Both labs are located in Streetsboro, Ohio, becoming A2LA’s first accredited labs in the state. North Coast Testing does cannabis testing for Ohio’s medical cannabis industry, whereas North Coast Analytical does testing for the hemp industry.
Carolyn Friedrich, Ph.D., scientific director at North Coast Testing, says they are excited to help ensure the safety of patients for Ohio’s medical cannabis program. “We are extremely proud of the work of our entire team in rapidly developing and implementing a comprehensive quality management program that can give all participants in the Ohio Medical Marijuana Control Program confidence in the quality and safety of products tested in our laboratory,” says Friedrich.
Nick Szabo, laboratory director at North Coast Analytical, says A2LA went “above and beyond at every step, we greatly appreciate their efforts. Our accreditation by A2LA is a testament to our ability to meet the most rigorous quality management standards in analytical testing of hemp products, and a vote of confidence in our team’s ability to perform at the highest levels.”
According to a press release published back in September, Steep Hill announced their expansion to the state of Oklahoma. Steep Hill, a cannabis science company that started with cannabis testing labs in California, has been on an impressive expansion trajectory over the past few years.
Kandice Faulkenberry, co-owner and CEO of Steep Hill Oklahoma, says they hope to raise the bar for cannabis lab testing in Oklahoma. “With Oklahoma being one of the fastest-growing medical markets in the nation, we are excited and honored to be a part of our state’s growth,” says Faulkenberry. “We hope to be a valuable resource in our community and Oklahoma’s cannabis industry. Through our partnership with Steep Hill, the world’s leading cannabis science company, we aim to raise the bar in laboratory services, education, and product safety for the medical cannabis industry in the Sooner State.”
Dr. Chris Orendorff, the other co-owner of Steep Hill Oklahoma, is a family physician based in Sallisaw, Oklahoma. “As a physician, I understand that safety and regulations are critical to patient outcomes and I look forward to providing the same assurance for my patients and fellow Oklahoma residents in the cannabis industry,” says Dr. Orendorff. “I am excited to partner with Steep Hill to provide the highest quality testing in the State of Oklahoma.”
Project Yosemite, a cannabis product innovation and brand development company, announced earlier this month the appointment of Jennifer Raeder-Devens as their new Chief Scientific Officer. Raeder-Devens is a veteran of the MedTech industry, working for companies like Becton Dickinson, Cardinal Health, Medtronic and 3M.
Prior to joining Yosemite, she was the Vice President of Research & Development at Becton, Dickinson, where she oversaw product development and technology strategies to launch infection prevention products including the ChloraPrep first-in-the-US sterile solution patient preoperative topical antiseptic. She was previously the Vice President of R&D, Strategy and Innovation at Cardinal Health. She’s also held roles at Medtronic, 3M Drug Delivery Systems and 3M Skin Health Division and she has a number of patents in drug delivery and medical devices.
Jennifer Raeder-Devens, Chief Scientific Officer at Project Yosemite
In November of 2018, Project Yosemite launched their first product, OLO, which is an infused, controlled-release sublingual strip. Part of Raeder-Devens’ new role at the company is the continued development and expansion of the OLO sublingual strip technology platform. Andrew Mack, CEO and founder of Project Yosemite, says he’s thrilled to have Raeder-Devens on the team. “Jennifer is an extremely accomplished scientist and engineer with extensive experience driving innovation and R&D in the pharmaceutical and medical device industries,” says Mack.
We caught up with Jennifer over the phone to talk about her background in the MedTech space, why she decided to jump ship to join the cannabis industry and what she’s excited to work on now.
Cannabis Industry Journal: Can you tell us about your background, including your work with 3M and Medtronic?
Jennifer Raeder-Devens: I’m coming directly from Becton Dickinson, a global med tech company, where I supervised the development of drug-device combination products for topical antiseptics. I spent about 10 years there, mostly in topical drug and combination product development. Prior to that, I was at 3M and Medtronic working in drug-device combination products. At 3M, I was supervising a team of technology developers for the 3M Drug Delivery Systems business. I had experience working with designing and manufacturing transdermal, nasal, buccal and inhalation drug delivery mechanisms for pharmaceutical partners.
I worked on implantable drug delivery systems at Medtronic, which included working on the biocompatibility of things like pacemakers and drug infusion pumps and optimizing them to reduce infection and enhance healing after the implantation procedure.
CIJ: What made you consider joining the cannabis industry?
Jennifer: With my work in topicals, transdermal and inhalation drug delivery, I had an easy understanding of the different routes of administration we see today in the cannabis industry. And so, from the technology standpoint, I thought this was a place I could contribute to immediately. And then what got me really excited about it was thinking about cannabis, and just like any other drug, with oral drug delivery, you’ve got first class metabolism and side effects from the 11-Hydroxy-THC that are undesirable and you’d rather not have delivered through the gut.
OLO sublingual strips have a 10-minute onset time
I got excited when I saw the development of things like sublingual strips that were focusing on alternatives to smoking that would preserve that relatively fast onset and mitigate some of the side effects of edibles.
The other thing I really like about the cannabis industry: Previously I have been very focused on known drugs that are already approved and repurposing them into a new delivery system. What really interests me about the cannabis industry is the active cannabinoids and terpenes are somewhat known and somewhat unknown, so there is this really interesting challenge there of trying to separate the wheat from the chaff in terms of producing therapeutic effects.
It is a really interesting space where the indications of certain molecules are evolving along with the delivery technology. So, it is a really exciting and eye-opening way to take the next step in my career and have this wide-open space in front of me, both in terms of the different cannabinoids, their effects and the delivery systems we can use.
CIJ: How might you be prepared, given your background, for some of the challenges in the cannabis space?
Jennifer: I think the challenges in cannabis delivery are not different from the challenges in pharmaceutical drug delivery. It’s just that we have this additional complexity of the entourage effect. We can be engineering not just the main ingredient of THC, but also all the other cannabinoids and terpenes. So, for example, with my background in infection prevention, we build a product that we know reduces the risk of infection, but we are really challenged to actually prove it reduces the risk of infection. We have a similar situation in the cannabis industry, where we can get the THC, or CBG or CBN where we want it to go, but then we are really challenged to figure out how we can find, what we call in the pharmaceutical industry, a surrogate end point for efficacy, so that we can test that product and really believe that when we put the product on the market, even though we haven’t tested thousands of users or conducted large randomized clinical trials, that the effect will be shown. We are networking and partnering with a good scientific community to build the right product and do some testing at a small scale that really demonstrates the product achieves the effect that we are really looking for.
CIJ: Can you tell us a little about your new role with Project Yosemite?
Jennifer: My job description falls into three buckets: The first part is that we are forming a scientific advisory board and we are working with some of the leading cannabinoid researchers around the country and around the world. These are the people identifying whether or not certain cannabinoids could reduce cancer cell metabolism or whether cannabinoids contribute to weight loss or diabetes control and other things of that nature. We are trying to reach as far upstream as we can to grasp the emerging understanding of the performance of cannabinoids and terpenes in the endocannabinoid system. So, part of my job is to chair that scientific advisory board, get the thought leaders together in the room and have them bring their knowledge and explore with our own knowledge what cannabis can really do.
The OLO sublingual strips
I have worked in topical, transdermal, buccal, nasal, inhalation drug delivery. In the second bucket of my job, we are trying to understand a given indication or experience that our users want to have, what would be the right route for them. We are challenging our sublingual delivery mechanism to see how fast of an onset we can really get. Right now, we are at 10 minutes for drug delivery in sublingual and we are still trying to get an even faster onset time for the sublingual strip.
For other indications, like chronic pain, we may want to think about a sustained release, so sort of aligning the different indications with which different cannabinoids and terpenes will work for it and see which delivery platform will work for what we are trying to accomplish in each indication. So, we do not plan to remain solely a sublingual strip company, but will build out additional delivery platforms as we develop new indications.
Right now, we are working upstream with the growers and the processors to get cannabis oil and extracts. Some of the growers are working on different genetics in their cultivars to grow plants that have different ratios of different cannabinoids that we know from the emerging research will have an impact on people’s experience. Now we are working with growers to really get ahead of the curve on how to formulate products with various cannabinoids.
We have an R&D team in house that I supervise. We are always working with our production team to make small improvements such as the faster onset and the dissolution rate and things like flavors, which covers a downstream focus as well.
According to a press release published today, Aphria Inc. has implemented Rootstock Software’s cloud Enterprise Resource Planning (ERP) solutions and ComplianceQuest’s Enterprise Quality Management System (EQMS). Aphria, one of the largest cannabis companies in the world, trades on both the Toronto Stock Exchange and the New York Stock Exchange.
Rootstock’s cloud ERP software includes things like order processing, production management, supply chain management, lot and serial number trackability and traceability, compliance reporting, costing and financial management. ComplianceQuest’s EQMS software provides support for GMP compliance and can help improve efficiencies in operations. The EQMS focuses on quality and risk management across Aphria’s business platforms, from sourcing to manufacturing to supply chain management.
Aphria is using the entire EQMS platform, which includes software to handle documents, training, changes, inspections, nonconformance, corrective actions (CAPA) and customer complaints which integrates to Rootstock’s ERP. According to the press release, the company is currently working to roll-out audit, equipment, incident and supplier management functions and will be fully live with the entire quality system in the next few months.
According to Tim Purdie, chief information officer & chief information security officer of Aphria Inc., both platforms delivered on their implementation. “Grounded in the scalability of the force.com platform, CQ transformed our quality management operating capabilities overnight and we are delighted at the fully integrated partnership result,” says Purdie. “We now have fully digital real-time informatics and ability to implement change in a highly transparent manner to meet the demands of our high growth business.”
Adding that Rootstock ERP will help facilitate their company’s production, inventory and supply chain management, Purdie says both platforms will enable Aphria to be increasingly responsive to market needs. “Aphria is setting the standard as a worldwide leader in the cannabis industry through a diversified approach to innovation, corporate citizenship, strategic partnerships and global expansion,” Purdie says. “With these system implementations, we’re now technologically equipped to take our competitive advantage to new levels of market leadership.”
In 1887, Julius Petri invented a couple of glass dishes, designed to grow bacteria in a reproducible, consistent environment. The Petri dish, as it came to be known, birthed the scientific practice of agar cultures, allowing scientists to study bacteria and viruses. The field of microbiology was able to flourish with this handy new tool. The Petri dish, along with advancements in our understanding of microbiology, later developed into the modern field of microbial testing, allowing scientists to understand and measure microbial colonies to detect harmful pathogens in our food and water, like E. coli and Salmonella, for example.
The global food supply chain moves much faster today than it did in the late 19th century. According to Milan Patel, CEO of PathogenDx, this calls for something a little quicker. “Traditional microbial testing is tedious and lengthy,” says Patel. “We need 21st century pathogen detection solutions.”
Milan Patel first joined the parent company of PathogenDx back in 2012, when they were more focused on clinical diagnostics. “The company was predominantly built on grant funding [a $12 million grant from the National Institute of Health] and focused on a niche market that was very specialized and small in terms of market size and opportunity,” says Patel. “I realized that the technology had a much greater opportunity in a larger market.”
Milan Patel, CEO of PathogenDx Photo: Michael Chansley
He thought that other markets could benefit from that technology greatly, so the parent company licensed the technology and that is how PathogenDx was formed. Him and his team wanted to bring the product to market without having to obtain FDA regulatory approval, so they looked to the cannabis market. “What we realized was we were solving a ‘massive’ bottleneck issue where the microbial test was the ‘longest test’ out of all the tests required in that industry, taking 3-6 days,” says Patel. “We ultimately realized that this challenge was endemic in every market – food, agriculture, water, etc. – and that the world was using a 140-year-old solution in the form of petri dish testing for microbial organisms to address challenges of industries and markets demanding faster turnaround of results, better accuracy, and lower cost- and that is the technology PathogenDx has invented and developed.”
While originally a spinoff technology designed for clinical diagnostics, they deployed the technology in cannabis testing labs early on. The purpose was to simplify the process of testing in an easy approach, with an ultra-low cost and higher throughput. Their technology delivers microbial results in less than 6 hours compared to 24-36 hours for next best option.
The PathogenDx Microarray
Out of all the tests performed in a licensed cannabis testing laboratory, microbial tests are the longest, sometimes taking up to a few days. “Other tests in the laboratory can usually be done in 2-4 hours, so growers would never get their microbial testing results on time,” says Patel. “We developed this technology that gets results in 6 hours. The FDA has never seen something like this. It is a very disruptive technology.”
When it comes to microbial contamination, timing is everything. “By the time Petri dish results are in, the supply chain is already in motion and products are moving downstream to distributors and retailers,” Patel says. “With a 6-hour turnaround time, we can identify where exactly in the supply chain contaminant is occurring and spreading.”
The technology is easy to use for a lab technician, which allows for a standard process on one platform that is accurate, consistent and reproduceable. The technology can deliver results with essentially just 12 steps:
Take 1 gram of cannabis flower or non-flower sample. Or take environmental swab
Drop sample in solution. Swab should already be in solution
Vortex
Transfer 1ml of solution into 1.5ml tube
A look at how the sample is added to the microarray
Conduct two 3-minute centrifugation steps to separate leaf material, free-floating DNA and create a small pellet with live cells
Conduct cell lysis by adding digestion buffer to sample on heat blocks for 1 hour
Conduct Loci enhancement PCR of sample for 1 hour
Conduct Labelling PCR which essentially attaches a fluorescent tag on the analyte DNA for 1 hour
Pipette into the Multiplex microarray well where hybridization of sample to probes for 30 minutes
Conduct wash cycle for 15 minutes
Dry and image the slide in imager
The imager will create a TIFF file where software will analyze and deliver results and a report
Their DetectX product can test for a number of pathogens in parallel in the same sample at the same time down to 1 colony forming unit (CFU) per gram. For bacteria, the bacterial kit can detect E. coli, E. coli/Shigella spp., Salmonella enterica, Listeria and Staph aureus, Stec 1 and Stec 2 E.coli. For yeast and mold, the fungal kit can test for Aspergillus flavus, Aspergillus fumigatus, Aspergillus niger and Aspergillus terreus.
Their QuantX is the world’s first and only multiplex quantification microarray product that can quantify the microbial contamination load for key organisms such as total aerobic bacteria, total yeast & mold, bile tolerant gram negative, total coliform and total Enterobacteriaceae over a dynamic range from 100 CFU/mL up to 1,000,000 CFU/mL.
Not all of the PathogenDx technology is designed for just microbial testing of cannabis or food products. Their EnviroX technology is designed to help growers, processors or producers across any industry identify areas of microbial contamination, being used as a tool for quality assurance and hazard analysis. They conducted industry-wide surveys of the pathogens that are creating problems for cultivators and came up with a list of more than 50 bacterial and fungal pathogens that the EnviroX assay can test for to help growers identify contamination hotspots in their facilities.
Using the EnviroX assay, growers can swab surfaces like vents, fans, racks, workbenches and other potential areas of contamination where plants come in contact. This helps growers identify potential areas of contamination and remediate those locations. Patel says the tool could help growers employ more efficient standard operating procedures with sanitation and sterilization, reducing the facility’s incidence of pathogens winding up on crops, as well as reduction in use of pesticides and fungicides on the product.
Deploying this technology in the cannabis industry allowed Milan Patel and the PathogenDx team to bring something new to the world of microbial testing. Their products are now in more than 90 laboratories throughout the country. The success of this technology provides another shining example of how the cannabis market produces innovative and disruptive ideas that have a major impact on the world, far beyond cannabis itself.
There is certainly, in retrospect, much to be proud about in Canada – home of one of the most disruptive international cannabis industries in the world. And certainly an early mover.
That starts with having the national mojo to begin this journey in the first place, not to mention pivot and even admit faults along the way. For all the complaints and whinges, however on the ground, most Canadians are proud that they tackled the canna question at a federal level.
As the industry now does a bit of an annual review and revisit, what are some of the largest accomplishments, takeaways (and let’s be honest, major f*ckups) so far? And where is this all headed as the industry at least tries to gear up for another year, if not quite Cannabis 2.0?
The Big Bravos
Launching in the first place. Yes Full Monty Recreational was scary, and delayed a few months last year. And even though there have been many problems (retail outlets, online sales, privacy, supply chain issues in every direction, ex im, foreign markets and etc.), it is up and running.
In comparison, the Brits have been haranguing over Brexit for the last three years and are still not really there.
Further, it is also apparent that the agencies in charge of the new industry are themselves giving a bit of a shake after CannaTitanic (CannTrust). That was embarrassing for them too, although of course, while a bit of a negative compliment, the recall system seems to work.
Even if it needs a few jump starts via whistleblowing.
That in and of itself is a fact that is still in the room, although perhaps the pancaking of the stock price of most of the public industry of late was also another much needed wakeup call.
The Devil In The Details
Domestic Requirements. Health Canada is getting hip to the fact that the industry needs a bit more of a heavy hand. See the book thrown at CannTrust. No matter what, Canadians are demanding to know where their cannabis comes from, and further are also demanding that it be at least free of pesticides that can harm them.
Licensing. Many cannapreneuers are complaining, still, about the delays in licensing, particularly for retail outlets in the provinces who are taking the cannabull by the horns. That said, there are still lots of enterprises who are perfectly happy to dodge the requirements all together and sell to the black or gray market. No licensing fees, and no taxes is a wonderful dream, but that is not exactly how regulated democratic capitalism works – at least at this level.
Supply Chain Logistics and Related Technologies. Canadians are struggling to implement a regulated industry in a country where patient home grow is constitutionally protected, and in an environment where who can sell what, and to whom including online, is still evolving. Predictably, no matter how groovy the solution works at home, (or the U.S.), no it will not fly in Europe. See GDPR regs, for starters.
Seed Culture (Aka Strain Protection). No matter how much the lawyers in the colonies are gearing up to sue each other over Huey’s Half Baked, in Europe, there are tomato and pepper farmers who are laughing, literally, all the way to the bank on this one. While hip to be a “strain defender,” the reality in a medical market looking for cheap cannabinoids is rather different. Effective, clean product, which can be reproduced reliably and cheaply, is the name of the game. Girl Scout Cookies, and such ilks will be a long time in coming as anything but highly expensive, niche products you can find in a Dutch Coffee Shop.
Domestic Requirements Vs International Export. Canadian standards, so far, have been widely divergent in an environment where exports to Europe in particular are part of the story for the biggest companies. That said, GMP, and in particular EU GMP, has become at least a buzzword if not a standard to live up to.
Privacy. California might be considering its own form of GDPR (European privacy legislation) but so far, the industry has largely failed to protect consumers (from themselves). Ideas about owning huge data troves on cannabis users for someone else’s profit are still very much in the room. After all, data is the new oil, whether people know their data is being harvested or not. And just like big oil has done for most of its existence, those in the driver’s seat so far show little compunction about harvesting personal information, to become in the words of the now departed CEO of Canopy Growth Bruce Linton, “the Google of Cannabis.” Won’t happen. Starting with the fact that in not just Europe but now even California, people, far beyond pot users are tired of a world where privacy is a second class right.
While the issue first hit in Canada on the recreational side, the reality is that companies know who their clients and patients are in a way that is not only disturbing but increasingly being challenged.
Microbial contamination on cannabis products represents one of the most significant threats to cannabis consumers, particularly immunocompromised patients who are at risk of developing harmful and potentially fatal infections.
As a result, regulatory bodies in the United States and Canada mandate testing cannabis products for certain microbes. The two most popular methods for microbial safety testing in the cannabis industry are culture-based testing and quantitative polymerase chain reaction (qPCR).
When considering patient safety, labs should choose a method that provides an accurate account of what is living on the sample and can specifically target the most harmful microbes, regardless of the matrix.
1. The Method’s Results Must Accurately Reflect the Microbial Population on the Sample
The main objective of any microbial safety test is to give the operator an indication of the microbial population present on the sample.
Figure 1: MA data collected directly from plant material before and after culture on 3M petrifilm and culture-based platforms.
Culture-based methods measure contamination by observing how many organisms grow in a given medium. However, not all microbial organisms grow at the same rate. In some cases, certain organisms will out-compete others and as a result, the population in a post-culture environment is radically different than what was on the original sample.
One study analyzed fifteen medicinal cannabis samples using two commercially available culture-based methods. To enumerate and differentiate bacteria and fungi present before and after growth on culture-based media, all samples were further subjected to next-generation sequencing (NGS) and metagenomic analyses (MA). Figure 1 illustrates MA data collected directly from plant material before and after culture on 3M petrifilm and culture-based platforms.
The results demonstrate substantial shifts in bacterial and fungal growth after culturing on the 3M petrifilm and culture-based platforms. Thus, the final composition of microbes after culturing is markedly different from the starting sample. Most concerning is the frequent identification of bacterial species in systems designed for the exclusive quantification of yeast and mold, as quantified by elevated total aerobic count (TAC) Cq values after culture in the total yeast and mold (TYM) medium. The presence of bacterial colonies on TYM growth plates or cartridges may falsely increase the rejection rate of cannabis samples for fungal contamination. These observations call into question the specificity claims of these platforms.
The Live Dead Problem
Figure 2: The enzyme is instantaneously inactivated when lysis buffer is added
One of the common objections to using qPCR for microbial safety testing is the fact that the method does not distinguish between live and dead DNA. PCR primers and probes will amplify any DNA in the sample that matches the target sequence, regardless of viability. Critics claim that this can lead to false positives because DNA from non-viable organisms can inflate results. This is often called the Live-Dead problem. However, scientists have developed multiple solutions to this problem. Most recently, Medicinal Genomics developed the Grim Reefer Free DNA Removal Kit, which eliminates free DNA contained in a sample by simply adding an enzyme and buffer and incubating for 10 minutes. The enzyme is instantaneously inactivated when lysis buffer is added, which prevents the Grim Reefer Enzyme from eliminating DNA when the viable cells are lysed (see Figure 2).
2. Method Must Be Able to Detect Specific Harmful Species
Figure 3: The team spiked a known amount of live E. coli into three different environments
Conversely, qPCR assays, such as the PathoSEEK, are designed to target DNA sequences that are unique to pathogenic Aspergillus species, and they can be run using standard qPCR instruments such as the Agilent AriaMx. The primers are so specific that a single DNA base difference in the sequence can determine whether binding occurs. This specificity reduces the frequency of false positives in pathogen detection, a frequent problem with culture-based cannabis testing methods.
Additionally, Medicinal Genomics has developed a multiplex assay that can detect the four pathogenic species of Aspergillus (A. flavus, A. fumigatus, A. niger, and A. terreus) in a single reaction.
3. The Method Must Work on Multiple Matrices
Figure 4: The team also placed TSB without any E. coli onto a petrifilm to serve as a control.
Marijuana infused products (MIPs) are a very diverse class of matrices that behave very differently than cannabis flowers. Gummy bears, chocolates, oils and tinctures all present different challenges to culture-based techniques as the sugars and carbohydrates can radically alter the carbon sources available for growth. To assess the impact of MIPs on colony-forming units per gram of sample (CFU/g) enumeration, The Medicinal Genomics team spiked a known amount of live E. coli into three different environments: tryptic soy broth (TSB), hemp oil and hard candy. The team then homogenized the samples, pipetted amounts from each onto 3M™ Petrifilm E. coli / Coliform Count (EC) Plates, and incubated for 96 hours. The team also placed TSB without any E. coli onto a petrifilm to serve as a control. Figures 3 and 4 show the results in 24-hour intervals.
Table 1: DNA was spiked into various MIPs
This implies the MIPs are interfering with the reporter assay on the films or that the MIPs are antiseptic in nature.
Many MIPs use citric acid as a flavoring ingredient which may interfere with 3M reporter chemistry. In contrast, the qPCR signal from the Agilent AriaMx was constant, implying there is microbial contamination present on the films, but the colony formation or reporting is inhibited.
Table 3: SenSATIVAx DNA extraction can successfully lyse the cells of the microbesTable 2: Different numbers of DNA copies spiked into chocolate
This is not an issue with DNA-based methods, so long as the DNA extraction method has been validated on these matrices. For example, the SenSATIVAx DNA extraction method is efficient in different matrices, DNA was spiked into various MIPs as shown in Table 1, and at different numbers of DNA copies into chocolate (Table 2). The SenSATIVAx DNA extraction kit successfully captures the varying levels of DNA, and the PathoSEEK detection assay can successfully detect that range of DNA. Table 3 demonstrates that SenSATIVAx DNA extraction can successfully lyse the cells of the microbes that may be present on cannabis for a variety of organisms spiked onto cannabis flower samples.
Cannabis growers and distributors are “green” when it comes to cyber security. Unaware of the real risks, cannabis businesses consistently fall short of instituting some of the most basic cybersecurity protections, leaving them increasingly vulnerable to a cyber-attack.
Cannabis businesses are especially attractive to hackers because of the vast amount of personally identifiable and protected health information they’re required to collect as well as the crop trade secrets they store. With businesses growing by leaps and bounds, and more and more Americans and Canadians purchasing cannabis, cybercriminals are likely to increase their attacks on the North American market in the coming year. Arm your cannabis business with the following best practices for growers and distributors.
Distributor Risk = A Customer’s PII
Cyber risk is the greatest for cannabis distributors, required to collect personal identifiable information (PII), including driver’s licenses, credit cards, medical history and insurance information from patients. State regulatory oversight further compounds the distributor’s risk of cyber-attack. If you’re a cannabis distributor, you’ll want to make sure to:
Know where you retain buyer information, and understand how it can potentially be breached. Are you scanning driver’s licenses into a database, or retaining paper files? Are you keeping them in a secure area off site, or on a protected network? Make sure a member of your management team is maintaining compliance with HIPAA and state statutes and requirements for cannabis distribution.
Institute strong employee oversight rules. Every employee does not have to have access to every sale, or your entire database of proprietary customer information. Delegate jobs behind the sales desk. Give each employee the access they need to do their job – and that’s it.
Distributors have to protect grower’s R&D information too. Most cannabis distributors have access to their grower’s proprietary R&D information so they can help customers understand which products are best for different medical symptoms/needs. Make sure your employees don’t reveal too much to put your suppliers in potential risk of cyberattack.
Grower Risk = Crop Trade Secrets
For cannabis growers, the risk is specific to crop trade secrets, research and development (R&D). If you’re a cannabis grower, you’ll want to:
Secure your R&D process. If you’ve created a cannabis formula that reduces anxiety or pain or boosts energy, these “recipes” are your competitive advantage – your intellectual property. Consider the way you store information behind the R&D of your cannabis crops. Do you store it on electronic file, or a computer desktop? What type of credentials do people need to access it? Other industries will use a third party cloud service to store their R&D information, but with cannabis businesses that’s typically not the case. Instead, many growers maintain their own servers because they feel this risk is so great, and because their business is growing so fast, there are not yet on the cloud.
Limit the number of people with access to your “secret sauce.” When workers are harvesting crop, or you’re renting land from farmers and planting on it, make sure to keep proprietary information in the hands of just the few who need it – and no one else. This is especially important when sharing details with third party vendors.
Cyber coverage is now ripe for picking
Although cannabis businesses are hard to insure – for just about every type of risk – cyber insurance options for cannabis companies have recently expanded, and come down in price. If you’ve looked for cyber coverage in the past and were previously unable to secure it, now is the time to revisit the market.
Know that cyber policy underwriters will do additional due diligence, going beyond the typical policy application, and ask about the types of proprietary information you collect from customers, as well as how you store and access it at a later date. Have this knowledge at your fingertips, and be ready to talk to underwriters about it when you’re bidding for a new policy – and at renewal time.
The beleaguered CannTrust has been given a way out of the perilous mess that executive management created for the company – but such a salvation comes at a high cost. That said, the company was already in deep water with regulators and clients. Health Canada, in fact, cancelled the company’s license to produce and sell cannabis in September – essentially mandating mass returns two months after a whistleblower instigated what is probably the legal industry’s most egregious scandal to date.
Efforts to regain regulatory approval also include plans by the company to recover cannabis that was not authorized by its license, and improve inventory tracking – the full details of which will be delivered to Health Canada by October 21.
While the beleaguered pot company’s stock predictably surged again on the public markets, the question lingers: can CannTrust ever be trusted again? These were egregious violations.
A Changing Industry
As with most things in business, the issues plaguing CannTrust were not isolated to one company. This has ranged in the past from pesticide use to creative accounting. Not to mention all sorts of creative endeavors on the financial side that are, depending on which stock market you look at this from, less than legit or just this side of shady.
It was easy to throw the book at a company like this – not only for these specific violations, but also as a warning to others tempted to engage in similar tactics (or fail to clean those up that still exist).
CannTrust in other words, was a clarion bell about the change in the weather, driven not only by international treaties but the legitimization of the drug, on the ground. Globally. When large health insurers get involved (see Europe), the conversation begins to change. And it is, fairly drastically.
On the ground in Germany, there are two more cultivation sites underway with one now certified and functional. BfArM (the German equivalent of the FDA) is now on the front lines of a battle that so far, at least in Canada, has not been addressed at a level Europe requires. That said, this reality too is changing. One of the largest distributors in Germany, CC Pharma, now owned by Aphria, has started a supply chain compliance check that is overdue. And further, while focussed on the cannabis industry, in truth, is a problem that plagues pharma far from cannabinoids.
However, as this is the cannabis industry, the scandals that rip through headlines are that much more visceral.
Seed to sale traceability, and further in a model unseen in the industry so far, will also become a watchword that is still rippling through an international industry chafing at any sort of standards, let alone standardization required for pharmaceutical acceptance. The bar, in other words, has just been set much higher. And there are many who will not make the grade.
CannTrust, certainly, was a victim not only of internal mismanagement, but a shifting environment that is rapidly upgrading on a level not seen so far in the entire North American industry – with a few notable exceptions.
Pharmaceutical Grade Is The Standard To Beat
Here is the reality now facing an industry coming into its own and on an international basis. The standards are tightening. The rules are not only being written but being enforced. And while there are sure to be a few more scandals along the way, the kinds of basic problems found at CannTrust are probably, finally, going extinct in the part of the industry that now knows it is being held accountable to far higher standards.
The reason? Medical grade and national food standards are in the room for every exporter now eyeing Europe. And that alone is resetting the debate everywhere. No matter how treacherous the path may be.
So no matter how harsh the penalties are now facing one company, even the regulators know that this is shifting territory. CannTrust, after all, is being given a second chance.
The CannTrust story may have shocked the uninitiated, but it hit almost every bogeyman the legitimizing industry has both feared and suffered from, particularly of late.
Here, generally, is the issue. Especially in Europe (even more especially in places like Germany, the UK and other emerging markets), budding cannapreneurs need each other. A distributor in Germany, for example, cannot get their final (federal) licenses allowing them to do business without establishing a relationship with an existing producer. That producer also needs relationships with established distributors to get their licenses.
In a fraught world, where all parties are evolving rapidly (and this also includes the “Big Boys” from Canada and several U.S. states including California), supply chain logistics, and even contract agreements if not licensing beyond that requires a level of honesty, integrity and transparency the industry, largely has not achieved yet.
That said, there are also parties, if not individuals and companies determined to set themselves on the straight and narrow – and play by the emerging “rules” – and then there are also clearly companies which, well, do not.
Being out of compliance, at any step of the chain, including when your product is sold via government agencies, is already a recipe for disaster.What this brave new world of cannabis requires, however, and from everyone – from grower, to manufacturer, packager, distributor and service delivery – is that all ecosystem partners must be in compliance.
Ensuring that can be a full time job. But what it also means is that to have a fully compliant product, every party in the chain bears responsibility for upholding standards that so far have proved hard to reach for many.
The time has come, in other words, where that is no longer an option.
The First Step Is Certification…
In a world where every member of the diverse cannabis ecosystem requires certification, determining what, and from whom is the first hurdle – both for buyer and seller. If one has GMP-certified product, that is awesome. But there are also treaties in the room that only allow some GMP certifications to be considered equal to others. If you are in Lesotho right now, for example, far from Europe, your biggest concern is not just looking to the EU but figuring out a way to export your crop into your neighbouring (and surrounding) country – namely South Africa.
This example, while seemingly far away, in fact, is the biggest bugbear in determining who can sell to whom even within Europe (let alone countries just outside and far beyond the region).
Determining cert presence, if not validity, however, is only the tip of the iceberg. And depending on who you are, that path alone is not a one time dalliance with authorities, but multiple certifications that must all also be kept current.
But It is Not The Only One…
The second hurdle, of course, is also checking the verity of everyone you do business with. For a producer, this includes making sure that processing, packaging, and even transportation are in compliance. In Canada, of course, this has been short circuited by the ability of producers to ship directly to patients.
In Europe, however, this is far from the case. And that is also why the entire conversation is also getting not only much more granular, but expensive. Pharmaceutical regulations are actually what guide the rules of the road here.
Walking floors, and checking, in person, may or not be mandated by international treaties at this point. However, most of the young producers on the ground here are implementing policies of personal visits to their vendors. In Massachusetts of late, this is also on the drawing board. Albeit on a “state” level, the reality is that both federal, state and more local training is a watchword, if not a must, now on the roadmap.
Being out of compliance, at any step of the chain, including when your product is sold via government agencies, is already a recipe for disaster.
And while that obviously is a challenge, companies must step up to the plate internally to commit to the same. It is too dangerous to ignore such steps. Including the easy to reach ones, like staff background checks and decent cybersecurity safeguards. The former has blown several enterprising cannadudes out of the driver’s seat already in Europe over the last few years. The latter is an emerging threat in a region that is also home to GDPR regulation (and growing fines).
For that very reason, certainly on the ground in Germany if not across Europe and in those countries and companies that wish to supply the same, supply chain verification, that is constant, consistent and verifiable, is the path for the industry both as of now and in the immediate future.
This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Strictly Necessary Cookies
Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.
We use tracking pixels that set your arrival time at our website, this is used as part of our anti-spam and security measures. Disabling this tracking pixel would disable some of our security measures, and is therefore considered necessary for the safe operation of the website. This tracking pixel is cleared from your system when you delete files in your history.
We also use cookies to store your preferences regarding the setting of 3rd Party Cookies.
If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.
Both labs are located in Streetsboro, Ohio, becoming A2LA’s first accredited labs in the state. North Coast Testing does cannabis testing for Ohio’s medical cannabis industry, whereas North Coast Analytical does testing for the hemp industry.
