Cannabis SOP Checklist for Compliant Operations

Quick answer: A complete cannabis SOP system should explain who performs each regulated task, when it happens, the exact steps, required records, escalation rules and the evidence that proves completion. At minimum, the library should address document control, security, access, inventory and track-and-trace, receiving, production, quality, packaging and labeling, transfers, waste, incidents, recalls, training, sanitation, maintenance and record retention.

This checklist is designed to help operators organize an inspection-ready SOP library. It is not a substitute for the rules that apply to your license type, state or local jurisdiction. Requirements change, and every procedure must match the licensed premises and the way the business actually operates.

What makes a cannabis SOP effective?

An SOP is not effective because it sounds formal. It is effective when a trained employee can follow it consistently, a manager can verify the result and an inspector can trace the work to reliable records.

Every procedure should identify:

• Purpose: the outcome or risk the procedure controls
• Scope: the locations, roles, products and activities covered
• Responsibility: who performs, verifies and approves the work
• Prerequisites: training, equipment, access or documents needed
• Procedure: clear steps in the order they occur
• Records: the form, log, system entry, image or report retained
• Exceptions: what requires escalation, quarantine or investigation
• References: related regulations, plans, forms and other SOPs
• Control data: owner, version, approval date and review date

The best SOPs are specific enough to control risk but simple enough to use during real operations.

1. Document control and governance SOPs

• SOP drafting, review, approval and release
• Document numbering, version control and revision history
• Controlled distribution and removal of obsolete copies
• Periodic review and change management
• Required forms, logs and record-retention rules
• Management review and corrective-action tracking

Without document control, employees may follow different versions of the same procedure. Maintain one approved source of truth and make current procedures accessible at the point of work.

2. Licensing and premises-control SOPs

• License posting and renewal calendar
• Monitoring local permits, conditions and business licenses
• Premises-diagram control and approval of facility changes
• Ownership and financial-interest change review
• Agency notices, inspections and response responsibilities
• Required reporting of material operational changes

The approved premises diagram should reflect the real facility. Proposed changes should be reviewed before construction, equipment relocation or operational use—not documented after the fact.

3. Security and access-control SOPs

• Employee, visitor, vendor and contractor access
• Keys, badges, alarm codes and credential termination
• Opening and closing procedures
• Limited-access areas and escort requirements
• Alarm response and law-enforcement notification
• Video surveillance operation, retention and retrieval
• Theft, loss, diversion and suspicious-activity response
• Cash handling, deposits and dual-control procedures

Security procedures should match camera coverage, door controls, storage areas and the actual movement of cannabis, employees and visitors through the premises.

4. Inventory and track-and-trace SOPs

• User access, role permissions and account security
• Tag receipt, storage, assignment and replacement
• Receiving and rejecting regulated inventory
• Package creation, adjustment, conversion and closure
• Production, packaging, sampling, testing and transfer entries
• Waste, destruction and disposal entries
• Daily exception review and error correction
• Physical inventory counts and documented reconciliation
• System outage and business-continuity procedures

California’s DCC self-inspection materials emphasize accurate track-and-trace records and documented inventory reconciliation. The procedure should state the reporting deadline for each event, the responsible role and how managers investigate differences between physical inventory and system records.

5. Receiving, storage and internal movement SOPs

• Transfer-manifest and transporter verification
• Seal, quantity, package, label and damage inspection
• Acceptance, rejection and discrepancy handling
• Quarantine and restricted inventory status
• Storage by product type and compliance status
• Environmental monitoring where required
• Internal movement and location control
• First-expire/first-out or other approved rotation method

The receiving record should connect the physical goods, transfer documentation, track-and-trace entry and internal inventory system.

6. Cultivation SOPs

• Plant and immature-lot identification
• Propagation, transplanting and canopy movement
• Irrigation, nutrient and environmental controls
• Pesticide approval, application and records
• Integrated pest management
• Harvesting, drying, curing, grading and trimming
• Harvest-batch creation and yield reconciliation
• Sampling, testing, remediation and disposition
• Water-source, power-source and waste controls

DCC’s cultivator self-inspection checklist covers inventory, track and trace, premises and cultivation plans, canopy, pesticides, water, power, light pollution, weighing devices and records. The SOP library should convert those obligations into assigned daily, weekly and event-driven tasks.

7. Manufacturing and production SOPs

• Approved formulas and master manufacturing protocols
• Pre-operational checks and line clearance
• Ingredient, component and packaging verification
• Equipment setup, operating parameters and shutdown
• Batch production records completed during the work
• In-process checks, expected yield and variance review
• Deviation, investigation and material-review procedures
• Quality-control release, rejection and quarantine
• Cleaning, sanitation and cross-contamination prevention

California manufacturers must maintain a written Master Manufacturing Protocol for each unique formula and batch size. DCC also requires batch production records that document the actual work performed and quality-control review.

8. Product quality, packaging and labeling SOPs

• Supplier and incoming-material approval
• Product Quality Plan development and maintenance
• Specification, label and packaging approval
• Packaging-line checks and label reconciliation
• Child-resistant and tamper-evident packaging verification
• Sample retention where applicable
• Testing coordination and certificate-of-analysis review
• Failed-test, remediation and retest controls
• Finished-goods release and status identification

Quality approval should be independent from the pressure to ship. Define who can release or reject a batch and what evidence must be complete before the status changes.

9. Distribution, transport and delivery SOPs

• Transfer planning and manifest creation
• Vehicle and driver authorization
• Loading, seal control and departure checks
• Route, stop and inventory documentation
• Delivery acceptance, rejection and return
• Sampling coordination and chain of custody
• Vehicle incident, theft, delay and emergency response
• Post-trip reconciliation and record retention

10. Retail and customer-facing SOPs

• Customer age and medicinal-status verification
• Opening, closing and register control
• Sales limits and prohibited sales
• Product display, storage and customer access
• Returns, complaints and adverse-event escalation
• Delivery inventory ledger and driver controls
• Discount, tax and receipt configuration
• End-of-day inventory, cash and sales reconciliation

Procedures should connect the point-of-sale system, physical inventory, track-and-trace records, accounting records and tax reporting so management can identify discrepancies early.

11. Waste, incident, complaint and recall SOPs

• Waste identification, storage, weighing and logging
• Destruction and disposal
• Theft, loss and diversion response
• Injury, fire, spill and equipment-failure response
• Consumer complaint and adverse-event intake
• Product hold, traceability and recall execution
• Agency notification and evidence preservation
• Root-cause investigation and corrective action

Incident procedures should specify who decides, who contacts regulators or counsel, what records are preserved and how affected product is identified and controlled.

12. Personnel, training and competency SOPs

• Pre-employment qualification and role assignment
• New-hire orientation
• Role-specific SOP training
• Safety, sanitation and security training
• Track-and-trace and system-access training
• Training effectiveness and competency checks
• Retraining after deviations or procedure changes
• Training records and expiration monitoring

A signature alone does not prove competency. Use observation, a practical demonstration, a knowledge check or supervised execution when the task presents meaningful compliance or safety risk.

13. Facilities, equipment and sanitation SOPs

• Preventive maintenance and calibration
• Cleaning and sanitation schedules
• Chemical approval, storage and use
• Pest-control monitoring
• Environmental and utility monitoring
• Equipment breakdown and product-impact review
• Contractor access and work control
• Facility inspection and repair documentation

How to audit the SOP library

Test each procedure against five questions:

1. Coverage: Does it address the applicable rule and operating risk?
2. Accuracy: Does it match the license, premises, equipment and systems?
3. Usability: Can the assigned employee perform it correctly?
4. Evidence: Does the procedure produce a reliable record?
5. Control: Can management detect and correct exceptions?

Then conduct a floor walk. Compare the SOP to what employees actually do, inspect the associated records and trace a sample transaction or batch from receipt through final disposition. The difference between the written system and the operating system is where many compliance failures begin.

For the most common implementation breakdowns behind that gap, read why cannabis SOPs fail in real operations.

Frequently asked questions

How many SOPs does a cannabis business need?

There is no universal number. The library should cover every regulated and operationally important activity for the license type, premises and business model. Combining closely related tasks can improve usability, but a single generic manual rarely provides enough control.

Can I use a cannabis SOP template?

A template can help establish structure, but it must be adapted to the jurisdiction, license, facility, equipment, systems and employee roles. A procedure that describes work the company does not perform can create risk rather than reduce it.

How often should cannabis SOPs be reviewed?

Set a periodic review cycle and also review procedures whenever regulations, equipment, products, premises, systems or responsibilities change. Deviations, complaints, recalls and audit findings should trigger targeted review.

What records should an SOP create?

The record depends on the task. Examples include system entries, inventory logs, batch records, training records, inspection forms, maintenance logs, surveillance exports, manifests, photographs and investigation reports.

What is the difference between an SOP and a policy?

A policy defines the rule or management expectation. An SOP explains the repeatable steps used to carry it out. Many operators need both, supported by forms, logs and role-specific work instructions.

How should a cannabis business prepare for an inspection?

Use the regulator’s current self-inspection materials, verify that the premises matches approved documents, test staff knowledge, reconcile inventory and records, retrieve requested evidence and correct gaps before the inspection.

Official compliance resources

• DCC cultivator self-inspection checklist
• DCC manufacturer self-inspection checklist
• DCC Master Manufacturing Protocol checklist
• DCC batch production record checklist
• DCC CannaConnect compliance resources

Last reviewed: August 2026. This checklist is educational and not legal advice. Confirm current state, local and license-specific requirements before implementation.