Who Is Extract Labs? A Brand File on the Veteran-Founded Lab With a Spotty Record

Extract Labs is the rare D grade that isn't about hiding anything. The founder is named and verifiable, the ownership story is documented all the way into SEC filings, the batch database is public, the organic and kosher credentials are genuine, and independent testing confirmed excellent label accuracy. On pure disclosure, this brand would grade a full tier higher.

The grade is about what the record shows happened. A 2022 FTC cease-and-desist demand over COVID-19 treatment claims — warning-stage, never escalated as far as we can find, but real and addressed to the CEO by name. A confirmed 2025 Class II FDA recall of more than 60,000 gummies for an undeclared allergen, shipped to six countries. Customer and employee ratings near the bottom of our board. And a testing program that lost its named lab when the in-house facility was sold in 2023. We'll state each item exactly as precisely as the record supports — including the two things about this brand that circulate wrongly.

Extract Labs was founded by Craig Henderson, a U.S. Army veteran — and unlike the vague 'veteran-owned' branding common in this category, Henderson's service and founding role are verifiable in the public record. The company operates out of Lafayette, Colorado (Boulder County) as a vertically integrated CO2 extraction house. On the entity: SEC filings describe 'Extract Labs Inc., a Colorado corporation,' while the BBB profile shows an LLC with a 2016 origin — a discrepancy we note rather than resolve.

Two more disambiguations, because the names collide: extraktLAB is an unrelated extraction-equipment manufacturer, and the UK's "Extract Lab" is a different company entirely. Neither has anything to do with this file.

The bones here are genuinely good, and one part is independently confirmed:

• A public batch database. Extract Labs runs a dedicated COA lookup at batch.extractlabs.com — batch-level, public, the right architecture.
• Independently confirmed accuracy. The third-party auditor Leafreport, which buys and tests products itself, found Extract Labs' label variance at roughly 2% — excellent, among the tightest we've seen cited in these files.

On manufacturing, Extract Labs discloses a genuine vertically integrated CO2 extraction operation — it makes its own products in its own Colorado facility, which is more than much of the category can say. Its cGMP claim, like most brands here, comes with no named auditor, so we treat it as self-asserted. That's what 11/15 scores: real disclosed operation, one unverified badge.

A methodology note, because careful readers will ask: the 2025 recall is not docked in this pillar. Our manufacturing score measures what a company discloses about how its products are made; the recall is an adverse event, and per our methodology it counts once, in Reputation & Record — the same way we've scored recalls elsewhere in this series. Double-counting a single event across two pillars would overstate it.

On sourcing, the credentials are genuine where they exist: Extract Labs offers real USDA-organic SKUs, and its OU Kosher certification is one we verified in the Orthodox Union's own registry rather than taking from marketing copy. The docks: the organic certifying agent isn't named in public sources, and sourcing disclosure beyond the certified SKUs is thin.

This is the pillar that decides the grade, and every item below is stated exactly as far as the record supports:

• The FTC cease-and-desist demand (allegation, warning-stage). On April 4, 2022, the Federal Trade Commission issued Extract Labs a cease-and-desist demand over COVID-19 treatment claims — and addressed it to Craig Henderson personally. Two precisions matter. First, a cease-and-desist demand is a warning-stage allegation, not a finding of wrongdoing. Second — and to the company's credit — we found no follow-on FTC complaint, civil penalty, or consent order in the years since, which suggests the matter ended at the warning. But COVID-19 treatment claims are among the most serious marketing allegations in this category, and a demand naming the CEO is not a form letter.
• The 2025 recall (confirmed event). Extract Labs conducted a voluntary recall, designated Class II by the FDA, covering more than 60,000 units of CBD+delta-9 gummies for undeclared peanut cross-contact — product distributed to six countries. No injuries were reported, and a voluntary recall is the responsible response. But an undeclared major allergen crossing into 60,000+ units and six countries is a serious quality-control failure, and it's the largest single dock in this file.
• Customer and employee ratings (thin-to-poor, labeled). Trustpilot sits at 2.8; Glassdoor at 2.2. The Glassdoor items are anonymous employee allegations — unadjudicated, and we weight them as a signal, not a finding — but both numbers sit near the bottom of our board.
• The BBB advertising item (secondary-source report only). Healthline's review of the brand references a BBB item concerning advertising claims. We could not verify it at the primary source today, so we report it only as what it is: a secondary-source report, not an established record item.
• What's genuinely clean (searched absences). We found no FDA warning letters naming Extract Labs — notable given the FTC item — and no lawsuits against the company in our searches. No class actions, no consumer suits, no injury litigation.

In our view, Extract Labs is a real company with real transparency instincts and a record it hasn't outrun yet. The strengths are the kind we can verify: a named veteran founder, SEC-documented ownership, a public batch database, genuine organic and kosher credentials, and independently confirmed label accuracy. The D isn't about any of that — it's about an FTC cease-and-desist demand over COVID-19 claims, a confirmed 60,000-unit allergen recall across six countries, bottom-tier customer and employee ratings, and a testing program that stopped naming its lab in 2023. Each item is labeled at exactly its legal weight — the FTC matter is a warning-stage allegation with no follow-on action found, the recall was voluntary with no injuries reported — but together they're a record, and our score exists to weigh records.

If you buy Extract Labs, the practical playbook: stick to the core CBD line, pull your batch's COA from the database, and note whether it shows a full contaminant panel or potency alone. A D (68/100) — a grade the infrastructure doesn't deserve but the record does. The full methodology shows every point; a named current lab running full panels, a stretch of clean operating history after the recall, and improved customer and workplace signals would move this file up fast (see the notice below).