Skip to content
Capitol Compliance Management
Compliance by license type

Cannabis Distribution Compliance

California cannabis distributors sit at the center of the supply chain, which means the state holds you accountable for goods you did not grow, make, or sell. Whether you run a full Type 11 distributor operation or a Type 13 transport-only license, your compliance record lives in your manifests, your METRC data, and your ability to prove chain of custody at any moment. Capitol Compliance Management helps you keep that record clean, consistent, and inspection-ready.

Book a Compliance Consult
01

What distribution compliance covers in California

Under the Department of Cannabis Control (DCC), distribution is the licensed activity of moving cannabis and cannabis products between commercial operators, arranging required lab testing, and holding product until it passes. A Type 11 distributor can store, transport, and coordinate quality assurance and testing for finished goods. A Type 13 transport-only license is narrower: it authorizes transport between licensees but not the quality-assurance and testing-batch functions of a full distributor. Distribution is business to business, which is what separates it from retail delivery. Your counterparty is another licensee, not a consumer, and every handoff is licensee to licensee. Because distributors touch nearly every product before it reaches a retailer, the DCC expects near-perfect recordkeeping. The obligations that most often trip operators up are transportation manifests and chain of custody, quality-assurance review, lab-testing coordination, driver and vehicle documentation, storage security, and inventory reconciliation in track-and-trace. Getting these right is the difference between a routine inspection and a notice to comply.

  • Type 11 distributor: storage, transport, quality assurance, and lab-testing coordination for finished cannabis goods
  • Type 13 transport-only: transport of cannabis between licensees, without the QA and testing-batch role
  • Every transfer moves between licensees, so both ends of the handoff have to be documented
  • Both types operate entirely inside California's METRC track-and-trace system
02

What a DCC inspector looks at first

Distribution inspections tend to start with paper, not product. An inspector generally confirms the basics first, that the license matches the entity operating and that the space matches the premises diagram on file, and then goes straight to track-and-trace. From there the work is comparison: recent and open transfers in METRC pulled against the manifests and receipts in your files, and then against what is physically on the shelf. The order matters because each step decides how deep the next one goes. If your transfers are current and your manifests match them, the walk through storage is usually short. If the system and the file disagree on even one shipment, there is a reason to keep pulling, and a single documentation gap turns into a broad review of your recordkeeping. No two inspections run identically, but this is the sequence a distributor should be able to answer to on any given day.

  • License and premises: the license on file, the operating entity, and whether the layout matches the premises diagram
  • METRC next: recent and open transfers, package tags, and whether events were reported when they actually happened
  • Manifests against the system: transport documents matched to the METRC record for the same transfers
  • Storage: what is on the shelf, whether it sits in the limited-access area it should, and whether tested, untested, and on-hold product are separated
  • Vehicles and staff records, when they are on site: driver files, training records, and vehicle documentation
  • SOPs last: whether the written procedure matches what your team just demonstrated
03

Where distributors actually get cited

Most distribution findings come from the same short list of small failures, repeated. A manifest that is incomplete, does not match the load, or was reused rather than generated fresh. A transfer logged in METRC late, or after the product already moved, which breaks the chain of custody for everything downstream of it. A certificate of analysis that is missing or out of date at the moment of handoff, so the receiving licensee has no way to confirm what it is accepting. The rest cluster around people, vehicles, and space. Drivers who were never trained on the transport paperwork, a credential nobody noticed had expired, a vehicle that was never inspected or whose inspection was never logged. Product staged in an area that is not part of your licensed, secured premises because a load arrived late and there was nowhere else to put it. Underneath all of it sits the procedural gap: no written procedure for intake, for rejecting a shipment, or for handling a return, so every person handles it their own way and the records show it. These are the failures worth checking your own operation against before someone from the state does.

  • Manifests that are incomplete, do not match the load, or were reused instead of generated fresh for the shipment
  • Transfers caught up in METRC at the end of the week rather than logged as they happen
  • A certificate of analysis that is missing, superseded, or not linked to the package at the moment of handoff
  • Drivers who were never trained on the transport paperwork, or credentials nobody noticed had expired
  • Vehicles with no inspection record, or inspections that happened but were never written down
  • Product staged outside the licensed, secured premises, including loads that were only ever going to sit for a few hours
  • No written intake, rejection, or return procedure, so the same event gets handled differently by each person
04

A transfer, step by step

It helps to treat a transfer as a chain where every link is documented at the moment it happens rather than reconstructed afterward. The chain starts at the origin premises, where packages are selected and confirmed against the order and against the receiving licensee's status, and where the manifest is generated in METRC before anything is loaded. Load-out is the first real checkpoint: the tags in the vehicle either match the manifest exactly or they do not, and that is the cheapest possible moment to catch a mismatch. From there the shipment is in transit under a specific driver in a specific vehicle, and the record has to name both. At the receiving end, the other licensee inspects and then accepts, partially accepts, or rejects, and each of those outcomes has to land in track-and-trace and in your file rather than waiting for an end-of-week catch-up. The window for reporting it is set by regulation and should be confirmed against current DCC rules. Rejected or returned product goes back on a manifest for the return leg and back into your inventory when it arrives, not into a corner of the warehouse waiting for someone to sort it out later.

  • Order build: packages selected at origin and confirmed against the order and the receiving licensee's license status
  • Manifest generated in METRC before the product leaves the premises
  • Load-out check: every tag in the vehicle reconciled to the manifest, with variances resolved before departure
  • Transit: named driver, identified vehicle, and route and timing recorded
  • Arrival: the receiving licensee inspects and accepts, partially accepts, or rejects, with the certificate of analysis available
  • Return leg: anything rejected is manifested back and received into inventory, not left open
  • Close the loop: confirm the transfer in METRC and file the manifest, receipts, and COA together
05

Transportation manifests and chain of custody

Every movement of cannabis goods between licensees must be recorded on a transportation manifest generated in METRC before the product leaves the origin premises. The manifest ties a physical shipment to specific package tags, quantities, the transporting distributor, the route, and the estimated departure and arrival times. If what is in the vehicle does not match what is on the manifest, you have a discrepancy, and a discrepancy found during transit or at delivery is one of the most common findings in a distributor inspection. Chain of custody is the discipline that keeps manifests defensible. It means you can show, for any package, an unbroken record of who handled it, where it was stored, when it moved, and how the METRC tag traveled with it. We help distributors build manifest and hand-off procedures that hold up under scrutiny, so a routed shipment always reconciles to the tag, the vehicle, and the receiving licensee.

  • Generate the METRC manifest before transport and keep the shipment matched to it end to end
  • Never carry forward or reuse a prior manifest for a new load
  • Confirm receiving-licensee license status and product acceptance at delivery
  • Document vehicle, driver, route, and timing so transit records reconcile cleanly
  • Record rejected or returned product correctly instead of leaving open discrepancies
06

Quality assurance, lab testing, and QA holds

For full Type 11 distributors, quality assurance is a core regulated function. Before a batch of finished product can move to retail, it has to be sampled by a licensed Type 8 testing laboratory, held while testing is underway, and reviewed against the certificate of analysis and label claims once results come back. Product that fails, or that carries a label the results do not support, cannot be released, and the way you handle that failed batch is itself a compliance event. We help distributors put a clean testing and QA-hold workflow in place: coordinating sampling with the lab, keeping tested and untested inventory clearly separated, reviewing the certificate of analysis against the label before release, and documenting remediation or destruction for anything that fails. The COA then has to stay attached to the batch for the rest of its life in your system, because the version that matters is the one available at handoff, not the one filed in an email thread somewhere.

  • Coordinate lab sampling and keep product on hold until results clear
  • Reconcile the certificate of analysis against label claims before release
  • Keep the current COA linked to the batch and retrievable at the moment of transfer
  • Separate tested, untested, and failed inventory so nothing is released early
  • Document destruction or remediation of failed batches in track-and-trace
07

The transport leg: drivers, vehicles, and interrupted routes

A distributor's transport leg usually carries several licensees' product on one run, so a single paperwork problem in the vehicle can touch every stop on the route. The people driving are your staff, and their files need to show it: employment status, the training you gave them on manifests and handoffs, and current credentials to drive. An expired driver's license is not a cannabis rule, but it becomes a compliance problem when the person holding it is the one named on the manifest. Vehicles carry their own obligations. The DCC sets standards for how cannabis goods are secured in transit, what may be visible from outside the vehicle, and how product is handled when a route cannot be completed as planned. Because those specifics are set by regulation and can be updated, confirm them against current DCC rules rather than relying on how it was done a few years ago. The part that does not change is that a receiving licensee turning away a load leaves you holding product mid-route, and the procedure for that moment has to exist before it happens.

  • Driver files: employment status, training on transport procedure, and current credentials with expiration dates tracked
  • Vehicle records: identification, condition and inspection logs, and which vehicle carried which manifest
  • Secure transport of goods inside the vehicle, per the current DCC standard
  • Multi-stop runs kept straight, so packages destined for one licensee are not handed to another
  • A written procedure for interrupted routes, refused deliveries, and product that comes back on the truck
08

Excise tax, storage security, and inventory reconciliation

The tax landscape for distributors changed. Since January 1, 2023, the cannabis excise tax is collected and remitted by retailers rather than by distributors, so a distributor's tax exposure today is mainly about clean invoicing, accurate records, and cooperating with the receiving licensee, not collecting the excise tax at the point of distribution. If your standard operating procedures still describe the old distributor-collected model, they are out of date, and we will bring them current. Storage security and inventory reconciliation are where inspections usually land. The DCC expects limited-access areas, video surveillance with the required retention, alarm coverage, and a physical inventory that matches METRC at all times. Distributors carry a lot of product on behalf of others, so even a small unexplained variance between the shelf and the system is a real finding. The variance that causes the most trouble is rarely the largest one, it is the one nobody wrote an explanation for. We build reconciliation routines that catch and correct discrepancies before an inspector does.

  • Update SOPs and invoicing to reflect the retailer-collected excise tax model
  • Maintain limited-access storage, surveillance coverage, and required video retention
  • Keep temporary staging inside the licensed, secured premises, including short holds and overflow
  • Reconcile physical inventory to METRC on a regular cadence, not just before an audit
  • Investigate and document variances so every package on the shelf ties to a tag
  • Archive manifests, receipts, COAs, and destruction records together so a single transfer can be produced in full
09

How CCM helps distributors stay compliant

Capitol Compliance Management is a Sacramento-based cannabis regulatory-compliance consultancy. We work with Type 11 and Type 13 operators to build the day-to-day systems that keep a distribution license in good standing: manifest and chain-of-custody procedures, QA and testing workflows, driver and vehicle documentation, storage-security controls, and METRC reconciliation that actually holds up in an inspection. We can run a mock audit of your operation, tighten your SOPs, and train your team on the parts that inspectors weigh most heavily. We are a consultancy, not a law firm, and we do not provide legal representation. If you are facing an enforcement matter such as a notice to comply, we focus on the corrective-action and remediation work, fixing the underlying manifest, testing, or recordkeeping issue, and we do that alongside your cannabis attorney rather than in place of one. If you want a clear read on where your distribution compliance stands, book a compliance consult and we will walk your operation with you.

  • Mock DCC inspections focused on manifests, QA, transport, storage, and reconciliation
  • Distribution-specific SOPs mapped to current DCC regulations, including intake, rejection, and returns
  • METRC reconciliation and discrepancy cleanup before it becomes a violation
  • Driver and staff training on the transport paperwork they are responsible for
  • Corrective-action support on enforcement matters, alongside your attorney
Questions

Frequently asked

01What is the difference between a Type 11 and a Type 13 cannabis distribution license in California?
A Type 11 distributor can store cannabis goods, transport them between licensees, and perform the quality-assurance and lab-testing-coordination role that gets finished product tested and released to retail. A Type 13 transport-only license authorizes transporting cannabis between licensees but not the quality-assurance and testing-batch functions. Many operators start with transport-only and move to a full distributor license as their role in the supply chain grows.
02How is cannabis distribution different from cannabis delivery in California?
Distribution is business to business. You move, store, and hand off cannabis goods between licensed operators, and every transfer is documented on a manifest between two licensees. Delivery is the consumer last mile performed under a retail license, where the goods go to a customer at a residence or other permitted address. The recordkeeping looks similar at a glance, but the rules, the license types, and the counterparty are different, so the procedures should not be copied from one to the other.
03What does a DCC inspector check first at a distribution facility?
Inspections usually start with the license and the premises, confirming that the license matches the operating entity and that the space matches the premises diagram on file. From there the focus moves to track-and-trace: recent and open transfers, package tags, and whether events were reported when they happened. Those records are then compared to your manifests and to the physical inventory in storage. Vehicles, driver files, and SOPs typically come after, and the written procedure is checked against what your team actually did.
04What are the most common cannabis distribution compliance violations?
Manifests that are incomplete, mismatched to the load, or reused instead of generated fresh. Transfers logged into METRC late or after the product already moved. Certificates of analysis that are missing or outdated at handoff. Untrained drivers, expired credentials, and vehicles with no inspection record. Product staged in areas that are not part of the licensed, secured premises. And missing procedures for intake, rejection, and returns, which is usually the root cause underneath the others.
05What are the cannabis distribution manifest requirements in California?
Every transfer of cannabis goods between licensees must be recorded on a transportation manifest generated in METRC before the product leaves the origin premises. The manifest ties the shipment to specific package tags, quantities, the transporting distributor, the route, and estimated departure and arrival times, and the physical shipment must match it. Manifests, along with the underlying delivery and receipt records, need to be retained and available if the DCC asks to see them.
06Do California cannabis distributors still collect the excise tax?
No. Since January 1, 2023, the cannabis excise tax is collected and remitted by retailers rather than by distributors. A distributor's tax-related obligations today center on accurate invoicing, clean records, and cooperating with the receiving licensee. If your standard operating procedures still describe distributors collecting the excise tax, they are out of date and should be updated to reflect the current model.
07What does distributor METRC compliance actually involve?
It means your track-and-trace data is a true, current picture of your inventory. In practice that includes generating manifests before every transport, keeping package tags accurate as product moves and is stored, recording QA holds and test results, logging any destruction or returns, and reconciling your physical inventory to METRC on a regular cadence. Most distributor findings come from a mismatch between what is on the shelf and what the system says, so catching variances early is the whole game.
08What records and certifications do distributors need to keep current?
Beyond your DCC license and local authorization, keep the full transfer file for each shipment, meaning the manifest, receipts, certificate of analysis, and any rejection, return, or destruction record, archived so they can be produced together. Track expiration dates on the credentials your operation depends on, including driver credentials and any certification tied to how you weigh product, such as a Weightmaster license, which is issued by the state's weights-and-measures authority rather than the DCC. Whether that applies to your operation depends on how weighing is used in your business, so confirm current requirements with the issuing agency rather than assuming.
09Can CCM help if my distribution license received a DCC notice to comply?
Yes, in a specific way. Capitol Compliance Management is a compliance consultancy, not a law firm, so we do not provide legal representation or handle license suspension, revocation, or appeals. What we do is the corrective-action and remediation work: identifying and fixing the underlying manifest, testing, storage, or recordkeeping issue and helping you document that it is resolved. We do this alongside your cannabis attorney, who handles the legal side of any enforcement matter.
10How do I know if my distribution operation is inspection-ready?
The most reliable way is a mock inspection that walks your operation the way the DCC would: checking manifests against physical shipments, confirming QA and testing holds, reviewing driver and vehicle documentation, reviewing storage-security and surveillance controls, and reconciling your inventory to METRC. That surfaces the gaps while you still have time to fix them. You can book a compliance consult with CCM to review your distribution operation and get a clear picture of where you stand.
Get audit-ready

Book a compliance consult

Tell us your license type and where you are in the process. We'll map the fastest path to audit-ready.

Book a Compliance Consult(916) 389-2858