According to a press release, Helix TCS and its subsidiary, BiotrackTHC, are expanding internationally at a rapid pace. The seed-to-sale traceability software solution now has customers in the United Kingdom, Canada, Colombia, Jamaica, Australia and New Zealand, in addition to the United States.
According to Zachary Venegas, executive chairman and CEO of Helix TCS, Inc., Vicente Fox will help serve as a strategic advisor for their continued expansion abroad. “”We are honored to welcome former President Fox to our Board of Directors and to benefit from his strategic vision and global network,” says Venegas. “His addition is a significant multiplier in our further expansion into key production markets that we expect to become dominant cannabis export hubs that will require our full suite of services.”
According to Venegas, they are prepared to meet the needs of a globalizing cannabis economy. “As international markets develop and more countries create a legal cannabis industry, our technology and service solutions will continue to reach new markets quickly to meet the needs of businesses and regulators in any regulatory environment,” says Venegas. “We are very excited to see the progress of legal cannabis on the global stage and we look forward to continuing to play a vital role in enabling a transparent and secure supply chain.”
To say that there has been explosive growth in the cannabis edibles market is an understatement. In the next 5 years, edibles are expected to become a $5.3 billion industry according to the Brightfield Group, a cannabis market research firm. Skyrocketing demand for cannabis infusion in food and beverage products, both recreational and medical, has prompted concern for the health and safety of consumers due to the lack of federal legality and regulatory guidelines for these products. Edibles consumers assume the same level of safety and quality present in other food and beverage products in the market. Progressive cannabis operations are opting to follow current food safety guidelines to mitigate hazards despite not being legally required to do so. Utilizing these guidelines, as well as incorporating an industry-specific ERP solutionto automate processes, enables cannabis businesses to provide quality, consistent products and establish standards to support the eventuality of federal cannabis legalization.
Edibles consumption has grown not only in a recreational capacity but also for medicinal use to treat chronic pain, relieve epilepsy symptoms, decrease nausea, combat anxiety and other health issues. Cannabidiol (CBD) infused products take many forms including candies, baked goods, chocolate, oils, sprays, beer, soda, tea and coffee. Their popularity is partly due to their more socially acceptable use, creating an appeal to a wider audience. While the Food and Drug Administration (FDA) is responsible for overseeing food and beverage safety for products sold in the United States, their regulations are not enforced in the cannabis-infused marketplace. Without federal regulatory standards, there exist inherent food safety concerns that create risks to consumers. The average cannabis edibles customer is likely unaware of the “consume at your own risk” nature of the products.
There are many consequences of not addressing food safety hazards, as the possibility of food-borne illnesses resulting from unsafe and unsanitary manufacturing facilitieshave become increasingly likely in an unregulated market. In addition to these concerns, problems particular to cannabisgrowing and harvesting practices are also possible. Aflatoxins (mold carcinogens) on the cannabis bud, pesticide residue on plants, pest contamination, improper employee handling and training and inaccurate levels of CBD all contribute to the risk of outbreaks, hefty fines, recalls or business closure. To mitigate the risk of exposure, it is recommended that edible manufacturers employ a proactive approach of observing proper food safety standards that encompass the growing, manufacturing, packaging, handling, storing and selling of products. With a focus on safety, cannabis edible manufacturers utilizing an ERP solution and vendor with experience in food safety management will reap the benefits that food and beverage businesses have experienced for decades.
Following established food safety protocols and guidelines of the food and beverage and dietary supplement industry, allows manufacturers of cannabis-infused edibles to implement a proactive approach by focusing on safety and reducing the risk to their operations. Food and beverage manufacturing best practices include: maintaining supplier list, quality control testing, sanitary handling of consumables, maintaining clean facilities and mitigating cross-contamination. Successful food and beverage manufacturers also incorporate a food safety team, preventative controls, and a food safety plan (FSP) including a detailed recall plan into their safety initiatives.
Establishing and maintaining a supplier list with approved quality ingredients is an essential building block for reducing food safety hazards and can be easily maintained within an ERP. Documentation of vendor information and recording of stringent testing results ensures that specific quality standards are met. Conducting extensive research regarding the source of the ingredients for use in cannabis edibles allows companies to confirm that raw ingredients were processed in a safe environment. The importance of supply chain visibility cannot be understated, as suppliers are in control of potential hazards. Quality processes and regularly performed testing is automated through the workflow of an ERP solution in the manufacturing facility – enabling noncompliant raw materials to be quarantined and removed from production. The ERP solution allows for management of critical control points to catch non-compliance issues and set-up of alternate suppliers in case of supplier-related issues. Maintaining approved supplier lists is an industry best practice that provides current and accurate information in the event of possible consumer adverse reactions.
Following current Good Manufacturing Practices (cGMPs) should underlie efforts to address food safety concerns in the cannabis edibles industry. An ERP solution assists with documenting these quality initiatives to ensure the safe and sanitary manufacturing, storage and packaging of food for human consumption. This includes evaluating equipment status, establishing cleaning and sanitation procedures and eliminating allergen cross-contamination. Employee training is conducted and documentation maintained in the ERP solution to ensure hygienic procedures, allergen awareness, illness reporting and required food or cannabis handling certifications.
Cannabis businesses can benefit from establishing a food safety team tasked with developing a Hazard Analysis Critical Control Points (HACCP) plan to provide effective procedures and protect consumers from the hazards inherent in edible cannabis products – including biological, chemical and physical dangers. Automating processes within an ERP solution prevents and controls hazards before food safety is compromised. Since HACCP plans have historically been used by food and beverage manufacturers to ensure a safe product for the consumer, cannabis edibles manufacturers can apply the lessons from these food safety protocols and procedures in their initiatives.By utilizing food safety best practices partnered with an ERP solution, cannabis businesses can avoid the negative consequences resulting from failure to address food safety hazards in manufacturing, storage and packaging.
A comprehensive FSP, as required by the FDA’s Food Safety Modernization Act (FSMA), identifies food safety hazards and guides the development of a company-specific, validated plan. This plan documents processes throughout the manufacturing, processing, packaging and storage stages of the operation. ERP software provides real-time, forward and backward lot traceability from seed-to-sale with the ability to track materials, document recipes and accurately label products. This detailed level of traceability provides an automated system that implements and documents food safety policies throughout the manufacturing process. With a trained Preventative Control Qualified Individual (PCQI) implementing the FSP, preventative controls, recall plans and employee training records are maintained in an integrated system.
The cannabis market’s tremendous growth has driven edibles manufacturers to follow the same guidelines as mainstream food and beverage companies to ensure safety is afforded equally to consumers of cannabis edibles. By utilizing food safety best practices partnered with an ERP solution, cannabis businesses can avoid the negative consequences resulting from failure to address food safety hazards in manufacturing, storage and packaging. At the end of the day, it’s up to cannabis manufacturers to be proactive in ensuring cannabis edibles are safe to consume until regulations are mandated.
Recent trends in the cannabis space and media headlinesreveal the challenges and complexities of the evolving cannabis industry with regard to traceability and compliance. Keeping abreast of the evolving state of legislative requirements is complex and requires effective procedures to ensure your business will flourish. At the forefront is the need to provide complete seed-to-sale traceability from the cannabis plant to the consumer, increasing the demand for effective tracking and reporting technologies to assure cultivators, manufacturers, processors and dispensaries are able to meet regulatory compliance requirements. An enterprise resource planning (ERP) solution offers a business management solution designed to integrate all aspects from the greenhouse and growing to inventory, recipe/formulation, production, quality and sales, providing complete traceability to meet compliance regulations.
The main force driving cannabusinesses’ adoption of strict traceability and secure systems to monitor the growth, production and distribution of cannabis is the Cole Memorandum of 2013issued by former US Deputy Attorney General James Cole. The document was designed to prevent the distribution of cannabis to minors, as well as prevent marijuana revenue from being used for criminal enterprises. Due to the non-legal status of cannabis on the federal level, the memo provides guidance for states whose voters have passed legislation permitting recreational or medical cannabis use. If states institute procedures for transparent inventory control and tracking documentation, the memo indicates that the federal government will refrain from interference and/or prosecution. Despite the Trump administration rescinding the memo in early 2018, companies have largely continued to follow its guidelines in an attempt to avoid targeted enforcement of federal law. Local government reporting is a primary reason for strict inventory control, necessitating reliable traceability documentation of the chain-of-custody.
Process metrics within an ERP solution are essential in providing the accountability necessary to meet required cannabis compliance initiatives. With a centralized, streamlined and secure system, each process becomes documented and repeatable – enabling best practices to provide an audit trail for accountability in all cannabis activities. Whether cultivating, extracting, manufacturing or dispensing cannabis, an ERP’s functionality assists with compliance demands to manage and support traceability and other state-level requirements.
An ERP solution solves the traceability and compliance issuesfaced by the industry by providing inventory control management and best practices that automates track and trace record keeping from seed to consumer. Growers are also implementing cultivation management solutions within their ERP and highly secure plant identification methods to mobilize greenhouse and inventory to support real-time tracking. Monitoring the loss of inventory due to damage, shrinkage, accidentally or purposeful destruction is efficiently documented to assure that inventory is accounted for. Similar to other process manufacturing industries, it is possible to produce tainted or unsafe products, therefore an ERP solution that supports product recall capabilities is fundamental. With a centralized framework for forward and backward lot, serial and plant ID tracking, the solution streamlines supply chain and inventory transactions to further ensure compliance-driven track and trace record keeping is met.
Local government reporting is a primary reason for strict inventory control, necessitating reliable traceability documentation of the chain-of-custody. Data regarding inventory audit and inspection details, complete with any discrepancies, must be reported to a states’ seed-to-sale tracking system to conform with legal requirements. An ERP utilizes cGMP best practices and reporting as safeguards to keep your company from violating compliance regulations. Failure to complete audits and meet reporting guidelines can be detrimental to your bottom line and lead to criminal penalties or a loss of license from a variety of entities including state regulators, auditors and law enforcement agencies. A comprehensive ERP solution integrates with the state-administered traceability systems more easily and reliably as compared to manual or stand-alone systems – saving time, money and detriment resulting from non-compliance.
Similar to other food and beverage manufacturers, the growing market for cannabis edibles can benefit from employing an ERP system to handle compliance with food safety initiatives – encompassing current and future requirements. Producers of cannabis-infused products for recreational and medicinal use are pursuing Global Food Safety Initiative (GFSI) certification, employing food safety professionals and implementing comprehensive food safety practices–taking advantage of ERP functionality and processes currently in place in similarly FDA regulated industries.
As legalization continues and reporting regulations standardize, dynamic cannabis ERP solutions for growers, processors and dispensaries will evolve to meet the demands and allow for operations to grow profitably.In addition to lot, serial and plant ID tracking, tracing a product back to the strain is equally important. An ERP can efficiently trace a cannabis strain from seedling through the final product, monitoring its genealogy, ongoing clone potency, CBD and THC content ratios and other attributes. The health, weight and required growing conditions of each individual plant or group of plants in the growing stages may be recorded throughout the plant’s lifecycle. In addition, unique plant identification regarding the performance of a particular strain or variety, how it was received by the market and other critical elements are tracked within ERP system. This tracking of particular strains assists with compliance-focused labeling and determining the specific market for selling and distribution of cannabis products.
Collecting, maintaining and accessing traceability and compliance data in a centralized ERP system is significant, but ensuring that information is safe from theft or corruption is imperative as well. An ERP solution with a secure platform that employs automated backups and redundancy plans is essential as it uses best practices to ensure proper procedures are followed within the company. User-based role permissions provide secure accessibility restricted to those with proper authorization. This level of security allows for monitoring and recording of processes and transactions throughout the growing stages, production and distribution; ensuring accountability and proper procedures are being followed. Investing in an ERP solution that implements this level of security aids companies in their data assurance measures and provides proper audit trails to meet regulations.
In this ever-changing industry, regulatory compliance is being met by cannabusinesses through the implementation of an ERP solution designed for the cannabis industry. Industry-specific ERP provides functionality to manage critical business metrics, inventory control, local and state reporting and record keeping, and data security ensuring complete seed-to-sale traceability while offering an integrated business management solution that supports growth and competitive advantage in the marketplace. As legalization continues and reporting regulations standardize, dynamic cannabis ERP solutions for growers, processors and dispensaries will evolve to meet the demands and allow for operations to grow profitably.
Compliance should be top of mind for California’s cannabis operators. As the state works to implement regulations in the rapidly-growing cannabis industry, business owners need to be aware of what’s required to stay in good standing. As of January 1, 2019, that means reporting data to the state’s new track-and-trace system, Metrc.
What Is Track-and-Trace?
Track-and-Trace programs enable government oversight of commercial cannabis throughout its lifecycle—from “seed-to-sale.” Regulators can track a product’s journey from grower to processor to distributor to consumer, through data points captured at each step of the supply chain. Track-and-trace systems are practical for a number of reasons:
Taxation: ensure businesses pay their share of owed taxes
Quality assurance & safety: ensure cannabis products are safe to consume, coordinate product recalls
Account for cannabis grown vs. cannabis sold: curb inventory disappearing to the black market
Helps government get a macro view of the cannabis industry
The California Cannabis Track-and-Trace system (CCTT) gives state officials the ability to supervise and regulate the burgeoning cannabis industry in the golden state.
What Is Metrc?
Metrc is the platform California cannabis operators must use to record, track and maintain detailed information about their product for reporting. Metrc compiles this data and pushes it to the state.
Who Is Required To Use Metrc?
Starting January 1, 2019, all California state cannabis licensees are required to use Metrc. This includes licenses for cannabis: Proper tagging ensures that regulators can quickly trace inventory back to a particular plant or place of origin.
How Does Metrc Work?
Metrc uses a system of tagging and unique ID numbers to categorize and track cannabis from seed to sale. Tagged inventory in Metrc is sorted into 2 categories: plants and packages. Plants are further categorized as either immature or flowering. All plants are required to enter Metrc through immature plant lots of up to 100/plants per lot. Each lot is assigned a lot unique ID (UID), and each plant in the lot gets a unique Identifier plant tag. Immature plants are labeled with the lot UID, while flowering plants get a plant tag. Metrc generates these ID numbers and they cannot be reused. In addition to the UID, tags include a facility name, facility license number, application identifier (medical or recreational), and order dates for the tag. Proper tagging ensures that regulators can quickly trace inventory back to a particular plant or place of origin.
Packages are formed from immature plants, harvest batches, or other packages. Package tags are important for tracking inventory through processing, as the product changes form and changes hands. Each package receives a UID package tag, and as packages are refined and/or combined, they receive a new ID number, which holds all the other ID numbers in it and tells that package’s unique story.
Do I Have To Enter Data Into Metrc Manually?
You certainly can enter data into Metrc manually, but you probably won’t want to, and thankfully, you don’t have to. Metrc’s API allows for seamless communication between the system and many of your company’s existing tracking and reporting tools used for inventory, production, POS, invoices, orders, etc. These integrations automate the data entry process in many areas.As California operators work to get their ducks in a row, some ambiguity and confusion around Metrc’s roll out remains.
Adopting and implementing cannabis ERP software is another way operators can automate compliance. These platforms combine software for point of sale, cultivation, distribution, processing and ecommerce into one unified system, which tracks everything and pushes it automatically to Metrc via the API. Since they’ve been developed specifically for the cannabis industry, they’re designed with cannabis supply chain and regulatory demands in mind.
As California operators work to get their ducks in a row, some ambiguity and confusion around Metrc’s roll out remains. Only businesses with full annual licenses are required to comply, leaving some temporary licensees unsure of how to proceed. Others are simply reluctant to transition from an off-the-grid, off-the-cuff model to digitally tracking and reporting everything down to the gram. But the stakes of non-compliance are high— the prospect of fines or loss of business is causing fear and concern for many. Integrated cannabis ERP software can simplify operations and offer continual, automated compliance, which should give operators peace of mind.
The stage is set: cannabis legalization is rolling out around the world. With legalization comes regulations and smart companies will adapt to make new requirements work for them. In the end, our shared goal (as industry, consumers and government) is the same: provide safe, high-quality, reliable products. This is where traceability comes in.
If a cannabis product isn’t safe (cannabis is vulnerable to the same kinds of hazards as most food products), the reputation of the entire industry suffers. Earning public trust is the first step toward favorable government regulations. With upcoming decisions that will decide taxation and distribution, it’s more important than ever that cannabis producers can react quickly if recalls should occur – and that means taking traceability seriously.
Comprehensive Traceability for Cannabis Means More Than Legality
A crucial key to producing safe and high-quality cannabis products is detailed traceability. Many states require cannabis businesses to use systems like Metrc, a technology that uses RFID tags to track cannabis from seed to sale to ensure nothing is diverted to the black market. However, Metrc focuses only on the chain of custody, not on the safety or quality of the product.
Ensuring a secure supply chain is only one piece of the cannabis puzzle. Public health hazards like toxic chemical contamination, mold growth and pathogenic contamination introduced by pests or improper employee handling need to be controlled in order to earn public trust and comply with regulations. State-mandated traceability systems don’t address these imperatives, so an effective safety technology that includes traceability, in addition to mandated systems like Metrc, is absolutely necessary to complete the cannabis picture.
Automation Technology Supports Cannabis Companies’ Growth and Helps With Audits
Cannabis professionals are aware of the regulatory scrutiny the industry is under and many have turned to automation technology to help stand up to this scrutiny, as well as collect and manage all the data necessary for compliance. Automating data collection pays off in several ways. For one, interconnected, real-time IoT technologies that are accessible to the entire facility 24/7 are giving cannabis businesses the tools they need to create the best possible products now, as well as providing them with the data they need to make their products even better. Since frequent audits are a part of the legalization transition, automation also makes preparing for audits and inspections a matter of minutes instead of days.
Ron Sigman, chief executive officer of marijuana compliance consulting firm Adherence Corp. and former investigator for the Marijuana Enforcement Division (MED) in Colorado, lists the most common violations for cannabis businesses that he found during more than 200 audits in an interview for Marijuana Business Daily. These violations include:
Metrc issues, especially accounting not matching inventory (too many plants or ounces of marijuana on the premises);
Security issues like lack of sufficient camera coverage;
Failure to upgrade licenses;
Improper or incomplete training of new employees.
Adopting safety and traceability concepts that the food industry developed over many decades can yield huge benefits for cannabis businessesA proper cannabis traceability technology mitigates these problems by providing notifications of inventory inconsistencies, certification expirations and more. Traceability for cannabis must be able to handle the complexities of procedures like terpene extraction and injection. With the rapid growth of the industry, it must be able to set targets and track actuals. It should track, not just cannabis plants and related derivatives, but also every other ingredient, material and packaging material used during production. There must be monitoring at each stage of production and a system in place to ensure all employee training is up to date. Preventative maintenance must be scheduled and tracked and hazards must be identified and controlled. In the event of an audit or recall, precise mass-balance calculations must be available to account for every gram of product, including non-cannabis ingredients like coconut oil and packaging materials like pouches and labels.
Detailed traceability can make the difference between a cannabis business keeping their license or being shut down. “You have to make a diligent effort to stay compliant 365 days out of the year, because you never know when a regulatory agency is going to come knocking on your door,” says Sigman. Knowing exactly what went wrong when and where allows a company to make changes so failures don’t happen again.
Higher Standards Will Be Demanded
The standard sought by most in the cannabis industry is only GMP (Good Manufacturing Practice) certification, which is actually the lowest level of certification possible in food production. With the public demand for edibles and concentrates on the rise and major retailers scrambling for seats at the table, the demand for transparency from growers and manufacturers will increase. Cannabis companies will soon find that GMP compliance simply won’t be enough to earn trust and expand their market share, especially when it comes to edibles and concentrates.
“Every day, patients express interest and assurance of wanting to know that the foods and medicines they consume are safe and of the best quality available,” says Lindsay Jones, president of Curaleaf Florida, the first medical cannabis company in Florida to achieve SQF Certification. Safe Quality Food (SQF) certification ensures a company meets the highest levels of safety and quality on a reliable basis. Curaleaf has set a new bar in the industry that others will be compelled to follow and they should be congratulated for their proactive vision.
Adopting safety and traceability concepts that the food industry developed over many decades can yield huge benefits for cannabis businesses, but it will be interesting to watch the technology evolve to accommodate the specific needs of retailers and consumers. Imagine a traceability system that ensures safety and quality while also tracking consistency and potency.
The Future of Cannabis Is Bright
The emerging cannabis industry is facing challenging hurdles on its path to widespread legalization and acceptance but the forecast is sunny – for companies who are prepared.
The Cannabis Quality series will feature presentations by subject matter experts in the areas of regulations, edibles manufacturing, cannabis safety & quality as well as laboratory testing. The Food Safety Consortium itself is hosted by our sister publication, Food Safety Tech, but the Cannabis Quality series will be co-hosted by Cannabis Industry Journal as well.
Citing the need to address safety in a burgeoning market, Rick Biros, conference director, believes education is key to helping the cannabis industry mature. “As the cannabis industry evolves, so does the need to protect the consumer,” says Biros. “Just as we protect the safety of our food supply chain, it is important to educate the cannabis industry about protecting their supply chain from seed to sale. Through these educational talks, we want to help bridge that gap, hosting a forum for those in the cannabis industry to interact with food safety professionals.”
The 2018 Food Safety Consortium Conference & Expo will be held November 14–16 in Schaumburg, Illinois. The event is a top food safety conference that features Food Safety and Quality Assurance (FSQA) industry experts and government officials.
The conference focuses on food safety education and networking, providing attendees information on best practices and new technology solutions to today’s food safety challenges. Previous keynote speakers have included food safety leaders such as Stephen Ostroff, M.D., deputy commissioner for Foods and Veterinary Medicine, U.S. Food and Drug Administration and Frank Yiannis, vice president of Food Safety at Walmart and author of Food Safety Culture: Creating a Behavior-Based Food Safety Management System.
Before submitting an abstract, following are a few points to keep in mind:
The abstract should be about 300 words
Presentations will be judged on educational value
Don’t submit a sales pitch!
Presentation time is about 45 minutes—this includes a 10-15 Q&A session
BioMauris, LLC became the 5th company in the United States to win a state contract for a seed-to-sale platform today. BioMauris is a technology company that manages product tracking, fulfillment and distribution with a focus on the healthcare market. According to a press release, the company announced today that the state of Iowa selected BioMauris to manage their tracking system for the medical cannabidiol (CBD) program.
That program’s contract includes inventory tracking, medical cannabidiol sales and patient and caregiver registration. In 2014, Iowa’s Medical Cannabidiol Act was signed into law. Three years later, in May of 2017, Governor Terry Branstad expanded the state’s program, including manufacture and dispensing in the previous legislation. On December 1st, 2018, Iowa expects sales to begin and fully implement the program.
This is BioMauris’ first state contract in the cannabis industry. According to the press release, BioMauris bases their platform on Salesforce for point of sale, tracking, customer loyalty and distribution services in the healthcare sector. The company says they use Salesforce because it is extremely customizable and secure.
According to Erik Emerson, founder and president of BioMauris, they’re poised to deliver on this front, given their experience in other industries. “Our team has extensive history in the pharmaceutical business, and therefore has a unique appreciation for data integrity and security,” says Emerson. “Additionally, we fundamentally believe the opportunity to track patient progress and associate the benefits received with the products used, is an incredible opportunity for the cannabis industry.” BioMauris has worked with clients on similar projects in the healthcare space for some time.
The company touts their platform as fully PCI-DSS and HIPAA compliant, allowing them to process payments and protect sensitive patient information. “Our patented technology, makes this not only possible, but simple for all users,” says Emerson. “We are excited to bring our product to the great state of Iowa and look forward to a long partnership with them. We believe strongly in what Iowa is attempting to do with their program and believe it is a perfect fit with our strategy for the cannabis industry.”
On February 8th, Peter Antolin, the deputy director for the Washington State Liquor and Cannabis Board (WSLCB), sent an email to licensees explaining why the transition to their new traceability system was disrupted. Last Saturday, someone gained access to the sensitive information in Leaf Data Systems, the state’s traceability software that is powered by MJ Freeway.
“A computer vulnerability was exploited on Saturday, allowing unauthorized access to the traceability system,” Antolin told licensees in the email. “There are indications an intruder downloaded a copy of the traceability database and took action that caused issues with inventory transfers for some users. We believe this was the root cause of the transfer/manifest issue experienced between Saturday and Monday.”
The email goes on to say that no personally identifiable information was available to the ‘intruder,’ but some sensitive information was clearly accessed. That data includes route information of manifests filed between February 1st and 4th as well as transporter vehicle information including VIN, license plate number and vehicle type, according to the email.
That email leaves much to be desired. For one, they do not exactly have a solution, instead trying to alleviate licensees’ worries with a hollow inanity full of meaningless jargon: “The WSLCB and MJ Freeway continue to implement several strategies to prevent future vulnerabilities to future intrusions,” reads the email. “This includes full logging and monitoring and working with third-party entities. Since this remains an active investigation, details on security are not publicly available.” However, today the WSLCB is hosting a webinar where Peter Antolin, their IT division, the MJ Examiners unit and enforcement will be available to answer questions, according to the email.
This is by no means the first security breach that Washington and MJ Freeway have suffered. In May of 2017, Washington originally selected Franwell’s METRC as the contract partner for their traceability software system. Less than a month later in June of 2017, after a mistake in the selection process, Washington selected MJ Freeway instead of Franwell for the traceability contract. Three days later, MJ Freeway’s source code was stolen and published online. Then in September, Nevada cancelled their contract with MJ Freeway after a security breach, their services crashed in Pennsylvania and Spain, and in October it became clear that the company could not meet the October 31 deadline for their new Washington contract.
In November of 2017, BioTrackTHC, the company that held the previous contract for Washington’s traceability software, helped the state through the transition period with a temporary Band-Aid solution to hold the state over until January of 2018. A month after they expected to implement the new MJ Freeway system, the latest security breach occurred this week and disrupting the rollout yet again.
At the end of the email Antolin sent to licensees yesterday, he says there will continue to be attempts to breach the system’s security. “The bottom line is that this incident is unfortunate,” says Antolin. “There will continue to be malicious cyberattacks on the system. This is true of any public or private system and is especially true of the traceability system.” This begs a few questions: why aren’t we hearing about this kind of security breach in other states’ traceability systems? What are other companies doing that prevents this from happening? Why does this keep happening to MJ Freeway?
Integrating Your LIMS System With State Tracking Systems
By Hannah O’Brien, Operations Manager, Confident Cannabis
Running a lab is hard. Running a cannabis lab is harder. Watch this webinar hosted by Confident Cannabis, the most popular and only free cannabis LIMS in the country, to learn how cannabis compliance and regulatory burdens impact analytical testing laboratories in any state, and how important purpose-built software solutions are to make their business run smoothly.
According to a press release published this morning, BioTrackTHC successfully implemented their Universal Cannabis System (UCS) in Washington State, a temporary solution for the state’s seed-to-sale cannabis tracking system, while the new system is yet to be deployed.
BioTrackTHC had a contract with Washington State for four years, which expired just weeks ago at the beginning of November. Back in June, after a few minor hiccups, the state announced that MJ Freeway would be the successive software platform used for the state’s seed-to-sale traceability system.
The deadline for the new software to be ready for deployment was set for November 1st, when the BioTrackTHC contract would expire and the MJ Freeway contract would begin. Between when the contract was awarded and the deadline for implementation, MJ Freeway made headlines for a series of security hacks and systems failures. Subsequently, MJ Freeway said they could not deliver the software platform until January of 2018, leaving a two-month gap where businesses have no state-mandated software to use for the tracking system.
The contingency plan that the state laid out consisted of business owners manually inputting data in excel spreadsheets. When first pressed for a Band-Aid solution, representatives of BioTrackTHC cited security concerns related to MJ Freeway’s hacks as reason for being hesitant to extend their contract through the interim period.
In an open letter to the Washington cannabis industry back in October before the end of their contract, Patrick Vo, president and chief executive officer of BioTrackTHC, laid out an explanation for what went wrong and provided an alternative solution, essentially a private sector version of their government-mandated traceability software system.
Announced this morning, the new system, UCS, is being used by over 1,600 of the 1,700 cannabis licensees in Washington. The UCS has so far submitted 39,000 individual excel spreadsheets to the Washington State Liquor and Cannabis Board (WSLCB). “After the WSLCB announced that their replacement system would not be ready in time and that the only other option was for all 1,700 licensees to submit their seed-to-sale data via manual spreadsheets, BioTrackTHC created the UCS—a privatized clone of the government system—within a few days and deployed it minutes after the termination of the old system to minimize the impact on all licensees,” reads the press release.
The UCS allows business owners to streamline data recording, instead of manually entering information into spreadsheets. It is also integrating with 3rd party software competitors such as WeedTraQR, GrowFlow, Mr. Kraken, TraceWeed, GreenBits, S2Solutions and DopePlow. “After the WSLCB’s announcement, we knew that we had only a few days to provide a universal system to which the whole industry could submit compliance data and enable communication across the supply chain between licensees and their seed-to-sale system,” says Vo. “Our priority was to ensure that licensees could continue to operate in the absence of a government seed-to-sale system. Not having that system in place could have left Washington licensees vulnerable to noncompliance in a variety of ways, not to mention the potentially crippling volume of extra work needed to manually track a business’ entire inventory.”
Washington State’s new traceability software system by MJ Freeway is expected to deploy in January of 2018.
Strictly Necessary Cookies
Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.
We use tracking pixels that set your arrival time at our website, this is used as part of our anti-spam and security measures. Disabling this tracking pixel would disable some of our security measures, and is therefore considered necessary for the safe operation of the website. This tracking pixel is cleared from your system when you delete files in your history.
If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.