smart Archives - Cannabis Industry Journal

It wasn’t that long ago that cannabis was underground, sometimes literally, and operators protected what was theirs any way they knew how. Before legalization, cannabis operators needed to secure their plants, cash, supplies and equipment not just from people who wanted to steal them, but also from law enforcement. The legacy cannabis market is now transitioning into a legal one, and licensed operators are joining the industry at an incredible rate, but security is still part of the success equation. Like before, operators need to protect plants, products, equipment and cash, but they now also need to protect records, privacy and data, and do so in a manner that complies with state regulations.

Cannabis regulatory authorities set security guidelines that cannabis business owners must follow in order to obtain and renew operational licenses. For instance, there are state-specific security regulations regarding video surveillance, camera placement, safes, ID verification, and more. While security measures help protect the business, they also protect the public. It’s a win-win for everyone involved. Here are five best practices and techniques to protect cash, records, products and people.

Hybrid cloud storage

State regulations call for reliable video surveillance footage that is accessible, in most cases, 24/7 and upon demand by cannabis regulatory authorities and local law enforcement acting within the limits of their jurisdiction. SecurityInfoWatch.com reports that video data is the industry’s next big investment, meaning there will be an increased demand and need to store video surveillance footage. Most states require video surveillance footage to be retained for a specific amount of time, often 45-90 days or longer if there is an ongoing investigation or case that requires the footage. While some businesses only retain video data for the state-required length of time, others choose to keep it longer.

Storing data on-site can become expensive and precarious. Best practices call for a hybrid cloud storage solution model as it provides on-site and both public and private cloud data storage solutions. This model provides users with the ability to choose which files are stored on-site and which files live in the cloud. Doing so improves file accessibility without impacting or compromising on-premises storage. In addition, it’s helpful to have two methods of digitizing data, for safety’s sake. In the event an on-site storage method crashes—though hopefully this won’t ever happen—there’s a version available off-site via the cloud. That said, with cloud-based storage solutions come cybersecurity threats that must be managed.

Cybersecurity

Due to the ongoing COVID-19 pandemic, more businesses are online than ever before. Unsurprisingly, cyberthreats are on an upward trend, including in the cannabis industry. Earlier this year, MJBizDaily reported that a data breach exposed personal information of current and former employees of Aurora Cannabis. The incident involved “unauthorized parties [accessing] data in (Microsoft cloud software) SharePoint and OneDrive”. Although this breach involved only employees, confidential customer information is also at risk of being compromised during a data breach.

On a separate occasion, an unsecured Amazon S3 data storage bucket caused a large-scale database breach that impacted almost 30,000 people across the industry, according to the National Cannabis Industry Association. The breach included scanned versions of government-issued ID cards, purchase dates, customer history and purchase quantities. Unlike the Aurora Cannabis breach, this one included customer data.

Just like other more established industries, the cannabis industry needs to protect and secure confidential data. If you don’t have a cybersecurity expert on your team, consider hiring a consultant to evaluate your risk or partnering with a credible cybersecurity technology company to implement proactive solutions. Before signing a contract, do your due diligence. Does the consultant and/or technology company understand the compliance regulations specific to the cannabis industry? Do their solutions meet the regulations in the state(s) where your facility operates? Taking the time to protect your company’s data before a breach occurs is proactive, smart business.

Smart Safes

A smart safe like this one can helps secure cash handling

Smart safes help secure cash handling, which given the difficult banking environment for cannabis companies, means they’re on the list of best practice security technology products. What is a smart safe? A smart safe is a device that securely accepts, validates, records and stores cash and connects to the other cash management technology solutions such as point of sale systems. They connect to the internet and provide off-site stakeholders visibility into a facility’s cash position.

A high-speed smart safe counts cash by hand faster than a human and is an overall more secure way to deliver cash bank deposits. At the end of the night, making a deposit at a physical bank location can be dangerous, exposing your cash and the individuals responsible for making the deposit to unsecured threats. Using a smart safe reduces that threat and also helps cannabis operators comply with financial recordkeeping and documentation requirements. Due to federal cannabis prohibition, many cannabis businesses lack enough insurance to fully cover their exposure to cash theft, which has led to a trending industry-wide investment in smart safes.

Advanced access control

Best practice access control means more than a ring of keys hanging off the facility manager’s belt. Advanced access control gives cannabis business owners and managers the ability to manage employee access remotely via the cloud. This feature can limit access areas within a facility, enabling an individual to revoke access instantly from a remote location making it a useful tool in the event of a facility lockdown or emergency. A mobile app and/or website can be used to lock or unlock secure doors, monitor access in real time and export access logs.

Advanced access control devices aren’t a standard in the industry yet. Although many state regulators don’t require cannabis businesses to utilize advanced electronic access control, using this technology is a best practice and may be required in the future.

Compliance software

Understanding the ramifications and keeping up with state-mandated compliance is challenging. While state regulations can be found online, they’re often in pieces, leaving operators unsure about whether or not they have them all. Once an operator is confident that they have the most current version of all the laws, rules, and regulations that apply to their cannabis business, making way through the dense legal jargon can be exhausting. Even after multiple readings, it can be unclear about how to apply these guidelines to the operator’s cannabis business, which is one reason cannabis businesses work with a trusted legal counsel to meet compliance requirements. For trusted advisors and cannabis business licensees and operators alike, cannabis compliance software solutions are designed to not just check boxes for a cannabis business, but to help everyone involved understand how the regulations apply to the operation. These solutions improve accessibility so that employees at all organizational levels understand the rules and requirements of their position and the products they work with.

In addition, compliance software can help licensees and operators establish and implement best practice SOPs to meet regulatory requirements. Because the cannabis industry is young and many operators are moving fast, many cannabis businesses are vulnerable to security breaches and threats. Prioritizing security and compliance can help cannabis leaders protect against potential threats. Investing in the latest and most innovative security technology solutions—beyond what is required by state regulations—can help operators outsmart those who seek to steal from them and position their companies as industry leaders that prioritize safety and compliance, protecting not just cash and products, but the people who work in their facilities and the customers who purchase their products.

Regardless of their size, all consumer package brands spend a significant amount of money and resources on packaging to attract consumers’ attention. We are all very visually oriented and gravitate to items that pique our interests. Cannabis brands are no exception when it comes to branding their products. Packaging plays a big part in carrying their brand forward and standing out on the dispensary shelves. When I was in Las Vegas at a CBD tradeshow in early 2020, I visited a dispensary, and it was beautiful. I remember commenting to a colleague that was with me how spectacular the product packaging was in the glass cases. One had unique artwork on each different product they offered, and it was indeed art. Yes, I did purchase this one that pulled me in.

The cannabis industry in the United States presents a challenge to brands because there is no overall federal guidance for packaging. Each state is controlling the cannabis legislation and, with it, the packaging guidelines. So multi-state operators (MSOs) have to manage each state as a separate entity and abide by the packaging regulations, which is not very efficient and adds a cost burden. As the industry matures and becomes federally legal across the country, packaging regulations will be easier to implement.

Louis Vuitton bags are one of the many goods that are commonly counterfeited
Image: UK Home Office, Flickr

Let’s take a look at counterfeit products across all product categories. There is a significant global problem with counterfeits, as articulated by the below statistics.

The total global trade in fakes is estimated at around $4.5 trillion.

Fake luxury merchandise accounts for 60% to 70% of that amount, ahead of pharmaceuticals, entertainment products and representing perhaps a quarter of the estimated $1.2 trillion total trade in luxury goods.

Digital plays a big role in this and perhaps 40% of the sales in luxury fakes take place online.

Customs and Border Patrol confiscated $1.3 billion worth of counterfeit goods in the U.S. for Fiscal Year 2020. (The value of 2020’s seizures are actually down compared to the $1.5 billion worth of counterfeit goods seized by CBP in 2019).

Unfortunately, the figures above are concerning, and the cannabis industry will face the same counterfeit issues that will add to these stats in the future. What can be done to help fight the problem and alleviate the pain for cannabis brands? Smart technology.

The trend towards “smart technology” varies by sector, but the underlying concept involves building levels of technology systems designed to impede or limit the highly sophisticated counterfeiter from replicating or replacing products. These levels typically include a forensic level control on the product, digital systems to track the material and customer facing systems to articulate the underlying value to the consumer.

Building these levels of smart technology into cannabis-products and packaging allows consumers to authenticate real versus fake, and in the case often in cannabis, legal versus illegal. Molecular technology is one forensic level of control option that can be used as a unique identifier for product authentication. Each brand would get its unique identifier to apply to the raw materials that make up its product, such as oil or an isolate. Then a sample can be tested at the origin point and subsequent nodes in the supply chain using a remote testing device. All the digital data is captured in a secure cloud database for traceability and transparency to the end consumer, to show them the authenticity of the product they are consuming. The same molecular technology can be applied to the ink or varnish for packaging and labels. A great application to help combat counterfeits and product diversion across the globe.

Counterfeiters can create near duplicate versions of the original

Another engaging platform is called StrainSecure by TruTrace Technologies. Their SAAS platform allows cannabis manufacturers to track all their product batches and SKUs tied to a blockchain. It also facilitates the interaction between the manufacturer and third-party testing facilities to conduct product testing and reporting. The data is captured within the platform, and with easy access dashboard views, it provides the insights to authenticate products at any time.

A company out of Australia called Laava is producing a product called Smart Fingerprints. It’s the next evolution of QR codes. The Smart Fingerprints can be applied to each package, providing a unique identifier that consumers can read with a mobile phone application. The consumer is provided with information concerning the product’s authenticity and any additional information the brand wants to share with the user. Smart Fingerprints are a great example of customer engagement at the point of activity that is secure.

The above three solutions show the availability of advanced technologies the cannabis industry can implement on its packaging and products to ensure authentic and safe products are sold to consumers. It provides consumers with vital information and insights about products so they can make informed buying decisions. There is no one silver bullet solution that provides all the answers. As with every high value product, counterfeiters will work to create near duplicate versions of the original until it becomes unsustainable to do so. It will take a technology ecosystem to seamlessly connect and provide actuate and timely information between supply chain partners and ultimately the end consumer. As the US works to separate the legal from illegal production for both the adult use and medical supply of cannabis, the looming challenge will be on protecting and communicating authenticity, packaging will be the first step in this.

Tag Archives: smart

The Importance of Smart Cannabis Packaging