Cannabis Retail & Dispensary Compliance

Type 10 storefront vs. Type 9 non-storefront delivery

California retail cannabis runs under two Department of Cannabis Control license types, and cannabis retail compliance California starts with knowing which set of rules applies to you. A Type 10 storefront retailer sells to customers on a licensed premises and may also deliver. A Type 9 non-storefront delivery retailer has no public sales floor at all; it operates from a closed licensed premises and reaches customers only through delivery. The core obligations overlap, because both are retailers selling to the public. Both verify age and identity, honor daily purchase limits, run everything through METRC track-and-trace, maintain video surveillance, and send product out the door in compliant exit packaging. Where they diverge is physical: storefront rules govern the sales floor, customer access, and posted signage, while non-storefront rules govern the closed premises and the delivery vehicle. Getting the license-type distinction right is the foundation everything else sits on.

• Type 10 (storefront): licensed premises with public retail sales, may also deliver
• Type 9 (non-storefront delivery): no public sales floor, delivery only from a closed premises
• Shared duties: age and ID verification, daily limits, METRC, surveillance, exit packaging
• Type-specific duties: storefront access and signage vs. closed-premises and vehicle controls

Why retail draws scrutiny, and where stores slip

Retail operates in full public view in a way most license types do not. Customers, neighbors, local code enforcement, and the DCC all see the same storefront, so a mistake at the counter is visible and reportable in a way the same mistake is not at a cultivation site or a distribution warehouse. A storefront also answers to two authorities at once: the DCC on the state license, and the city or county on the local permit and its conditions of approval. The other pressure is internal. Retail runs on shifts, and shifts turn over. Compliance knowledge that lives in one experienced employee's head leaves with that employee, and the store keeps running on procedures nobody wrote down. Most retail findings come out of the handoffs rather than out of anything anyone decided: check-in, sales floor, back stock, inventory, METRC, and surveillance each pass the work to someone else, and the standard slips a little at every pass.

• ID checks done loosely: the wrong side of a card scanned, or a regular customer waved through
• Physical stock that no longer matches what METRC says is on hand
• Restricted areas that are not actually restricted, with staff or customers near product staging
• Surveillance gaps at entrances, exits, and the point of sale, or footage that ages out early
• SOPs written once and never updated after a layout, system, or staffing change
• Displays, promotions, and advertising that were never reviewed against current rules
• Everyday oversights: loitering outside, odor complaints, staff working without required employee identification

Walk your store the way an inspector will

An inspection tends to work from the outside in rather than starting at your METRC screen. The scope and order of any given inspection are up to the DCC, so treat the sequence below as a way to structure your own walkthrough, not a prediction of what will happen. Walk your store in that order on a set schedule and you will catch much of what an inspector would catch, while you still have time to fix it. The value is not in memorizing a checklist. It is in catching small drift: a camera nudged out of position during a remodel, a back-stock shelf that crept past the line on the premises diagram, a posted license that expired last month, a discount that has been running since before the rules changed. None of those are hard to correct. They are only hard to correct in front of an inspector.

• Exterior and entrance: license posted, current, and visible; signage compliant; the sidewalk and parking area free of the loitering, consumption, and odor issues your local permit conditions address
• Reception and check-in: ID verified before anyone reaches the sales floor, the same way by every employee on every shift, with the check documented
• Waiting area: separated from the sales floor, with no access to stored product
• Sales floor: product secured and accounted for, every sale captured in both the POS and METRC, discounts and promotions reviewed against current rules
• Storage and back of house: layout matching the DCC-approved premises diagram, access limited to authorized staff, expired or quarantined product physically isolated
• Transfer and delivery staging: manifests generated in METRC before anything leaves, and incoming transfers counted against the manifest as they arrive rather than after the truck goes

Point-of-sale controls: daily limits and ID verification

Two of the most common findings at retail come down to what happens at the counter. Every retailer must verify that each customer is at least 21, or 18 with a valid physician's recommendation for medicinal cannabis, using valid government-issued identification before entry and again at sale. Your point-of-sale process and your staff both need to enforce that consistently, not just on a good day. Daily sales limits apply per customer per day and differ between adult-use and medicinal customers and across product categories such as flower, concentrates, and other forms. Your POS system should be configured to track and stop a transaction that would exceed those limits, and your staff should understand the thresholds rather than relying on memory. The failures here are almost always familiarity rather than ignorance: a regular gets waved past check-in, a card gets glanced at instead of read, a limit gets overridden to keep the line moving. CCM reviews your POS configuration and your ID-check and limit-enforcement procedures, then writes them into SOPs your team can actually follow.

• ID verified at entry and again at the counter, with no exceptions for known customers
• The card read or scanned the way your written procedure requires, on the correct side, every time
• POS configured to track daily limits by customer type and product category and to stop the transaction
• Medicinal customers handled under their own limits, with the supporting documentation on file
• Overrides restricted to named roles and logged, so an exception leaves a record

Surveillance, access control, and records

California requires licensed retailers to run a video surveillance system that covers the required areas of the premises, including points of sale, entrances and exits, and areas where cannabis is stored or handled, and to keep that footage for the retention period the regulations specify. A camera that is misaimed, offline, or overwriting footage too soon is a finding waiting to happen. Because the required coverage and the retention window are set by regulation, confirm the current standard against DCC rules rather than trusting how the system was configured when it was installed. Access control sits next to surveillance. Restricted areas need to be genuinely restricted, with locks or badges, a current list of who has access, and a habit of enforcing it when the store is busy. Beyond that, retailers carry a broad recordkeeping duty: sales records, inventory reconciliations, and the METRC track-and-trace history that ties every unit you receive to every unit you sell. When those records line up with your physical inventory and your footage, an inspection goes quickly. When they do not, small discrepancies become the DCC's starting point.

• Camera coverage of sales, entry and exit, and storage areas, rechecked after any remodel or fixture change
• Footage retained for the required period and verified as actually recording
• Restricted areas locked or badged, with a current record of who has access
• Sales and inventory records that reconcile to physical counts on a set schedule
• A clean METRC history linking every unit received to every unit sold

Delivery, manifests, and non-storefront rules

Delivery is where non-storefront delivery retailer compliance gets its own rulebook, and it applies to Type 9 operators and to Type 10 storefronts that deliver. Every delivery leaves the premises with an electronic delivery manifest generated for the trip, and the goods in the vehicle must match that manifest. Regulations cap the value of cannabis goods a delivery vehicle may carry at one time and limit what may be sold en route. The exact figure is set by regulation and can be updated, so confirm it against current DCC rules rather than a number someone quoted you. Either way, your dispatch and inventory reconciliation for delivery have to hold up. Drivers must be employees of the licensee, carry the right identification, and follow rules on vehicle requirements, route documentation, and secure product storage in the vehicle. The weak point is usually the return trip: undelivered orders and refused deliveries that come back to the premises and never get reconciled cleanly into inventory and METRC. For non-storefront operators the closed premises still has to meet security and storage standards even without a public entrance. CCM maps your delivery workflow end to end, from manifest generation to vehicle controls to the records that prove each delivery was compliant.

• Delivery inventory drawn from the same METRC record as your counter sales, so one side of the business does not hide the other's variance
• Undelivered and refused orders reconciled back into inventory and METRC on return, not on the next shift
• A Type 9 closed premises held to the same security, storage, and access standards as a sales floor
• One dispatch procedure the whole store follows, so the counter and the road are not keeping separate books

What the customer sees: exit packaging, labeling, and displays

The last compliance step is the one the customer sees. Cannabis goods must leave in a resealable, child-resistant, opaque exit package, and the product itself has to carry compliant labeling, including the universal symbol, required warnings, and accurate information consistent with what the manufacturer provided and what METRC reflects. Retailers get caught here when packaging runs out, when staff improvise, or when a product on the shelf carries a label that no longer meets the current standard. The same scrutiny reaches your walls and your window. Advertising, in-store displays, and promotional pricing are all regulated, covering what has to appear on an ad, who it may reach, and how a promotion may be structured. Discount and giveaway-style offers are a common way stores get ahead of the rules without meaning to, and your local jurisdiction may layer its own conditions on signage and window visibility on top of the state's. Because these requirements come from DCC regulation and from your local permit, confirm the current standard against both rather than assuming a practice is fine because it is common.

Training, turnover, and how CCM keeps you audit-ready

A store with good SOPs still gets findings when the staff on shift have not been trained to apply them. A procedure in a binder is not a control. The control is the employee who checks ID the same way at closing as at opening, and the shift lead who knows which door stays locked and why. That means training that is short, specific to the job, repeatable for every new hire, and logged, so you can show who was trained on what and when. This is where ongoing support matters more than a one-time cleanup. CCM works with California retailers on mock audits and DCC inspection readiness, retail-specific SOPs for ID checks, limits, surveillance, delivery, and packaging, METRC reconciliation and track-and-trace training, and continuous compliance so your controls stay current as the rules change. If you have received a notice to comply or failed an inspection, we build the corrective-action plan and fix the underlying process. CCM is a compliance consultancy, not a law firm, and we do not represent operators in suspension, revocation, reinstatement, or appeal proceedings before the DCC or the Cannabis Control Appeals Panel. Those are matters for your cannabis attorney, and we do the remediation work alongside your counsel rather than in place of one. To see where your retail or delivery operation stands, book a compliance consult and we will walk your requirements with you.

• Mock audits and DCC inspection readiness for storefront and delivery
• Retail SOPs: ID and limits, surveillance, delivery manifests, exit packaging
• METRC reconciliation and track-and-trace training for your team
• Staff training with completion records kept for your audit file
• Continuous compliance and corrective-action support alongside your attorney