Cannabis Due Diligence Checklist for Deal Readiness

Quick answer: Preparing a cannabis company for due diligence means proving that the business described in the transaction materials matches its licenses, ownership disclosures, financial records, contracts, facilities, inventory, operating controls and management capabilities. A well-organized data room helps, but resolving contradictions before buyers find them matters more.

This seller-side readiness framework identifies the major evidence categories and operating questions that commonly affect cannabis transactions. Buyers and investors evaluating companies across industries can use the broader operational due diligence checklist. Neither guide replaces legal, tax, accounting, securities, environmental or specialist diligence.

Start with the decision the deal must support

A sale, investment, partnership, recapitalization and distressed-asset transaction do not require identical preparation. Define the contemplated structure, expected buyer, included entities and assets, target timing and principal deal thesis before building the diligence process.

• Identify the entities, licenses, facilities, brands, contracts and assets expected to be included.
• Clarify whether the transaction contemplates equity, assets, intellectual property, management rights or another structure.
• List the regulatory, contractual and financing approvals that may affect closing.
• Separate confirmed facts from management assumptions and forward projections.
• Assign one internal diligence lead with authority to coordinate advisers and information owners.

Seven readiness workstreams

1. Reconcile entities, owners and financial interests

The ownership story should be consistent across formation documents, cap tables, financing agreements, tax records, local permits and state licensing disclosures. Differences that appear minor internally can create significant diligence questions.

• Create a current entity chart showing direct and indirect ownership.
• Reconcile voting, economic, management and protective rights.
• Identify options, warrants, convertible instruments and contingent ownership.
• Review related-party arrangements and management agreements with counsel.
• Confirm that state and local ownership and financial-interest records are current.

California’s DCC renewal guidance requires licensees to verify that owner and financial-interest information is accurate and directs licensees to report changes through the applicable modification process. Transaction counsel should determine how the proposed structure interacts with current state and local requirements.

2. Build a defensible licensing schedule

Do not rely on a spreadsheet that merely says “active.” For every material license and permit, capture the legal holder, premises, authorized activity, status, expiration, renewal timing, conditions, related local authorization and known change requests.

• Compare the license schedule with the DCC’s public license search and the issuing local authority.
• Confirm that actual activities occur within the authorized scope and premises.
• Collect renewal submissions, approvals, correspondence and modification requests.
• Identify ownership, control, premises or operational changes not yet reflected in agency records.
• Have counsel map approvals and timing required for the contemplated transaction.

3. Make the financial narrative traceable

Buyers will test whether revenue, margin, inventory, cash and liabilities reconcile across systems. Prepare the bridge before the diligence team builds one from incomplete information.

• Reconcile financial statements to tax filings, bank activity and supporting ledgers.
• Separate recurring performance from owner expenses, one-time events and unsupported adjustments.
• Explain revenue concentration, discounts, returns, credits and channel economics.
• Reconcile physical inventory with regulated inventory, internal systems and accounting.
• Schedule debt, liens, unpaid obligations, litigation exposure and related-party balances.
• Document the assumptions behind forecasts and post-close capital needs.

4. Prove the operation behind the projections

A forecast is only as credible as the facility, equipment, people, systems and working capital required to produce it. Connect commercial projections to actual operating capacity.

• Map current throughput, constraints, downtime and realistic expansion capacity.
• Organize equipment lists, maintenance history, leases and significant capital requirements.
• Confirm that staffing plans and management bandwidth support the projected scale.
• Test whether SOPs and records match the work performed.
• Identify vendors, customers, software or individuals whose loss would materially interrupt operations.

The article on why cannabis SOPs fail in real operations explains how procedures and the operating system can drift apart.

5. Organize compliance evidence—not just policies

Policies describe intent. Diligence should also examine evidence of performance and how the company responds when controls fail.

• Collect inspection results, citations, notices, corrective actions and closure evidence.
• Organize inventory reconciliations, exception reports and track-and-trace records.
• Prepare security, testing, quality, waste, transport and training evidence applicable to the license.
• Identify complaints, recalls, thefts, losses, embargoes, rejected product and significant incidents.
• Review public compliance-action records for the company and relevant counterparties.

Use the cannabis compliance audit checklist to understand the major control categories, then tailor the review to the applicable licenses and transaction risks.

6. Build a usable data room

A strong data room is controlled, indexed and understandable to someone outside the company. It should reduce friction without burying material issues in excessive files.

• Use a request list with document owner, status, review date and disclosure notes.
• Organize documents by entity and workstream with consistent filenames.
• Remove duplicates and clearly identify current versus historical versions.
• Apply appropriate access controls and coordinate privilege and confidentiality decisions with counsel.
• Maintain a question log so answers remain consistent across the transaction team.
• Do not alter, backfill or obscure records to improve appearance; explain known gaps accurately.

7. Resolve contradictions before the buyer finds them

Cross-document inconsistencies often matter more than an isolated missing file. Conduct a horizontal review across the transaction narrative and supporting evidence.

• Does the cap table agree with ownership and financial-interest disclosures?
• Do reported revenues agree with sales, banking, tax and inventory activity?
• Does the projected capacity agree with the facility, equipment, staffing and capital plan?
• Do contracts support the customer, supplier, brand and intellectual-property claims?
• Do written procedures agree with facility practices and actual records?
• Do the proposed transaction structure and timeline reflect regulatory and contractual dependencies?

The public checklist identifies where to look. Evaluating the significance of a contradiction, its effect on value or closing, and the right remediation sequence requires deal-specific analysis with the appropriate advisers.

The CannaShark engagement journey

1. Business Evaluation Call: discuss the transaction, decision, available information and whether a paid Diagnostic is the right next step.
2. Paid Business Performance Diagnostic™: examine the agreed business system and distinguish evidence, assumptions, open questions and material constraints.
3. Integrated deliverable and presentation: provide one deliverable package containing written findings and a prioritized 90-Day Roadmap, then present the evidence, dependencies and recommended sequence to leadership.
4. Execution choice: Self-Execute, use Guided 90-Day Execution, or select an Embedded 90-Day Buildout.

A typical Diagnostic takes approximately 1–3 weeks for a smaller company and 2–4 weeks for a larger company. Very large, highly complex or multi-entity organizations may require additional time. The schedule is confirmed during scoping and assumes timely access to the required people, records and systems.

Frequently asked questions

How early should a cannabis company prepare for due diligence?

Begin before formally entering the market or granting broad data-room access. Time is needed to reconcile records, obtain missing approvals, correct operational gaps and prepare accurate explanations without disrupting the business.

What is the difference between a data room and deal readiness?

A data room organizes information. Deal readiness tests whether that information is complete, consistent and capable of supporting the transaction narrative, valuation assumptions and post-close plan.

Can a California cannabis license simply be transferred to a buyer?

Transaction structures and required approvals are fact-specific. Ownership, control, entity, premises and local requirements may affect the available path. Qualified transaction counsel should evaluate the proposed structure under current state and local rules before the parties rely on it.

Should known problems be fixed or disclosed?

That decision should be coordinated with counsel and the transaction team. Operationally, the business should identify the issue, preserve accurate records and distinguish what has been corrected, what remains open and what the proposed remediation requires.

Does CannaShark replace legal, tax or accounting diligence?

No. CannaShark provides business, operational, financial and cannabis-industry consulting. Transactions may require legal, tax, accounting, securities, valuation, environmental and other specialist advisers.

Last reviewed: August 2026. This article provides general business information and does not constitute legal, tax, securities, accounting or investment advice.