CBD Gummies and ISO 17025: What Lab Accreditation Actually Means

CBD Gummies and ISO 17025: What Lab Accreditation Actually Means

When evaluating a COA for CBD gummies, one of the most important pieces of information is whether the testing laboratory holds ISO 17025 accreditation — and specifically, whether that accreditation covers the methods used to generate the results on that COA. ISO 17025 is the international standard for testing and calibration laboratory competence, and it is the primary quality benchmark that distinguishes labs capable of producing defensible, reproducible analytical data from labs that may produce results without the validation infrastructure to back them up. This article explains what ISO 17025 accreditation means, how it works, what it does and doesn't guarantee, and how to verify it when evaluating a COA.

What ISO 17025 Is

ISO/IEC 17025 is published by the International Organization for Standardization (ISO) in conjunction with the International Electrotechnical Commission (IEC), and it is the standard that determines whether a lab's results on a CBD gummy COA carry meaningful analytical weight. The current version, ISO/IEC 17025:2017, specifies general requirements for the competence, impartiality, and consistent operation of laboratories. It covers both technical requirements (equipment calibration, method validation, measurement uncertainty, data integrity) and management system requirements (document control, corrective action, internal auditing, and quality management procedures). [PMID 31072133]

Accreditation to ISO 17025 is granted by accreditation bodies — in the United States, the primary bodies are A2LA (American Association for Laboratory Accreditation), AIHA-LAP, Perry Johnson Laboratory Accreditation (PJLA), and the ANSI National Accreditation Board (ANAB). These organizations conduct on-site assessments of the laboratory's physical operations, personnel qualifications, equipment calibration records, method validation data, and quality management documentation. A lab that passes this assessment receives accreditation for specific test methods — not a blanket accreditation covering everything the lab does.

What Accreditation Covers: Scope Matters

ISO 17025 accreditation is method-specific and scope-limited. A lab that is ISO 17025 accredited for HPLC cannabinoid potency testing is not automatically accredited for ICP-MS heavy metals testing, LC-MS/MS pesticide analysis, or microbial enumeration. Each test method must be independently assessed and listed in the lab's scope of accreditation. The scope of accreditation is a public document — accreditation bodies publish each lab's current scope listing the specific methods, matrices, and analytes covered. [PMID 28885619]

This scope specificity has direct implications for COA evaluation. When a lab states "ISO 17025 Accredited" on a COA for CBD gummies, that statement only guarantees accreditation for the methods within their current scope. If a COA includes a pesticide panel tested using a method not in the lab's accreditation scope, that panel was produced outside the accreditation framework — the quality assurance that ISO 17025 provides for in-scope methods does not apply. A COA that broadly claims accreditation without specifying which methods are covered may be technically accurate but misleading about the breadth of that quality guarantee.

What ISO 17025 Requires of a Lab

The specific requirements of ISO 17025 that are most relevant to CBD COA quality include:

Method validation. Accredited labs must validate their analytical methods for the specific matrices and analyte ranges they test. For CBD gummy matrices, this means demonstrating that the method performs accurately in the complex sample matrix — that sugars, oils, plant pigments, and other gummy or extract components don't interfere with the measurement. Validation parameters include accuracy (recovery from spiked samples), precision (repeatability within and between runs), linearity, LOD/LOQ, and selectivity. A lab using a method validated for a different matrix and applying it to hemp gummies without matrix-specific validation may produce inaccurate results even with well-maintained equipment. [PMID 29562591]

Equipment calibration and maintenance. All measurement instruments must be calibrated against traceable standards on documented schedules. For HPLC and LC-MS/MS systems used in cannabinoid and pesticide testing, this means regular calibration verification against certified reference standards, system suitability testing, and documented maintenance records. Accreditation bodies audit these records during assessments and can suspend accreditation if calibration documentation is deficient.

Reference standards traceability. Calibration standards and reference materials used in analytical testing must be traceable to national or international standards bodies (NIST in the U.S.). For cannabinoid testing, this means using certified reference standards for CBD, THC, and other cannabinoids with documented purity and traceability. A lab that prepares in-house standards without traceability documentation introduces systematic error potential that accreditation requirements are designed to prevent.

Measurement uncertainty. ISO 17025 requires accredited labs to evaluate and report measurement uncertainty — the range within which the true value is expected to fall with a given confidence level. For a CBD potency test, measurement uncertainty might be reported as ±5% relative, meaning a reported value of 25 mg/g could represent a true value of 23.75–26.25 mg/g. Measurement uncertainty is distinct from label tolerance (the ±20% variance discussed in potency testing articles) and represents the analytical method's own inherent precision limits.

Proficiency testing participation. Accredited labs must demonstrate their performance against other labs through proficiency testing programs — blind samples sent by an external organization where the lab's results are compared against expected values and peer performance. Consistent performance in proficiency testing is evidence that the lab produces results comparable to other qualified labs, not just internally consistent results — a key quality signal for consumers relying on those results for CBD gummy purchase decisions. [PMID 30624194]

What ISO 17025 Does Not Guarantee

ISO 17025 accreditation is a significant quality indicator but not an absolute guarantee of result accuracy. Understanding its limits is as important as recognizing its value:

Accreditation does not prevent sample mix-ups or labeling errors. A lab can have flawless analytical methods and still produce an incorrect COA if samples are mislabeled, mixed up during intake, or if the client submits the wrong sample. COA fraud — where a manufacturer submits a clean sample that doesn't represent the actual product batch — is not something ISO 17025 accreditation can detect or prevent.

Accreditation is time-bounded. ISO 17025 accreditation must be renewed periodically (typically every two years, with annual surveillance audits). A lab that was accredited in 2022 and let its accreditation lapse in 2024 can still display the ISO 17025 logo on COAs from 2024 onward without re-accreditation, unless the consumer verifies current status. Always verify that a lab's accreditation is current, not just that they once held it.

Accreditation scope may not cover all tested analytes. As noted above, a lab's ISO 17025 scope is specific to listed methods. Testing outside that scope on the same COA does not inherit the accreditation's quality guarantees even though both appear on the same document.

Accreditation does not verify that a sample represents the batch. The lab tests what it receives. Whether the sample is representative of the full production batch — whether it was collected appropriately from the batch, stored properly during transit, and submitted with accurate identifying information — is outside the lab's analytical quality system. Batch representativeness is the manufacturer's responsibility, not the lab's.

How to Verify a Lab's ISO 17025 Accreditation

Verifying accreditation takes two steps: confirming the lab is currently accredited, and confirming that the accreditation scope covers the methods used on the COA for your CBD gummies. Both steps are free and take only a few minutes.

For U.S.-based labs, the primary search tool is the A2LA directory (a2la.org) or the ANAB directory (anab.org), where labs can be searched by name. The search result will show the lab's current accreditation status and provide a link to their scope of accreditation document. The scope document lists each accredited test method, the relevant standard (e.g., AOAC, USP, in-house validated), the matrix, and the analyte range. Matching the methods listed on a COA against the lab's scope document is the definitive verification approach. [PMID 32658857]

Some labs include their accreditation number and issuing body directly on the COA, which simplifies lookup. A COA that states "A2LA Accredited, Certificate #XXXX" can be searched directly in the A2LA directory using that certificate number to pull the current scope. If a COA claims accreditation but provides no certificate number or issuing body, the consumer must search by lab name, which requires correctly identifying the lab's legal name as registered with the accreditation body.

ISO 17025 vs. cGMP Certification vs. State Cannabis Lab Licensing

ISO 17025 accreditation is sometimes confused with other quality designations that appear on lab-related documentation for CBD gummies:

cGMP certification applies to manufacturers, not testing labs. A manufacturer certified to 21 CFR Part 111 cGMP standards has documented manufacturing controls, but their testing lab may or may not be ISO 17025 accredited. cGMP and ISO 17025 are complementary requirements in different domains — manufacturing quality and analytical quality — and both should ideally be present in a well-documented supply chain for CBD gummies.

State cannabis lab licensing (in regulated cannabis states) requires labs to meet certain technical standards as a condition of their state license, often including ISO 17025 accreditation or equivalent. Labs licensed for cannabis testing in California, Colorado, Oregon, or other regulated states have demonstrated compliance with state requirements, but state licensing and ISO 17025 accreditation are separate. A state-licensed lab may be ISO 17025 accredited, or it may hold a state license without formal accreditation. For hemp CBD products subject to federal dietary supplement standards rather than state cannabis regulation, ISO 17025 remains the primary applicable quality benchmark.

ISO 17025 Verification Checklist

☐ The COA identifies the testing lab by name. An anonymous COA cannot be accreditation-verified.

☐ The COA states ISO 17025 accreditation. Some labs hold accreditation but don't display it prominently — the accreditation body directory can confirm status regardless, but an explicit statement on the COA is the first indicator.

☐ An accreditation certificate number or issuing body is listed. This enables direct lookup in the A2LA, ANAB, or PJLA directory without needing to search by lab name.

☐ Current accreditation status is verified. Confirm the lab's accreditation is active at the time of the test date on the COA, not merely that they once held accreditation.

☐ Accreditation scope covers the relevant methods. Check that cannabinoid potency, heavy metals, pesticides, and other panels on the COA are within the lab's accredited scope, not just claimed under a general accreditation statement.

☐ Methods are identified on the COA. The COA should state the analytical method used for each panel (HPLC, ICP-MS, LC-MS/MS, HS-GC/FID, USP methods) — this is what you match against the lab's scope document.

Disclaimer: This article is for informational and educational purposes only. ISO 17025 accreditation requirements and accreditation body procedures are subject to update. This article does not constitute legal or regulatory advice.