"Third-party tested" is printed on nearly every CBD label on the market, and the phrase alone tells you almost nothing. A company can run one batch through a lab three years ago, print the seal on every bottle since, and never test again. The phrase is marketing. The Certificate of Analysis behind it is the actual evidence, and most parents shopping for a product to help with their child's anxiety, sleep, or seizure activity have never been shown how to read one.

That gap matters more in this category than almost anywhere else in the supplement aisle. The FDA does not regulate CBD as a supplement or a drug, which means there is no standard requiring accurate labeling, no enforced potency range, and no mandatory contaminant screening. A 2017 study in JAMA tested 84 CBD products sold online and found that just over a quarter contained less CBD than the label claimed, some by a wide margin, and 21 percent contained detectable THC that wasn't disclosed. For a child, an inaccurate label isn't a minor inconvenience. It's the difference between a measured dose and a guess.

What a Certificate of Analysis Proves

A Certificate of Analysis, usually shortened to COA, is a lab report generated when a specific batch of product is tested. The document that matters is the one tied to the exact batch number on the bottle in front of you, not a generic COA linked from the company's homepage.

A COA worth trusting includes:

• A batch or lot number that matches the packaging. If the number on the COA doesn't match the number printed on your bottle, the report proves nothing about what you're holding.
• Cannabinoid potency results showing the actual measured CBD content, reported in milligrams per serving and as a percentage, compared against the label's claim. Look for a result within roughly 10 percent of what's advertised.
• THC content, ideally reported as "ND" (not detected) or a number below 0.3 percent, which is the federal legal threshold for hemp-derived products.
• A contaminant panel covering heavy metals (lead, arsenic, mercury, cadmium), pesticides, residual solvents (if the product used solvent-based extraction), and microbial contaminants like mold or E. coli.
• The testing lab's name and accreditation, ideally ISO 17025 certified, along with a date. A COA more than a year old on a product still being sold is a sign the company stopped testing.

Where Companies Cut Corners

The most common shortcut is testing potency only and skipping the contaminant panel entirely. Potency-only testing is cheaper, and it lets a company legally claim "lab tested" while never checking for heavy metals or pesticides. Read the COA's table of contents, not just the summary page, to confirm contaminants were screened.

The second shortcut is using someone else's report. Search the lab's name directly rather than trusting a PDF linked from the product page. If the same COA appears attached to five different brands' listings, or the batch number doesn't match anything printed on the bottle, that report isn't testing your product.

The third is hemp sourced from soil that concentrates contaminants without independent verification. Hemp is a bioaccumulator, meaning it pulls heavy metals out of the ground it's grown in more efficiently than most crops. A company that can't produce a current, batch-matched contaminant panel is asking you to trust that the soil was clean, with no way to check.

A Five-Minute Verification Routine

Before buying, or before using what's already in the cabinet:

1. Find the batch number on the bottle and locate the COA with that exact number, usually via a QR code on the label or a lookup tool on the brand's website.
2. Confirm the lab is independent from the manufacturer and check that it's accredited.
3. Compare the measured CBD content to the label claim. Flag anything more than 10 percent off in either direction.
4. Scroll past the potency summary to confirm heavy metals, pesticides, and microbials were tested, not just cannabinoids.
5. Check the test date. If it's more than a year old, ask the company directly for current batch testing, or move to a different product.

A company that can't produce a batch-matched COA within a day of asking has told you everything you need to know.

Bringing the Product to Your Child's Doctor

A verified COA is worth bringing to the pediatrician or neurologist, not just filing away. CBD interacts with several medications processed by the liver's CYP450 enzyme system, including some anticonvulsants, so a clinician needs the actual measured potency, not the label's marketing number, to think through interactions with what your child already takes. Bring the batch-matched report, not the bottle, and ask specifically about anything your child is currently prescribed.

Purity testing doesn't answer whether CBD is appropriate for your child's autism or epilepsy diagnosis in the first place, and it doesn't resolve the confusion around how CBD and THC content differ on a label. Those are separate questions worth working through before this one. But once a product is in the house, the COA is the only document that tells you what's in the bottle, and now you know what it's supposed to say.