Home/Checklists & Workflows/Cannabis Industry
✅ Checklist

Cannabis Compliance Checklist: 12-Step Metrc and Audit-Ready System

Cannabis businesses operate under intense regulatory scrutiny. Compliance failures result in fines, license suspension, or revocation. This workflow ensures your business stays audit-ready by properly managing inventory tracking, documenting transactions, and maintaining required records.

15-20 hours for initial setup, 10-15 hours/week for ongoing management🎯 Intermediate📋 12 steps
Tools needed:Metrc or BioTrackTHCSpreadsheet or database for recordsBackup document storage (cloud-based)Compliance calendar/reminder system
Progress: 0/12
0%
Step 1⚠️ Critical2-3 hours

Establish Clear Metrc/Compliance Protocols

Create written procedures documenting exactly how your business will manage track-and-trace, inventory, testing, and sales transactions. Every employee touching inventory must understand and follow these procedures. Non-compliance often results from unclear procedures, not intentional violations.

🔧 Create written Standard Operating Procedures (SOPs) document; distribute to all employees; require acknowledgment and training.
💡 Pro tip: Have procedures reviewed by your cannabis attorney before implementation. State requirements vary; legal review ensures your procedures meet your jurisdiction's specific requirements.
Step 2⚠️ Critical2-4 hours

Set Up Secure Data Backup and Access Controls

Establish redundant backups of all Metrc data, transaction records, and supporting documentation. Limit Metrc access to authorized personnel only. Maintain audit logs of who accessed records and when. This proves you have controls in place.

🔧 Cloud backup (Google Drive, Dropbox, AWS); Metrc user role management; audit log export.
💡 Pro tip: Regulatory audits specifically check backup procedures and access controls. Demonstrating robust controls significantly improves audit outcomes.
Step 3⚠️ Critical4-6 hours

Train All Staff on Compliance Requirements

Conduct formal training for all employees on compliance requirements, proper track-and-trace procedures, and consequences of non-compliance. Document that training occurred with attendance records.

🔧 Formal training session; written training materials; attendance documentation; signed acknowledgment forms.
💡 Pro tip: Annual refresher training is excellent insurance. Regulations change; keeping staff current prevents unintentional violations.
Step 4⚠️ Critical1-2 hours daily

Establish Daily Inventory Reconciliation Process

Implement daily procedures to reconcile Metrc/track-and-trace records with physical inventory counts. Address any discrepancies immediately. This catches errors or theft immediately rather than discovering large variances during audits.

🔧 Spreadsheet tracking or dedicated inventory management software; scheduled daily reconciliation.
💡 Pro tip: Variance threshold: any discrepancy >1% should trigger investigation. Most legitimate variance is <0.5%; larger gaps suggest process issues or problems.
Step 5⚠️ Critical1-2 hours daily

Document All Product Movements

Metrc requires detailed documentation of every product movement from cultivation to retail sale. Ensure every transaction is properly entered in Metrc with complete information before products move locations.

🔧 Metrc transaction entry; transportation manifests; receiving documentation.
💡 Pro tip: Never move products without Metrc approval first. Some states allow manifest transfer; understand your specific requirements.
Step 6⚠️ Critical2-4 hours weekly

Manage Lab Testing Coordination

Coordinate with licensed testing labs to ensure all products are tested per state requirements before retail sale. Maintain testing documentation in Metrc and physical files. Follow required sampling procedures (random selection, representative sampling, etc.).

🔧 Lab coordination procedures; testing schedule; Metrc testing integration; physical file archival.
💡 Pro tip: Testing is the most detailed and regulated process. Ensure procedures strictly follow state sampling requirements or tests may be rejected.
Step 7⚠️ Critical1-2 hours weekly

Track and Archive All Purchase Documentation

Maintain detailed records of all product purchases from licensed suppliers, including invoices, manifests, testing results, and cost documentation. Archive these for minimum 7-10 years (verify your state's requirement).

🔧 Document scanning and archival system; organized file structure.
💡 Pro tip: Auditors will request purchase documentation first. Clean, organized records save significant time and reduce audit stress.
Step 8⚠️ Critical1-2 hours daily

Manage Sales and Customer Records

For retail locations, maintain detailed sales records including customer identification (if required), products sold, quantities, prices, and transaction dates. Some states require customer tracking; verify your jurisdiction's requirements.

🔧 POS system with compliance features (Leaf Trade, etc.); customer database; Metrc integration.
💡 Pro tip: Customer privacy is important; data security is critical. Implement controls ensuring customer data is secure and not accessible to unauthorized staff.
Step 9⚠️ Critical1-2 hours monthly

Maintain Waste and Destruction Records

Document all waste disposal and plant destruction per state requirements. Some states require specific procedures for destructing unsold product or failed harvest. Maintain photographic evidence and signed documentation.

🔧 Destruction SOP; photography of destruction process; signed witnessing; Metrc destruction entry.
💡 Pro tip: Waste documentation is critical because it's where compliance violators hide product diversion. Rigorous documentation here proves you have nothing to hide.
Step 10⚠️ Critical1-2 hours monthly

Document Facility and Security Controls

Maintain records of facility security measures: surveillance cameras, access logs, security personnel, lighting, fencing, alarms. Photograph facility regularly to document continued compliance.

🔧 Security system documentation; access logs; surveillance footage backup; facility photographs.
💡 Pro tip: Facility security is often the first thing auditors inspect. Documented, maintained security demonstrates you take compliance seriously.
Step 11⚠️ Critical2-4 hours quarterly

Track License Status and Renewal Requirements

Maintain calendar tracking all license expiration dates, renewal requirements, and compliance deadlines. Submit renewals well before deadlines with all required documentation. Late renewals or lapses trigger enforcement action.

🔧 Compliance calendar; renewal checklist; document organization system.
💡 Pro tip: Set reminders 60 days before expiration. Some states have complex renewal requirements; plan ahead to ensure timely submission.
Step 12⚠️ Critical8-12 hours quarterly

Conduct Internal Audit and Prepare for Regulatory Inspection

Quarterly, conduct internal audit comparing your records against Metrc/track-and-trace system. Address any discrepancies. Maintain compliance checklist documenting you've followed procedures. This preparation significantly improves audit outcomes.

🔧 Internal audit checklist; Metrc reconciliation; compliance documentation review.
💡 Pro tip: Proactive internal auditing catches problems before regulators do. When inspectors arrive, having clean audits and organized documentation shows professional management.

⚠️ Common Mistakes to Avoid

Delayed Metrc entry—entering transactions days later creates confusion and increases error risk. Enter immediately when transactions occur.

Inconsistent inventory management—skipping daily reconciliation allows variances to accumulate. Daily reconciliation catches problems immediately.

Poor documentation—failing to maintain supporting documents creates problems during audits. Regulators require proof; documentation provides it.

Inadequate staff training—employees cause most compliance violations through misunderstanding. Formal training prevents unintentional violations.

Ignoring variance investigation—large inventory variances suggest problems; investigating immediately prevents small problems from becoming audit failures.

✅ Expected Results

Properly managed compliance systems pass regulatory audits with minimal findings. Most audit failures result from lack of documentation or poor procedures, not intentional violations. Businesses with strong compliance systems report: lower audit stress, faster audit completion, fewer enforcement actions, and improved relationships with regulators.

Discover 50+ more AI profit methods in The AI Profit Playbook.

The AI Profit Playbook covers freelancing, agencies, SaaS, automation, and more — each with step-by-step frameworks, tool recommendations, and quickstart checklists.

Get The Complete AI Profit Playbook — $37

🔒 30-Day Money-Back Guarantee — Instant Access

Free Newsletter

Get Free AI Profit Tips Every Week

Liked this Cannabis Industry resource? Join our free newsletter for weekly AI strategies, tool breakdowns, and income ideas.

No spam, ever. Unsubscribe anytime.