Cannabis Compliance Audit Preparation Checklist [FREE PDF]

State cannabis regulators conduct announced and unannounced compliance audits that evaluate licensing documentation, seed-to-sale tracking accuracy, employee records, security system functionality, and standard operating procedure adherence. Failures during regulatory audits can result in civil penalties, license suspension, or revocation under state cannabis statutes, making proactive internal audit preparation essential for license protection. This checklist helps compliance managers systemati

  • Industry: Cannabis Dispensary
  • Frequency: Quarterly
  • Estimated Time: 90-120 minutes
  • Role: Compliance Manager
  • Total Items: 42
  • Compliance: State Cannabis Regulations - License Requirements and Operational Standards, DEA Controlled Substances Act 21 U.S.C. § 812 - Schedule I Classification Context, OSHA 29 CFR 1910.1200 - Hazard Communication Standard, FDA cGMP Guidelines 21 CFR Part 111 - Current Good Manufacturing Practice, State Department of Health Requirements - Cannabis Product Safety Standards

Licensing & Regulatory Documentation

Verify that all required licenses, permits, and regulatory postings are current, valid, and accessible for review.

  • Is the current state cannabis license posted in a conspicuous location visible to the public and to regulators upon entry?
  • Are all local municipal business licenses and zoning permits current and available for immediate review?
  • Is the cannabis license renewal application submitted or in process at least 60-90 days before the license expiration date?
  • Are all regulatory change notices, correspondence from the state cannabis authority, and compliance orders maintained in an organized file?
  • Is proof of current general liability and product liability insurance maintained and meeting state minimum coverage requirements?

Seed-to-Sale Inventory Tracking

Confirm that the state-mandated track-and-trace system is current, accurate, and that physical inventory reconciles with system records.

  • Are all cannabis products in inventory currently tagged with RFID or barcode tags registered in the state track-and-trace system (e.g., Metrc, BioTrack)?
  • Has a physical inventory count been completed within the past 30 days and documented variances reconciled in the track-and-trace system?
  • Are all cannabis waste events (trim, expired product, damaged goods) recorded in the track-and-trace system within required timeframes?
  • Are all transfers, sales, and receipts of cannabis recorded in the track-and-trace system within required reporting windows?
  • Are transport manifests generated through the state track-and-trace system for all cannabis transfers between licensed facilities?
  • Is the current physical count of all cannabis products within the acceptable variance threshold compared to track-and-trace records?

Employee Records & Compliance Training

Verify that all employee state registry badges, background checks, and mandatory compliance training records are current and organized.

  • Do all employees who handle cannabis have a current, valid state cannabis employee badge or registration card on their person while working?
  • Are background check records on file for all current employees showing state-required screening was completed prior to hire?
  • Have all employees completed state-required responsible vendor or cannabis compliance training with current certificates on file?
  • Are employee roles, responsibilities, and authorized access levels documented and current for all staff in the facility?
  • Are OSHA required workplace safety postings (including OSHA 300 injury log) current and posted in employee common areas?

Product Compliance & Labeling

Review cannabis product labeling, packaging, COA documentation, and compliance with potency and safety testing requirements.

  • Do all cannabis products for sale have current Certificates of Analysis (COAs) from a state-licensed testing laboratory confirming passing test results?
  • Are all cannabis product labels compliant with state-required label elements including THC/CBD content, net weight, universal symbol, and required warnings?
  • Are all cannabis products packaged in child-resistant packaging meeting state standards and, where applicable, ASTM D8244 or CPSC 16 CFR Part 1700 requirements?
  • Are products with approaching expiration or with failed or expired COAs segregated, labeled hold, and removed from salable inventory?
  • Are purchase limits per customer per transaction being enforced and documented at point of sale in compliance with state daily purchase limits?

Security Systems & Access Control

Confirm that security cameras, access control, alarm systems, and security logs meet state cannabis security requirements.

  • Are all required security cameras operational, properly aimed, providing the required resolution, and recording continuously 24/7?
  • Is video footage from the past required retention period (typically 30-90 days) accessible and retrievable within 72 hours of a regulatory request?
  • Does the access control system log all entries and exits to restricted areas including vault, cultivation, and processing rooms with employee-specific credentials?
  • Are cannabis vaults or safes used for overnight product storage rated at or above state-required standards and equipped with independently alarmed sensors?
  • Is a current security plan on file that reflects the actual facility layout, camera positions, access control zones, and alarm system configurations?
  • Are security incident reports for the review period completed, filed, and reported to the state cannabis authority within required notification windows?

Standard Operating Procedures & Quality Systems

Verify that SOPs are documented, current, accessible, and that operations are consistently performed in accordance with written procedures.

  • Are written SOPs on file for all regulated operational activities including receiving, storage, sales, waste disposal, and security breach response?
  • Are SOPs reviewed and updated at least annually or whenever operational, regulatory, or personnel changes occur that affect the procedure?
  • Are employee signatures or acknowledgment records confirming SOP training maintained in personnel files for all current staff?
  • Are deviation, non-conformance, and corrective action records documented for any instances where operations deviated from approved SOPs?
  • Is a product recall SOP documented, tested through tabletop exercise within the past year, and capable of executing a mock recall within required state timeframes?

Financial Records & Regulatory Reporting

Confirm that required financial records, tax filings, and regulatory reports are current, complete, and organized for regulator access.

  • Are state cannabis excise tax filings and payments current with no outstanding balances or delinquencies?
  • Are all point-of-sale transaction records retained for the minimum required period (typically 3-7 years) and accessible for regulatory review?
  • Have all required periodic reports (monthly, quarterly, or annual operational reports) been submitted to the state cannabis authority by their due dates?
  • Are ownership and financial interest records current and have all changes in ownership or control been reported to the state cannabis authority within required timeframes?
  • Is documentation confirming IRS Form 280E tax compliance strategy reviewed and maintained with legal counsel advice on file?

Health, Safety & Environmental Compliance

Verify workplace health and safety programs, chemical handling documentation, and environmental compliance obligations are current.

  • Is a current written Hazard Communication Program maintained and compliant with OSHA requirements, including a complete chemical inventory list?
  • Are Safety Data Sheets current (issued within 5 years), organized by chemical, and accessible to employees in their work areas during all shifts?
  • Are OSHA Form 300 injury and illness logs maintained year-to-date and available for the past five years?
  • Are cannabis waste disposal records documenting destruction method, witnessed destruction, and licensed disposal contractor maintained for all waste events?
  • Has a workplace injury and illness prevention program (IIPP or equivalent) been established, documented, and communicated to all employees?

Related Cannabis Compliance Checklists

Related Dispensary Checklists

Why Use This Cannabis Compliance Audit Preparation Checklist [FREE PDF]?

This cannabis compliance audit preparation checklist [free pdf] helps cannabis dispensary teams maintain compliance and operational excellence. Designed for compliance manager professionals, this checklist covers 42 critical inspection points across 8 sections. Recommended frequency: quarterly.

Ensures compliance with State Cannabis Regulations - License Requirements and Operational Standards, DEA Controlled Substances Act 21 U.S.C. § 812 - Schedule I Classification Context, OSHA 29 CFR 1910.1200 - Hazard Communication Standard, FDA cGMP Guidelines 21 CFR Part 111 - Current Good Manufacturing Practice, State Department of Health Requirements - Cannabis Product Safety Standards. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Cannabis Compliance Audit Preparation Checklist [FREE PDF] cover?

This checklist covers 42 inspection items across 8 sections: Licensing & Regulatory Documentation, Seed-to-Sale Inventory Tracking, Employee Records & Compliance Training, Product Compliance & Labeling, Security Systems & Access Control, Standard Operating Procedures & Quality Systems, Financial Records & Regulatory Reporting, Health, Safety & Environmental Compliance. It is designed for cannabis dispensary operations and compliance.

How often should this checklist be completed?

This checklist should be completed quarterly. Each completion takes approximately 90-120 minutes.

Who should use this Cannabis Compliance Audit Preparation Checklist [FREE PDF]?

This checklist is designed for Compliance Manager professionals in the cannabis dispensary industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists