Tag Archives: due

3 Pillars of Cannabis Banking Compliance

By Mark Lozzi
No Comments

Few people will disagree that financial compliance isn’t the most exciting topic within the cannabis industry. But compliance is, and always will be, the engine grease to the legal cannabis market. Cannabis operators have the arduous task of dealing with multiple layers of compliance, both operational (maintaining and adhering to regulations enforced by the state licensing board) and financial. These compliance measures include managing everything from seed-to-sale systems for all plant-related activity to on-site requirements like facility access points and alarms systems to name a few.

With complex compliance requirements for the business, the last thing cannabis operators want to think about is financial compliance. We created Confia on this notion. Just as cannabis regulators impose the tracking of plants through the supply chain via a seed-to-sale system, we have developed a storyboard similarly designed to follow the money, which is the equivalent of a transaction-to-deposit system.

Having experience in regulatory technology, artificial intelligence and machine learning, we’ve been fortunate enough to work with some of the world’s largest banks across multiple countries. This experience has afforded us the luxury of working alongside regulators, chief compliance officers and chief risk officers, understanding how risk is perceived by financial institutions and how it ought to be mitigated. It was this access and knowledge that allowed us to effectively reform, enhance and improve the antiquated BSA programs with a technology-enabled process. Leveraging technology is a necessity, almost a requirement, for the cannabis industry as legalization nears and banking access begins to broaden.

Jamming cannabis requirements into an existing BSA program doesn’t scale well. BSA programs are very manual, descriptive and process oriented. So, we’ve taken our prior experience and success in banking to form Confia, distilling the complexities and simplifying the deliverables surrounding cannabis banking compliance. To best articulate cannabis banking requirements, I break it down into three pillars.

Pillar One: KYC-Enhanced Due Diligence

The first pillar is the client-onboarding bucket or KYC – Know Your Customer. In the complex world of cannabis banking, banks must know and understand their clients to great depths. It’s not enough to simply know that the client exists; you also have to understand whether or not that client could be a potential risk to the bank, and one step further, the financial system. Cannabis is a high-risk industry, so the KYC requirement is escalated to a deeper diligence and review, called Enhanced Due Diligence (EDD).

Cannabis is a high-risk industry so extra due diligence is needed

Banks need to know and understand their customers’ story, and all the key parties (officers, directors, and those with key decision-making powers or access to the bank accounts) within that organization. This includes reviewing personal, business, and legal history – not to mention watchlists and negative news presence. An initial onboarding review must then be followed with daily screening and monitoring of all watchlists and adverse media. Typically, banks do KYC refreshes every three years. In cannabis, a full refresh should be done annually with the daily monitoring systems in place.

The high-risk nature of the industry also requires a level of diligence on all parties to a transaction, even if one of the parties, whether a payer or recipient, is not a client of your bank. Unlike traditional banking sectors, reliance on other banks’ KYC programs is far less defensible in the cannabis industry.

Pillar Two: Transactional Monitoring & Detection

Tracking and monitoring the actual financial transactions comprises the second pillar required for cannabis banking. At Confia, we have focused on streamlining processes, so the cannabis operator can seamlessly support the compliance obligation for every transaction. A bank must demonstrate supporting documentation for every cannabis transaction, and gathering such information is a large undertaking in and of itself and can pose future issues if not done properly, see the pitfalls for lack of compliance. Banks are obligated to understand the nature and reason for each transaction, the source of funds, ensure cannabis licenses are in good standing for all parties, and collect evidence such as accounting records and seed-to-sale data.

Core to transaction monitoring in the traditional sense, is the overarching support through anomaly detection. Relying on information is important, but testing those inputs keeps everyone honest. It is important to evaluate transactions from a holistic point of view relative to peers and relative to the general contents of a transaction. This anomaly detection layer is your last line of defense, and as new information is collected, it continues to refine itself.

Pillar Three: Filing and Reporting Requirements

The third component to compliant cannabis banking is regulatory filing and reporting. Once a client is onboarded, the account requires an initial suspicious activity report or SAR-Initial within 30 days of that client being approved by the bank. Then, a report must be filed every 90 days after that for all the transactions of that cannabis operator. Banks must file the SAR-Initial and the Continuing-SAR reports for each cannabis client they have.

The high-risk nature of the industry requires a level of diligence on all parties to a transaction

Solutions like Confia automate the filing process and support the filing with transactional data evidenced on our distributed ledger of record. This provides immutable audibility and simplifies the process for all parties involved.

Compliance Requirements After US Legalization

The anticipation of federal legalization and banking reform bills has many operators hoping for easier banking. Yet, in my opinion, regulatory oversight and audits will likely increase after such reform or legalization. As other financial institutions start to support cannabis, it will inadvertently create greater opportunity and expose the financial system to nefarious or illegitimate transaction activity. This is why cannabis banking will be carefully monitored by regulators, and more so, why banks will be slow and pragmatic in standing up their internal cannabis banking programs. Some banks may forever avoid the cannabis industry due to the known pitfalls of an industry specific program, while others may simply mitigate the possible exposure to reputational risk.

Choose Wisely: Pitfalls for Lack of Compliance

Financial compliance is the responsibility and duty of the banks, but the real losers and result of non-compliance always fall on the cannabis operators. Regulatory action against an institution may result in the bank shutting down its cannabis program or may require them to complete a remediation of all their cannabis transactions for a certain period from its clients. At the end of the day, regardless of action, the cannabis operator is the one being punished. Operators either lose their bank account and have business massively disrupted, or they are asked to provide all the compliance docs for a historic period, which is a huge undertaking and operational distraction, ultimately impacting business and productivity. So, choose your banking partner wisely.

Summarizing Key Banking Requirements

In summary, banking in the cannabis industry will undoubtedly remain a high-risk industry, with or without legalization. Although banking opportunities may expand as US policies change, there will be continued compliance and regulatory requirements for the foreseeable future.

  • Onboarding and ongoing screening are critical
  • Evidence for every transaction is a significant portion of compliance and must not be dismissed
  • Evaluating activity with broader strokes is essential in mitigating against money laundering
  • Managing the staggered filing timelines and due dates for each client

Compliance is the most crucial factor in cannabis banking at this point. It cannot be overlooked or taken for granted. Cannabis operators must take an active role in evaluating the compliance programs of their financial providers. To open a bank account is one thing, but the consideration and effort that goes into keeping a bank account is the difference that will protect your business in the long run.

Due Diligence for Suppliers & Cannabis Supply Chain Partners

By Mark Slaugh
1 Comment

Between the patchwork quilt of rules and regulations that is the modern cannabis industry, products pass through many hands before being sold to a customer. From sourcing, cultivating, manufacturing, distributing and vending, the relationships between a licensee and their vendors/partners up and down the supply chain is complex and touches many stakeholders along the way.

While the focus on quality packaging, dope labeling, delicious ingredients and consistently potent cannabis is a priority for most companies, what often isn’t thought about is the liability in bringing these components together in terms of compliance.

Compliance responsibility falls on licensees as a direct term and condition of licensure within their state. To operate, licensees must maintain and be able to demonstrate compliance with a plethora of rules and regulations. Compliance is the name of the game in cannabis.

While most operators understand this, what most do not think about is how the compliance or noncompliance of their vendors affects their own liability.

Sharing Noncompliance & Liability

Supply chain partners are automatically segregated by whether or not they are plant touching licensees or not.

Licensees are the only entities in the supply chain that can be fined, administratively held, suspended, revoked or even arrested due to noncompliance. This fundamental nature means that supply chain partners are automatically segregated by whether or not they are plant touching licensees or not.

In the case of mutual licensees such as a manufacturer and dispensary, the liability for compliance falls on both entities. A single manufacturer that makes an error on labeling language or a cultivator using the incorrect containers both pass on their liability to any downstream partners.

iComply has seen regulators quarantine hundreds of products among multiple dispensaries who never checked the compliance of the supplying manufacturer. Surprisingly, most dispensaries don’t think of the liability passed to them amid hundreds of SKUs and multiple manufacturers and cultivators. Confounding the issue further is that everyone in the industry can interpret the same rules in completely different ways.

Assuming your supply chain partners are 100% compliant is a dangerous pitfall.

By not checking noncompliance from supply chain partners, operators accumulate evidence dating back years. Like METRC being off, these issues tend to snowball until they seem overwhelmingly difficult to handle. And it doesn’t just stop at labeling issues. Noncompliance can fall on all supply chain partners and be left in the hands of a licensee in a variety of ways.

Business partners like security contractors can often run afoul of regulations and put their licensed partners at risk.

Even worse, are supply chain partners who don’t have a motive to be compliant as they do not own licenses and often have a poor understanding of cannabis compliance. A packaging provider, marketing company, CBD provider, security company, vending machine providers, waste disposal companies and other commonplace suppliers and partners can often run afoul of regulations and put their licensed partners at risk.

Since regulators can only enforce the licensed entity, many states have made it clear that licensees are ultimately and fully responsible for any actions of noncompliance taken by third parties contracted by the company – regardless if they touch cannabis or not.

Areas of Common Noncompliance in Cannabis

Like a game of “Hot Potato” (worth millions of dollars), we’ve seen common noncompliance liability get passed down the supply chain in the following areas of cannabis operations:

  • Product liability
  • Packaging and labeling
  • Test result manipulation
  • Expired licenses
  • Input or ingredient defects
  • Inventory tracking errors
  • Recordkeeping and manifest errors

Some of these areas of noncompliance rely with non-licensed supply chain partners such as packaging, ingredients or third party printed labels. Often, these folks simply don’t know what they don’t know and make mistakes – not knowing the thousands of dollars they could be costing their licensed partner down the line.

Other areas in which compliance should be expected from licensed partners lies in product liability, test result issues, inventory tracking, manifests and recordkeeping. No one usually wants to be out of compliance and usually these issues arise from licensed partners who are simply confused, mistaken or ignorant to the requirements of ongoing and changing rules.

It’s hard to keep all of one’s suppliers and supply chain partners on the same page over the long run and amid a multitude of changing rules. But what you resist, persists…

Managing Compliance in the Cannabis Supply Chain

Nothing worth it is ever easy; but it is possible to identify common areas of noncompliance in one’s cannabis operation and supply chain partners and to do something about.

To identify problem areas, iComply recommends conducting regular auditing at a macro level; but to also dive deeper into micro level audits of all of one’s books and records (covering vendor files) and packaging and labeling for at least 12 months.

You don’t know what you don’t know, so one must begin by investigating and understanding where liabilities are occurring between themselves and their supply chain partners. Once valid feedback and noncompliance is discovered, it can be remediated.

Like triage, you have to stop the bleeding before you can prevent further injury.

Consistency in quality standards requires meticulous SOPs

It is always more expensive and time consuming to continue reacting to noncompliance and trying to fix issues after the fact. This is how snowball effects happen until the problems seem so overwhelming, operators tend to simply ignore the liability. While it is human nature, it is also extremely dangerous and detrimental when multimillion dollar licenses are on the line.

An ounce of prevention is worth a pound of cure –Benjamin Franklin

By implementing proactive compliance measures, cannabis businesses can avoid costly noncompliance consequences and position themselves as proactive checkpoints of supply chain compliance. We recommend integrating the following procedures, documents, training and tools into one’s operational compliance infrastructure:

  • New vendor checklist
  • Packaging and labeling checklists by product type
  • Virtual review of labels/non-cannabis packaging
  • Calendar expiration dates for licenses and products
  • Compliance auditing of key vendors and strong contracts regarding liability
  • Input product checklists and tracking as per GMP compliance

This snapshot is just the tip of the iceberg when it comes to the depths of liability a cannabis business is exposed to by its supply chain partners. To truly manage compliance, one must be aware of shared risk and implement proactive measures to prevent suppliers and supply chain partners from inadvertently affecting the operational compliance of your cannabis business.

Selecting Supply Chain Partners

There are plenty of fish in the sea and plenty of suppliers vying to do business with you. iComply has seen the good, the bad and the ugly. We’ve been on the front lines of developing markets like California where we warned our clients to steer clear of companies like Kushy Punch long before they finally lost their license for noncompliance.

control the room environment
Preventing contamination can save a business from extremely costly recalls.

We advise our clients on the importance of being selective and conducting due diligence in vetting supply chain partners and vendors. Most fundamentally, how aligned are the values of potential partners? Are they in the business for the same reasons you are? What brought them to the cannabis space? How do they value relationships and what do they know about compliance?

Too often when focused on price or speed, people miss the more important fundamentals of relationships. We serve as vetters for our clients whether they are shopping for a POS provider, a bank or a waste disposal company. Beyond the cultural alignment, the more objective questions begin to take shape in vetting a potential partner. This can differentiate between license holding and non-holding supply chain partners.

For plant-touching licensed partners, we recommend answering the following before entering into business partnerships that affect your supply chain:

  • Copies of licenses, contracts, and a catalogue of products
  • For products being selected, prior to ordering a sample, obtain a copy of the label by email first. Or an EMPTY sample of product packaging and labeling to vet against a packaging and labeling checklist.
  • Search news articles on the company and ask if they have had compliance issues before. Obtain documentation if there have been compliance issues previously.
  • Ask how they manage their compliance and prevent noncompliance down their supply chain. Do they train their staff? Do they conduct regular audits internally? How often do they update SOPs and reconcile inventory?

For non-plant touching partners, we recommend answering the following:

  • Obtain any certifications for quality assurance or in credentials for services.
  • Ask for references from other customers who have cannabis licenses.
  • Discover how familiar they are with the cannabis industry AND the rules and regulations in your market.
  • Ensure they have an understanding of how they impact your compliance. Discover how they plan on preventing areas of concern together.
  • Make sure they know you are ultimately responsible for noncompliance and understand what they are willing to do to protect you.

Ensuring accountability across the supply chain means selectively choosing partners who share the same values of integrity and professionalism. On more complicated deals, such as licensing IP or your brand to operators in new states or markets, we recommend that you mandate a compliance program that offers third-party validation to ensure the internal integrity of your partners. Too often, brand risk isn’t considered in the fast-paced expansion of the industry and operators must not only be vetted, but held accountable, when representing one’s brand and products.

For all intents and purposes, the wild web of the supply chain in cannabis is the industry. We are a collective of collaborators who all serve the goal of delivering high quality and safe products to cannabis consumers globally. For those committed to minimizing their risk to protect their profits, cannabis compliance is the key to success.

Ensuring accountability across the supply chain means selectively choosing partners who share the same values of integrity and professionalism. In doing so, the industry elevates its legitimacy and more effectively expands in a sustainable manner that protects all stakeholders involved.

Noncompliance affects licensees the most and they must be the most vigilant, but it takes a village to raise an industry. Compliance affects most everyone in the supply chain and the loss of any operator hurts the entire industry.

2020 Financial Trends for the Cannabis Industry

By Melissa Diaz
No Comments

The past year has been another strong year in cannabis. Investors continued to pour money into the burgeoning industry — surpassing 2018 investment totals in just 40 weeks — and new markets opened up for recreational and medical cannabis. And following the passage of the 2018 Farm Bill, CBD has proliferated and become one of the hottest health supplements in the country.

But as the year winds down, the industry appears to be poised for a more challenging shift in the new year, as once-heady expectations for some big companies don’t pan out and some states clamp down, rather than loosen up, certain regulatory hurdles.

Here are some financial trends to keep an eye on in cannabis over the next year:

Finding New Capital Investment Will Be Tougher

After an initial investment boom in recent years, cannabis investors are realizing not everything colored green turns to gold. With public cannabis companies not performing as well as hoped and restrictive tax laws still plaguing the industry, investors are growing more cautious when it comes to cannabis. Add in other macroeconomic trends that are pointing to a global economic slowdown, and 2020 is shaping up to be a tough year to find cannabis capital.

Image: Flickr

That’s not to say funding will completely dry up, but operators and business owners must be aware that investment deals that perhaps closed in a matter of days in previous years, likely will take weeks or months while investors dig deeper into books and perform higher levels of due diligence before inking a deal. This means cannabis businesses must carefully plan and watch their cashflow and pursue fresh capital or investment earlier rather than later.

Expect More M&A and Consolidation

With the green rush reaching a crest of sorts, reality is setting in for some smaller cannabis operators. Expect to see more consolidation with smaller dispensaries and cultivators being bought up and absorbed by the big kids. More limited capital and investment options coupled with continued regulatory and legal uncertainties mean unsustainable operating costs for independent and smaller operators, which means the only way to survive may be to sell to a larger player.

New Markets & Regulations

The new year brings new states opening up to recreational or medical cannabis sales, as well as newer or altered regulations in existing markets. Cannabis firms must keep an eye on these new markets and regulations to best determine whether they plan to expand or not.

How stringent or lenient regulations are written and executed will determine the size and viability of the market. One state may severely limit the number of licenses it issues, while others may not put any limit. For example, Oklahoma issues unlimited licenses to grow hemp at $1,500 a piece. While that sounds promising for smaller hemp producers, it also could potentially lead to an oversaturation in the market. On the flip side, a more restrictive (and costly) licensure structure could lead to a far more limited market where only the industry’s largest players will be able to compete.

Image: Cafecredit, Flickr

Cannabis businesses also should keep an eye out for new regulatory hurdles in existing cannabis markets. For instance, California is raising its excise tax on cannabis beginning Jan. 1. That will result in higher costs for both consumers and cannabis companies. High state and local taxes have been a challenge industrywide because they make legal operators less competitive with the illicit market. Also, a proposed rule in Missouri could ban medical cannabis operators from paying taxes in cash. Such a rule would prove problematic for an industry that has had to rely on cash because of federal banking regulations. 

Credit Card Payments

While cannabis businesses may face several new and recurring hurdles in 2020 on the financial front, at least one looming change should make business easier: credit card payment processing. Because of cannabis’ continued banking woes, dispensaries and other plant-touching operations have not been able to accept credit cards. Though federal banking limitations remain in place, in 2020 we will see payment processors introduce new, creative and less expensive ways to navigate current banking limitations that will allow cannabis sellers to take credit cards. Opening up payments in this way will not only make transactions and record keeping easier for customers and businesses alike, it also will attract consumers who don’t use cash.

While some of these trends may prove challenging, in many ways they are signs that the cannabis industry is shifting and maturing as we enter a new decade. Many hurdles remain, but the size and momentum of the industry will only continue to grow in 2020 and beyond.