Transport,
tracked and defensible.

Distributor compliance breaks cleanly into four operational areas. These are our named responsibilities — not advisory inputs, not “review” roles. Where we own, we draft, certify, train, and mock-inspect. Where you own, we coordinate in support but the operational decision is yours.

Escalation path

When work crosses into privileged legal analysis — contested CDTFA assessments, retailer or manufacturer contract disputes, carrier litigation, or any administrative hearing — we coordinate with your counsel or introduce one from our retained network. The engagement letter names this boundary. We do not practice law.

How we draw the boundary with you

You own: commercial relationships, pricing, route economics, fleet decisions, hiring choices, any owner-level negotiations. We own: the four areas above. Where a decision is yours but we have a clear compliance recommendation, we document the recommendation with regulatory rationale so the decision is informed. Where the work is ours, you get weekly status and see every document before it’s adopted.

What’s explicitly out of scope

Fleet procurement, lease structuring for transport space, DOT commercial-vehicle registrations (non-cannabis regulatory), and non-cannabis logistics consulting are outside this engagement. Those are specialist fields with their own practitioners; we don’t pretend to be them.

The engagement runs through five named milestones over five weeks. Distribution and logistics compliance is structurally different from other license types because it lives on the road — every transfer is a chain of custody event with real-time regulatory exposure. The milestones below rebuild your transport compliance posture from manifest to vehicle to driver to excise in a sequence DCC and CDTFA can both audit cleanly.

Milestones, in detail

• Week 1 — Current-state audit. Full review of existing METRC transfer workflow against CCR 15311 (incoming, outgoing, rejected, and hub transfers), vehicle and driver registration against the transporter facility records, the storage-segregation map against CCR 15042–15047, the QA-review record against CCR 15307, the representative-sampling protocol against the DCC distributor sampling checklist, and CDTFA excise invoicing against the post-AB 195 retailer-collection framework. Every gap is flagged with regulation citation, risk severity, and remediation estimate. The baseline report typically runs 30–50 pages and seeds the four-week build plan.
• Week 2 — METRC transfer stack & manifest SOP. Full CCR 15311 transfer workflow wired through METRC v2 endpoints — outgoing transfers, incoming-transfer acceptance, rejected-transfer handling, hub arrive/check-in/check-out/depart logging, PDF manifest generation, and reusable transfer templates for recurring routes. Role-based edit controls lock manifests after driver departure; scan-on-load and scan-on-receive workflows close the unaccounted-custody window. Exception handling for partial deliveries, on-route refusals, retailer receiving discrepancies, and vehicle breakdowns is drafted as named sub-procedures. The SOP becomes Form DCC-LIC-019 on file with DCC for the distributor license.
• Week 3 — Vehicle, driver and storage compliance. Per-vehicle compliance file: lockable cannabis-only storage out of plain view, GPS subscription with retention evidence, alarm operability test log, vehicle registration and commercial plates check, insurance certificate, and the unmarked-vehicle and direct-route confirmations under CCR 15311. Per-driver qualification file: California driver’s license, MVR pull, background attestation, employee-on-licensee-payroll verification, training completion, fit-for-duty attestation, and annual recertification schedule with immediate METRC deactivation upon termination. The storage premises is mapped to CCR 15042–15047: limited-access areas with signage, segregation by status, 24/7 surveillance at 1280×720 minimum with 90-day retention, central-station-monitored intrusion alarm.
• Week 4 — Sampling, QA review & excise. The representative-sampling protocol per the DCC distributor sampling checklist is wired so the licensed Type 8 lab (never distributor staff) collects samples on premises, the test sample package is created in METRC with a traceable ID, and chain-of-custody is documented on both sides. The Type 11 QA review under CCR 15307 covers every COA panel, the CCR 15407–15412 packaging and label requirements, the ±10% potency tolerance under CCR 15724, and the universal cannabis symbol and government warning checks — with named reviewers and contemporaneous records. The pass/fail/destroy/remediate decision tree includes the remediation@cannabis.ca.gov pre-approval pathway and CCR 15048 destruction event logging in METRC. CDTFA invoicing pack is built to the post-AB 195 framework with the retailer-collected 15% excise tax under AB 564 (Oct 1, 2025 through June 30, 2028), return credit memo template, destroyed-product tax adjustment, and quarterly reconciliation worksheet.
• Week 5 — Handoff and mock drill. SOPs trained to the operations team, vehicle and driver files audited against the DCC inspection checklist, mock transfer run end-to-end with PDF manifest, scan-on-load, hub arrive/check-in/check-out/depart logging, and scan-on-receive at destination. DCC inspection dry-run: inspector arrives at the warehouse, auditor walks through what they would find — manifests, QA-review records, sampling chain-of-custody, vehicle logs, driver files, storage segregation, surveillance retention. Any gap surfaced becomes a closure item before engagement close, and the 90-day post-engagement review is scheduled.

Duration and rhythm

Standard full build-out runs five weeks for single-vehicle distributors; seven to nine weeks for multi-vehicle fleets (three or more vehicles). Ongoing quarterly audits run $3,000–$8,000 per quarter; retainer clients get quarterly distribution audits included. Status updates weekly; direct principal access throughout.

Who you work with each phase

A named principal owns the engagement and signs every SOP. A compliance analyst runs vehicle-file and driver-file construction and rides along on the mock route to validate the manifest-workflow integration. Your distribution lead or operations manager is the primary contact; your CFO or controller coordinates on CDTFA excise invoicing pack alignment. Retained counsel reviews carrier agreements and any contested CDTFA assessments; we produce the compliance analysis, counsel handles the legal representation.

When we finish this engagement, you’ll have a specific set of documents, records, and certified systems in your possession. These are not “summary memos” or advisory narratives. They are live SOPs, per-vehicle certification files, per-driver qualification binders, a working test-hold protocol, an invoicing pack aligned to post-2023 CDTFA rules, and an archived record defensible against future DCC inspection, CDTFA audit, or acquirer diligence.

The ten outputs, in detail

• METRC transfer & manifest SOP. Full CCR 15311 transfer workflow wired through METRC v2 endpoints — outgoing transfers from cultivators and manufacturers, incoming-transfer acceptance protocols, rejected-transfer handling for damaged or mislabeled product, hub arrive/check-in/check-out/depart logging with enforced minimum dwell time, PDF manifest generation, and reusable transfer templates for recurring routes. Role-based edit controls lock manifests after driver departure; scan-on-load on the shipper dock and scan-on-receive before driver sign-out close the unaccounted-custody window. Exception sub-procedures cover partial deliveries, on-route refusals, retailer receiving discrepancies, vehicle breakdowns, and the rejected-package return workflow. Typical length runs 22–40 pages with embedded screenshots, filed as Form DCC-LIC-019 with DCC.
• Representative-sampling & chain-of-custody protocol. Built to the DCC distributor sampling checklist: incoming batch quarantined and labeled “awaiting testing,” the licensed Type 8 testing lab (never distributor staff) scheduled to collect samples on your premises following their own sampling SOP under DCC-LIC-021, the test sample package created in METRC with a traceable ID, and chain-of-custody documented on both sides. Includes the batch-definition rules (e.g. flower batches not exceeding the regulatory size limit), the sampling-fraud guardrails that prevent “cherry-picking,” and the COA shelf-life tracker so expired-COA goods do not reach retail.
• Type 11 QA review record & release protocol. CCR 15307 quality-assurance review documented as a signed decision with a named reviewer — lab test results verified against every required panel, packaging and labeling checked against CCR 15407–15412, the ±10% potency tolerance under CCR 15724 confirmed, allergen statements present and accurate, the universal cannabis symbol present at correct size and color, the government warning verified to exact regulatory language, license numbers and batch identifiers cross-referenced. Includes the correctable-issue protocol (apply additional labels at the distributor premises) versus non-correctable (return to manufacturer or destroy). The QA review is one of DCC’s most-inspected functions; the file format is built to survive a license-revocation defense.
• Pass/fail/destroy/remediate decision tree. Single documented decision flow for failed COAs: distributor option A (destroy) routes through METRC Disposed event logging under CCR 15048 with destruction logs and notification to the source licensee; distributor option B (remediate) routes through manufacturer pre-approval via remediation@cannabis.ca.gov with the proposed remediation plan, transfer to manufacturer, retest by licensed lab, and re-entry through QA review on pass. Includes the failure-mode reference (heavy metals and residual solvents above thresholds typically cannot be remediated; some pesticides and microbials can) so the right pathway is selected the first time.
• Vehicle compliance file (per vehicle). Lockable cannabis-only storage out of plain view confirmed, GPS subscription with retention evidence, alarm operability test log, vehicle registration and commercial plates check, insurance certificate, and the unmarked-vehicle and direct-route requirements under CCR 15311 documented per route. One binder per vehicle, updated annually and synced to the METRC vehicle registration through POST /transporters/v2/vehicles.
• Driver qualification file (per driver). California driver’s license copy, MVR pull, background attestation, employee-on-licensee-payroll verification (drivers cannot be third-party contractors), training completion, fit-for-duty attestation, and annual recertification schedule. Driver record synced to METRC via POST /transporters/v2/drivers and deactivated immediately upon termination so a fired driver cannot appear on a manifest the next morning.
• Storage & surveillance package. Storage premises mapped to CCR 15042–15047: limited-access areas with required signage under CCR 15045, segregation by status (awaiting testing, tested-passed pending QA, QA-released, failed pending destruction or remediation), 24/7 surveillance at minimum 1280×720 resolution with 90-day retention, central-station-monitored intrusion alarm, and physical-inventory-to-METRC reconciliation cadence. Camera schedule mapped to fields of view on the premises diagram.
• Hub-operations log & integration runbook. Hub arrive/check-in/check-out/depart endpoints integrated for distributors operating the California hub model — multi-tenant package management with segregation by source licensee, branded versus white-label packaging coordination, and the dwell-time floor that prevents the “arrive→checkout in 90 seconds” pattern state auditors flag. Includes the hub-pricing reference (typical percentage of wholesale or flat per-pound fee) for cultivator and manufacturer contracts.
• CDTFA excise invoicing pack. Retailer invoice template aligned to the post-AB 195 framework with the retailer-collected 15% excise tax under AB 564 (effective Oct 1, 2025 through June 30, 2028), return credit memo template, destroyed-product tax adjustment form, quarterly reconciliation worksheet for your tax preparer, and the cultivation-tax-sunset attestation (the cultivation tax was eliminated July 1, 2022) so legacy line items do not reappear on invoices. Built so the retailer’s books and your METRC record reconcile without retroactive correction.
• Quarterly distribution audit. Full distribution-specific compliance audit run every 90 days for the first year — manifest-to-physical reconciliation rate, QA-review file completeness, sampling chain-of-custody integrity, hub dwell-time distribution, driver and vehicle file currency, CDTFA excise reconciliation variance to METRC. Findings log, remediation tracker, close-out sign-off. Not a mock inspection — a live audit, on the record, with measurable trend lines into year two.

Format and delivery

SOPs delivered in editable Word and final PDF. Vehicle and driver files delivered as structured binders (physical and digital). Invoicing pack delivered as ready-to-use templates in your accounting system. All documents retained for seven years per CCR 15037 and three years minimum per CCR 15311’s transport record requirement.

Defensibility anchor

Every recommendation in these deliverables cites a specific regulation or statute. CCR 15311 for transport. CCR 15307 and 15307.1 for testing and remediation. CCR 15037 for recordkeeping. BPC 26070 for distributor obligations. BPC 26090 for transport between licensees. CDTFA Regulation 3700 for cannabis tax treatment. Plus METRC operational guidance and the local business license conditions of origin and destination jurisdictions.

What’s not included

Carrier contract negotiation, fleet procurement, lease structuring, DOT non-cannabis registrations, and any privileged legal analysis (contested CDTFA assessments, contract litigation, administrative appeals briefed as legal matters) are explicitly outside this scope. Where those are needed, we coordinate with retained counsel or introduce one from our network.

Deliverables are what we produce. Outcomes are what those deliverables enable — the specific operational benefits of distribution compliance done right. A distribution operation lives and dies on the quality of its manifest record and the traceability of its custody chain; getting that right keeps you out of both DCC and CDTFA enforcement.

The ten outcomes, in detail

• Every transfer reconciles three ways. The METRC manifest generated under CCR 15311, the physical inventory verified at scan-on-load, and the retailer’s scan-on-receive record all match on quantity, unit ID, and timestamp. The driver does not leave the recipient’s premises until the receiving licensee accepts the transfer in their own integration, eliminating the unaccounted-custody window that is the single most common distributor finding. Rejected packages route through the documented return workflow rather than bouncing shipper-receiver-shipper-receiver in a pattern that looks like diversion cover.
• Representative sampling collected the way DCC expects. The licensed Type 8 lab (never your warehouse staff) collects the sample on premises following their own SOP under DCC-LIC-021, the test sample package is created in METRC with a traceable ID, and chain-of-custody is documented on both sides. Cherry-picked samples, substituted samples, and pooled batches are engineered out of the workflow because they void the COA and constitute serious violations.
• QA review under CCR 15307 holds up under inspection. The Type 11 QA review is a documented decision with a named reviewer, not a checkbox — every COA panel verified, every label checked against CCR 15407–15412, every potency claim within the ±10% tolerance under CCR 15724, the universal cannabis symbol and government warning verified to exact regulatory language. The QA review is one of DCC’s most-inspected functions; the file format is built to survive a license-revocation defense.
• Failed-batch decision tree applied consistently. Pass routes to QA release and outgoing transfer; fail routes through the documented decision tree to either destruction (METRC Disposed event under CCR 15048 with destruction logs and notification to the source licensee) or manufacturer remediation (pre-approval through remediation@cannabis.ca.gov with a plausibly effective remediation plan, not a magic-wand proposal). Failure modes are matched to the right pathway the first time.
• Hub operations on a clean dwell-time distribution. Arrive/check-in/check-out/depart events post in METRC inside their expected windows; the “arrive→checkout in 90 seconds” pattern state auditors flag never appears on your record. Multi-tenant package segregation by source licensee is maintained, branded versus white-label packaging is coordinated, and the hub-pricing structure with cultivator and manufacturer contracts is documented.
• Driver and vehicle files inspection-ready. Any DCC field inspector or CDTFA auditor asks for a driver file or vehicle file and gets it produced from the binder in minutes — California driver’s license, MVR, employee-on-payroll verification, training, fit-for-duty attestation, and METRC driver registration synced via POST /transporters/v2/drivers. Vehicles registered through POST /transporters/v2/vehicles, with terminated drivers deactivated the same day they leave so a fired driver cannot appear on the next morning’s manifest.
• Storage premises segregated by status. Awaiting-testing, tested-passed pending QA, QA-released, and failed-pending-destruction zones are physically separate with required signage under CCR 15045; 24/7 surveillance at minimum 1280×720 resolution with 90-day retention under CCR 15044–15047 covers every limited-access area. Physical inventory reconciles to METRC packages on file at every cycle count.
• CDTFA excise reconciled quarterly to the post-AB 195 framework. Retailer invoices are structured so the 15% excise tax under AB 564 (effective Oct 1, 2025 through June 30, 2028) is collected at retail, not at distribution; cultivation-tax line items (eliminated July 1, 2022 by AB 195) do not reappear; return credits and destroyed-product adjustments post cleanly. No retroactive surprise assessments from CDTFA during audit and no surprise back-tax exposure when an acquirer runs financial diligence two years out.
• Transport SOP aligned to Type 11 or Type 13 scope without creep. Type 11 full distribution (storage, transportation, arranging testing, QA review, distribution to retail) or Type 13 transport-only (between licensees only, no QA review, no extended storage, no retail delivery) each have their own SOP set. A Type 13 distributor attempting QA review or extended storage is an immediate license violation; the boundary is documented in the engagement letter and built into the operational record.
• Distribution-specific audit cadence built in. Quarterly audits for the first year surface drift before it becomes enforcement — manifest-to-physical reconciliation rate, QA-review file completeness, sampling chain-of-custody integrity, hub dwell-time distribution, driver and vehicle file currency, rejection-rate dashboard, CDTFA excise reconciliation variance to METRC. Year two compounds on a cleaner baseline; semi-annual cadence kicks in once the operation runs cleanly on three consecutive quarters under 0.5% variance.

How we measure

Three quantitative measures tracked: (1) manifest-to-physical reconciliation rate — target 100% within 0.5% variance; (2) driver and vehicle file completeness — target 100% on annual recertification; (3) CDTFA excise reconciliation variance to METRC — target under 1%. Reported quarterly.

Post-engagement review

Ninety days after build-out complete, a written verification memo: every SOP audited in operation, every driver and vehicle file audited, a live mock-route walkthrough with the compliance analyst riding along. Memo closes the engagement and seeds the quarterly audit cadence. If you move to retainer, the quarterly audit is included; if you run standalone, the memo is your starting baseline for the next cycle.

When DCC asks “why did you route this way?” we cite the regulation. When CDTFA asks about an excise adjustment, we cite the bulletin. Distribution work is regulated by DCC for operations, CDTFA for tax, and METRC for the track-and-trace record — the citations below anchor all three.

Business & Professions Code (statute)

• BPC 26050 — License classifications. Defines the Type 11 (full distribution) and Type 13 (transport-only between licensees) classifications, plus Type 12 microbusiness with embedded distribution activity. Picking the wrong classification, or operating beyond your scope (Type 13 attempting QA review), is an immediate license violation rather than an amendment.
• BPC 26070 — Distributor license obligations. Statutory authority for the Type 11 full role (storage, transportation, arranging testing, QA review) and the Type 13 transport-only scope. In practice, BPC 26070 defines the boundary that drives two different SOP sets and the post-AB 195 distributor tax role.
• BPC 26069 — Cannabis waste. Statutory framework for cannabis waste handling and destruction, requiring waste be rendered unusable and unrecognizable before disposal. The destruction pathway for failed batches operates under BPC 26069 with METRC Disposed event logging.
• AB 195 (2022) and AB 564 (2025). AB 195 eliminated the cultivation tax effective July 1, 2022, ending the distributor’s historical role as cultivation-tax collector. AB 564 set the 15% excise tax collected at retail (not distribution) effective Oct 1, 2025 through June 30, 2028. Both restructure the distributor’s tax-coordination role.

California Code of Regulations Title 4 Division 19 (DCC operational rules)

• CCR 15042–15043 — Storage. Limited-access areas separated from any non-cannabis activity, locked storage in vaults or safes, environmental controls, and physical-inventory-to-METRC reconciliation. In practice, the storage map segregates inventory by status — awaiting testing, tested-passed pending QA, QA-released, failed pending destruction or remediation.
• CCR 15044–15047 — Surveillance. 24/7 camera coverage at minimum 1280×720 resolution and 15 fps, 90-day retention, central-station-monitored intrusion alarm, and coverage of every limited-access area, entrance, exit, and storage zone. In practice, the camera schedule maps to fields of view on the premises diagram and survives stopwatch-and-tape-measure inspection.
• CCR 15048 — Waste management. Cannabis waste rendered unusable and unrecognizable before disposal, logged in METRC, and routed through a licensed hauler or self-hauled to an authorized facility. In practice, the destruction pathway for failed COAs posts as a METRC Disposed event the same business day.
• CCR 15307 — Quality assurance review. Requires Type 11 distributors to conduct QA review before retail release: lab test verification, packaging compliance, label accuracy, the ±10% potency tolerance, allergen statements, the universal cannabis symbol, and the government warning. In practice, the QA review file is a documented decision with a named reviewer — one of DCC’s most-inspected functions.
• CCR 15311 — Transport and manifest. Governs the transfer manifest workflow, pre-departure verification, the unmarked-vehicle and direct-route requirements, lockable storage out of plain view, employee-on-payroll driver rules, and route documentation retention. In practice, every manifest defect — the most common single audit finding — traces back to a specific subsection.
• CCR 15407–15412 — Packaging and labeling. Child-resistant, tamper-evident, and (for edibles) opaque packaging requirements; the universal cannabis symbol size and color; the government warning text; net weight; license numbers; batch identifiers. In practice, the QA-review checklist runs against this band of regulations on every release.
• CCR 15724 — Potency tolerance. THC and CBD content on the label must match the COA within ±10% deviation. In practice, this is the single most common label-correction trigger inside QA review.
• CCR 15037 — Records retention. Seven-year retention for all commercial cannabis records, including manifests, QA-review files, sampling chain-of-custody, vehicle and driver files, test holds, invoices, and route documentation. In practice, the physical binders and digital vault run to seven-year retention with date-stamped versioning.

DCC Forms and operational documents

• Form DCC-LIC-019 — Standard Operating Procedures. The consolidated SOP filing on record with DCC for the distributor license. In practice, the SOPs we write become the 019 filing — written procedure and operational reality are the same document.
• Form DCC-LIC-021 — Sampling SOP (testing labs). The Type 8 lab’s own representative-sampling SOP that governs how samples are collected on the distributor premises. In practice, distributors confirm their lab partners file an active 021 and follow it on every sampling visit.
• Form DCC-LIC-027 — Notifications and Modifications. The post-issuance form for premises changes, ownership changes, DRP changes, and license-type modifications. In practice, distributors use the 027 when adding storage capacity, restructuring ownership, or amending the storage-segregation map.
• Form 8113 — Commercial Cannabis Licensee Bond. The $5,000-minimum surety bond per premises payable to the State of California, on a CA-licensed surety carrier. The bond requirement applies per premises for all license types, distribution included.
• remediation@cannabis.ca.gov — Remediation pre-approval. Manufacturer-side remediation requests for failed batches go to this DCC mailbox for plan review before transfer. In practice, distributors initiate the workflow when option B (remediate) is the right pathway instead of option A (destroy).

METRC API and CDTFA authorities

• METRC v2 transfers endpoints. GET /transfers/v2/incoming, /outgoing, /rejected, /hub plus POST /transfers/v2/external/incoming, /templates/outgoing, and the hub arrive/check-in/check-out/depart endpoints. In practice, the integration runbook covers PDF manifest generation through GET /transfers/v2/manifest/{id}/pdf and driver/vehicle registration through POST /transporters/v2/drivers and /vehicles.
• METRC v2 packages endpoints. Test sample packages created in METRC for representative sampling carry traceable IDs that link to the COA on lab upload. In practice, the chain-of-custody record references the package label directly.
• CDTFA cannabis tax framework (post-AB 195). The excise and sales-tax framework with retailer-collected 15% excise under AB 564 (Oct 1, 2025 through June 30, 2028), elimination of the cultivation tax (July 1, 2022), and CDTFA registration requirements for distributors. In practice, the invoicing pack builds on this framework so retailer books and METRC reconcile.
• CDTFA Special Notices on cannabis. Ongoing CDTFA guidance supplementing the cannabis tax framework — rate changes, reporting changes, audit guidance. In practice, the amendment-tracking work on retainer clients covers Special Notices in addition to DCC rulemaking.

How the authorities interact

Distribution compliance is a three-agency problem. DCC regulates the operational activity (transfers under CCR 15311, storage under CCR 15042–15047, QA review under CCR 15307, waste under CCR 15048, packaging and labels under CCR 15407–15412 and 15724). CDTFA regulates tax (the post-AB 195 framework with retailer-collected excise under AB 564). METRC sits under DCC operationally (the v2 transfers and packages endpoints are the system of record) but CDTFA reads the data, and Franwell — not DCC — runs the platform. A distributor clean with DCC but sloppy with CDTFA gets audited; clean with CDTFA but sloppy with DCC gets suspended; clean with both but sloppy with METRC creates the manifest discrepancies and unaccounted-custody windows that drive both. The engagement builds for all three simultaneously because that is the regulatory reality.

Scope, pricing, timelines, edge cases — the questions distributors actually ask about building a compliance backbone their fleet can run on.

• Type 11 vs Type 13 — what can each one actually do? Type 11 is full distribution under BPC 26070: storage, transportation, arranging testing, conducting QA review under CCR 15307, and distribution to retail. Type 13 is transport-only between licensees: no QA review, no extended storage beyond 24 hours, no retail delivery, no testing-coordination authority. Most cannabis goods reaching retail must move through a Type 11 because a Type 13 cannot conduct the QA review that gates retail release. A Type 13 attempting QA-review work is an immediate license violation; we scope by license type at week one and document the boundary in the engagement letter.
• Can we self-distribute our own product? A Type 11 license owned by a cultivator or manufacturer can self-distribute that operator’s own product under BPC 26070, and a Type 12 microbusiness with distribution activity built into the license has similar embedded authority subject to the microbusiness scope limits under CCR 15500. Distributing third-party product requires the full Type 11 scope, including the QA-review function and storage premises configured to CCR 15042–15047. We map self-distribution scope against your license authority at engagement start so the operational record matches the license on file.
• Who actually collects the testing sample — us or the lab? The licensed Type 8 testing lab collects the sample on your premises — not distributor staff — following the lab’s own representative-sampling SOP under DCC-LIC-021. The distributor coordinates, holds the batch in quarantine, maintains chain of custody, and creates the test sample package in METRC with a traceable ID. Distributor-collected samples or “cherry-picked” samples (lab told to sample from a specific portion) void the COA and constitute serious violations under the DCC distributor sampling checklist. The protocol we build makes substitution structurally impossible.
• What does the Type 11 QA review actually cover? Under CCR 15307 the QA review verifies all required lab test panels passed (cannabinoids, terpenes, residual solvents, residual pesticides, heavy metals, microbials, mycotoxins, moisture, water activity, foreign material), packaging meets CCR 15407–15412 (child-resistant, tamper-evident, opaque for edibles), labels match the COA within the ±10% potency tolerance under CCR 15724, the universal cannabis symbol and government warning are present and to spec, allergen statements are accurate, and license numbers and batch identifiers reconcile. The reviewer signs and dates the file; the file format is built to survive a license-revocation defense. Correctable issues (relabel, repackage where allowed) are corrected at the distributor premises; non-correctable issues route to manufacturer remediation or destruction.
• How do you handle test failures? Failed batches route through the documented pass/fail/destroy/remediate decision tree. Option A (destroy) posts as a METRC Disposed event under CCR 15048 with destruction logs, witness sign-off, notification to the source licensee, and CDTFA tax adjustment. Option B (remediate) routes through manufacturer pre-approval via remediation@cannabis.ca.gov — the manufacturer proposes a plausibly effective remediation (gamma irradiation for some microbials, redistillation for some residual solvents; heavy metals and many residual-solvent failures cannot be remediated), DCC reviews, the batch transfers to the manufacturer, the lab retests, and on pass it returns to the distributor for a fresh QA review. Full failure-to-disposition cycle typically runs 5–10 business days.
• What about METRC hub operations? California formalizes a hub model where wholesale product passes through the distributor for QA and tax coordination before continuing to retail. The METRC v2 hub endpoints (POST /transfers/v2/hub/arrive, /checkin, /checkout, /depart) log each leg of that journey, and state auditors look at hub dwell-time distributions — an arrive→checkout in 90 seconds (no QA actually performed) is a flag. The integration enforces minimum dwell time before allowing checkout, so the operational record matches the regulatory expectation.
• What about interstate transport? California law forbids interstate cannabis transport under the BPC Division 10 framework, and federal law forbids it under the Controlled Substances Act notwithstanding the April 22, 2026 DOJ rescheduling of state-licensed medicinal cannabis to Schedule III (which addressed federal tax treatment, not interstate movement). Any interstate movement today creates serious regulatory and criminal exposure. We build systems to California-legal standards with federal-GMP-adjacent elements (21 CFR 111 where supplement-adjacent) so that if federal rules change, systems scale incrementally rather than requiring rebuild.
• What’s the post-AB 195 CDTFA framework about? AB 195 (effective July 1, 2022) eliminated the cultivation tax, ending the distributor’s historical role as cultivation-tax collector. AB 564 (effective Oct 1, 2025 through June 30, 2028) set the 15% cannabis excise tax to be collected at retail, not at distribution. Distributor invoices now structure pricing so the retailer collects excise correctly; legacy line items from the pre-AB 195 era trigger CDTFA follow-up. The invoicing pack we build aligns retailer invoices, return credit memos, and destroyed-product adjustments to the current framework.
• What’s required for vehicles, drivers, and storage? Vehicles must have lockable cannabis-only storage out of plain view and operate on direct routes between licensee premises with no passengers other than authorized employees per CCR 15311. Drivers must be on the licensee’s payroll (not third-party contractors) and registered through METRC POST /transporters/v2/drivers; vehicles registered through POST /transporters/v2/vehicles so a roadside CHP stop can verify against an active manifest. The storage premises requires limited-access areas under CCR 15045 with required signage, segregation by status (awaiting testing, tested-passed, QA-released, failed pending destruction), 24/7 surveillance at minimum 1280×720 with 90-day retention under CCR 15044–15047, central-station-monitored intrusion alarm, and physical inventory reconciled to METRC packages on file.
• Typical cost and audit cadence? Full build-out runs $12,000–$40,000 depending on fleet size and Type 11 vs Type 13 scope. Quarterly distribution audits run $3,000–$8,000 per cycle in year one (manifest reconciliation rate, QA-review file completeness, sampling chain-of-custody, hub dwell distribution, driver and vehicle file currency, CDTFA reconciliation variance), then semi-annually once the operation runs cleanly on three consecutive quarters under 0.5% variance. Ongoing compliance retainer clients get reduced rates on build-out work and quarterly audits included.