Accreditation Is a Scope, Not a Stamp: Auditing UK CBD Laboratory Reports

Few documents in the UK CBD market carry as much implied authority as a certificate of analysis. A PDF bearing a laboratory name, a method reference and a UKAS mark can look like a closed argument: the product was tested, the numbers are printed, the matter is settled. That reading is too generous. Accreditation is not a property of a PDF, and it is not a product approval. It is a statement about what a named laboratory has demonstrated it can do, within a defined scope, at a defined site. The buyer's task is to find that scope and compare it with the report in hand.

What ISO/IEC 17025 actually certifies

ISO/IEC 17025 is the international standard for the competence of testing and calibration laboratories. In the UK, the United Kingdom Accreditation Service assesses laboratories against it. An accredited laboratory has shown that it operates a quality system, uses validated methods, controls its equipment and can produce traceable results for the activities listed in its schedule. That is meaningful. It is also narrower than the impression created by a logo placed at the top of a cannabinoid report.

Accreditation attaches to the laboratory and to the specific activities in its schedule. It does not attach to every test the laboratory offers, to every sample it receives, or to every brand that quotes its name. A laboratory can be accredited for one method and not another. It can hold accreditation for cannabinoid potency by high-performance liquid chromatography while its pesticide screen sits outside the accredited scope. A report can be genuine, signed and professionally produced while containing a mixture of accredited and non-accredited results. That is not automatically dishonest, but it is a distinction the buyer should see.

The schedule is the document that matters

UKAS publishes a schedule of accreditation for each accredited organisation. This is the document to request, or to find through the UKAS website, when a certificate names a laboratory. The schedule should identify the legal entity, the accredited site and the type of activity. For a CBD report, the relevant activity is usually testing, though sampling may also appear. The schedule then lists fields of testing, materials and methods.

A first check is identity. Does the laboratory named on the report match the legal entity and address on the schedule? A trading name can differ from the registered company name, but the link should be traceable. A report that names a laboratory at one address while the accreditation schedule covers a different site deserves a question. So does a report that carries a UKAS number without naming the laboratory at all.

A second check is currency. Schedules change. Methods are added, suspended or removed. A certificate dated in 2026 may cite a scope that has since been revised. The report and the schedule should be read as a pair, not as a permanent badge. If a brand supplies only a cropped image of a certificate, ask for the full report and the laboratory's accreditation number. A buyer cannot audit a logo in isolation.

Methods, preparation and the limits of the result

Once the laboratory and schedule are confirmed, the method line becomes important. The report should identify the method used for each result, usually by a code or a short description. That method should appear in the accredited scope if the result is presented as accredited. An in-house method can be accredited, provided it has been validated and listed. The absence of a familiar standard method is not proof of poor practice, but the absence of any matching entry in the schedule is a reason to ask what is being claimed.

Sample preparation is the quieter issue. Accreditation may cover the analysis of a prepared sample without covering the steps that produced it. For a CBD oil, preparation can involve dilution, extraction, homogenisation or drying. If those steps sit outside the accredited scope, the result still describes the sample as received. That is useful information, but it is not the same as an accredited statement about the bottle as sold. Reports often say results apply to the sample as received; that phrase is not boilerplate. It marks the boundary of the laboratory's evidence.

Sampling is a separate activity. If a brand sends a sample to the laboratory, the laboratory is analysing a client-supplied sample, not sampling the retail batch. The report may therefore be silent on whether the sample represented the batch. Accreditation of a sampling activity would not automatically apply to a sample the client selected. This matters when a certificate is used to reassure buyers about a whole production run.

Reading the qualifiers

A careful reader looks for the words that limit the claim. Phrases such as 'not accredited', 'not covered by UKAS accreditation', 'screening only' or an asterisk against a result are not decorative. They tell the buyer which parts of the report carry the laboratory's accreditation and which do not. A certificate can be entirely valid and still contain only one accredited result. The rest may be useful, but it should not be described as accredited testing.

Subcontracted work needs the same attention. If a laboratory sends a test to another facility, the report should identify the subcontractor and its accreditation status. The first laboratory's logo does not automatically cover the second laboratory's method. A chain of logos is not a chain of evidence unless each link is named and checkable.

A practical audit for UK CBD buyers

Start with the laboratory's full name and accreditation number, then find the current schedule on the UKAS website. Confirm the site and the testing activity. Next, match each method cited on the report to the schedule. Mark any result that is described as non-accredited or screening only. Then check the sample description and the preparation wording. Finally, ask whether the report covers the batch you are buying and whether the brand can supply the full document rather than a marketing extract.

Red flags are rarely dramatic. They are usually small omissions: a UKAS mark with no number, a laboratory name that does not match the schedule, a method that cannot be found, a potency result presented as accredited while the scope lists a different technique, or a report that is several batches old. None of these proves a product is unsafe. Together they show that the certificate is being asked to carry more weight than its accreditation supports.

Accreditation is valuable because it narrows the space for error. It is not a purity guarantee, and it does not replace batch-specific evidence. The sensible position for a UK CBD buyer is to treat ISO/IEC 17025 as a question rather than an answer: which laboratory, which site, which method, which preparation, and which results are actually inside the scope? A report that survives those questions is worth more than a page of unexamined logos.