California Cannabis License Types Explained

How California Licenses Cannabis Businesses

Since 2021, a single agency, the Department of Cannabis Control, has consolidated licensing and regulation for the entire supply chain. Before that, three separate bodies split the work, so older guidance you may find online can be out of date. Today, every commercial cannabis activity in the state runs through one DCC license type or another, and each type carries its own application requirements, operating standards, and inspection expectations. What unites all of them is METRC, the state's track-and-trace system. Nearly every licensed operator, from a cultivator tagging immature plants to a retailer recording the final sale, has to report inventory movement into METRC. Local approval is the other constant. The DCC will not issue a state license unless your city or county has authorized that activity at your location, and local rules are frequently stricter than the state's. The categories below map to the DCC license types most operators encounter. Each links out to a dedicated page where we cover that type's compliance requirements in depth.

• One regulator: the DCC oversees retail, distribution, cultivation, manufacturing, testing, microbusiness, and delivery.
• Track-and-trace: METRC reporting applies across almost every license type in the supply chain.
• Local first: a valid local authorization or permit is a prerequisite for the state license.
• Annual licenses: the provisional-license program has sunset, so operators now hold annual licenses, which require a complete application including CEQA compliance.

Retail, Delivery, and the Storefront vs. Non-Storefront Split

Retail is where cannabis reaches the consumer, and the DCC divides it into two license types. A storefront retailer operates a physical dispensary open to the public and may also deliver. A non-storefront retailer, often called a delivery-only license, fulfills orders from a licensed premises that customers never enter. Delivery is not a standalone license category on its own; it is an activity authorized under a retail license, and it comes with its own rules on vehicle inventory limits, manifests, and route documentation. Compliance for retailers leans heavily on the point of sale. Age and ID verification, daily purchase limits, exit packaging, and accurate METRC reconciliation between what is on the shelf and what is recorded are all common inspection points. Security requirements, including cameras, alarms, and limited-access areas, are among the most detailed of any license type.

• Storefront retailer: public-facing dispensary; may also run delivery.
• Non-storefront retailer: delivery-only fulfillment from a non-public premises.
• Key compliance areas: ID and age checks, daily sales limits, exit packaging, camera and alarm coverage, delivery manifests.

Cultivation, Manufacturing, Distribution, and Testing

The middle of the supply chain carries the most technical compliance load. Cultivation licenses are tiered by size and lighting type (specialty, small, medium, and larger classifications, across outdoor, indoor, and mixed-light methods), and they intersect with environmental law more than any other category. Water use, pesticide application, and California Environmental Quality Act (CEQA) review are central, and annual licensing requires demonstrating environmental compliance. Manufacturing licenses are organized around the process used, especially whether volatile solvents are involved, since extraction method drives most of the safety and facility requirements. Distribution sits at a critical control point: distributors arrange the mandatory lab testing, apply quality-assurance review, and handle much of the METRC transfer reporting that moves product between license holders. Testing laboratories are held to a separate standard entirely, built on accreditation and analytical accuracy rather than sales, and they are structurally independent from the businesses whose products they test.

• Cultivation: sized tiers plus outdoor, indoor, and mixed-light types; heavy on water, pesticides, and CEQA.
• Manufacturing: categorized by process, with volatile-solvent extraction carrying the strictest facility and safety rules.
• Distribution: coordinates required testing, quality assurance, and much of the track-and-trace reporting.
• Testing laboratory: accreditation-based, independent, and focused on analytical accuracy.

The Microbusiness License

A microbusiness license lets a single operator combine at least three of the following four activities under one license: cultivation (on a limited canopy footprint), manufacturing (of a non-volatile type), distribution, and retail. It is designed for smaller vertically integrated operators who want to run multiple stages in-house without holding a separate license for each. The appeal is operational simplicity, but the compliance reality is that a microbusiness has to meet the standards of every activity it performs. If you cultivate and manufacture and sell, you answer to the cultivation rules, the manufacturing rules, and the retail rules all at once, and inspectors will look at each. Many operators underestimate how much this multiplies their documentation and track-and-trace responsibilities, which is a common area where a compliance review pays off before problems surface.

• Combines three or more of: cultivation, manufacturing, distribution, retail.
• Cultivation area and manufacturing type are limited compared to standalone licenses.
• You inherit the full compliance obligations of every activity you run, not a reduced set.

How Compliance Differs by License Type, and Where CCM Fits

No two license types carry the same obligations. A testing lab's world is accreditation and method validation; a cultivator's is water and CEQA; a retailer's is the point of sale and security. What stays constant is that the DCC expects clean records, accurate METRC data, and operations that match what you described in your application. Most compliance issues trace back to a gap between the written plan and what actually happens on the premises day to day. Capitol Compliance Management is a Sacramento-based cannabis regulatory-compliance consultancy. We help operators build and maintain the standard operating procedures, recordkeeping, track-and-trace practices, and inspection readiness that each license type demands. We are a compliance consultancy, not a law firm, so we do not provide legal representation. When an operator faces an enforcement matter such as a suspension, revocation, or appeal, that is the practice of law and belongs with your cannabis attorney; in those situations we work alongside your counsel on the corrective-action and remediation side, getting the operational facts and documentation in order. If you are choosing a license type, preparing an application, or want a clear read on where your current operation stands, book a compliance consult and we will walk through your specific situation.