Tag Archives: medical

How Effective is Your Internal Auditing Program?

By David Vaillencourt
No Comments

The word “audit” evokes various emotions depending on your role in an organization and the context of the audit. While most are familiar with and loathe the IRS’s potential for a tax audit, the audits we are going to discuss today are (or should be) welcomed – proactive internal quality audits. A softer term that is also acceptable is “self-assessment.” These are independent assessments conducted to determine how effective an organization’s risk management, processes and general governance is. 

“How do you know where you’re going if you don’t know where you’ve been” – Maya Angelou

Internal quality audits are critical to ensuring the safety of products, workers, consumers and the environment. When planned and performed periodically, these audits provide credible, consistent and objective evidence to inform the organization of its risks, weaknesses and opportunities for improvement. Ask yourself the question: do your clients/vendors rely on you to produce reliable, consistent and safe products? Assuming the answer is yes, what confidence do you have, and where is the documented evidence to support it?

Compliance units within cannabis businesses are typically responsible for ensuring a business stays legally compliant with state and federal regulations. This level of minimum compliance is critical to prevent fines and ensure licenses are not revoked. However, compliance audits rarely include fundamental components that leave cannabis operators exposed to many unnecessary risks.

Internal quality audits are critical to ensuring the safety of products, workers, consumers and the environment.

As a producer of medical and adult-use products that are ingested, inhaled or consumed in other forms by our friends, family and neighbors, how can you be sure that these products are produced safely and consistently? Are you confident that the legal requirements mandated by your state cannabis control board are sufficient? Judging by the number of recalls and frustrations voiced by the industry regarding the myriad of regulations, I would bet the answer is no.

What questions do internal audits address? Some examples include:

  • Are you operating as management intends?
  • How effective is your system in meeting specified objectives? These objectives could include quality metrics of your products, on-time delivery rates and other client/customer satisfaction metrics.
  • Are there opportunities to improve?
  • Are you doing what you say you do (in your SOPs), and do you have the recorded evidence (records) to prove it?
  • Are you meeting the requirements of all applicable government regulations?

There are potential drawbacks to internal audits. For one, as impartiality is essential in internal audits, it may be challenging to identify an impartial internal auditor in a small operation. If your team always feels like it is in firefighting mode, it may feel like a luxury to take the time to pull members out of their day-to-day duties and disrupt ongoing operations for an audit. Some fear that as internal assessments are meant to be more thorough than external assessments, a laundry list of to-do items may be uncovered due to the audit. But, these self-assessments often uncover issues that have resulted in operational efficiencies in the first place. This resulting “laundry list” then affords a proactive tool to implement corrective actions in an organized manner that can prevent the recurrence of major issues, as well as prevent new issues. The benefits of internal audits outweigh the drawbacks; not to mention, conducting internal audits is required by nearly every globally-recognized program, both voluntary (e.g. ISO 9001 or ASTM Internationals’s Cannabis Certification Program) and government required programs such as 21 CFR 211 for Pharmaceuticals.

Internal Auditing is a catalyst for improving an organization’s effectiveness and efficiency by providing insight and recommendations based on analyses and assessments of data and business processes. Additional benefits of internal audits include giving your organization the means to:

  • Ensure compliance to the requirements of internal, international and industry standards as well as regulations and customer requirements
  • Determine the effectiveness of the implemented system in meeting specified objectives (quality, environmental, financial)
  • Explore opportunities for improvement
  • Meet statutory and regulatory requirements
  • Provide feedback to Top Management
  • Lower the cost of poor quality

Findings from all audits must be addressed. This is typically done in accordance with a CAPA (Corrective Action Preventive Action) program. To many unfamiliar with Quality Management Systems, this may be a new term. As of Jan 1, 2021, this is now a requirement for all cannabis licensed operators in Colorado. Many other states require a CAPA program or similar. Continuing education units (CEUs) are available through ASTM International’s CAPA training program, which was developed specifically for the cannabis industry.

Examples of common audit findings that require CAPAs include:

  • Calibration – Production and test equipment must be calibrated to ensure they provide accurate and repeatable results.
  • Document and record control – Documents and records need to be readily accessible but protected from unintended use.
  • Supplier management – Most standards have various requirements for supplier management that may include auditing suppliers, monitoring supplier performance, only using suppliers certified to specific standards, etc.
  • Internal audits – Believe it or not, since internal audits are required by many programs, it’s not uncommon to have a finding related to internal audits! Findings from an internal audit can include not conducting audits on schedule, not addressing audit findings or not having a properly qualified internal auditor. Are you looking for more guidance? Last year, members of ASTM International’s D37 Committee on Cannabis approved a Standard Guide for Cannabis and Hemp Operation Compliance Audits, ASTM D8308-21.

If you are still on the fence about the value of an internal audit, given the option of an inspector uncovering a non-conformance or your own team discovering and then correcting it, which would you prefer? With fines easily exceeding $100,000 by many cannabis enforcement units, the answer should be clear. Internal audits are a valuable tool that should not be feared.

Kelab Analitica Becomes First Accredited Cannabis Lab in Colombia

By Cannabis Industry Journal Staff
No Comments

Established in 2019, Kelab Analitica is the first laboratory in Colombia to specialize in cannabis and pharmaceutical testing. In March of 2020, the lab began operating and serving the cannabis market in the South American country.

Then in December of 2020, Kelab Analitica obtained ISO/IEC 17025:2017 through Perry Johnson Laboratory Accreditation, making it the very first cannabis testing lab in Colombia to attain accreditation. The lab was also certified shortly after in Good Laboratory Practices by Colombian health authorities for analysis of pharmaceutical products.

The lab has found that ISO 17025 accreditation has helped with their marketing strategy. “As the industry grows, more producers are beginning to understand the importance of working with an accredited laboratory for quality and consistency of results and to comply with international requirements,” says a team member at Kelab Analitica.

In the future, they plan to expand their reach locally in Colombia and look for opportunities to expand in Latin America. They are also engaged in research in chromatography and instrumentation to develop new cannabis testing methods.

Flower-Side Chats Part 6: A Q&A with Fabian Monaco, CEO of Gage Cannabis

By Aaron Green
No Comments

In this “Flower-Side Chats” series of articles, Green interviews integrated cannabis companies and flower brands that are bringing unique business models to the industry. Particular attention is focused on how these businesses integrate innovative practices in order to navigate a rapidly changing landscape of regulatory, supply chain and consumer demand.

The Michigan cannabis market is making pace with big time cannabis players like California (#1) and Colorado (#2). For the first quarter of 2021, combined cannabis sales in Michigan were nearly $360 million. At that pace, Michigan could see combined sales of $1.4 billion — well outpacing 2020 sales of $984 million.

Gage is the exclusive cultivator and retailer of world-leading cannabis brands including Cookies, Lemonnade, Runtz, Grandiflora, SLANG Worldwide, OG Raskal, and its own proprietary Gage brand portfolio in Michigan. The company recently secured a $50M investment in an oversubscribed round which included a $20M investment from JW Asset Management.

We spoke with Fabian Monaco, CEO of Gage Cannabis. Fabian started Gage in 2017 after meeting his operating partners in Michigan. Prior to Gage, Fabian worked as an investment banker racking up a number of firsts in cannabis industry financing and M&A transactions.

Aaron Green: Tell me how you got involved in the cannabis industry.

Fabian Monaco: My background is in investment banking – specifically 10 years of capital market experience. I was fortunate enough to be part of the initial team that brought Tweed, now Canopy Growth public. In fact, I worked on a lot of firsts in the industry: the first acquisition, the first $100 million financing, the first IPO in the space. Shortly after that, I went to XIB Financial, which co-founded Canopy Rivers with Canopy Growth. I was working on that when I encountered these two phenomenal operators. At the time, I had visited over 100 of these cultivation facilities and these were some of the best operators in the business. So that led me to start Gage in 2017.

Green: Where is Gage currently operating?

Fabian Monaco, CEO of Gage Cannabis

Monaco: In the U.S., we are purely operating in Michigan. We do have a licensing agreement with a small producer in Canada, so you will see the brand there.

Green: Tell me about your choice to settle the company in Michigan initially?

Monaco: If you look at Michigan as a historical cannabis market, it was the second largest cannabis market from a medical card holder standpoint for nearly a decade, only behind California. This was probably the case until 2019, where they went to adult use. So, for us, we knew this medical base was going to be a great platform to an outsized adult-use market. And already we see that April was $154 million in sales, adding up to over a $1.8 billion dollar run rate. That’s the third highest run rate in the country, only behind California and Colorado.

Green: What is it that makes Michigan different? You talked about medical cannabis already. Is there anything else about the demographics in Michigan or the consumer base that makes Michigan special in that sense?

Monaco: In Michigan, over 70% of the population is old enough to consume. So, when you take a look at how much of the population is 21-years-old plus, relative to other markets, the total addressable market in Michigan is just huge. Then when you take a look at their consumption habits, especially when it comes to flower, Michigan is consuming some of the highest amounts on a per capita basis. Those two stats set up a scenario where we foresaw the potential of the market. To be honest, the market has exceeded our expectations. We didn’t think it would be this strong this quickly. Right now, the state is looking to be a $3 billion market by 2024 – and it could easily surpass that.

Green: Any plans for expansion beyond Michigan?

Monaco: We’ve been to eight or so different states in the past 60 or 75 days really trying to educate ourselves on the licensing structure, the markets there and the key players in those respective markets. What are some of the costs, in terms of acquisitions? We really want to branch out the Gage brand into other states across the US. The thing is, we believe in the model that Trulieve deployed. They really focus on being the number one player in a very, very big market. For instance, Trulieve is obviously one of the top players in Florida. We’re trying to mimic that strategy.

Trulieve is a dominant market force in Florida

Once we have that deep market penetration, that market share, then we’ll start to get into other states. But for now, why would you want to go and rush out to another state when you’re already in the third largest market in the country?

Green: Are there any criteria you look for in a potential expansion state?

Monaco: We look at consumption habits. We want states with similar demographics to Michigan. Close proximity states also allows us to quickly go from one state to the other without having to take a multi-hour flight to get there. States we’re considering are Northeast and Midwest states, like Illinois, Pennsylvania, Ohio, New Jersey, Massachusetts and Maryland.

Green: What kind of consumer trends are you seeing in Michigan as it relates to products?

Monaco: Flower continues to dominate. In a market like Michigan, we have some of the top flower consumers in the country on a per capita basis. We specialize in flower and flower only, so this created a perfect scenario where we are able to ramp up our brand quite quickly, from a flower standpoint.

Now that we have that brand equity, that brand power, we are going to potentially delve into other categories, including extract-based products, such as vape carts and concentrates. You hear talk about these new beverages, but we’re not seeing that take off in this market as much as people think it would. Flower still remains at the top and that’s something we highly anticipate going after for quite some time.

Green: Can you tell me about your vertical integration strategy?

Monaco: We’re one of the larger retail portfolios in Michigan right now. We have 13 locations. Nine are operational. So, we’re really in a great spot overall in terms of how big of a platform we do have – one of the larger ones – and, frankly, in one of the larger markets in the country.

The Cookies flagship dispensary in Detroit, Michigan

We actually have a little bit of a unique scenario on the cultivation side of things. We have our own three cultivation assets that are going to be producing, on average, about 1,000 pounds of product over the next couple of months as they fully ramp up. We’ve actually contracted out a lot of our cultivation. Cultivation is time consuming, and it’s also very, very costly to build out. Luckily for us, we’re a really well-established and strong brand. We had the opportunity to contract out our growing. So, we have 10 different contract growth partners. These are phenomenal cultivators, again, some of the best in the state. They grow Gage and Cookies branded product for us. We have a great breakdown from a financial standpoint. We share the retail revenue with them on a 50/50 basis. They pay a little bit too, for packaging and testing. So, basically for $0 we’re getting product on the shelf where we’re achieving 50% plus gross margins. It’s a phenomenal setup for us on the cultivation side where we went from two cultivation assets in the latter half of last year to now eight different cultivation assets, moving to 13 by the end of the year.

On the processing side, we’re just actually finishing our processing lab. We should have extract-based products launched in Q3. We’re really excited to have our own line of extract-based products. We plan to focus on vape carts to start – a very popular category in Michigan on the retail side of things.

Green: Are those cultivations all indoor?

Monaco: Yes, we’re big proponents of indoor flower. It allows us to control the quality of our flavors and consistency in our strains when we grow indoors. From our consumers, there is a very strong demand for indoor grown high-premium, high-quality products.

Green: What sets Gage apart from other competitors in Michigan?

Monaco: I think focus. We just focused on our flower. We focus on our post-production process. We hang dry everything, we hand trim everything, and we hand package everything. That’s a little bit more time consuming. It’s a little more costly. But all that effort shows in the end product which is key.

A lot of people think you can grow great quality product, you cut it down, you dry it and put it in the pack and it’s going to be great. You really need a strong attention to detail, especially in a big consuming market like Michigan, because again, they are a refined consumer. They’re looking for the best. They’ve already been consuming some of the best quality products in the country for many years now. So for us, we put a painstaking process in place for flower production, not only from the growing standpoint, but also through the end of that post production process.

Ancillary to our cultivation process is also consistently providing new varieties of flavors on the flower side of things to the consumers. When you look at the successful brands in California, what makes them special is that they’re consistently pheno hunting, coming out with new flavors. This is similar to the wine industry where the best wineries come out with a new kind of grape or mix and consumers get excited, they rush out and buy half a dozen bottles or a dozen bottles.

It’s a very similar scenario in the cannabis industry. I hate when people say that cannabis is a commoditized industry. It’s so far from the truth. You look at brands like us or Cookies, Jungle Boyz and you can see their constant innovation, their constant drive. They are always bringing something new for the consumers to try. That’s what really sets apart the best brands.

Green: What’s got your attention in the cannabis industry? What are you interested in learning more about?

Monaco: I’m always intrigued with new ways of consuming. Across the U.S. and well-developed markets like California and Colorado, you see all these interesting new ways to consume the product. You’ve got patches, sublingual strips, etc. There are so many unique ways. I am currently seeing how they play out. Are they fads? Do people get excited about them initially, and then go back to their vape carts, pens and typically dried flower pre-rolls? I’m always trying to educate myself to see what’s on the market. What’s new? Who has a new drink? How does it hit? Are people excited about it?

Also, I am constantly learning about new brands that come out. There are so many new small brands that don’t necessarily have the scale or the capital to really expand, but are producing some of the best products in the country in a cool, unique form of packaging, etc..

Green: Alright, great. That concludes the interview!

Monaco: Thanks, Aaron.

CU Boulder, Charlotte’s Web Begin Sleep & Anxiety Studies

By Cannabis Industry Journal Staff
No Comments

Charlotte’s Web Holdings announced a new collaboration with the University of Colorado-Boulder and their Research and Education Addressing Cannabis and Health (REACH) Center. The University’s REACH Center will conduct a preclinical study on how hemp oil can influence sleep quality and anxiety.

Charlotte’s Web and University of Colorado-Boulder Collaborative Study to Assess CBD and CBN’s Potential to Support Improved Sleep (CNW Group/Charlotte’s Web Holdings, Inc.)

The study will use Charlotte’s Web hemp products, including their full spectrum hemp formulations containing CBN, CBD and less than 0.3% THC. Monika Fleshner, PhD, Professor of Integrative Physiology and member of the Center for Neuroscience at the University of Colorado, will be the project lead and will conduct the study in her Stress Physiology Laboratory. “There is a great need for properly controlled experimental studies that are designed to test the potential neural and physiological impacts of hemp derived phytocannabinoids,” says Dr. Fleshner. “With support from CU REACH and Charlotte’s Web, our research will explore both the efficacy and mechanisms of how these substances can affect complex brain-mediated behavior, such as disturbed sleep.”

Tim Orr, senior vice president of Charlotte’s Web and president of its CW Labs division, is currently working on more than twelve scientific research studies with the company. “Charlotte’s Web is committed to advancing science on the benefits and safety of CBD and other hemp phytocannabinoids through rigorous scientific investigations such as this sleep and anxiety study,” says Orr. “We’re honored to team up with CU’s REACH Center to explore the potential impacts of full-spectrum hemp extract with CBD and CBN on anxiety and sleep quality.”

Long term, Charlotte’s Web expects this study will help build the foundation for future clinical studies to “better understand how specific ratios of cannabinoids and different delivery formats are effective at supporting improved sleep quality and instilling healthier sleep architecture in humans,” reads the press release.

The New Delta 8 THC Market: A Q&A with the Founders of DeltaVera

By Cannabis Industry Journal Staff
No Comments

Delta 8 THC (delta-8-tetrahydrocannabinol) sprung onto the scene late last year in a big way. While similar to the much more widely-known delta-9-tetrahydrocannabinol that produces a lot of the psychoactive effects associated with ingesting cannabis, delta 8 THC can be derived from hemp with less than 0.3% delta 9 THC. Given the legality of hemp-derived products following the 2018 Farm Bill, delta 8 THC can be produced in some states where delta 9 THC still remains illegal.

While delta 8 is considerably different in its psychoactive effects from its cousin, it does overlap in some ways. It can still produce some more manageable, less “heady” versions of delta 9’s effects like euphoria and relief found in the many medical applications of cannabis. DeltaVera, a company that launched less than six months ago, aims to share that more manageable THC experience with the masses.

The sharp rise of the delta 8 market means that DeltaVera is poised for growth. With distribution contracts inked, exciting partnerships in the works and a large surge in consumer demand, the founders of DeltaVera are at the ready to capitalize on this lesser-known molecule and bring it to the forefront of the nascent hemp industry. Starting out as a small family business, Sam and Craig Andrus launched DeltaVera with their third founder, PK Isacs.

We sat down with Sam Andrus and PK Isacs, two of the founders of DeltaVera, an award-winning brand, to ask them about their plans for expanding, how they became entrepreneurs and why they think delta 8 is the next big thing in cannabis.

Cannabis Industry Journal: Tell me about your company. How did you get started in the cannabis space?

Sam Andrus, cofounder of DeltaVera

Sam Andrus: I had an early start in the Delta 8 THC industry on the sales side. We knew we wanted to get into the market, but observed a number of aspects in the space that needed to be addressed: the most important being quality control, transparency and brand trust. With this as a backdrop we launched DeltaVera. Highly curated, approachable, transparent and value-oriented with a strong focus on reliability and trust. The DeltaVera family is made up of three operating managers and the sales team. We are three founders with complementary skill sets: Craig, who has domain expertise in finance, governance and startups, PK who has experience in business and marketing and my sales experience round out the management team.

We have yet to solicit outside capital and have funded ourselves internally as we create our brand and refine our product offering. That said, we are seeing numerous opportunities in strategic partnerships and expansion, which will require additional capital. And we are excited to start this expansion process.

CIJ: What makes the Delta 8 space so remarkable? Why are your SKUs primarily formulated with Delta 8?

Sam Andrus & PK Isacs: Delta 8 THC is an alternative/complement to delta 9 THC, CBD and other cannabinoids. Its status as non-federally scheduled and its less potent psychoactive effects make it appealing in its own right. Delta 8 THC can help with healthier sleep patterns and with pain management in a way that CBD can’t, without a strong “head high” that many of our customers like to avoid. Additionally, it’s shorter lived and doesn’t give you any negative residual effects, which makes it beneficial for people on tighter schedules. These factors make it easier for us to approach markets that are inaccessible to both delta 9 THC and CBD, such as older demographics. In a world where delta 9 is legal, there will still be a place for delta 8.

PK Isacs, cofounder of DeltaVera

While we are very proud of our suite of smokable products, we are currently focusing our efforts on edibles: our Delta Discs are our mainstay, though we are expanding our product line to include nano-emulsion products such as liquid shots and nano gummies. They strongly appeal to our target demographics; additionally, the edible market is growing very quickly in states that allow the sale of hemp-derived consumables.

CIJ: Continuing on the delta 8 front – right now it is considered a cannabinoid legal for interstate commerce, much like CBD, correct? Do you think that will change? 

Sam & PK: That is currently the case. Delta 8 THC is newer, and as such, it has even more ambiguity in regards to its legal future. But what’s most exciting (and our most challenging task right now), is informing consumers about the benefits of delta 8. We are one of a few companies solely focused on the consumption of delta 8, because of its similar benefits to delta 9 and CBD – our products are the perfect happy medium: a high with less psychoactive effects and all the health benefits of both, making it a desirable alternative to all consumers.

In addition, we are looking at some combinations of delta 8/CBDA, delta 8/CBN, delta 8/THCV and are very excited to begin test marketing these combinations. These proprietary blends of minor/major cannabinoids can cater to a niche target demographic as they can be curated to have very specific and unique effects when combined in the right quantities with the right delivery system. They will also be able to serve a larger customer base as these cannabinoids can all be derived from hemp.

CIJ: How do you think the FDA would regulate your product? Do you welcome federal oversight?

DeltaVera gummy products

Sam & PK: Regardless of whether or not we are regulated we are committed to a high level of transparency and trust. As noted in unregulated markets, like the supplement market, you don’t always know what you are getting in terms of purity and potency. We are changing that paradigm by adding unique QR codes to our sustainable containers which reference COAs [certificates of analyses] specific to the contents of the case. A lot of the space is naturally trying to avoid that kind of regulatory interference, but we are currently doing our best to self-regulate and make sure that our consumers are fully informed about what they’re receiving.

We will be the first to say that there aren’t as many laws governing delta 8 THC as there could be, and that’s why we’ve spent so much time and money on self-regulation. All of our products have very clear nutritional information in addition to test results down to one hundredth of one percent. As for what category these products should fall under: we have a wide range of products, and each one has its place under a different umbrella of regulation. We hope that the federal government will take advantage of the vast array of studies that have been conducted on delta 8 THC since it was first extracted in 1942 to step up to this product that is, in our experience, helping so many people.

CIJ: Tell me about how your business has grown so far.

Sam & PK: When we sell to a retailer, we try to provide them with as much material as possible on what delta 8 THC is and what differentiates DeltaVera’s products. Still, we’ve had some difficulty in places with limited delta 8 THC exposure. That being said, when someone tries our product, there is a high likelihood that they become a repeat customer (and they tell their friends). Given our newness to the market (Our brand launched in January 2021) initial indications are – we have a good rate of repeat orders, and we’ve heard the same from our brick-and-mortar partners.

The DeltaVera Delta Discs

Our distribution network has grown tremendously; we’ve taken a three-pronged approach to distribution: partnerships with like-minded companies in compatible spaces, an e-commerce market on our website, and a commission-based sales structure to reach brick-and-mortar establishments. To date, most of our distribution takes place in the latter two spaces, due to the added time and commitment involved in forming partnerships. As a company we are taking a more creative approach on how we present our product and alternative ways to consume it. We have some exciting collaborations in the works; follow us on social media to stay up to date with everything on the horizon. We are very enthusiastic about our partnerships however, with our first collaboration with WaxNax, a Denver-based company revolutionizing the cannabis dabbing experience, hitting the shelves this week.

CIJ: What is your marketing plan?

Sam & PK: We are working on building a social media presence. Natalie, who is leading the charge on social media, recommended we take an organic approach to build our base. We want to avoid falling into the “paid ad”, “spam” vibe as long as we can. We are currently focused on building a community through delta 8. Our mission is making DeltaVera a brand for all lifestyles, athletes, creatives, travelers or business professionals. We’re confident in our product, and have faith that it can speak for itself.

CIJ: How do you ensure quality in your products?

Sam & PK: Our products are of guaranteed quality with our licensed growers and manufacturers. We provide COAs, informing the retailer & consumer about each product, displaying full panel tests on cannabinoids and heavy metals. These preliminary and secondary lab tests ensure our product is below 0.3% delta 9 THC in all our products. Through third-party labs, we run full panel tests which pick up a variety of cannabinoids; for most of our products we focus on the level/purity of delta 8. Our products are screened for both contaminants and heavy metals.

All this information is housed conveniently on our website that can be reached through our QR codes.

CIJ: What are your plans to grow the business in the future? 

Sam & PK: We feel very confident in our three methods of distribution: partnerships, e-commerce and a commission-based sales structure. We’ve made tremendous ground on partnerships, and are very excited about numerous partnerships we have in the pipeline. We’ve reached out to some incredible groups in the CBD space, the THC space and a few groups that you wouldn’t normally associate with cannabinoids, but with whom we’ve workshopped some really creative ideas that we’re really looking forward to bringing to market.

Readers can use promo code “CIJ” to get 15% off their first order here. 

Flower-Side Chats Part 5: A Q&A with Bob Fireman, CEO of MariMed, Inc.

By Aaron Green
No Comments

In this “Flower-Side Chats” series of articles, Green interviews integrated cannabis companies and flower brands that are bringing unique business models to the industry. Particular attention is focused on how these businesses integrate innovative practices in order to navigate a rapidly changing landscape of regulatory, supply chain and consumer demand.

Multi-state operators (MSOs) are on the rise in the United States, navigating complex regulatory frameworks to drive profitability through economies of scale and scope. As an MSO and an early mover in the space, a significant part of MariMed’s current strategy is to complete the acquisition and consolidation of the licensed state cannabis businesses it has developed. It takes seasoned leadership to make that happen, and MariMed’s is led by one of the most experienced and successful MSO management teams in the industry. Over the last eight years, Bob Fireman and his colleagues have won 17 licenses in 6 states, and designed and developed over 300,000 square feet of cannabis cultivation, production and dispensing facilities.

MariMed has also developed a portfolio of award-winning cannabis brands and infused products which are licensed, manufactured and distributed in Delaware, Illinois, Maine, Maryland, Nevada, Rhode Island and Puerto Rico. A recently announced $46 million financing for a facility with Hadron Healthcare Fund will help repay all MariMed debt other than mortgage-backed bank loans and one convertible note, as well as help upgrade and expand the company’s owned and managed cannabis facilities.

We spoke with Bob Fireman, CEO of MariMed. Bob started the foundations of MariMed in 2008 after getting into large-scale hydroponics for urban sustainable agriculture. Prior to MariMed, Bob served as a startup lawyer focused on tech and emerging industries.

Aaron Green: Bob, tell me about how you got started in the cannabis industry.

Bob Fireman: I practiced law for decades. Part of my practice was to help startups in all sorts of industries, particularly technology and new emerging markets. At one point, I was introduced to a fascinating sustainable food business opportunity – to build hydroponic farms on rooftops in cities across the country.

Bob Fireman, CEO of MariMed, Inc.

When one of our projects in San Francisco hit some roadblocks, our team there pivoted to what was becoming the Wild West of California cannabis. My friend and current MariMed CFO, Jon Levine, and I began investing and managing a cultivation site there. That’s where we built our early foundation of industry knowledge.

Fast forward a few years, and I was afforded the opportunity to be involved in the drafting of the proposed Massachusetts medical cannabis legislation.

Through that work, we met a team that had won one of three cannabis licenses in Rhode Island. We formed a real estate LLC and raised the capital to develop a seed to sale cannabis facility in Providence, which was later leased to the Slater Center, a not-for-profit medical cannabis licensed business. Today, the Slater Center is a nationally acclaimed operation that services over 10,000 medical patients.

From there, we took our know-how and formed a new entity that was the formal beginning of the company we now know as MariMed. Initially, we helped win licenses for clients in Massachusetts, Delaware, Maryland, Illinois and Nevada. We also provided management services, working capital and other necessities. Under our management, we organically built these businesses from the ground up, advancing best practices and somewhat quietly creating a network of best-in-class operations throughout the industry.

That led to the consolidation of those businesses that we’re focused on today as a core strategic pillar.

I’m incredibly proud of our team, the core of which has been at this for 10 years. We’ve watched other MSOs try different models of success, with varying degrees of success. For us, focusing on growth markets, building at a reasonable and scalable clip, attracting incredible talent at all levels of the company, and developing fantastic brands that customers love, are the ingredients that have translated to where we are now – strong performance and an exceptionally bright future. “Slow and steady wins the race” has become a mantra.

Green: What trends are you looking at right now? What’s on your radar?

Fireman: My radar has a singular focus, and that’s to create shareholder value. That’s why completing the consolidation of the cannabis licensed businesses we’ve developed and manage into our public company is so critical. Back in the day, the initial available licenses were in medical-only state programs where applicants were required to be not-for-profit state companies. Accordingly, we raised the capital in the real estate entity which leased facilities to the licensees. Our revenue was from rents, management services and licensing fees.

Panacea Wellness in Middleborough, MA is one of MariMed’s adult use cannabis dispensaries

In 2019, we implemented a new strategic plan to consolidate these businesses. While that translates to our being structured similarly to other MSOs in that we are a vertically integrated seed to sale company, we are distinct in our operational excellence, quality product portfolio, and strong balance sheet. Other MSOs have raised large amounts of capital to pay large sums to acquire licensed state cannabis businesses and have found themselves over-leveraged and challenged to assimilate other companies’ methodologies and cultures. By consolidating the businesses and talented people we developed and managed from day one and utilizing our best practices and processes system-wide, we realize enormous capital efficiencies.

Our strategy is paying off. Our core cannabis revenue in 2020 increased 207% to $50.9 million, and our 10k reported EBITDA of $16.3 million. And now we’re on track to double our revenue in 2021.

The last piece of the puzzle is to let the world know what we’ve been doing. Slow and steady has worked for us but gone are the days of doing so quietly. We’re proud of what we’ve accomplished and exceedingly bullish on what’s to come.

Green: What do you look for in an M&A target?

Fireman: When M&A makes sense for us, we first look for single operators and entrepreneurs in states where we are not active and look to partner with business leaders that had the vision and the courage to get into this industry and build solid cannabis businesses from the ground up. I’m looking for businesses that could benefit from being part of a larger, more experienced and well-capitalized company like MariMed. Obviously, as an MSO with a solid platform, MariMed is approached regularly by other MSOs and banks suggesting candidates for M&A opportunities. Lining up with a company that has complementary cannabis licenses in other states and who shares our vision and ethics could be a win-win situation. They must embrace our commitment to diversity, the environment and proper corporate governance. We have been somewhat reticent to do this until we see some increase in our share price and market capitalization.

Green: Are there any new products, or product trends that you’re looking at?

Fireman: Marimed looks to be the most trusted source of high-quality cannabis products that consistently delivers innovative health and wellness solutions to our patients and customers. Our lab scientists are constantly creating and testing new and innovative formulations of cannabinoid compounds including CBD, THCa, CBG, CBN and others that will improve the health and wellness of our customers.

Our brand portfolio is ever-expanding with new and better product offerings. Our award-winning Betty’s Eddies Fruit Chews brand is adding new SKUs of varieties and flavors for both medical and adult use programs. Our Nature’s Heritage flower and concentrates brand is adding a line of solventless concentrates, live rosin, as well as new formulations for RSO, an oil popular with medical patients. Kalm Fusion is expanding its successful line of powdered drink mixes as we see more movement in the cannabis beverage category.

Microdosing is hugely popular right now, and we’re rolling out products in the 2-5mg dosage range. Health and dietary concerns are top of mind as well, and we offer products that are vegan, sugar-free and gluten-free. Ultimately, we want to be sure that we have something on the shelves for every single consumer. The financial hardship created by the pandemic has made consumers more attracted to value added products such as popcorn buds.

Green: You recently announced an equity financing from Hadron. I’m curious to learn more about it from a nuts-and-bolts perspective if you can share any of that information.

Fireman: Over the last year, access to the capital markets for equity raises in cannabis public companies was difficult. The cost of debt was and is still high, and we were looking for a long-term financial partner that understood the industry and could assist us. Hadron Capital has been successful for several years investing in some of the most successful MSOs and they saw the value and potential in MariMed’s experienced management and great assets.

Hadron invested $46 million in equity in MariMed this March. Approximately $16 million was utilized to retire all our short- and long-term debt but for bank secured debt and one convertible note. $7 million is committed to funding our capex and expanding the capabilities of our facilities, enabling us to grow more flower and automate production. The balance of funding will support our consolidation strategy to fund two more roll ups of state licensed cannabis businesses into the public company.

Going forward, it is comforting to have a capital partner to assist us in future acquisitions and M&A opportunities.

Green: I’d love to learn more about your Nature’s Heritage brand, particularly as it relates to the cultivation and the flower products.

Fireman: Our COO Tim Shaw has assembled a cultivation and production team with expertise in all aspects of genetics, growing methodologies, extraction techniques, and packaging innovation. That’s provided us a rich collection of quality genetics that make up Nature’s Heritage, our top-selling flower, oil and concentrate brand in Massachusetts and Maryland. We’ve recently expanded the line to include Rick Simpson Oil (RSO) and solventless concentrates (including live rosin) and have been receiving stellar feedback.

Green: What are you interested in learning more about?

Fireman: Over the last decade, the MariMed core team has seen the emergence and amazing growth of the cannabis industry. The initial medical programs in California and Colorado have now led to some form of legal medical or adult use cannabis programs in over 33 states and districts.

We are most interested in learning and following the federal, state, and international laws and regulations. It is vital to know how these laws will affect our company and the industry as a whole. When might full federal legalization become a reality? What might different versions of the law be? Will state legal programs be protected as well as the companies that took the risk in investing in the industry at its nascent state and how? What will FDA requirements and regulations look like? What medical claims will companies be allowed to make, and what kind of research or trials will be required to put a product on the shelf? What are the ramifications of the MORE Act or the SAFE Banking Act?

Responsible MSOs need to be prepared to rise to or above the standards of care of other industries. A lot of this was impossible in the past because of federal prohibition laws. Soon, if not already, labs and manufacturing processes will need to be GMP certified and more. Consumer data will need to be HIPAA compliant. Cannabis companies have to be good corporate citizens: diversity and equal opportunity should be embedded in business decisions, and commitment to ESG and sound environmental and social policies with good corporate governance need to be in planning and implemented.

Following the laws and holding ourselves to the highest possible safety and business standards will allow the cannabis industry to finally become “mainstream.”

Green: Alright, great. Thank you, Bob. That concludes the interview!

Defining Hemp: Classifications, Policies & Markets, Part 2

By Darwin Millard
2 Comments

In Part 1 of this series we answered the question: What is “hemp”; and addressed some of the consequences of defining “hemp” as a thing. In Part 2, I will explore this topic in more detail and provide some commonsense definitions for several traditional hemp products based on a classification approach rather than separating “cannabis” from “hemp”.

Classifications, Specifications, and Test Methods – Establishing Market Protections for Hemp Products Through Standardization

Does making a distinction between “hemp” and “cannabis” make it easier to protect the interests of the seed and fiber markets?

On the face of it, this question seems obvious. Yes, it does.

Up to this point in history, the bifurcation of the cannabis plant into resin types and non-resin types has served to provide protections for the seed and fiber markets by making it easier for producers to operate, since the resins (the scary cannabinoids, namely d9-THC) were not involved. Today, however, the line in the sand, has been washed away, and “hemp” no longer only refers to non-resin producing varieties of the cannabis plant.

The structure of cannabidiol (CBD), one of 400 active compounds found in cannabis.

As more and more hemp marketplaces come online with varying limits for d9-THC the need for standardization becomes even more pressing. Without standardization, each marketplace will have its own requirements, forcing businesses looking to sell their products in multiple jurisdictions to comply with each region’s mandates and adds a significant level of burden to their operations.

Providing an internationally harmonized definition for hemp is an important first step but allowing the d9-THC limit to vary from jurisdiction to jurisdiction has some unintended (or intended) consequences (#NewReeferMadness). These discrepancies between legal marketplaces will inevitably lead to the establishment of global trade regions; where, if your product cannot meet the definition of “hemp” in that region, then you could effectively be barred from participating in it.

A process which has already started. Harmonizing around 0.3% is great for the US, Canada, and European Union, but what about other stakeholders outside of these markets?

And, at what point does the conflict of hemp from one region with a d9-THC content of 0.3% and hemp from another region with a d9-THC content of 1% being sold into the same market become a problem?

Perhaps a better long-term solution for protecting the market interests of “hemp product” stakeholders would be to establish specifications, such as identity metrics, total cannabinoid content, especially d9-THC, and other quality attributes which have to be verified using test methods for a product to be classified as “hemp”. This system of standards (classifications, specifications, and test methods) would allow for more innovation and make it significantly easier for cannabis raw materials that meet these specifications to find a use rather than being sent to the landfill. Bolstering advancements and opening the door for more market acceptance of the cannabis plant, its parts, and products.

An Alternative Approach to Defining Hemp

Below are some proposed definitions related to common terminology used in the hemp marketplace based on the concept that there are no hemp plants, there are only cannabis plants that can be classified as hemp, and hemp products are simply cannabis products that meet certain specifications to allow them to be classified and represented as hemp.

  • Hemp, n—commercial name given to a cannabis plant, its parts, and products derived therefrom with a total d9-THC content no more than the maximum allowable limit for the item in question. (Maybe not the best definition, but it makes it clear that not only does the limit for d9-THC vary from jurisdiction to jurisdiction it varies from product type to product type as well.)
  • Hemp flower, n—commercial name for the inflorescence of a cannabis plant that can be classified as hemp.
  • Hemp seed, n—commercial name for the seeds of a cannabis plant which are intended to be used to grow another cannabis plant that can be classified as hemp.
  • Hempseed, n—commercial name for the seeds of a cannabis plant which are intended to be used as food or as an ingredient in food.
  • Hemp seed oil, n—commercial name for the oils expressed from the seeds of a cannabis plant.
  • Hemp seed cake, n—commercial name for the solid material byproduct generated during the expression of the oil from the seeds of a cannabis plant.
  • Hemp flour/meal/dietary-fiber, n—commercial name for the powdered seed cake of a cannabis plant intended to be used as a food or as an ingredient in food with a protein content no more than 35% by weight.
  • Hemp protein powder, n—commercial name for the powdered seed cake of a cannabis plant intended to be used as a food or as an ingredient in food with a protein content between 35% and 80% by weight.
  • Hemp protein isolate, n—commercial name for the powdered seed cake of a cannabis plant intended to be used as a food or as an ingredient in food with a protein content above 80% by weight.
  • Hemp fiber, n—commercial name for the cellulosic-based natural fibers of a cannabis plant.
  • Hemp shives, n—commercial name for the hurd of a cannabis plant which have been processed to defined specifications.
  • Hempcrete, n—commercial name for a solid amalgamation of various aggregates and binders, typically comprised of the hurd (shives) of a cannabis plant and lime.

The d9-THC limits for each product were purposefully omitted because these specifications still need to be defined for each product type. Leaving the d9-THC limit up to each authority having jurisdiction, however, is not the answer. It is fine if you comply with a lower d9-THC limit and want to sell into a market with a higher d9-THC limit, but what do you do if you are above the limit for the market you want to sell into? For now, you lose out on potential revenue.

Hemp-derived CBD extract

I am not advocating that everyone starts selling “hemp” as “cannabis,” or vice versa, far from it. I am advocating for a more commonsense and inclusive approach to the marketplace though. One that would allow for the commercialization of materials that would normally be going to waste.

To me it is simply logical. There are no hemp plants, there are only cannabis plants that can be classified as hemp. There are no hemp products, there are only cannabis products that can be classified as hemp. In order for a cannabis product to be marketed, labeled, and sold as a hemp product, i.e. to be classified as a hemp, it would need to meet a set of specifications and be verified using a set of test methods first. But fundamentally the product would be a cannabis product being certified as “hemp”. And that is the shift in thinking that I am trying to get across.

Exclusionary Actions – Disenfranchising Stakeholders

The cannabis plant is an amazing plant and to fully capitalize on the potential of this crop we have to start allowing for the commercialization of cannabis raw materials that are not controlled by the UN Single Conventions, i.e. the seeds, stalks, roots, and leaves when not accompanied by the fruiting tops or the resin glands. Not to do so disenfranchises a significant number of stakeholders from participating in established legal avenues of trade for these goods. A concept proposed and endorsed the ASTM D37 in the published standard D8245-19: Guide for Disposal of Resin-Containing Cannabis Raw Materials and Downstream Products.

If you are stakeholder in the hemp marketplace, you may feel threatened by the idea of the market getting flooded with material, but how are the demands of the so called “green economy” going to be met without access to more supply? Organic hemp seed for food production is scarce but there is plenty of conventional hemp seed for the current demand, but what happens when hempmilk is positioned to displace soymilk in every major grocery store? To feed the growth of the human population and allow for a transition to a truly “green economy,” we need to ensure that the policies that we are putting in place are not excluding those looking to participate in the industry and disenfranchising stakeholders from burgeoning marketplaces, nor alienating a segment of the marketplace simply because their plant cannot be classified as “hemp”.

Until next time…

Live long and process.

Flower-Side Chats Part 4: A Q&A with Adrian Sedlin, CEO & Founder of Canndescent

By Aaron Green
No Comments

Flower continues to be the dominant product category in US cannabis sales. In this “Flower-Side Chats” series of articles Green interviews integrated cannabis companies and flower brands that are bringing unique business models to the industry. Particular attention is focused on how these businesses navigate a rapidly changing landscape of regulatory, supply chain and consumer demand.

Canndescent is a vertically integrated flower brand based out of Santa Barbara, CA with grow operations in Desert Hot Springs. Having opened the first municipally-permitted cultivation in California, Canndescent has pioneered luxury branding in the cannabis space with a focus on user friendliness. They were the first cultivator to market cannabis using effects like Calm, Cruise Create, Connect, and Charge rather than the strain name. Canndescent also recently launched a social equity brand, Justice Joints, with 100% of all profits going to cannabis-related expungement and re-entry programs.

We spoke with Adrian Sedlin, CEO and founder of Canndescent to learn more about his transition from tech to cannabis, how he thinks about product positioning and the company’s motivation for getting into Justice Joints. Adrian founded Canndescent in 2015 after being approached by his brother-in-law who ran a legacy cultivation operation. Prior to Canndescent, Adrian was an entrepreneur and worked in startup turnarounds.

Aaron Green: How did you get involved in the cannabis industry?

Adrian Sedlin: I started looking at the industry from a professional perspective in 2015, and once I came to understand how cannabis affects the endocannabinoid system, I became absolutely fascinated by the opportunity to build a world class cannabis company that prioritized consumers. Particularly, I became interested in the adult-use market because I see cannabis as an automobile compared to the horse and buggy of alcohol. Cannabis is a superior adult use solution from a health and society perspective, yet, the entire positioning of the industry at the time was sub-prime, non-aspirational and inaccessible. With Canndescent, the core idea was to counterprogram the existing paradigm and deliver cannabis in a way that was beautiful. To bring the power of the plant to more people, we had to reposition the category and simplify the shopping experience. Moreover, there were too many unsolved consumer problems. For example, in 2015 people said cannabis was a commodity but any stoner knows there are as many dimensions to consider as there are with wine. The opportunity to deliver consumer solutions in a nascent industry that desperately needed advocates while helping to improve the world was enough to get me out of retirement.

Green: Just curious, what was your background prior to cannabis?

Adrian Sedlin, CEO and founder of Canndescent

Sedlin: I’m a lifelong entrepreneur. I started my first company when I was still in college. After graduation, I ran that business for another four and a half years, sold it, and went back to business school and got my MBA. After Harvard, most of my career was spent in early-stage growth companies, turnarounds and pivots. When someone had $10 million invested in an enterprise or their company wasn’t growing at the rate they wanted, that’s when my phone would ring.

I was lucky enough to shepherd a number of companies to a successful exit several times. During my professional journey, I’d taken a year and a half off between 2004 and 2006, and then pre-cannabis in 2015 I had taken three years off and was getting a little itchy. I didn’t think I was permanently retired; I was just sort of waiting for the next thing to get excited about. And cannabis definitely was the first time I can say in my life that I finally understood what I was put on planet earth to do.

Green: I understand that Canndescent was the first municipally permitted cultivator to open in California?

Sedlin: Desert Hot Springs was the first city to legalize cultivation, and we were the first ones to operate in the city.

Green: How did that come about?

Sedlin: The city had conditional use permits, but a lot of people were trying to do ground up builds. We decided to do a retrofit of an existing facility. So, we were the first ones to get the regulatory permit and cultivate in a way that was truly compliant with MCRSRA which eventually became MAUCRSA.

It took lots of tolerance for ambiguity and incredible patience. There’s an off-putting expression that goes, “pioneers take the arrows.” Well, we took a lot of arrows along the way. A perfect example is within our first year of operation, the fire department sent us five cease-and-desist orders to turn off our CO2. Not because we were doing anything wrong, but because they changed their regulations and then they wanted us to immediately comply as opposed to giving us a transition period. You just got to learn to roll with it. I’d say anyone who got into the regulated cannabis market early – and there’s a bunch of us who are still standing – you just learn to roll with it, be patient and yet, apply boundless energy and passion to the process.

Green: Did you know you wanted to be in Desert Hot Springs? Or did it just turn out to be the permit that was the easiest to get?

Sedlin: That was a binary choice for us. The simple choice for Desert Hot Springs was that it was the only choice. We were doing a professional execution. We were taking investment dollars, and I couldn’t have any ambiguity of being in the gray market. This was before adult use legislation passed in California, so we were functioning under California’s Medical Cannabis Regulation and Safety Act (MCRSA). The only way to be compliant with MCRSA at the time and be a medical cannabis cultivator was to get city-based permission or county-based permission, and the first region to authorize that was Desert Hot Springs. From our team’s perspective, wanting to build a truly compliant company from day one, that was the only choice available.

Green: I understand your facilities are powered by solar?

Sedlin: We have several facilities. One of them is a greenhouse that has light supplementation. We have an indoor facility that is powered by solar. When we opened the facility, it didn’t have a solar project on it. After we opened it, about a year and a half later, we did this full solar retrofit. We found the solar panels offset 38% of our energy consumption.

Green: Your product marketing is effect-forward. How did you come to that positioning for the brand and for the products?

Sedlin: The idea is to simplify life for consumers and unburden them from having to understand the 6,000 different strain names that are out there which have no consistency from cultivator to cultivator.  Before Apple popularized the graphical user interface for computers, the standing orthodoxy among engineers at the time was that everyone should have to learn how to code. Everyone who wanted to use a computer needed to go through the mind-numbing MS-DOS process. But computers didn’t scale that way. Apple’s genius is that it built technology to serve humans with a GUI and didn’t put humans in service of the technology. Similarly, you shouldn’t have to learn 6,000 strains, 100+ terpenes and 100+ cannabinoids to make your first purchase. Our goal has always been to put cannabis in service of consumers as opposed to having the consumer in service of cannabis.

To be clear, Apple doesn’t dumb things down. Apple makes things easier, so that more people adopt them, so those things can then get better. And, that’s really how we’ve always viewed it. At the end of the day, I’m not sure if a consumer needs to know that he or she loves AK-47 when one can understand loosely, “How do I want to feel? Am I trying to relax? What am I trying to achieve?” It’s about prioritizing the consumer over the engineer, or in this case the cultivator or breeder, who covets naming rights. We operate with a consumer-centric philosophy and our company is in service of the consumer.

Green: You have a social equity brand called Justice Joints. What was your motivation for that line?

Sedlin: We have the luxury and privilege of participating in a legal cannabis industry, but there are many people who were never afforded that choice and suffered a steep cost.  With this in mind, we need to put our dollars and sweat into helping communities most impacted and marginalized by the war or drugs and doing our part to address some of the damage.  Justice Joints (JJ), our brand where 100% of the profits go to cannabis-related social equity and expungement programs invites the cannabis community, dispensaries and consumers to vote with their dollars for a better world. “Here’s a vehicle where 100% of the profit goes to cannabis related social justice causes. Are you in? Or are you out?” It gives consumers a platform where they can participate in positive change with their dollars.  It’s what the plant is about.

JJ was the right answer for Canndescent because we wanted to build a self-sustaining economic engine for social justice. We launch world class cannabis brands so building one for social justice was the right choice for us and provided a way for all 250 of our employees to give back and feel proud each and every day.  Justice Joints isn’t a side project; it’s hardwired into the daily activities of Canndescent and will hopefully evolve into an industry-wide, give back platform.

Green: What’s one thing in the world that you want to change or inspires you the most?

Sedlin: The thing I’m most interested in professionally is popularizing the practice of gratitude into the broader business and social fabric. Canndescent is the first company that I know of to incorporate gratitude as a core value. We do so because we believe that happiness is a mindset and a choice, not an outcome. It’s not how many likes you get on your social media, or how much money you make. It’s how you frame your experience to yourself that makes you happy.

On any given day, there’s 100 things I can bitch about, but that just becomes poison ivy that itches and that would make me angry, frustrated and depleted. Living and acting in gratitude, we can move our minds to a peaceful and productive place where we have control and can be our best self for those around us. For example, I just lost my dad on Thursday but I’m focused on gratitude not sorrow. My dad was awesome, died peacefully at age 89, had a 60-year marriage, and loved and gave love. Naturally, there is sadness, but instead of sinking into that, I focus on the blessing of him and meditate on the good. Operating from a happy place, I’m freed up mentally to be there for my mom, sister, wife, children, employees and investors.

So that’s what I’m passionate about. It’s not so much something I want to learn about as much as it is something that I want to cultivate in the world. There would just be more happiness in the world if humanity exercised the muscle of perspective–gratitude. It’s the greatest time in human history to be alive. To listen to the world around us, it’s natural to forget that. But, I’ll take Covid-19 over the Black Plague and Spanish Influenza anyday. “Yes, shit happens, but are you a shit talker and complainer, or are you the type to say, let’s clean this up.” It’s a choice. Canndescent wants to project light and build a world of gratitude.

Green: That concludes the interview, thanks Adrian!

Lab Shopping: Highlighting the Need for Checks and Balances in Cannabis

By Josh Swider
No Comments

Cannabis, we have a problem. Legalizing adult use cannabis in California caused the demand for high-potency cannabis to increase dramatically over the last several years. Today, many dispensary buyers enforce THC minimums for the products that they sell. If smokeable flower products don’t have COAs proving the THC levels are above 20% or more, there is a good chance many dispensaries won’t carry them on their shelves. Unfortunately, these kinds of demands only put undue pressure on the industry and mislead the consumer.

Lab Shopping: Where the Problems Lie

Lab shopping for potency analysis isn’t new, but it has become more prevalent with the increasing demand for high-potency flower over the last couple of years. Sadly, many producers submit valid, certified COAs to the California Bureau of Cannabis Control (BCC), which show two to three times the actual potency value.

At InfiniteCAL, we’ve purchased products from dispensary shelves and found significant discrepancies between the analysis we perform and the report submitted to the BCC by the producer. So, how can this happen? Several factors are creating the perfect storm in cannabis testing.

Problems with Potency

Many consumers still don’t understand that THC potency is not the only factor in determining quality cannabis, and they are unwittingly contributing to the demand for testing and analysis fraud. It is alarming for cultivation pioneers and ethical labs to see producers and profit-hungry testing facilities falsifying data to make it more appealing to the unaware consumer.

Basically, what’s happening is growers are contacting labs and asking, “I get 30% THC at this lab; what can you do?” When they see our COA reporting their flower tested lower than anticipated, they will go to another lab to get higher test results. Unfortunately, there are all too many labs that are willing to comply.

I recently saw a compliant COA that claimed that this particular flower was testing at 54% THC. Understanding cannabis genetics, we know this isn’t possible. Another product I reviewed claimed that after diluting an 88% THC distillate with 10-15% terpenes, the final potency test was 92% THC. You cannot cut a product and expect the potency to increase. Finally, a third product we reviewed claimed 98% total cannabinoids (while only looking at seven cannabinoids) with 10% terpenes for a total of 108% of the product.

These labs only make themselves look foolish to professionals, mislead laymen consumers and skirt under the radar of the BCC with basic mathematical errors.

The Pesticide Predicament

Frighteningly, inflating potency numbers isn’t the most nefarious testing fraud happening in the cannabis industry. If a manufacturer has 1000 liters of cannabis oil fail pesticide testing, they could lose millions of dollars – or have it retested by a less scrupulous lab.

Photo: Michelle Tribe, Flickr

As the industry continues to expand and new labs pop up left and right, cultivators and manufacturers have learned which labs are “easy graders” and which ones aren’t. Certain labs can miss up to ten times the action level of a pesticide and still report it as non-detectable. So, if the producer fails for a pesticide at one lab, they know four others won’t see it.

In fact, I’ve had labs send my clients promotional materials guaranteeing compliant lab results without ever receiving a sample for testing. So now, these companies aren’t just tricking the consumer; they are potentially harming them.

An Easy Fix

Cannabis testing is missing just one critical factor that could quickly fix these problems – checks and balances. The BCC only needs to do one of two things:

Verifying Lab Accuracy

InfiniteCAL also operates in Michigan, where the Marijuana Regulatory Agency (MRA) has already implemented a system to ensure labs are maintaining the highest testing standards. The MRA will automatically flag all COAs which test above a certain percentage and require the product to be retested by multiple labs.

labsphotoLabs are required to keep a back stock of material. So, when test results come back abnormally high from Lab A, then Labs B, C and D are commissioned to retest the material to compare data. If Lab A reports 40% THC, but the other labs all report 18%, then it’s easy to see Lab A has made an error.

Secret Shopping

By simply buying products off the shelves and having them blind-tested by other labs, it would be simple for the BCC to determine if the existing COA is correct. They already have all the data in Metrc, so this would be a quick and easy fix that could potentially solve the problem overnight.

For example, at InfiniteCAL, we once purchased 30 samples of Blue Dream flower from different cultivators ranging in certified COA potencies from 16% to 38%. Genetically, we know the Blue Dream cultivar doesn’t produce high levels of THC. When we tested the samples we purchased, nearly every sample came back in the mid-teens to low 20% range.

Labs Aren’t Supposed to Be Profit Centers

At InfiniteCAL, we’ve contacted labs in California where we’ve uncovered discrepancies to help find and flush out the errors in testing. All too often, we hear the excuses:

  • “If I fix my problem, I’ll lose my clients.”
  • “I’m just a businessman who owns a lab; I don’t know chemistry.”
  • “My chemist messed up; it’s their fault!”

If you own a lab, you are responsible for quality control. We are not here to get rich; we are here to act as public safety agents who ensure these products are safe for the consumer and provide detailed information about what they choose to put in their bodies. Be professional, and remember you’re testing for the consumer, not the producer.

How Private-Sector-Led Information Sharing Can Transform Cybersecurity in the Cannabis Industry.

By Andy Jabbour, Ben Taylor
No Comments

The cannabis industry’s advancement towards legalization continues to dominate national headlines, from the stance of incoming Attorney General Merrick Garland to deprioritize enforcement of low-level cannabis crimes, Senate Majority Leader Chuck Schumer’s continued advocacy, to the recent passing of legislation in New York, New Mexico and Virginia (the first in the South) to authorize adult-use cannabis. While these updates are likely to intrigue customers and investors alike, they are also sure to draw the attention of cyber criminals who could look at the relative youth of the industry, as well as its rapid growth, as a prime target of opportunity for nefarious acts.

In order to understand risk mitigation best practices across a wide spectrum of private sector industries, this article will first identify the current security environment in order to understand the threats, briefly highlight specific case studies and assess the risks and identify methods that individual organizations, as well as the cannabis industry as a whole, can take action to enhance security and preparedness and to develop resiliency against future attacks.

Understanding the Threats

For an industry that has operated in a largely cash-based system for much of its existence, the idea of security is not foreign. Typically, these concerns focused on physical security implementation. The topic has received plenty of coverage, including a recent article in this journal articulating Important Security Considerations When Designing Cannabis Facilities. While an audit of physical security measures is a valuable part to any all-hazards threat assessment, securing a growing online network – from email to online finances to connected devices within cannabis facilities – can pose more unfamiliar challenges. When consulted for this article, Patten Wood, a former VP of marketing for a prominent west-coast cannabis retail brand noted: “While the topic of cybersecurity is critically important to customers, businesses, and the industry at large, it isn’t top of mind for many of the cannabis companies that I’ve experienced.” Understanding what risks are present is the first step to mitigating them, so we must first discuss several common cyber threats for the cannabis industry.

  • Phishing: Phishing happens when cybercriminals impersonate a trusted individual or entity, typically through email. The goal in this instance is to get the target to share confidential information or download software that can allow unauthorized access into an organization’s network. Phishing is one of the most common types of cyberattacks as it is relatively easy to conduct and surprisingly effective.
  • Ransomware Attacks: Ransomware attacks are used to gain access to a computer network and then lock and encrypt either the entire system or certain sets of high-value files, which can compromise important business information, and impact client and vendor privacy. A ransom is then demanded for restoring access, but paying the ransom comes with its own risk as it doesn’t guarantee the files will be restored. 
  • Cyber Extortion: Similar to ransomware attacks in their design, cyber extortion typically deals with a threat of leaking personal information and will generally demand payment in cryptocurrency in order to maintain their anonymity. 
  • Lumu: 2020 Ransomware Flashcard

    Remote Access Threats: As 2020 has forced organizations to rethink how they conduct business and shift to more remote operations than they had in the past, it can open up several new threats. According to a survey by IT social network SpiceWorks.com, six out of every ten organizations allow their employees to connect their company-issued devices to public Wi-Fi networks. Utilizing unsecured Wi-Fi networks opens the user up to man-in-the-middle attacks, allowing hackers to intercept company data. Unsecure Wi-Fi also brings the threat of malware distribution. An additional consideration with remote workers is the uptick in cyber attacks against remote access software referred to as remote desktop protocol (RDP) attacks. According to Atlas VPN, RDP attacks skyrocketed 241% in 2020 and we’ve seen numerous RDP attacks against critical infrastructure throughout the pandemic and across all industries.

  • Internet of Things (IoT) Leaks: With IoT devices running everything from security systems to automated growing operations, the convenience has been a huge boost for the industry. Unfortunately, many IoT devices don’t have sophisticated built-in security. Another common problem is the tendency of users to keep default passwords upon installation, which can make devices easy for cyber criminals to access. Once they are inside the system, malware can easily be installed, and the actors can move laterally throughout the network.
  • Personal and Medical Record Security: Many cyberattacks expose some level of personal data, whether that be customer, employee or vendor information. An extra consideration for retail operations that either treat medical patients, or medical and adult-use customers, is the additional information they must store about their clients. Medical facilities will maintain protected health information (PHI), which are much more valuable on the dark web than personally identifiable information (PII). But even adult use facilities may keep government-issued ID or other additional information above that of a typical retailer, which makes the potential value of their information much more intriguing for a cybercriminal.

Assessing the Risks

Depending on where your organization lies in the seed to sale chain, you will have different levels of risk for various types of attacks. We briefly discussed ransomware attacks earlier. Ransoms can range widely depending on the size of the organization that is attacked, but the ransom alone isn’t the only risk consideration. Businesses must also factor in the cost of downtime (an average of 18 days in 2020) caused by the ransomware when evaluating the impact to business operations, as well as reputation. While small – medium businesses are absolutely at risk, especially given their relative lack of cybersecurity resources and sophistication, a recent trend involves “Big Game Hunting” where cybercriminals are targeting larger organizations with the potential for bigger paydays. Criminals understand that big business can rarely afford major delays, and may be more able and willing to pay, and pay big, for a return to normal operations.

Group-IB: Ransomware Uncovered

Below are several examples of attacks which have either directly impacted the cannabis industry, or have valuable lessons the industry can learn from.

GrowDiaries: In October 2020 researcher Bob Diachenko discovered that 3.4 million records including passwords, posts, emails and IP addresses were exposed after two open-source application Kibana apps were left exposed online. As a platform for cannabis growers around the world (who are not all growing legally), this type of exposure puts the community at great risk, and can lower user confidence in the product, as well as putting them at personal risk of harm or legal ramifications. The applications being left open is a prime example of either a lack of good cybersecurity policies, or not following through on those policies.

Aurora Cannabis: On December 25th, 2020 Canadian company Aurora Cannabis suffered a data breach when SharePoint and OneDrive were illegally accessed. Included in the data that was compromised was credit card information, government identification, home addresses and banking details. The access point coming through Microsoft cloud software is a prime example of some of the challenges facing businesses who have an increasingly remote workforce yet still need that workforce to access critical (and usually highly sensitive) information.

THSuite: A database owned by seed to sale Point-Of-Sale (POS) software provider THSuite was discovered by researchers in December 2019. The database contained PHI/PII for 30,000 people, with over 85,000 files being exposed. The information that was left accessible included scanned government IDs, personal contact information and medical ID numbers. Clearly this gets into HIPAA territory, which can result in fines of up to $50,000 for every exposed record.

Door Dash: As cannabis delivery apps become more prevalent, it’s good to reference how similar businesses in other industries have been targeted. In May of 2019 nearly 5 million user records were accessed by an unauthorized third party, exposing PII and partial payment card information.  

Taking Action 

On an organizational level, employee training, password hygiene and malware protection are some of the basic and most important steps that should be taken by all organizations. But, if “knowledge is power,” the best defense for any organization against cyber threats is a well-informed organization- including leadership down to the front-line employees. Excellent tools to assist in this are Information Sharing & Analysis Centers/Organizations (ISACs/ISAOs). ISACs were established under a presidential directive in 1998 to enable critical infrastructure owners and operators to share cyber threat information and best practices. The National Council of ISACs currently has over 20 member ISACs including Real Estate, Water, Automotive and Energy. ISAOs were created by a 2015 executive order to encourage cyber threat information sharing within private industry sectors that fall outside of those listed as “critical infrastructure”. Christy Coffey, vice president of operations at the Maritime and Port Security ISAO (MPS-ISAO) says information sharing enabled by the executive order is critical. “We need to accelerate private sector information sharing, and I believe that the ISAO is the vehicle.”

According to Michael Echols, CEO of the International Association of Certified ISAO’s (IACI) at the Kennedy Space Center, security experts have long understood that threat information sharing can allow for better situational awareness and help organizations better identify common threats and ways to address them. “On the other side, hackers in a very documented way are already teaming up and sharing information on new approaches and opportunities to bring more value (to their efforts).” The ongoing crisis surrounding the Microsoft Exchange Server Vulnerability demonstrates that different cybercriminal groups will work simultaneously to abuse system flaws. As of March 5th it was reported that at least 30,000 organizations in the U.S. – and hundreds of thousands worldwide – have backdoors installed which makes them vulnerable to future attacks, including ransomware.

Below are several links to recent products that have been shared by various ISACs/ISAOs, which are provided as an example of the type of information that is commonly shared via these organizations.

If organizations are interested in learning more about enhancing their cybersecurity resiliency through private-sector led information sharing, please reach out to the newly formed Cannabis ISAO at ben@cannabisisao.org