Kratom Lab Testing & COA Requirements: What Vendors Actually Need

Kratom sells in one of the most trust-starved markets in consumer products: buyers are wary, regulators are watching, and a contamination story travels fast. Here's what the state Kratom Consumer Protection Acts actually require from vendors, what belongs on a kratom certificate of analysis, and why the serious vendors publish their lab results whether or not the law makes them.

What KCPA states require

Roughly fifteen states have passed some version of the Kratom Consumer Protection Act, with more considering it each session. The details vary state to state, but the recurring requirements are:

• Third-party lab testing — for alkaloid content and contaminants (heavy metals, microbials, and in some states pesticides and residual solvents).
• Alkaloid disclosure on the label — the amount of mitragynine and 7-hydroxymitragynine in the product, with limits on 7-OH concentration.
• Processor/vendor identification — the name and address of who made or sells the product.
• Directions and precautionary statements — serving size, age restrictions (usually 21+), and required warning language.
• A certificate of analysis — available to regulators, and in several states available to any customer who asks.

Unlike hemp — where eleven states now legally require a QR code or link to the COA right on the label — kratom laws mostly stop at "test it, label it, and have the COA available." We're not going to pretend otherwise: as of this writing, a QR code on a kratom label is a best practice, not a statutory mandate.

What belongs on a kratom COA

A credible kratom certificate of analysis, from an accredited third-party lab, typically shows:

• Batch/lot number that matches the physical package — a COA that can't be tied to a specific batch is marketing, not testing.
• Alkaloid panel — mitragynine and 7-hydroxymitragynine content, the numbers KCPA labels are built on.
• Heavy metals — lead, arsenic, cadmium, mercury. This is the panel buyers scrutinize hardest, for good reason: kratom is a dried plant product, and metals scares have shaped the market.
• Microbiological screen — salmonella, E. coli, yeast and mold counts.
• Lab identification and date — who tested it, when, and by what method.

If you're newer to reading lab reports, our plain-English explainer covers the anatomy of a COA in general: What is a COA?

New for 2026: Florida now requires alkaloid data ON the label

In July 2026, Florida's agriculture department (FDACS) adopted emergency rule 5KER26-9, "Requirement to Label Kratom Products" — the most data-heavy kratom label rule in the country so far. Reading the adopted rule text directly: kratom products sold in Florida must declare the concentrations of seven named alkaloid compounds, plus an "alkaloid ratio" (the combined milligrams of the listed 7-hydroxymitragynine-class compounds against total mitragynine — the rule's own example renders it as "Alkaloid Ratio 5 mg:500 mg"), all "permanently affixed to the Kratom Product package in a clear and conspicuous manner."

Two honest observations about what this means:

• This is a printed-label rule, not a QR rule. Florida wants the numbers on the package itself — a QR code doesn't substitute. What it does force is per-batch alkaloid panel testing: you can't print concentrations you haven't measured, so every batch now needs a lab report with exactly the numbers a good kratom COA already carries.
• The COA becomes the backup for the label's claims. Once your label states alkaloid numbers, skeptical buyers (and Florida inspectors) will want to see the lab report behind them. A QR on the label opening that batch's full COA is how the label's printed numbers get believed — and it costs nothing extra, since the testing is now mandatory anyway.

Source: the adopted emergency rule text, Fla. Admin. Register, rule 5KER26-9 (fetched July 2026). Emergency rules are time-limited and this one is new — Florida vendors should confirm current status and any grace-period deadline with FDACS before a print run.

Why publish it — even where the law doesn't make you

Kratom buyers are the most COA-literate customers in the botanical world. Communities compare vendors' lab results openly, and "where are the labs?" is often the first question a new vendor gets asked. Having a COA in a filing cabinet satisfies a regulator; it doesn't satisfy a skeptical customer at the moment of purchase.

The vendors who win trust make the batch's lab results reachable from the package itself: a QR code on the label that opens that batch's COA. No email request, no "contact us for lab results," no friction — scan, see the numbers, buy with confidence. And if your state later adopts hemp-style label rules, you already have the scannable-COA piece in place — whether any particular label meets a particular rule is a question for you and your attorney, not something a hosting tool can answer.

The mechanics: batch page + QR code

The setup is simpler than most vendors expect:

• Each batch gets its own hosted page showing the product, batch number, test date, lab, and the COA document itself.
• The label carries a QR code pointing at that page. The printed code never changes even if you need to correct a typo on the page behind it.
• New batch, new page, new label QR — repeat.

That's exactly what BatchLink does, and the first two batch pages are free — no signup, no card. It was built for hemp, where a number of states require the label to carry a link to the batch's COA, and works identically for kratom, where it's your trust signal.