since the document was issued. It takes under five minutes and removes document fraud risk from your supplier qualification process.
Review the COA for compliance markers. A COA issued under an accredited scope will carry the accreditation body name and certificate number on the face of the document, report measurement uncertainty for all quantitative results, and carry a signature from a responsible person within the lab's quality management system. COAs that lack these markers may still come from capable labs. They're not demonstrably accredited-scope documents, and you can't represent them as such to a regulator.
What to ask during LP supplier qualification
Standard practice is to request: the lab's current ISO/IEC 17025 scope certificate, a sample COA from a recent batch with measurement uncertainty statements, confirmation of proficiency testing programme participation, and the LP's internal batch release SOP reference. Suppliers who have this on file and can turn it around quickly are operationally ready for export. Those who can't are unlikely to clear first-submission regulatory review without delays.
AlphaLeaf's testing programme
AlphaLeaf runs its batch testing programme through ISO/IEC 17025-accredited laboratory partners in Canada. Every batch covers the full panel required for export to Germany, Australia, and Israel: cannabinoid potency, microbial contamination, pesticide residues, heavy metals, and moisture content, all cleared before batch release.
That includes our Ice Cream Cake cultivar (30.3% THC, Wedding Cake x Gelato cross, large-bud format). COAs carry measurement uncertainty statements for all quantitative results and the issuing lab's accreditation certificate number. Full batch traceability means the complete document chain from cultivation through to the final COA is available to importers during due diligence and on request throughout the supply relationship.
Procurement teams qualifying multiple Canadian suppliers typically find that complete, accreditation-verified documentation upfront shortens the time between supplier approval and first-shipment clearance. AlphaLeaf's quality documentation package is built to support that process on both sides.
To request a documentation package or discuss testing scope alignment for your target market, reach out to our export team directly.
Frequently Asked Questions
What is ISO/IEC 17025 and why does it matter for cannabis procurement?
ISO/IEC 17025 is the international standard for laboratory testing competence. Labs accredited under it have been independently assessed for method validation, measurement uncertainty reporting, and proficiency testing. For cannabis procurement, regulators in Germany, Australia, and Israel use accredited COA results as the evidentiary basis for narcotic import permit decisions. A COA produced outside an accredited scope carries higher regulatory risk at import, regardless of the result values.
How do I verify that a Canadian cannabis lab holds ISO/IEC 17025 accreditation?
Request the lab's current accreditation certificate and scope document, then cross-reference the lab name against CALA's register at cala.ca or the Standards Council of Canada's directory at scc.ca. Confirm the scope explicitly covers dried cannabis flower for every parameter on the COA you intend to submit.
Does ISO/IEC 17025 accreditation cover every test on a cannabis COA?
Not necessarily. Accreditation is scope-specific: a lab may hold accreditation for cannabinoid potency and microbial testing but not for pesticide residue analysis. Always request the full scope document and compare it against every COA parameter before using it in a regulatory submission.
What is measurement uncertainty and why does it need to appear on a cannabis COA?
Measurement uncertainty quantifies the range within which the true value of a result is expected to fall at a stated confidence level (for example, 30.3% THC ±0.8% at 95% confidence). ISO/IEC 17025 requires accredited labs to calculate and report it. EU regulators increasingly flag COAs that omit this statement as incomplete for permit submission.
Which parameters require ISO/IEC 17025-accredited results for export to Germany?
Germany's Bundesopiumstelle requires accredited results for: total THC and CBD by validated HPLC or GC, moisture content, microbial contamination including Salmonella and E. coli, pesticide residues, heavy metals, and aflatoxins. Requirements continue to develop under the Medizinal-Cannabisgesetz, so importers should confirm current expectations with BfArM directly for each shipment cycle.
