Compliance,
on tempo.

The retainer breaks cleanly into four operational areas. These are our named responsibilities — not monitoring tasks, not advisory check-ins, not “we’ll keep an eye on it” meetings. Where we own, we audit, file, draft, and close out. Where you own, we coordinate in support but the operating decision is yours.

Escalation path

When work crosses into privileged legal analysis — a Notice to Comply requiring a hearing, an Accusation under BPC 26031, any administrative litigation, or M&A legal diligence — we coordinate with your counsel or introduce one from our retained California cannabis bar network. The retainer engagement letter names this boundary. We are a compliance consulting firm; we do not practice law.

How we draw the boundary with you

You own: the business (what to sell, what to charge, who to hire, when to expand), capital decisions, and the operating line itself. We own: the four areas above. Where a decision is yours but we have a compliance recommendation, we write it down with the regulation cited so the decision is documented. Where the work is ours, you see findings monthly and a quarterly narrative you can hand straight to your board.

What’s explicitly out of scope

Emergency enforcement defense (covered separately under ENF-001 at a reduced retainer rate), M&A legal diligence, litigation support, capital-raise work, and any non-cannabis regulatory compliance (employment law, tax controversy outside cannabis excise, general corporate) are not within the retainer scope. Those are specialist fields and we route them to specialists — we do not pretend to be them.

The retainer runs on a 12-month cycle with six named milestones. Compliance is not an event; it is a posture. The milestones below build that posture in month one, maintain it on quarterly cadence, and hand it forward clean into the CCR 15002 renewal at month twelve. Operators on retainer don’t have “renewal season” — they have a renewal filing that assembles itself from the prior twelve months of work.

Milestones, in detail

• Month 1 — Baseline gap analysis. A full CCR 15000-series audit of the current operation against the license as issued. Licensing integrity, records under CCR 15036–15044, security under CCR 15044–15047, and license-type-specific rules all reviewed. Every finding logged to a CAPA tracker with owner, due date, and regulation reference. The baseline audit typically surfaces 15–40 items on a first engagement; it shrinks to single digits by year two.
• Month 2 — Remediation plan execution. Every Month 1 finding worked to closure or to explicit carry-forward. SOPs revised (Form DCC-LIC-019), material-change filings filed (Form DCC-LIC-027), security gaps closed, records reorganized into the vault. Weekly check-ins until the CAPA tracker shows zero open items rated critical or high.
• Month 3 — Quarterly audit #1. First rotating audit with focus on METRC integrity, inventory reconciliation, and CCR 15048 waste/destruction compliance. Results tracked against the Month 1 baseline to verify the remediation held. Board-ready quarterly narrative report issued.
• Month 6 — Quarterly audit #2. Focus rotates to ownership and financial interest (CCR 15003/15004), operating-agreement alignment, and any material-change filings outstanding from the prior six months. Mid-year regulatory-change review of every DCC rulemaking, CCR Title 4 amendment, and applicable local ordinance update.
• Month 9 — Quarterly audit #3. Focus rotates to security and premises integrity — camera coverage under CCR 15044–15047, alarm systems, limited-access areas, transportation SOPs. Mock DCC inspection using the agency’s current inspection checklist. Findings closed before any real inspection window.
• Month 12 — Annual summary and renewal prep. CCR 15002 annual renewal package assembles from the prior twelve months of work: refreshed ownership and FIH schedule, current SOPs, current premises diagram, Form 8113 bond renewal, Form 9205 labor-peace refresh, fee-tier confirmation against CDTFA actuals. Filed with time to spare, not to the back-stop window.

Duration and rhythm

The retainer is a 12-month engagement billed monthly with 90-day termination notice on either side. Quarterly deliverables land on cadence; weekly status updates during active remediation; monthly compliance dashboards year-round. A named principal is on call with a 30-minute response SLA on anything urgent; a compliance analyst drives day-to-day document production and filing mechanics.

Who you work with each phase

A named principal owns the account end-to-end — the same person writes the baseline audit, runs the quarterly reviews, and signs the renewal package. A compliance analyst handles document production, filing mechanics, and METRC monitoring. Your compliance lead is the primary contact on your side; your CFO or controller coordinates on fee-tier verification. Retained counsel is looped in only where a finding rises to privileged legal analysis. No rotating associates; no ticket queues.

When the retainer runs, you accumulate a specific set of documents, records, and operating outcomes. These are not summary memos or “status update” decks. They are filed DCC forms, closed CAPA items, tracked variance reports, and a document vault defensible against inspection, renewal, and diligence review for years.

The ten outputs, in detail

• Quarterly audit. A full CCR 15000-series audit every 90 days, rotating focus across licensing integrity, records (CCR 15036–15044), security (CCR 15044–15047), and license-type-specific rules (cultivation, distribution, retail, manufacturing). Findings closed through a CAPA tracker with named owner and due date. Typical audit document set: 40–80 pages per rotation.
• METRC monitoring. Daily variance scan against physical inventory with a 24-hour flag for any weight-off or manifest anomaly. Monthly deep reconciliation against batch lineage. Quarterly narrative METRC variance report. Aligns with CCR 15048 track-and-trace requirements and DCC inspection posture.
• Regulatory-change watch. Every DCC rulemaking, CCR Title 4 amendment, BPC Division 10 amendment, and applicable local ordinance update screened for operational impact on your license type. Changes translated into an action item, owner, and due date on your tracker — not a newsletter.
• SOP maintenance. Written SOPs revised as rules and operations drift. Every revision versioned, dated, and cross-referenced to the regulation that triggered the change. The practice library includes cultivation SOPs, Form 19 manufacturing SOPs, distribution transport SOPs, retail POS/ID-check SOPs, and security SOPs — maintained to current practice.
• Board-ready reporting. Monthly compliance dashboard (audit status, METRC variance trend, open CAPAs, regulatory-change queue) plus a quarterly narrative report suitable for handing directly to your board or investor committee. No operator-side reformatting required.
• Material-change filings. CCR 15020 14-business-day filings managed on your behalf every time a trigger fires — owner addition or removal, financier change, premises modification, license-type addition, operating-name change. Filing drafted, signed, and uploaded on the timeline the rule requires.
• Renewal prep built-in. CCR 15002 annual renewal runs on a 60-day internal runway inside the retainer. Ownership and financial disclosures refreshed, surety bond (Form 8113, $5K) verified current, labor-peace attestation (Form 9205) re-verified, landowner consent (Form 9206) confirmed — no separate engagement, no “renewal season.”
• Inspection readiness. Annual mock DCC inspection using the agency’s current inspection checklist. Pre-inspection brief issued within 2 hours if DCC announces a visit. Findings closed before the real inspection runs.
• Named point of contact. A principal or director named to your account; 30-minute response SLA on anything urgent; Slack or email as you prefer; direct line for the compliance lead on your team. No rotating associates, no ticket queues.
• Reduced project rates. When the retainer needs to scope into something bigger — M&A diligence (STR-001), expansion into a new jurisdiction (LIC-002), a product launch (PRD-001), or enforcement defense (ENF-001) — those project engagements are billed at a reduced retainer rate rather than the open-market rate.

Format and delivery

Every audit, filing, and report is delivered as both an editable source (Word or Pages) and a final PDF. Filing confirmations and DCC correspondence are archived in a date-stamped vault. File naming follows a consistent convention so the record stays auditable. All documents retained for 7 years per CCR 15037, and for 5 years under our own retention policy regardless.

Defensibility anchor

Every recommendation in these deliverables cites a specific regulation, statute, or DCC form. If DCC, your counsel, or a future buyer’s diligence team asks “why did you do it this way?” the answer is in the document. CCR 15020 for material-change filings. CCR 15037 for records retention. CCR 15002 for renewal. BPC 26055 for licensing authority. DCC Disciplinary Guidelines (amended July 2022) for penalty posture on any finding.

What’s not included

Enforcement hearing representation, litigation support, M&A legal diligence, capital-raise work, and non-cannabis regulatory matters are explicitly outside retainer scope. Where those are needed, we coordinate with retained counsel or introduce one from our network — at a reduced retainer rate where we project-scope the engagement. The engagement letter names this boundary from day one.

Deliverables are what we produce. Outcomes are what those deliverables enable — the specific operational benefits of a retainer done right. The retainer’s point is not “more compliance work” but rather less — fewer fire drills, fewer surprise findings, fewer renewal-season scrambles.

The ten outcomes, in detail

• Continuous compliance posture. Audit-ready every day, not just at quarter-end. A DCC unannounced inspection lands on an operation that can produce the record it’s asked for — in minutes, from the vault, not from memory.
• Zero-surprise renewals. The CCR 15002 annual renewal assembles from twelve months of maintained records. No “renewal season.” No last-minute material-change back-disclosures. The filing goes out with time to spare.
• Material changes filed inside the window. Every CCR 15020 trigger captured and filed within 14 business days via Form DCC-LIC-027. No willful-violation findings at renewal.
• METRC variance under control. Daily variance monitoring, monthly deep reconciliation, quarterly narrative reports. Variance stays under 1% cycle over cycle; CCR 15048 waste is filed on time every time.
• SOPs aligned to current operations. Form DCC-LIC-019 SOPs revised as rules change and as operations drift. Written procedure matches observed behavior — which is the gap DCC inspectors probe hardest.
• Regulatory changes absorbed, not scrambled. Every DCC rulemaking, CCR Title 4 amendment, and applicable local ordinance translated into an action item with owner and due date. You don’t read the Federal Register equivalent; we do.
• Predictable quarterly cost. Fixed monthly fee against named deliverables. No hourly inflation, no “that’s extra” surprises. Project work scoped separately at a reduced retainer rate.
• Compounding baseline. Year two costs less and delivers more than year one because the vault is clean. Year three is nearly autonomous — the retainer runs on maintenance mode, not remediation.
• Diligence-ready at any moment. M&A inquiry, investor review, lender covenant check — all answered from the existing vault. No separate diligence sprint required.
• Named principal on call. 30-minute response SLA on urgent items. No rotating associates; no ticket queues; no onboarding a new analyst every quarter.

How we measure

Four quantitative measures tracked and reported: (1) open CAPA items over 30 days — target zero; (2) material-change filings inside the 14-business-day window — target 100%; (3) METRC variance per cycle — target under 1%; (4) renewal filed days before expiration — target 7+. Monthly dashboard and quarterly narrative report.

Post-engagement review

If the retainer terminates (90-day notice either side), we hand off all work product in a structured archive: CAPA tracker, SOP library, filing vault, regulatory-change log, METRC variance history. A written close-out memo summarizes the state of the operation and the forward items. The archive is yours, formatted so any successor consultant or internal compliance lead can pick up without starting from zero.

When DCC asks “why did you recommend this?” we cite the regulation. When an auditor asks “what’s this based on?” we cite the CCR section. The retainer touches every load-bearing regulation DCC operates under; eight anchor the day-to-day work.

The citations, in detail

• CCR 15000 series — DCC regulatory framework. Title 4 of the California Code of Regulations, sections 15000–17905, is the entire DCC rule set covering licensing, premises, security, records, track-and-trace, and license-type-specific rules. In practice, the quarterly audit rotation walks the full series on a four-quarter cycle.
• CCR 15002 — Annual renewal. The renewal mechanics: window, fee, back-stop late window. In practice, retainer clients never use the back-stop window — the renewal is filed with time to spare from the accumulated twelve-month record.
• CCR 15020 — Material change reporting. 14-business-day notification for ownership, officer, premises, scope, and financial-interest changes via Form DCC-LIC-027. In practice, the retainer’s job is to capture triggers the day they fire, not discover them at renewal.
• CCR 15037 — Records retention. Seven-year retention for all records related to commercial cannabis activity. In practice, the retainer vault runs indefinite retention; the regulation is the floor.
• CCR 15044–15047 — Premises security. Camera coverage, limited-access areas, alarm systems, employee identification. In practice, the Month 9 quarterly audit rotates to security, and the mock DCC inspection tests against the same checklist agency staff use.
• CCR 15048 — Waste and destruction. 72-hour notice, witness signatures, disposal method, METRC action. In practice, daily METRC monitoring catches waste-timing drift before it becomes an audit finding.
• BPC 26055 — Continuing local authorization. The state license is contingent on continuing local authorization. In practice, retainer clients get local-permit renewal cycles synchronized to the state renewal so neither lapses.
• DCC Disciplinary Guidelines (amended July 2022). The agency’s published framework for penalty posture on findings. In practice, the retainer’s CAPA workflow mirrors the agency’s expected remediation cycle so that if a finding does surface, the record is already in the structure DCC expects.

Interaction between authorities

The retainer operates three rhythms simultaneously: the daily rhythm (METRC under CCR 15036 and 15048); the quarterly rhythm (audits rotating through CCR 15000-series topics); and the annual rhythm (CCR 15002 renewal and BPC 26055 local-permit synchronization). Material changes (CCR 15020) interrupt the rhythm whenever they fire. Records retention (CCR 15037) is the retention substrate under all of it. The DCC Disciplinary Guidelines describe what happens if something goes wrong — which is why everything above is structured to produce the record those guidelines expect.

Scope, pricing, timelines, edge cases — the questions operators ask before committing to a 12-month compliance relationship.

• What size operator makes sense for a retainer? Most retainer clients run $8M–$120M annual revenue and hold one to six licenses. Smaller operators (sub-$5M, single-license) often benefit more from a semi-annual retainer or a quarterly audit-only engagement than a full retainer. Larger operators (multi-state, multi-brand, $100M+) typically want a custom scope with dedicated resource. The retainer discovery call scopes this in 30 minutes.
• How does the first quarter work? Month 1 is the baseline CCR 15000-series gap analysis. Month 2 executes the remediation plan generated from that analysis. Month 3 is the first quarterly audit, which tests whether the remediation held. The first quarter therefore looks heavier than subsequent quarters — because the baseline is being built. Quarters 2, 3, and 4 fall into the rotating audit cadence.
• Can we add a project mid-retainer? Yes. Expansion into a new jurisdiction (LIC-002 scope), a product launch (PRD-001 scope), M&A diligence (STR-001 scope), or enforcement defense (ENF-001 scope) can all be added as a scoped project. Retainer clients pay a reduced rate on those engagements — typically 15–25% off the open-market project fee.
• What’s NOT included in the retainer? Enforcement hearing representation, litigation support, M&A legal diligence, capital-raise work, and non-cannabis regulatory matters (CDTFA excise-tax disputes that have moved to formal protest, Cal/OSHA hearings, litigation-track environmental claims). All of those are available at the reduced retainer rate but scoped as separate engagements. The engagement letter names this boundary from day one.
• How are retainers priced? Average retainer runs $2,000–$3,000 per month in year one, scaling with complexity and license count. Multi-license operators, manufacturers with closed-loop extraction, and distributors with interstate-analog operations carry higher monthly rates. Starter / Growth / Full-service tiers scope the level of included deliverables.
• Can we end the retainer? Yes — 90-day notice on either side. We hand off all work product in a structured archive: CAPA tracker, SOP library, filing vault, regulatory-change log, METRC variance history. A written close-out memo summarizes the state of the operation and the forward items. No transfer fee, no retention lock.
• How do you handle regulatory changes between audits? Weekly regulatory-change scan across DCC rulemaking, CCR Title 4 amendments, BPC Division 10 amendments, and applicable local ordinance updates. Material changes convert to a tracker item with owner and due date within 48 hours. Immaterial changes land in a monthly digest.
• What happens if DCC shows up unannounced? Pre-inspection brief issued within two hours of the inspector announcing a visit. The Month 9 mock inspection means your team has already run the drill under the same checklist. Retainer clients can pull their current vault into a clean audit-response folder in minutes — no scramble.
• Do you handle multiple licenses under one retainer? Yes. Most retainer clients hold two to six licenses; the retainer covers all of them under one engagement. Separate license records are maintained, but filings, audits, and the regulatory-change log run across the portfolio.
• Can the retainer be paused? In practice, yes, with written agreement. Operators facing a transaction, a seasonal slowdown, or an operational pivot occasionally pause for a defined window (typically 30–90 days). The document vault is preserved; the monthly fee is suspended; filings in flight are completed; re-engagement resumes at the original rate.