Who's Responsible for a Cannabis COA in Massachusetts?

Massachusetts-specific and educational only, not legal advice. Rules change; operators should confirm current requirements with the CCC or counsel.

Massachusetts built the first adult-use market on the East Coast, and it tightened its testing rules in 2025 to stop lab-shopping. Its package also carries two separate warning marks, more than most states require.

There is no distributor here; the cultivator or manufacturer self-samples and sends one full-panel sample to a single independent lab. Here is one batch's path from farm to shelf.

The short version:

The COA comes from an independent, CCC-licensed, ISO/IEC 17025 Independent Testing Laboratory that may not grow or sell cannabis.

There is no distributor tier. The cultivator or manufacturer arranges testing directly.

The licensee self-samples and, since 2025, sends one full-panel sample to a single lab, no shopping a failing result around.

The package carries two marks: a "CONTAINS THC" triangle and a "Not Safe for Kids" symbol.

Here is how it actually works, following one batch from the field to the shelf.

▶ Try the interactive version (https://weed-central.com/learn/coa/usa-massachusetts?utm_source=newsletter.weed-central.com&utm_medium=newsletter&utm_campaign=who-s-responsible-for-a-cannabis-coa-in-massachusetts): follow one batch from farm to shelf and watch the label build up, color-coded by who adds each piece.

A quick note on the rulebook

Massachusetts cannabis is regulated by the Cannabis Control Commission (CCC) under 935 CMR 500. Product is tracked in Metrc, and a COA is valid for one year.

Meet the players

The cultivator grows and batches the product, tagged in Metrc. Cultivation licenses carry an MC prefix.

The product manufacturer makes edibles and other products and arranges its own testing.

The independent testing laboratory (ITL) receives the sample and issues the COA. It must be CCC-licensed and ISO/IEC 17025 accredited, and it may not grow or sell cannabis.

The retailer receives product on a Metrc manifest and sells only tested, passing, labeled product to 21+. Retail licenses carry an MR prefix.

The state (CCC) watches the chain through Metrc.

The COA workflow, step by step

Cultivator / batch (Cultivator). The cultivator grows a batch, tagged in Metrc. This becomes the label’s batch/serial + barcode and net weight (US + metric). Massachusetts has no distributor.

Finish + self-sample (Cultivator). The licensee (cultivator/manufacturer) pulls its own representative sample and, since 2025, sends one full-panel sample to a single independent lab (no lab-shopping per test).

Independent testing lab (Lab). A CCC-licensed, ISO/IEC 17025 Independent Testing Laboratory receives the sample. It may not grow or sell cannabis, structural independence.

Full compliance panel (Lab). The lab runs cannabinoids, 4 heavy metals, pesticides + PGRs, microbials + mycotoxins, solvents, and Vitamin E acetate on vapes. (No water-activity or terpene mandate.)

COA issued → Metrc (Lab). The lab issues the COA and uploads it to Metrc. Results are valid one year. This unlocks the cannabinoid profile + tested-by + date.

Pass / fail (Regulatory). A batch may be remediated at most twice; a third failure must be destroyed.

Package + label (Cultivator). The cultivator/manufacturer adds the red “CONTAINS THC” triangle and a “Not Safe for Kids” mark, plus the FDA/health warning.

Retail sale (Retailer). The retailer receives it on a Metrc manifest and sells only tested, passing, labeled product to 21+.

What a licensed lab tests for

A Massachusetts lab runs a full compliance panel:

Cannabinoid profile (Total THC and CBD)

Heavy metals (four)

Residual pesticides and plant growth regulators

Microbials and mycotoxins

Residual solvents, plus Vitamin E acetate on vapes

A batch may be remediated at most twice; a third failure must be destroyed. The COA is uploaded to Metrc and is valid for one year.

What ends up on the package, and who puts it there

A Massachusetts label carries the product identity, the net weight in US and metric units, the cannabinoid profile from the COA, the batch or serial number and barcode, the cultivator, and the required warnings. Edibles are capped at 5 milligrams of THC per serving.

Massachusetts is unusual for requiring two marks, not one: a red "CONTAINS THC" triangle and a separate "Not Safe for Kids" symbol. Both appear on the package.

The warning, word for word

Massachusetts requires a health warning that leads with an FDA disclaimer:

This product has not been analyzed or approved by the FDA. There is limited information on the side effects of using this product, and there may be associated health risks.

Marijuana use during pregnancy and breast-feeding may pose potential harms. It is against the law to drive or operate machinery when under the influence of this product.

KEEP THIS PRODUCT AWAY FROM CHILDREN.

The QR question

Massachusetts does not require a QR code linking to the COA on the package. The batch or serial number ties the product back to its record in Metrc. Some brands add a COA QR voluntarily, but it is not mandated.

Common myths

"One mark is enough." Massachusetts requires two: a "CONTAINS THC" triangle and a "Not Safe for Kids" symbol.

"You can shop a sample around until it passes." Not since 2025; one full-panel sample goes to a single lab.

"A distributor arranges the test." No; the cultivator or manufacturer does.

"Edibles can be any dose." No; Massachusetts caps them at 5 mg of THC per serving.

How to read a COA as a customer

Three quick checks:

Does it pass? Look for an overall pass, and scan for any fail on the contaminant sections.

Does it match the package? The COA's Total THC and CBD should line up with the label, and the batch numbers should match.

Is it current and real? The issuing lab should be an independent, accredited facility, and the tracking tag confirms it is a real, logged package.

The one-line takeaway

Massachusetts has no distributor, the cultivator/manufacturer self-samples and sends one full-panel sample to a single independent CCC-licensed lab, which uploads the COA to Metrc. Massachusetts carries two marks (a red “CONTAINS THC” triangle and a “Not Safe for Kids” octagon), and it caps edibles at 5 mg THC per serving.

Massachusetts-specific and educational only, not legal advice. Sources: Massachusetts Cannabis Control Commission (CCC), 935 CMR 500; Massachusetts Metrc track-and-trace.