Cannabis testing laboratory.
Accredited, independent, defensible.

Testing-laboratory license work breaks cleanly into four operational areas. These are our named responsibilities — not coordination tasks. Where we own, we draft, file, validate, and close out. Where you own, we coordinate but the instrumentation and analyst-hiring decisions are yours.

Escalation path

When work crosses into privileged legal analysis — independence-violation disputes, accreditation appeals, COA-based litigation defense, enforcement appeals — we coordinate with your counsel or introduce one from our retained network. The engagement letter names this boundary. We do not practice law.

How we draw the boundary with you

You own: instrumentation selection (which HPLC platform, which triple-quad, which ICP-MS), lab director and analyst hiring, commercial-account strategy, pricing. We own: the four areas above. Where a decision is yours but we have a clear recommendation — start accredited scope narrow and expand at the first surveillance assessment rather than attempt the full regulated panel on day one — we document the recommendation with rationale.

What’s explicitly out of scope

Instrument procurement, lab-staff recruitment, facility design beyond the regulatory minimum, commercial-pricing strategy, and any litigation work are not within this engagement.

A Type 8 application runs longer than any other DCC license type because two regulators — the accreditor and DCC — review the same underlying body of work in sequence. The path below is the path. There is no portal-only shortcut, and there is no DCC issuance without an in-hand ISO/IEC 17025 certificate covering the methods you intend to report.

The playbook

• Month 1 — Accreditation strategy. We pick the accreditor (A2LA, ANAB, or PJLA) against your analyte scope, instrumentation, and timeline. We draft the proposed scope of accreditation listing every method and matrix the lab will report and confirm it matches the regulated panel under CCR 15700-15730. We open the accreditor file, schedule the assessment slot 4-6 months out, and start the quality-management manual to ISO/IEC 17025 Clauses 4 through 8.
• Month 2-4 — Method validation & SOPs. We build validation packages for every regulated analyte class — cannabinoids and terpenes, residual solvents under CCR 15723, Category I and II pesticides under CCR 15719, microbials under CCR 15718, heavy metals under CCR 15724, mycotoxins, moisture, water activity, and foreign material. For dried flower and non-infused pre-rolls we deploy DCC's standardized HPLC SOP for cannabinoid quantitation effective January 1, 2024 and document method verification on your specific instruments. We file the Form 21 sampling SOP (DCC-LIC-021), Form 22 sample-preparation SOP (DCC-LIC-022), Form 23 test-methods SOPs, and the Form 24 data-package cover sheet at the same revision level the accreditor will see.
• Month 5-6 — Accreditation on-site assessment. The accreditor visits, runs witness audits on selected methods, reviews the quality manual, audits the method-validation packages, inspects calibration and reference-material control, and reviews internal-audit and management-review records. Non-conformances surface here and we draft the response inside the accreditor's closeout window. Accreditation issues with the scope listed; that scope becomes the scope DCC sees.
• Month 7 — DCC application filing. We file the Type 8 application through CLEaR with the ISO/IEC 17025 certificate, the Form 21-24 SOP suite, the BPC 26053 and CCR 15004.1 lab-independence attestation with cap-table reconciliation, the Form 8113 surety bond at the $5,000 minimum payable to the State of California, the Form 9101 Owner Submittal for each Owner at the CCR 15003 threshold, and the Form 9205 Labor Peace Agreement attestation (required at 10 or more employees per the July 2024 threshold change, lowered from 20). Premises diagram to CCR 15006, surveillance plan to CCR 15044-15047, waste plan to CCR 15048.
• Month 8-10 — Deficiency response + pre-licensure inspection. Every DCC notice is answered inside the CCR 15002(d) ten-business-day window. The pre-licensure inspection covers physical premises, sample-receiving area, secure-storage room, reference-material inventory, instrument-calibration records, sampler qualification files, and document control. We stage the lab to match the diagram and the SOP suite before the inspector arrives.
• Month 10+ — License issuance & first-COA cutover. License issues, METRC integration activates, the first compliance COAs route through the production system. The lab runs its first 30 days under a heightened-QC regime so any drift surfaces before it touches a manufacturer's batch decision. We hand off a Form 29 (DCC-LIC-029) modification calendar covering scope additions, key-personnel changes, and accreditation-renewal dates, plus the COA-reporting protocol — within one business day of test completion to METRC and to testinglabs@cannabis.ca.gov.

Duration and rhythm

Ten to fourteen months is the realistic floor for a lab building from zero, and most engagements run on a monthly cadence with weekly check-ins during the accreditation assessment window and the DCC deficiency-response window. Existing labs adding cannabis methods to an in-place ISO/IEC 17025 program compress to four to eight months because the quality manual, internal-audit program, and document-control system already exist and only the cannabis-specific methods, sampling SOP, and independence package are new. The longest poles are accreditor calendar availability and DCC's pre-licensure inspection scheduling — both move on weeks-of-notice rather than days.

Who you work with each phase

One named licensing coordinator owns the engagement from intake to license issuance — the same person on every status call, every accreditor exchange, every DCC notice. A method-validation specialist joins at month 2 for the analyte-specific SOPs and stays through accreditation closeout. A sampling-SOP and chain-of-custody specialist drafts Forms 21 and 22 and qualifies the field samplers in months 3-5. The independence-attestation work runs in parallel with cap-table reconciliation in month 6. Where a matter touches counsel territory — an independence-violation dispute, an accreditation appeal, COA-based litigation defense — we coordinate with your retained counsel on a single record rather than running parallel.

When we finish this testing-laboratory engagement, you have a defined set of documents, accredited methods, and filed permits in hand. These are not summary memos. They are accreditation certificates, validated method packages, qualified samplers, a running LIMS, and a tracked record defensible under ISO surveillance, DCC inspection, and the scrutiny of a skeptical manufacturer's QA lead.

The ten outputs, in detail

• ISO/IEC 17025 accreditation package. Accreditor-specific application, quality management manual, method documentation index, on-site assessment preparation pack, non-conformance response, accreditation certificate. Scoped to every regulated analyte the lab intends to report. The accreditation is in hand before DCC filing — the CCR 15700 sequence requirement.
• Method validation packages. Validation for cannabinoids and terpenes, residual solvents (CCR 15723), Category I and II pesticides (CCR 15719), microbials (CCR 15718) covering Aspergillus species (A. flavus, A. fumigatus, A. niger, A. terreus), Salmonella, and STEC E. coli, heavy metals (Pb, As, Cd, Hg per CCR 15724), mycotoxins (aflatoxins B1/B2/G1/G2 and ochratoxin A), moisture, water activity, foreign material, and homogeneity for edibles. Each validation includes accuracy, precision, selectivity, LOD/LOQ, linearity, range, and robustness — with AOAC, USP/NF, or peer-reviewed reference cited. For dried flower and non-infused pre-rolls the standardized HPLC SOP for cannabinoid quantitation effective January 1, 2024 replaces in-house methods and is verified on your specific instruments with documented audit trail of the transition.
• CCR 15710 field sampling SOP. Sampling-plan design, increment calculation per batch size, container specification, transport protocol, sampler qualification file. Signed sampler attestations and training log.
• CCR 15720 chain-of-custody SOP. End-to-end chain from field intake through sub-sampling, sample preparation, analytical run, archive, and disposal. Integrated with LIMS so every custody event generates an audit record.
• Reference materials program. Traceable reference standards for every validated analyte, inventory log with expiration dates, storage conditions, receiving records, and secondary-standard verification where applicable.
• QC program. Method-QC checks on every run (blanks, LCS, matrix spikes, duplicates). Matrix QC across sample types. Proficiency-testing enrollment with documented acceptable-performance history. Deviation and CAPA protocol.
• COA template & reporting workflow. Certificate-of-analysis template bearing the lab's ISO/IEC 17025 accreditation reference, sample identification (METRC package ID, batch ID, sampler name and date), method references, results per analyte against regulatory limits, total THC and total CBD calculated per regulation, LOD/LOQ values, analyst and QC-reviewer signatures, plus the COA reporting workflow — within one business day of test completion to METRC and to testinglabs@cannabis.ca.gov per CCR 15730.
• Independence verification. BPC 26053 independence attestation with cap-table reconciliation, FIH diagram, and documented no-overlap with any cannabis licensee the lab serves. Annual refresh protocol.
• LIMS integration. Laboratory information management system configured for cannabis-specific workflows, METRC sample ID handling, chain-of-custody capture, analytical data import, QC monitoring, and COA generation.
• Pre-inspection drill. DCC pre-licensure walkthrough covering physical premises, secure sample storage, reference-material inventory, document control, personnel records, and the first week of post-issuance operational readiness.

Format and delivery

Every SOP, method-validation package, and quality-manual section is delivered as a controlled document with revision history. Document control follows ISO 17025 conventions. All records retained per CCR 15037 and ISO 17025 retention rules, whichever is longer.

Defensibility anchor

Every recommendation cites a specific authority. BPC 26053 for independence. CCR 15004.1 for operational independence. CCR 15700-15730 for lab operations. CCR 15710 for sampling. CCR 15720 for chain-of-custody. CCR 15718, 15719, 15723, 15724 for analyte-specific rules. CCR 15730 for COA reporting cadence. ISO/IEC 17025 Clauses 4-8 for quality management. AOAC and USP/NF for method references. If the accreditor, DCC, or a manufacturer's QA lead asks “why did you do it this way?” the citation is in the document, not in a memo.

What’s not included

Instrument procurement, lab-staff recruitment, commercial-pricing strategy, and any privileged legal analysis (accreditation appeals, COA-based litigation, enforcement defense) are explicitly outside this scope. Where those are needed, we coordinate with retained counsel or introduce the appropriate specialist.

Deliverables are what we produce. Outcomes are what they enable. A Type 8 license on its own is paper. The outcomes below define a lab that opens its receiving door on Day 1, runs the regulated panel against an accredited scope, issues a defensible COA inside one business day, and survives the moment a manufacturer's QA lead, an accreditor surveillance auditor, or a DCC inspector asks the hardest question in the room.

• Accredited before DCC issues. ISO/IEC 17025 accreditation granted by a recognized accreditor (A2LA, ANAB, or PJLA) covering every regulated analyte class the lab will report — cannabinoids, terpenes, residual solvents, Category I and II pesticides, microbials, mycotoxins, heavy metals, moisture, water activity, and foreign material. Accreditation in hand before the DCC application is filed; the sequence is the sequence under CCR 15700-15730. The on-site assessment closes without conditional findings that would delay DCC issuance, and the scope on the accreditation certificate matches the scope on the Type 8 application line for line.
• Validated against the regulated panel. Every analyte the lab reports has a validated method on file with accuracy, precision, selectivity, LOD/LOQ, linearity, range, and robustness data — with the AOAC, USP/NF, or peer-reviewed reference cited. For dried flower and non-infused pre-rolls the standardized HPLC SOP for cannabinoid quantitation effective January 1, 2024 is in place and verified on your specific instruments. The QC program runs method blanks, laboratory-control samples, matrix spikes, duplicates, and proficiency-test rounds on a documented cadence, with deviation and CAPA protocols when a control fails.
• Independent under BPC 26053 and CCR 15004.1. No Owner, Financial Interest Holder, or control-person relationship with any cannabis licensee the lab serves. Cap-table reconciled, financial relationships documented, independence attestations signed and refreshed annually. No revenue-share, profit-share, discounted-testing, or shared-service arrangement that compromises lab independence under CCR 15004.1. No conflict-of-interest finding at renewal, at accreditor surveillance, at DCC inspection, or in litigation three years from now.

How we measure

Outcomes are visible in three places: the accreditor's scope certificate, DCC's licensee dashboard, and the lab's first 90 days of COA timeliness data. Accreditation is a binary — granted or not, scope listed or not. DCC license issuance is a binary — on the licensee dashboard or not. COA timeliness is the operating signal: every result reported within one business day of test completion to METRC and to testinglabs@cannabis.ca.gov, every data package signed by an analyst and a QC reviewer, every COA issued without subsequent amendment. Labs with clean first-90-days COA logs draw fewer DCC inquiries; labs with late or amended COAs draw more.

Post-engagement review

At 90 days post-issuance we run a structured review covering accreditation surveillance preparation, the proficiency-testing calendar, the Form 29 modification log, and the cap-table independence refresh. Year-one accreditation surveillance is calendared 6 months ahead. The Form 29 (DCC-LIC-029) calendar covers any scope additions, key-personnel changes (lab director, QA manager), facility changes, and accreditation-status changes. Where the operator continues with our Ongoing Compliance Retainer, the same coordinator carries forward; where the operator moves to in-house, we hand the artifact set over against the document-control index so revision history continues uninterrupted.

No opinion-based lab compliance. The Type 8 packet is governed by four overlapping authorities: the Business & Professions Code (statutory framework under MAUCRSA), CCR Title 4 Division 19 (DCC's operational regulations for testing labs), ISO/IEC 17025 (the international accreditation standard), and the published reference-method bodies (AOAC, USP/NF, peer-reviewed methods) for each analyte. Every form, every SOP, every COA below resolves to one of those four.

Business & Professions Code (statute)

• BPC 26050 — License classifications. Defines the Type 8 testing-laboratory classification and its position within the 28-subtype DCC license framework. The Type 8 license authorizes operation of a cannabis testing laboratory and nothing else.
• BPC 26053 — Lab independence. Prohibits a Type 8 licensee from holding any other DCC license type, and prohibits ownership, financial interest, or control overlap between a testing lab and any cultivator, manufacturer, distributor, retailer, microbusiness, or event organizer the lab serves. The single most-cited statute in lab independence enforcement.
• BPC 26100 — Required testing. Establishes the requirement that all cannabis goods sold in California pass laboratory testing before retail sale. Every COA the lab issues exists because of this section.

California Code of Regulations Title 4 Division 19 (DCC operational rules)

• CCR 15004.1 — Lab independence operations. Operationalizes BPC 26053 — prohibits revenue-share, profit-share, bonus tied to test outcomes, and discounted testing offered to one licensee that is not equally available to all. The compliance backbone of every independence audit.
• CCR 15700 — Testing-laboratory license requirements. The umbrella section for Type 8 licensure. Establishes the ISO/IEC 17025 accreditation prerequisite, the application-content standards, and the sequencing requirement that accreditation precedes DCC licensure.
• CCR 15710 — Sampling SOP. Field sampling protocol — the licensed lab's sampler (not the distributor) collects representative samples at the distributor's licensed premises with documented chain of custody, statistically valid sample size, and METRC sample-package creation. Form 21 (DCC-LIC-021) is the implementation document.
• CCR 15718 — Microbial impurities testing. Action levels for Aspergillus species (A. flavus, A. fumigatus, A. niger, A. terreus), Salmonella, and Shiga-toxin-producing E. coli. Aspergillus is the most-cited microbial fail in California.
• CCR 15719 — Residual pesticides testing. Category I pesticides at zero-tolerance and Category II pesticides at named action levels — currently 66 analytes, expanding under DCC's active 2025-2026 pesticide rulemaking (docket DCC-2025-03-R) following the December 2024 DPR memo recommending revised action levels.
• CCR 15720 — Chain of custody. Every sample is traceable from field intake through sub-sampling, analytical run, archive, and disposal. Integrated with the lab's LIMS so every custody event generates an audit record.
• CCR 15723 — Residual solvents and processing chemicals. Required only for solvent-extracted concentrates. Class 1 solvents (benzene, ethylene oxide) at very low limits; Class 2 and 3 solvents at higher action levels per the regulation.
• CCR 15724 — Cannabinoid, terpene, heavy metal, mycotoxin, moisture, water-activity, and foreign-material testing. The omnibus analyte-specific section: heavy metals (Pb, As, Cd, Hg) by inhalation vs. other routes, mycotoxins (aflatoxins B1/B2/G1/G2 and ochratoxin A), moisture ≤ 13% and water activity ≤ 0.65 Aw on flower, and the ±10% label-deviation tolerance for total THC and total CBD.
• CCR 15730 — Notifications and reporting. COA reporting cadence — within one business day of test completion to METRC and to testinglabs@cannabis.ca.gov. Result amendments require DCC permission; informal amendments are a serious violation.

DCC Forms (the operational documents)

• Form 21 (DCC-LIC-021) — Sampling SOP. Lab's field-sampling SOP covering personnel qualifications, sampling-plan design, increment calculation, sample size, container specification, transport protocol, and sampler attestations.
• Form 22 (DCC-LIC-022) — Sample Preparation SOP. Per-matrix preparation protocol — flower homogenization, concentrate aliquoting, edible-matrix dispersal, tincture dilution — with cross-contamination control and aliquot retention.
• Form 23 — Test Methods SOPs. One per analyte/matrix combination, each validated and verified at the lab's instruments. For dried flower and non-infused pre-rolls the standardized HPLC SOP for cannabinoid quantitation effective January 1, 2024 replaces in-house methods.
• Form 24 — Data Package Cover Page and Checklist. Requirements for the complete data package supporting every COA — chain of custody, prep records, run sequence, raw data, calibration data, QC samples, internal-standard recoveries, and reviewer signatures.
• Form 29 (DCC-LIC-029) — Notifications and Requests Regarding Testing Laboratories. The lab-specific modification form for adding/removing methods or analytes from scope, accreditation-status changes, key-personnel changes (lab director, QA manager), facility changes, and special requests. Distinct from Form DCC-LIC-027, which handles general (non-lab-specific) modifications.
• Form 9101 — Commercial Cannabis Owner Submittal. One per Owner at the ≥20% CCR 15003 threshold, including officers and directors regardless of percentage. Includes criminal-history narrative and Live Scan acknowledgement.
• Form 9205 — Labor Peace Agreement Notarized Statement. Required at 10 employees or more (lowered from 20 in July 2024). Either the executed LPA signature page or the notarized attestation to enter into one within 60 days of hiring the 10th employee.
• Form 8113 — Commercial Cannabis Licensee Bond. Surety bond at the $5,000 minimum per premises, payable to the State of California, on a CA-licensed surety carrier — required of every DCC licensee, not distribution-only.

ISO/IEC 17025 and reference-method bodies

• ISO/IEC 17025 (Clauses 4-8) — General requirements for the competence of testing and calibration laboratories. The accreditation standard. Covers structural, resource, process, and management-system requirements — staff competence, equipment calibration, validated methods, measurement uncertainty, document control, internal audit, management review, CAPA, and impartiality.
• AOAC International — Official Methods of Analysis. Reference methods for many analyte/matrix combinations, particularly heavy metals, microbials, and pesticides. Cited inside method-validation packages.
• USP/NF (United States Pharmacopeia / National Formulary). Reference monographs and analytical methods, particularly for residual solvents (USP <467>) and microbial limits.

How the authorities interact

The four authority layers stack in sequence and each blocks the next. ISO/IEC 17025 accreditation must issue first — it is the prerequisite for the Type 8 application under CCR 15700, and the accreditation scope sets the analytes the lab can later report. The DCC Type 8 license then issues against that accreditation, with BPC 26053 and CCR 15004.1 enforcing the independence boundary that lets the lab's results carry weight. The CCR 15700-15730 series then governs day-to-day operations — what to test (15718, 15719, 15723, 15724), how to sample (15710), how to chain custody (15720), how to report (15730). The Forms (21, 22, 23, 24, 29) are the operational expression of those CCR sections, and the AOAC and USP/NF references are the technical backbone of each method-validation package. Drop any one layer and the COA stops being defensible — lapsed accreditation voids subsequent results, an independence violation voids the lab's standing, a failed proficiency round threatens accreditation, an out-of-scope method makes the COA inadmissible.

• Is ISO/IEC 17025 accreditation required? Yes — CCR 15700 requires every Type 8 licensee to hold ISO/IEC 17025 accreditation covering every method the lab will report. Accreditation must be in hand before the DCC application is filed; the sequence is non-negotiable. Loss of accreditation means immediate cessation of testing activity, and any results produced after the accreditation lapse are voidable.
• Which accreditor should we use? The three recognized accreditors for California Type 8 labs are A2LA (American Association for Laboratory Accreditation), ANAB (ANSI National Accreditation Board), and PJLA (Perry Johnson Laboratory Accreditation). Choice depends on calendar availability, fee structure, your analyte scope, and the assessor pool the accreditor staffs for cannabis-method experience. We pick against your timeline and scope at month 1.
• How long does accreditation take? Ten to fourteen months is realistic for a lab building from zero. Existing labs adding cannabis methods to an in-place ISO/IEC 17025 program compress to four to eight months because the quality manual, internal-audit program, and document-control system already exist. Accreditor calendar availability and the on-site assessment slot are the practical bottlenecks.
• Can we own any DCC-licensed operator? No. BPC 26053 prohibits ownership, financial interest, or control overlap between a Type 8 lab and any cultivator, manufacturer, distributor, retailer, microbusiness, or event organizer the lab serves. CCR 15004.1 also prohibits revenue-share, profit-share, bonuses tied to test outcomes, and discounted testing offered to one licensee that is not equally available to all. Independence is the regulatory linchpin and DCC will not compromise on it.
• What analytes are required? The regulated panel covers cannabinoids, terpenes (when claimed on label), residual solvents under CCR 15723 (solvent-extracted concentrates only), residual pesticides under CCR 15719 (Category I zero-tolerance and Category II action levels — currently 66 analytes), microbials under CCR 15718 (Aspergillus species, Salmonella, STEC E. coli), heavy metals (Pb, As, Cd, Hg), mycotoxins (aflatoxins B1/B2/G1/G2 and ochratoxin A), moisture (≤ 13% on flower), water activity (≤ 0.65 Aw on flower), foreign material, and homogeneity (edibles). Per CCR 15724.
• What is the standardized cannabinoid test method? Effective January 1, 2024 DCC adopted a standardized HPLC SOP for cannabinoid quantitation in dried flower and non-infused pre-rolls. Every Type 8 lab must use this method for those product categories — in-house methods no longer apply for flower and non-infused pre-rolls. Other product categories (edibles, tinctures, vape products, concentrates) and other test panels still use validated in-house methods. The standardized SOP PDF is published on the DCC testing-laboratories page.
• How fast must COAs be reported? Within one business day of test completion the lab must upload the COA to METRC and email a copy to testinglabs@cannabis.ca.gov. DCC tracks COA timeliness as a quality indicator and patterns of late reporting draw scrutiny. COAs cannot be amended after issuance without DCC permission — informal amendments are a serious violation.
• Who collects samples? The licensed Type 8 lab's qualified sampler — never the manufacturer, never the distributor. Samples are collected at the distributor's licensed premises with random, statistically valid sampling and documented chain of custody. Distributor pre-staging of "the sample" voids the test, and a chain-of-custody gap voids the result.
• What happens to a failed batch? Two paths: destruction by the distributor (logged in METRC), or remediation by the manufacturer (cultivators and distributors cannot remediate). Remediation requires DCC pre-approval via remediation@cannabis.ca.gov, a plausible plan for the failure mode (irradiation, distillation, additional refinement), and re-testing of all previously failed analytes — many labs re-run the entire panel to avoid disputes. If the re-test fails, destruction is mandatory.
• What is year-one cost? $1M to $4M+ for a Type 8 lab building from zero. Instrumentation alone (HPLC, GC-MS, LC-MS/MS, ICP-MS) is $500K to $2.5M. Facility build-out for ventilation and lab design is $250K to $1M. ISO/IEC 17025 accreditation (third-party accreditor fees) is $30K to $80K. DCC application fee is $1,000 to $8,000 and DCC annual license fee is $4,500 to $30,000.