Skip to content
Capitol Compliance Management
Compliance by license type

Cannabis Retail & Dispensary Compliance

Whether you run a Type 10 storefront or a Type 9 non-storefront delivery operation, the dispensary compliance requirements California enforces reach into nearly every part of your day: who you sell to, how much, what leaves the counter, and what your cameras recorded. Capitol Compliance Management helps California retailers build those controls, document them, and keep them audit-ready, so a DCC inspection confirms what you already know rather than uncovering surprises.

01

Type 10 storefront vs. Type 9 non-storefront delivery

California retail cannabis runs under two Department of Cannabis Control license types, and cannabis retail compliance California starts with knowing which set of rules applies to you. A Type 10 storefront retailer sells to customers on a licensed premises and may also deliver. A Type 9 non-storefront delivery retailer has no public sales floor at all; it operates from a closed licensed premises and reaches customers only through delivery. The core obligations overlap, because both are retailers selling to the public. Both verify age and identity, honor daily purchase limits, run everything through METRC track-and-trace, maintain video surveillance, and send product out the door in compliant exit packaging. Where they diverge is physical: storefront rules govern the sales floor, customer access, and posted signage, while non-storefront rules govern the closed premises and the delivery vehicle. Getting the license-type distinction right is the foundation everything else sits on.

  • Type 10 (storefront): licensed premises with public retail sales, may also deliver
  • Type 9 (non-storefront delivery): no public sales floor, delivery only from a closed premises
  • Shared duties: age and ID verification, daily limits, METRC, surveillance, exit packaging
  • Type-specific duties: storefront access and signage vs. closed-premises and vehicle controls
02

Point-of-sale controls: daily limits and ID verification

Two of the most common findings at retail come down to what happens at the counter. Every retailer must verify that each customer is at least 21, or 18 with a valid physician's recommendation for medicinal cannabis, using valid government-issued identification before entry and again at sale. Your point-of-sale process and your staff both need to enforce that consistently, not just on a good day. Daily sales limits apply per customer per day and differ between adult-use and medicinal customers and across product categories such as flower, concentrates, and other forms. Your POS system should be configured to track and stop a transaction that would exceed those limits, and your staff should understand the thresholds rather than relying on memory. CCM reviews your POS configuration and your ID-check and limit-enforcement procedures, then writes them into SOPs your team can actually follow.

03

Surveillance, retention, and records

California requires licensed retailers to run a video surveillance system that covers the required areas of the premises, including points of sale, entrances and exits, and areas where cannabis is stored or handled, and to keep that footage for the retention period the regulations specify. A camera that is misaimed, offline, or overwriting footage too soon is a finding waiting to happen. Beyond video, retailers carry a broad recordkeeping duty: sales records, inventory reconciliations, and the METRC track-and-trace history that ties every unit you receive to every unit you sell. When those records line up with your physical inventory and your footage, an inspection goes quickly. When they do not, small discrepancies become the DCC's starting point. We help you confirm your surveillance coverage and retention meet the standard and that your records reconcile before anyone from the state asks to see them.

  • Camera coverage of sales, entry and exit, and storage areas
  • Footage retained for the required period and verified as recording
  • Sales and inventory records that reconcile to physical counts
  • A clean METRC history linking every unit received to every unit sold
04

Delivery, manifests, and non-storefront rules

Delivery is where non-storefront delivery retailer compliance gets its own rulebook, and it applies to Type 9 operators and to Type 10 storefronts that deliver. Every delivery leaves the premises with an electronic delivery manifest generated for the trip, and the goods in the vehicle must match that manifest. Regulations cap the dollar value of cannabis goods a delivery vehicle may carry at one time and limit what may be sold en route, so your dispatch and inventory reconciliation for delivery have to hold up. Drivers must be employees of the licensee, carry the right identification, and follow rules on vehicle requirements, route documentation, and secure product storage in the vehicle. For non-storefront operators the closed premises still has to meet security and storage standards even without a public entrance. CCM maps your delivery workflow end to end, from manifest generation to vehicle controls to the records that prove each delivery was compliant.

05

Exit packaging, labeling, and how CCM keeps you audit-ready

The last compliance step is the one the customer sees. Cannabis goods must leave in a resealable, child-resistant, opaque exit package, and the product itself has to carry compliant labeling, including the universal symbol, required warnings, and accurate information consistent with what the manufacturer provided and what METRC reflects. Retailers get caught here when packaging runs out, when staff improvise, or when a product on the shelf carries a label that no longer meets the current standard. This is where ongoing support matters more than a one-time cleanup. CCM works with California retailers on mock audits and DCC inspection readiness, retail-specific SOPs for ID checks, limits, surveillance, delivery, and packaging, METRC reconciliation and track-and-trace training, and continuous compliance so your controls stay current as the rules change. If you have received a notice to comply or failed an inspection, we build the corrective-action plan and fix the underlying process, working alongside your cannabis attorney rather than in place of one. To see where your retail or delivery operation stands, book a compliance consult and we will walk your requirements with you.

  • Mock audits and DCC inspection readiness for storefront and delivery
  • Retail SOPs: ID and limits, surveillance, delivery manifests, exit packaging
  • METRC reconciliation and track-and-trace training for your team
  • Continuous compliance and corrective-action support alongside your attorney
Questions

Frequently asked

01What is the difference between a Type 10 and a Type 9 cannabis license in California?
A Type 10 is a storefront retailer that sells to the public on a licensed premises and may also deliver. A Type 9 is a non-storefront delivery retailer with no public sales floor that reaches customers only through delivery. Both must verify age and ID, honor daily purchase limits, use METRC, maintain surveillance, and use compliant exit packaging. The main difference is physical: a storefront has a regulated sales floor and public access, while a non-storefront operates from a closed premises and relies entirely on compliant delivery.
02What are the daily purchase limits for a California dispensary?
California caps how much a customer may buy per day, and the limits differ for adult-use and medicinal customers and across product categories such as flower, concentrated cannabis, and other forms. Your point-of-sale system should be configured to track purchases and stop a transaction that would exceed the limit, and staff should verify age and identity every time. Because the specific figures are set by the DCC and can be updated, confirm the current thresholds in the regulations or with a compliance consultant before relying on a fixed number.
03How long do California cannabis retailers have to keep video surveillance footage?
Licensed retailers must run a surveillance system covering the required areas of the premises, including points of sale, entrances and exits, and storage areas, and retain the recorded footage for the period set in the DCC regulations. Cameras must actually be recording and correctly aimed, and footage must remain available for that full retention window. Because the required coverage and retention period are defined by regulation, verify the current standard rather than assuming, and confirm your system meets it before an inspection.
04What are the delivery manifest requirements for cannabis delivery in California?
Every delivery must leave the premises with an electronic delivery manifest for the trip, and the cannabis goods in the vehicle must match that manifest. Regulations cap the total dollar value of goods a delivery vehicle may carry at one time, limit what may be sold during the route, and set rules for drivers, vehicles, secure storage, and route documentation. Drivers must be employees of the licensee. These rules apply to Type 9 non-storefront retailers and to Type 10 storefronts that deliver.
05Does CCM handle license suspension, revocation, or DCC appeals?
No. Capitol Compliance Management is a cannabis regulatory-compliance consultancy in Sacramento, not a law firm, and we do not provide legal representation or handle suspension, revocation, reinstatement, or appeals before the DCC or the Cannabis Control Appeals Panel. Those are matters for your cannabis attorney. What we do is the compliance and remediation work: mock audits, SOPs, METRC reconciliation, and corrective-action plans that fix the underlying process, done alongside your attorney when enforcement is involved.
06How does CCM help a California dispensary prepare for a DCC inspection?
We start with a mock audit that walks your operation the way an inspector would, checking ID and daily-limit enforcement at the point of sale, surveillance coverage and retention, delivery manifests and vehicle controls for any delivery operation, exit packaging and labeling, and your METRC and inventory records. We then close the gaps with retail-specific SOPs, track-and-trace reconciliation, staff training, and, if you want it, continuous compliance support so you stay audit-ready between inspections. Book a compliance consult to get started.
Get audit-ready

Book a compliance consult

Tell us your license type and where you are in the process. We'll map the fastest path to audit-ready.