Tag Archives: tracking

May 7, 2019

Implementing a HACCP Plan to Address Audit Concerns in the Infused Market

By Daniel Erickson

The increasing appeal and public acceptance of medical and recreational cannabis has increased the focus on the possible food safety hazards of cannabis-infused products. Foodborne illnesses from edible consumption have become more commonplace, causing auditors to focus on the various stages of the supply chain to ensure that companies are identifying and mitigating risks throughout their operations. Hazard Analysis and Critical Control Points (HACCP) plans developed and monitored within a cannabis ERP software solution play an essential role in reducing common hazards in a market currently lacking federal regulation.

What are cannabis-infused products?

Cannabis infusions come in a variety of forms including edibles (food and beverages), tinctures (drops applied in the mouth), sprays (applied under the tongue), powders (dissolved into liquids) and inhalers. Manufacturing of these products resembles farm-to-fork manufacturing processes common in the food and beverage industry, in which best practices for compliance with food safety regulations have been established. Anticipated regulations in the seed-to-sale marketplace and consumer expectations are driving cannabis infused product manufacturers to adopt safety initiatives to address audit concerns.

What are auditors targeting in the cannabis space?

The cannabis auditing landscape encompasses several areas of focus to ensure companies have standard operating procedures (SOP’s) in place. These areas include:

Regulatory compliance – meeting state and local jurisdictional requirements
Storage and product release – identifying, storing and securing products properly
Seed-to-sale traceability – lot numbers and plant identifiers
Product development – including risk analysis and release
Accurate labeling – allergen statements and potency
Product sampling – pathogenic indicator and heavy metal testing
Water and air quality – accounting for residual solvents, yeasts and mold
Pest control – pesticides and contamination

In addition, auditors commonly access the reliability of suppliers, quality of ingredients, sanitary handling of materials, cleanliness of facilities, product testing and cross-contamination concerns in the food and beverage industry, making these also important in cannabis manufacturers’ safety plans.

How a HACCP plan can help

Whether you are cultivating, harvesting, extracting or infusing cannabis into edible products, it is important to engage in proactive measures in hazard management, which include a HACCP plan developed by a company’s safety team. A HACCP plan provides effective procedures that protect consumers from hazards inherent in the production and distribution of cannabis-infused products – including biological, chemical and physical dangers. With the lack of federal regulation in the marketplace, it is recommended that companies adopt these best practices to reduce the severity and likelihood of compromised food safety.

Automating processes and documenting critical control points within an ERP solution prevents hazards before food safety is compromised. Parameters determined within the ERP system are utilized for identification of potential hazards before further contamination can occur. Applying best practices historically used by food and beverage manufacturers provides an enhanced level of food safety protocols to ensure quality, consistency and safety of consumables.

Hazards of cannabis products by life-cycle and production stage

Since the identification of hazards is the first step in HACCP plan development, it is important to identify potential issues at each stage. For cannabis-infused products, these include cultivation, harvesting, extraction and edibles production. Auditors expect detailed documentation of HACCP steps taken to mitigate hazards through the entire seed-to-sale process, taking into account transactions of cannabis co-products and finished goods at any stage.

Cultivation– In this stage, pesticides, pest contamination and heavy metals are of concern and should be adequately addressed. Listeria, E. coli, Salmonella and other bacteria can also be introduced during the grow cycle requiring that pathogenic indicator testing be conducted to ensure a bacteria-free environment.

Harvesting– Yeast and mold (aflatoxins) are possible during the drying and curing processes. Due to the fact that a minimal amount of moisture is optimal for prevention, testing for water activity is essential during harvesting.

Extraction – Residual solvents such as butane and ethanol are hazards to be addressed during extraction, as they are byproducts of the process and can be harmful. Each state has different allowable limits and effective testing is a necessity to prevent consumer exposure to dangerous chemical residues.

Edibles– Hazards in cannabis-infused manufacturing are similar to other food and beverage products and should be treated as such. A risk assessment should be completed for every ingredient (i.e. flour, eggs, etc.), with inherent hazards or allergens identified and a plan for addressing approved supplier lists, obtaining quality ingredients, sanitary handling of materials and cross-contamination.

Following and documenting the HACCP plan through all of the stages is essential, including a sampling testing plan that represents the beginning, middle and end of each cannabis infused product. As the last and most important step before products are introduced to the market, finished goods testing is conducted to ensure goods are safe for consumption. All information is recorded efficiently within a streamlined ERP solution that provides real-time data to stakeholders across the organization.

Besides hazards that are specific to each stage in the manufacturing of cannabis-infused products, there are recurring common procedures throughout the seed-to-sale process that can be addressed using current Good Manufacturing Practices (cGMP’s). cGMPs provide preventative measures for clean work environments, training, establishing SOPs, detecting product deviations and maintaining reliable testing. Ensuring that employees are knowledgeable of potential hazards throughout the stages is essential.Lacking, inadequate or undocumented training in these areas are red flags for auditors who subscribe to the philosophy of “if it isn’t documented, it didn’t happen.” Training, re-training (if necessary) and documented information contained within cannabis ERP ensures that companies are audit-ready.

Labeling

The importance of proper labeling in the cannabis space cannot be understated as it is a key issue related to product inconsistency in the marketplace. Similar to the food and beverage industry, accurate package labeling, including ingredient and allergen statements, should reflect the product’s contents. Adequate labeling to identify cannabis products and detailed dosing information is essential as unintentional ingestion is a reportable foodborne illness. Integrating an ERP solution with quality control checks and following best practices ensures product labeling remains compliant and transparent in the marketplace.

Due to the inherent hazards of cannabis-infused products, it’s necessary for savvy cannabis companies to employ the proper tools to keep their products and consumers safe. Utilizing an ERP solution that effectively manages HACCP plans meets auditing requirements and helps to keep cannabis operations one step ahead of the competition.

March 6, 2019

Helix TCS Expands Internationally

By Aaron G. Biros

No Comments

According to a press release, Helix TCS and its subsidiary, BiotrackTHC, are expanding internationally at a rapid pace. The seed-to-sale traceability software solution now has customers in the United Kingdom, Canada, Colombia, Jamaica, Australia and New Zealand, in addition to the United States.

At home, they just successfully deployed North Dakota’s government cannabis traceability program. That program is one of nine government contracts the company has currently, where their seed-to-sale software is mandated for the state’s entire cannabis supply chain for compliance and regulatory oversight.

In addition to their international expansion and successful domestic government contracts, Helix TCS announced an exciting new addition to their leadership team. The company added former President of Mexico, Mr. Vicente Fox Quesada, to its Board of Directors, according to a press release. “A new industry is being borne, with high ethical standards, attracting massive investment in medical and health products, bringing economic growth and jobs to communities and nations,” says Fox. “I am proud to be part of it.”

According to Zachary Venegas, executive chairman and CEO of Helix TCS, Inc., Vicente Fox will help serve as a strategic advisor for their continued expansion abroad. “”We are honored to welcome former President Fox to our Board of Directors and to benefit from his strategic vision and global network,” says Venegas. “His addition is a significant multiplier in our further expansion into key production markets that we expect to become dominant cannabis export hubs that will require our full suite of services.”

According to Venegas, they are prepared to meet the needs of a globalizing cannabis economy. “As international markets develop and more countries create a legal cannabis industry, our technology and service solutions will continue to reach new markets quickly to meet the needs of businesses and regulators in any regulatory environment,” says Venegas. “We are very excited to see the progress of legal cannabis on the global stage and we look forward to continuing to play a vital role in enabling a transparent and secure supply chain.”

February 4, 2019

8 Mistakes Businesses Make When Managing Product Labels: Part 1

By Rob Freeman

2 Comments

Editor’s Note: This article contains the first four common labeling mistakes that businesses can make. Click here to view the next four common labeling mistakes.

Whether you’re a small business owner or a production manager of a large manufacturer, if you’ve ever experienced problems with your product labels you know it can quickly turn into a serious issue until that problem is resolved. From the time it’s applied to your product all the way to the POS (Point of Sale), labels always seem to be the least significant part of the production process- until something goes wrong. And when it does go wrong, it can create major branding issues and cost your company tens of thousands of dollars due to hefty supply chain late penalties and/or even government fines.

This article aims to provide insight as to how a company like Label Solutions Inc. helps businesses and manufacturers create new labels for their products as well as what to look for should you experience label failure at your retail locations. Topics discussed in this article do not cover all possible issues, but these common mistakes will hopefully help you better understand how creating a product label works, and how to possibly prevent your own problems in the future.

Mistake #1: Not Understanding the Importance Between the “Construction” Versus the “Artwork & Compliance” of the Label

This may seem like common sense, but it is often overlooked. Especially when dealing with fast-track projects.

Construction of the Label is the material selected and production process to produce the label. When creating a new label from the ground up, it is important to factor in how your product will be produced, necessary shipping and supply chain needs, how it is stored in inventory and how it will be presented at the POS. Understanding what environments your product will be exposed to throughout its life cycle will give you an advantage when approving substrate material, inks, and the strength of adhesive that might be necessary for your application.

The Artwork & Compliance of the Label refers to the overall design of the label, artwork, customer messaging, bar codes and regulatory requirements you need to follow in order to avoid serious government fines that might relate to your industry (Referring to agencies such as OSHA, DOT, and the FDA).In most cases the construction of the label does not apply to the compliance of the label.

Most label providers do not have the in-house expertise to offer compliance assistance. Although it is still the manufacturer who is liable for all final artwork approvals on their product, label providers that do offer advisory services can help update label content when regulatory changes are enacted. This “safety net” can save your company from extra production costs and, potentially, excessive legal time and material costs. In short, you should always review final label artwork approvals with your compliance team and/or legal expert, but it never hurts to have a “safety net” to help eliminate unnecessary orders or production delays.

In most cases the construction of the label does not apply to the compliance of the label. An exception to this statement would be industries such as the electronics industry that use UL (Underwriter Laboratories) labels that must meet UL specifications and be produced under recognized UL files. In other words, the compliance of a UL label is the construction of the label.

Best Method Approach: An excellent example of companies that understand the difference between the Construction vs. Artwork & Compliance of the label would be the compressed gas industry. Gas suppliers and distributors require long term regulatory compliant labels on their cylinders and micro-bulk tanks. These gas tanks are used in a wide variety of industries such as for manufacturing, welding, medical procedures, and specialty gas mixes for the micro-electronics industry.

The compressed gas industry requires that their labels follow strict, up-to-date OHSA and DOT compliance requirements. As for the construction of the label, it is common practice that the label remains legible on the cylinder for an average of five years. The 5-year duration is due to the millions of tanks that are in circulation throughout the US and Canada. What’s more, each label is produced to adhere to the cylinder’s metal surface during extreme outdoor weather conditions such as fluctuating temperatures, freezing rain, high winds, and direct sunlight year-round.

Mistake #2: Applying Labels Incorrectly to Your Products

Whether the label is applied to the product surface by hand or automatically with a label applicator, the label itself may not be applied level or evenly. Besides this being a major branding issue, this could also affect how the bar codes are scanned and could eventually impact your delivery times while trying to correct a batch.

Best Method Approach: There are construction alternatives that you can choose from to potentially reduce the impact of incorrect label application. For example, products with certain label adhesives allow your production team to reposition the label within a few minutes before the tack completely sets to the surface. The type of surface (cardboard, metal, plastic, glass, etc.) and the type of adhesive will determine how much time your production team will have before the tack sets.

The best practice is to apply labels prior to filling the bottles and cans as opposed to filling first and then applying the label in your production line.A good example of this best practice can be seen in the beverage market. Whether the client produces a uniquely crafted beer, or a rare ingredient infused into a new health drink, labels that are auto-applied to bottles and cans will sometimes experience equipment tension issues that need to be recalibrated. Once labels are applied off-alignment, a delayed tack setting can allow the label to be quickly repositioned by hand when needed. The best practice is to apply labels prior to filling the bottles and cans as opposed to filling first and then applying the label in your production line. The reason, excess spillage from filling can interfere with most adhesives.

This same repositionable adhesive is excellent to keep in mind for large equipment production assembly lines that apply prime (branding) labels and warning labels by hand. Even with large wide-format labels, the adhesive tack can be formulated so your employees have a few minutes to adjust, straighten, and smooth away trapped air bubbles once it has been placed on the surface. Knowing you have this option can help reduce label inventory waste, additional production material wastes and avoid delaying production time. More importantly, this option keeps your brand and your warning/instructional labels looking fresh.

Mistake #3: Not Sharing Your Production Run Schedules with Your Label ProviderSupply chain management (SCM) models are excellent examples of the best approach.

Some of Label Solutions’ largest accounts have the most efficient real-time tracking supply chain models in North America, but even they cannot avoid sudden increased orders for their products stemming from high customer demand or similar issues. It is a good problem to have, but it is a problem, nonetheless. Manufacturers utilize supply chain management tools to notify their suppliers of their monthly order forecasts, which in turn helps suppliers manage their materials and deliveries more efficiently.

On the other side of the spectrum, when small businesses share their production schedules with a supplier it means that both parties (the manufacturer and label provider) understand when to expect higher or lower order quantities each month. Label providers should back date their label production schedules, so they have the materials available to handle your busier months while ensuring on-time deliveries.

Best Method Approach: Supply chain management (SCM) models are excellent examples of the best approach. Although SCM’s are designed for scalability and real-time tracking, the benefit to you also helps your label supplier. For example, our large retail and industrial manufacturing clients notify the Label Solutions team to produce their labels according to their Supply Chain portal demand schedules. This, in turn, allows label suppliers to allocate production time and materials more efficiently for your last-minute rush orders.

Smaller companies can take a much more simplified approach (without the SCM tracking) to help their suppliers manage their orders – even if they do not use supply chain management. A simple Excel report of production runs over a 12-month time frame is ideal. If your label provider does not already practice this or similar methodology, it might be time to start looking for a more proactive label provider. If you’re unsure you want to share your information, then you might consider requiring your label provider to sign an NDA (Non-disclosure Agreement).

Mistake #4: Not Accepting Alternative Sizes of the Label to Allow for Better Pricing

If your product needs a label with, for example, a dimension of 5.25 X 6.75 inches, there might be a much better price point offered to you if you’re open to switching to a slightly different dimension label of, say, 5 X 7 inches. Obviously, you need to make sure the new dimension would fit your product(s) and work with your production line. But, if alternate dimensions are within the scope of the project, a modified SKU could potentially cut down on cost and production time.

Best Method Approach: You might not have the time or ability to change your label if you already market that product in retail stores. But, if you are changing your branding, creating a new style of label, or releasing a completely new product, this is the ideal time to consider implementing better continuity between your products. This could include elements such as matching colors and label/packaging design.

In addition to updating your SKU’s, this might also be an opportunity for your company to consolidate multiple products onto a universal label size. By applying the same sized labels to multiple SKU’s, you can increase efficiency regarding repeated label orders, especially for label printers that use digital printers. Combine this approach with your expected annual quantity estimates and you’ll be positioned for very efficient ordering options as your company grows.

Editor’s Note: We’ll cover the next four most common labeling mistakes in Part Two coming next week. Stay tuned for more!

January 16, 2019

Soapbox

ERP’s Role in Ensuring Traceability & Compliance in the Cannabis Market

By Daniel Erickson

1 Comment

Recent trends in the cannabis space and media headlines reveal the challenges and complexities of the evolving cannabis industry with regard to traceability and compliance. Keeping abreast of the evolving state of legislative requirements is complex and requires effective procedures to ensure your business will flourish. At the forefront is the need to provide complete seed-to-sale traceability from the cannabis plant to the consumer, increasing the demand for effective tracking and reporting technologies to assure cultivators, manufacturers, processors and dispensaries are able to meet regulatory compliance requirements. An enterprise resource planning (ERP) solution offers a business management solution designed to integrate all aspects from the greenhouse and growing to inventory, recipe/formulation, production, quality and sales, providing complete traceability to meet compliance regulations.

The main force driving cannabusinesses’ adoption of strict traceability and secure systems to monitor the growth, production and distribution of cannabis is the Cole Memorandum of 2013 issued by former US Deputy Attorney General James Cole. The document was designed to prevent the distribution of cannabis to minors, as well as prevent marijuana revenue from being used for criminal enterprises. Due to the non-legal status of cannabis on the federal level, the memo provides guidance for states whose voters have passed legislation permitting recreational or medical cannabis use. If states institute procedures for transparent inventory control and tracking documentation, the memo indicates that the federal government will refrain from interference and/or prosecution. Despite the Trump administration rescinding the memo in early 2018, companies have largely continued to follow its guidelines in an attempt to avoid targeted enforcement of federal law. Local government reporting is a primary reason for strict inventory control, necessitating reliable traceability documentation of the chain-of-custody.

Process metrics within an ERP solution are essential in providing the accountability necessary to meet required cannabis compliance initiatives. With a centralized, streamlined and secure system, each process becomes documented and repeatable – enabling best practices to provide an audit trail for accountability in all cannabis activities. Whether cultivating, extracting, manufacturing or dispensing cannabis, an ERP’s functionality assists with compliance demands to manage and support traceability and other state-level requirements.

An ERP solution solves the traceability and compliance issues faced by the industry by providing inventory control management and best practices that automates track and trace record keeping from seed to consumer. Growers are also implementing cultivation management solutions within their ERP and highly secure plant identification methods to mobilize greenhouse and inventory to support real-time tracking. Monitoring the loss of inventory due to damage, shrinkage, accidentally or purposeful destruction is efficiently documented to assure that inventory is accounted for. Similar to other process manufacturing industries, it is possible to produce tainted or unsafe products, therefore an ERP solution that supports product recall capabilities is fundamental. With a centralized framework for forward and backward lot, serial and plant ID tracking, the solution streamlines supply chain and inventory transactions to further ensure compliance-driven track and trace record keeping is met.

Local government reporting is a primary reason for strict inventory control, necessitating reliable traceability documentation of the chain-of-custody. Data regarding inventory audit and inspection details, complete with any discrepancies, must be reported to a states’ seed-to-sale tracking system to conform with legal requirements. An ERP utilizes cGMP best practices and reporting as safeguards to keep your company from violating compliance regulations. Failure to complete audits and meet reporting guidelines can be detrimental to your bottom line and lead to criminal penalties or a loss of license from a variety of entities including state regulators, auditors and law enforcement agencies. A comprehensive ERP solution integrates with the state-administered traceability systems more easily and reliably as compared to manual or stand-alone systems – saving time, money and detriment resulting from non-compliance.

Similar to other food and beverage manufacturers, the growing market for cannabis edibles can benefit from employing an ERP system to handle compliance with food safety initiatives – encompassing current and future requirements. Producers of cannabis-infused products for recreational and medicinal use are pursuing Global Food Safety Initiative (GFSI) certification, employing food safety professionals and implementing comprehensive food safety practices–taking advantage of ERP functionality and processes currently in place in similarly FDA regulated industries.

As legalization continues and reporting regulations standardize, dynamic cannabis ERP solutions for growers, processors and dispensaries will evolve to meet the demands and allow for operations to grow profitably.In addition to lot, serial and plant ID tracking, tracing a product back to the strain is equally important. An ERP can efficiently trace a cannabis strain from seedling through the final product, monitoring its genealogy, ongoing clone potency, CBD and THC content ratios and other attributes. The health, weight and required growing conditions of each individual plant or group of plants in the growing stages may be recorded throughout the plant’s lifecycle. In addition, unique plant identification regarding the performance of a particular strain or variety, how it was received by the market and other critical elements are tracked within ERP system. This tracking of particular strains assists with compliance-focused labeling and determining the specific market for selling and distribution of cannabis products.

Collecting, maintaining and accessing traceability and compliance data in a centralized ERP system is significant, but ensuring that information is safe from theft or corruption is imperative as well. An ERP solution with a secure platform that employs automated backups and redundancy plans is essential as it uses best practices to ensure proper procedures are followed within the company. User-based role permissions provide secure accessibility restricted to those with proper authorization. This level of security allows for monitoring and recording of processes and transactions throughout the growing stages, production and distribution; ensuring accountability and proper procedures are being followed. Investing in an ERP solution that implements this level of security aids companies in their data assurance measures and provides proper audit trails to meet regulations.

In this ever-changing industry, regulatory compliance is being met by cannabusinesses through the implementation of an ERP solution designed for the cannabis industry. Industry-specific ERP provides functionality to manage critical business metrics, inventory control, local and state reporting and record keeping, and data security ensuring complete seed-to-sale traceability while offering an integrated business management solution that supports growth and competitive advantage in the marketplace. As legalization continues and reporting regulations standardize, dynamic cannabis ERP solutions for growers, processors and dispensaries will evolve to meet the demands and allow for operations to grow profitably.

July 11, 2018

Soapbox

Which Safety Standards Work Best for the Cannabis Industry?

By Steven Burton

No Comments

Now that governments are legalizing cannabis around the world, the question looms for cannabis businesses seeking legitimacy in the new industry: what safety standards should apply? This question is more difficult as different jurisdictions grapple with defining and implementing legal requirements and struggle to keep up with the pace of growth.

For visionary cannabis business, it makes sense to anticipate requirements – not only from governments, but also from consumers and partners. Most regulations currently focus on security and basic health issues but, in the long-term, the industry that may offer the best model for cannabis businesses isn’t pharmaceuticals, but food. Cannabis (especially edibles) share similar hazards and traceability challenges with food products, so taking the lead from the food industry will be much more applicable and could offer greater benefits.

marijuana buds drying in racks biotrackthc — Dried cannabis curing with RFID tags as part of a traceability system.

Companies that achieve the highest and most flexible certification will enjoy a crucial competitive advantage when it comes to winning market share, popularity and consumer trust. Let’s take a quick look at the different options of food safety (and quality) certifications that cannabis businesses may consider. But first, let’s clarify two important definitions that are necessary to understand the food industry.

Basic Concepts from the Food Industry

The first acronym you should be aware of is GFSI, the Global Food Safety Initiative. GFSI is a food industry-driven global collaboration body created to advance food safety. When it comes to understanding GFSI, the important part to note is that certifications recognized by GFSI (like SQF, FSSC 22000, and BRC) are universally accepted. Companies operating under GFSI-recognized certifications open the most doors to the most markets, providing the highest potential for growth. For this reason, cannabis companies should be aware of and seriously consider seeking GFSI certifications

Secondly, many food safety programs are built around Hazard Analysis Critical Control Points, or HACCP. While many people may talk about HACCP like it’s a certification in and of itself, it is not actually a certification like the others on this list, but rather a methodology that helps companies systematically identify and control biological, chemical, and physical hazards that may arise during food production, handling, and distribution. Companies that adopt this methodology end up with a HACCP plan, which must then be followed at all times to avoid and address health and safety issues. It’s often required for food businesses and is generally required in most of the world, except where ISO 22000 is more common, primarily in Europe and countries whose primary export market is European. Since HACCP plans are also incorporated into most of the other achievable certifications, developing a HACCP program early will build a strong foundation for higher levels of certification.

Certifications for the Cannabis Industry

Now that we understand the basics of GFSI and HACCP, we can see how the certifications that have been developed by and for the food industry may apply to cannabis companies – and which you should consider necessary for your business.

GMP: Good Manufacturing Practice Certification

GMP (or sometimes cGMP) certification requires that companies abide by a set of good manufacturing processes for food and beverage products, pharmaceuticals, cosmetics, dietary supplements and medical devices. Since it really only covers basic sanitation and employee hygiene, it is considered the lowest level of certification in the industry. It is not recognized by GFSI, but GFSI does require all the standard benchmarks of a GMP be met before granting GFSI certification.

While GMP certification is often required, it is far below the standard that should be upheld by any serious businesses. It doesn’t cover many of the different types of hazards associated with food production – that I have argued will become increasingly relevant to cannabis producers – and doesn’t provide a systematic approach to identifying and controlling hazards like a HACCP program would. It’s really just about providing the basic procedures and checks to ensure that the facility is clean and that employees aren’t contaminating the products.

Final Verdict: Recommended, but as the bare minimum. GMP is not sufficient on its own to adequately control the risk of recalls and foodborne illness outbreaks, and it limits a company’s market potential because it lacks the GFSI worldwide stamp of approval.

Some companies consider GMP certification a good place to start if you’re on a tight deadline for distribution in markets where only GMP is required by regulators. I would argue that striving for the minimum standards will be costly in the long run. Health, safety and quality standards are the foundations upon which winning companies are built. It’s critical to develop a corporate culture that will lead to GFSI-recognized programs without major organizational overhaul. Start on the right foot and set your sights higher – obtain a certification that will stand the test of time and avoid the pain and risks of trying to change entrenched behaviors.

SQF: Safe Quality Food Program Certification

SQF is my number one recommendation as the best certification for the cannabis industry. One of the most common certifications in North America, SQF is a food safety management system recognized by retailers and consumers alike. It is administered by the Food Marketing Institute (FMI) and, importantly, recognized by GFSI, which gives companies a huge competitive edge. SQF focuses on the whole supply chain.

SQF was also the first to develop a cannabis program and is currently the leader in this market segment. It is also the scheme that best integrates food safety with quality. Since it is recognized worldwide, SQF provides the greatest leverage to accelerate a company’s growth. Once obtained, products with SQF certification can often jump the queue to enter different regulatory markets.

Final verdict: Highly recommended. A cannabis company with an SQF certification has the greatest advantage because it offers the broadest worldwide reach and keeps companies a step ahead of competitors. It’s also achievable – just this past April, Curaleaf Florida ostensibly became the first cannabis company to achieve SQF certification. It is tough, but fair and practical.

Other Certification Standards

SQF is the top certification that should be considered by cannabis companies, especially outside of Europe. However, the food industry has several other major types of standards that, at this time, have limited relevance to the cannabis industry today. Let’s take a quick look.

When considering GFSI-recognized programs, the main choice for food companies is between SQF, which we’ve covered, and BRC (the British Retail Consortium Certification). BRC has the most in common with SQF but, while SQF was originally developed for processed foods, BRC was developed in the UK for meat products. Today, they are quite similar, but BRC doesn’t focus quite as much on the quality component as SQF does. While BRC could be a good option, they don’t have a program for cannabis and, thus far, do not appear to be as friendly toward the cannabis industry.The food industry has a lot to offer cannabis companies that are anticipating future regulatory changes and market advantages

Across the pond, there are a few other certification standards that are more common than SQF. One of these is ISO 22000, which is the certification for the food-related standard created by the International Organization for Standardization (ISO) in Europe. It is not recognized by GFSI but is the primary system used in Europe. If your market is exclusively in the EU, it might be a good choice for you in the future. However, to date, there is no indication that any cannabis company has achieved ISO 22000 certification. Some cannabis companies have attained certification for other ISO standards like ISO 9001:2015, which specifies requirements for quality control systems, and ISO/IEC 17025 for laboratory testing. These are generally more relevant for the pharmaceutical industry than food and beverage, but still apply to cannabis.

There is the perception that cannabis is more accepted in EU countries like the Netherlands, but the regulatory attitude to cannabis is complicated. In the Netherlands, for example, cannabis isn’t actually legal – “coffee shops” fall under a toleration policy that doesn’t include regulation. Medical cannabis in the Netherlands is all produced by one supplier and several countries in the EU allow for licensed distribution and import, but not domestic production. Various EU countries are trying to keep up with the legalization trend, however. The Czech Republic, Germany, and others all recently introduced legislation for domestic production of cannabis for medical use. For companies with their eye on the EU, it is crucial to watch which regulatory requirements will be implemented in each market and how.

The last certification standard to mention is the result of a compromise between ISO and the more HACCP oriented programs like SQF. FSSC 22000 (Food Safety System Certification) tries to address the gaps between ISO 22000 and GFSI-recognized certifications by introducing another component called PAS 220. Since it is recognized by GFSI, FSSC 22000 is starting to get more traction in the food industry because it makes products a bit easier to export to the EU. FSSC 22000 satisfies the EU ISO standards but isn’t as closely tied to HACCP. We will be keeping an eye on this one.

Final Takeaway

The food industry has a lot to offer cannabis companies that are anticipating future regulatory changes and market advantages – but it’s difficult for cannabis companies to understand all the options available and how each apply to their specific products. While markets adjust beyond the preliminary issue of legality, it’s crucial for companies to look forward and comply with safety and quality standards like SQF. Companies who strive for SQF certification (or other GFSI-recognized certifications as they become available) will find themselves far better prepared to seize market share as cannabis markets blossom.

May 22, 2018

Soapbox

Why Traceability Is Crucial for the Cannabis Industry

By Steven Burton

No Comments

The stage is set: cannabis legalization is rolling out around the world. With legalization comes regulations and smart companies will adapt to make new requirements work for them. In the end, our shared goal (as industry, consumers and government) is the same: provide safe, high-quality, reliable products. This is where traceability comes in.

If a cannabis product isn’t safe (cannabis is vulnerable to the same kinds of hazards as most food products), the reputation of the entire industry suffers. Earning public trust is the first step toward favorable government regulations. With upcoming decisions that will decide taxation and distribution, it’s more important than ever that cannabis producers can react quickly if recalls should occur – and that means taking traceability seriously.

Comprehensive Traceability for Cannabis Means More Than Legality

A crucial key to producing safe and high-quality cannabis products is detailed traceability. Many states require cannabis businesses to use systems like Metrc, a technology that uses RFID tags to track cannabis from seed to sale to ensure nothing is diverted to the black market. However, Metrc focuses only on the chain of custody, not on the safety or quality of the product.

Ensuring a secure supply chain is only one piece of the cannabis puzzle. Public health hazards like toxic chemical contamination, mold growth and pathogenic contamination introduced by pests or improper employee handling need to be controlled in order to earn public trust and comply with regulations. State-mandated traceability systems don’t address these imperatives, so an effective safety technology that includes traceability, in addition to mandated systems like Metrc, is absolutely necessary to complete the cannabis picture.

Automation Technology Supports Cannabis Companies’ Growth and Helps With Audits

Cannabis professionals are aware of the regulatory scrutiny the industry is under and many have turned to automation technology to help stand up to this scrutiny, as well as collect and manage all the data necessary for compliance. Automating data collection pays off in several ways. For one, interconnected, real-time IoT technologies that are accessible to the entire facility 24/7 are giving cannabis businesses the tools they need to create the best possible products now, as well as providing them with the data they need to make their products even better. Since frequent audits are a part of the legalization transition, automation also makes preparing for audits and inspections a matter of minutes instead of days.

Ron Sigman, chief executive officer of marijuana compliance consulting firm Adherence Corp. and former investigator for the Marijuana Enforcement Division (MED) in Colorado, lists the most common violations for cannabis businesses that he found during more than 200 audits in an interview for Marijuana Business Daily. These violations include:

Metrc issues, especially accounting not matching inventory (too many plants or ounces of marijuana on the premises);
Security issues like lack of sufficient camera coverage;
Failure to upgrade licenses;
Improper or incomplete training of new employees.

Adopting safety and traceability concepts that the food industry developed over many decades can yield huge benefits for cannabis businessesA proper cannabis traceability technology mitigates these problems by providing notifications of inventory inconsistencies, certification expirations and more. Traceability for cannabis must be able to handle the complexities of procedures like terpene extraction and injection. With the rapid growth of the industry, it must be able to set targets and track actuals. It should track, not just cannabis plants and related derivatives, but also every other ingredient, material and packaging material used during production. There must be monitoring at each stage of production and a system in place to ensure all employee training is up to date. Preventative maintenance must be scheduled and tracked and hazards must be identified and controlled. In the event of an audit or recall, precise mass-balance calculations must be available to account for every gram of product, including non-cannabis ingredients like coconut oil and packaging materials like pouches and labels.

Detailed traceability can make the difference between a cannabis business keeping their license or being shut down. “You have to make a diligent effort to stay compliant 365 days out of the year, because you never know when a regulatory agency is going to come knocking on your door,” says Sigman. Knowing exactly what went wrong when and where allows a company to make changes so failures don’t happen again.

Higher Standards Will Be Demanded

The standard sought by most in the cannabis industry is only GMP (Good Manufacturing Practice) certification, which is actually the lowest level of certification possible in food production. With the public demand for edibles and concentrates on the rise and major retailers scrambling for seats at the table, the demand for transparency from growers and manufacturers will increase. Cannabis companies will soon find that GMP compliance simply won’t be enough to earn trust and expand their market share, especially when it comes to edibles and concentrates.

“Every day, patients express interest and assurance of wanting to know that the foods and medicines they consume are safe and of the best quality available,” says Lindsay Jones, president of Curaleaf Florida, the first medical cannabis company in Florida to achieve SQF Certification. Safe Quality Food (SQF) certification ensures a company meets the highest levels of safety and quality on a reliable basis. Curaleaf has set a new bar in the industry that others will be compelled to follow and they should be congratulated for their proactive vision.

Adopting safety and traceability concepts that the food industry developed over many decades can yield huge benefits for cannabis businesses, but it will be interesting to watch the technology evolve to accommodate the specific needs of retailers and consumers. Imagine a traceability system that ensures safety and quality while also tracking consistency and potency.

The Future of Cannabis Is Bright

The emerging cannabis industry is facing challenging hurdles on its path to widespread legalization and acceptance but the forecast is sunny – for companies who are prepared.

New Frontier Data CEO Giadha Aguirre De Carcer, explains that California’s “legal (cannabis) industry is forecast to grow from $2.8 billion in 2017 to $5.6 billion in 2020. That spending will be increasingly directed at products and retailers who understand and serve the market’s evolving tastes and preferences.” That includes implementing comprehensive traceability systems to deliver safe, quality product.

March 21, 2018

From The Lab

The Case for ISO/IEC 17025 Accreditation in Cannabis Testing Laboratories

By Amy Ankrum

No Comments

Government regulations keep millions of Americans safe every year by controlling what companies can put in their products and the standards those products must meet to be sold to consumers.

Enter the strange case of legal cannabis: In order for cannabis to be legally distributed by licensed medical professionals and businesses, it must be tested. But unlike other consumable goods, cannabis is not regulated by the FDA. Without an overarching federal policy requiring cannabis testing laboratory accreditation, the testing and laboratory requirements differ greatly across state lines.For medical cannabis specifically, accredited testing facilities are especially important.

To be federally regulated, cannabis would first have to be federally legalized. It turns out that states and businesses alike are not willing to wait for a federal mandate. Many states have begun to adopt standards for cannabis testing and some, such as Ohio, have even announced mandatory ISO/IEC 17025 accreditation for all cannabis testing laboratories. As the industry evolves, increased compliance expectations are certain to evolve in tandem.

Some cannabis labs have even taken the initiative to seek ISO/IEC 17025 accreditation of their own volition. Seth Wong, President of TEQ Analytics Laboratories, shared in a press release:

“By achieving ISO/IEC 17025 accreditation, TEQ Analytical Labs believes that we can address the concerns throughout the cannabis industry regarding insufficient and unreliable scientific analysis by providing our clients with State required tests that are accredited by an international standard.”

Other laboratories, such as DB Labs in Las Vegas and EVIO Labs in Florida are also leading the accreditation charge in their respective states, ahead of any state mandates.

There are key reasons why accreditation in cannabis testing labs is important. First and foremost, cannabis is a consumable product. Like fruits and vegetables, cannabis is prone to pesticides, fungi and contaminants. The result of putting a potentially hazardous material on the market without proper and documented testing could lead to a public health crisis. An accredited testing lab, however, will ensure that the cannabis products they test are free from harmful contaminants.

By utilizing role-based trainings, labs can trust employees are receiving proper onboarding.

For medical cannabis specifically, accredited testing facilities are especially important. Because many consumers of medical cannabis are immuno-compromised (such as in the case of chemotherapy patients), ensuring that products are free from any and all contaminants is critical. Further, in order to accurately determine both short- and long-term effects of prescribed cannabis consumption, accredited and compliant laboratories are necessary.

Accreditation standards like ISO/IEC 17025 also provide confidence that testing is performed properly and to an internationally accepted standard. Rather than returning a “pass/fail” rating on products, the Cannabis Safety Institute reports that an ISO/IEC 17025 laboratory is required to produce numerical accuracy percentages in testing for “at a minimum, cannabinoids, pesticides, microbiology, residual solvents, and water activity.” Reliable data sets that can be reviewed by both accreditors and the public foster trust between producers and consumers.

Finally, ISO/IEC 17025 accreditation demonstrates that a laboratory is properly staffed and trained. The Cannabis Safety Institute’s “Standards for Cannabis Testing Laboratories” explains that conducting proper analytical chemistry on cannabinoids (the chemical compounds extracted from cannabis that alter the brain’s neurotransmitter release) requires personnel who have met specific academic and training credentials. A system to monitor, manage and demonstrate proficiency is necessary to achieve and maintain accreditation. With electronic systems in place, this management and documentation minimizes risk and also minimizes administrative time tracking and maintaining training records.

Following the proper steps of a standardized process is key to improving and growing the cannabis industry in coming yearsFor cannabis testing labs, utilizing a comprehensive software solution to achieve and maintain compliance to standards such as ISO/IEC 17025 is key. Absent of a software solution, the necessary compliance requirements can become a significant burden to the organization. Paper tracking systems and complex spreadsheets open up organizations to the likelihood of errors and ultimately risk.

Because ISO/IEC 17025 has clearly defined expectations for training, a software solution also streamlines the training process while simultaneously documenting proficiency. By utilizing role-based trainings, organizations can be confident employees are receiving proper onboarding and in-service training. Additionally, the effectiveness of training can be proven with reports, which results in smoother audits and assessments.

Following the proper steps of a standardized process is key to improving and growing the cannabis industry in coming years- which means utilizing technology tools such as electronic workflows to ensure proper process controls. Beyond adding critical visibility, workflows also create efficiencies that can eliminate the need to increase staffing as companies expand and grow.

For an industry that is changing at a rapid pace, ensuring traceability, efficient processes and visibility across organizations is paramount. Using a system that enables automation, process control, document management and documented training procedures is a step in the right direction. With the proper software tools in place, cannabis testing labs can achieve compliance goals, demonstrate reliable and relevant results and most importantly ensure consumer safety.

March 14, 2018

Iowa’s Medical CBD Program Gets Tracking System

By Aaron G. Biros

No Comments

BioMauris, LLC became the 5^th company in the United States to win a state contract for a seed-to-sale platform today. BioMauris is a technology company that manages product tracking, fulfillment and distribution with a focus on the healthcare market. According to a press release, the company announced today that the state of Iowa selected BioMauris to manage their tracking system for the medical cannabidiol (CBD) program.

That program’s contract includes inventory tracking, medical cannabidiol sales and patient and caregiver registration. In 2014, Iowa’s Medical Cannabidiol Act was signed into law. Three years later, in May of 2017, Governor Terry Branstad expanded the state’s program, including manufacture and dispensing in the previous legislation. On December 1^st, 2018, Iowa expects sales to begin and fully implement the program.

This is BioMauris’ first state contract in the cannabis industry. According to the press release, BioMauris bases their platform on Salesforce for point of sale, tracking, customer loyalty and distribution services in the healthcare sector. The company says they use Salesforce because it is extremely customizable and secure.

According to Erik Emerson, founder and president of BioMauris, they’re poised to deliver on this front, given their experience in other industries. “Our team has extensive history in the pharmaceutical business, and therefore has a unique appreciation for data integrity and security,” says Emerson. “Additionally, we fundamentally believe the opportunity to track patient progress and associate the benefits received with the products used, is an incredible opportunity for the cannabis industry.” BioMauris has worked with clients on similar projects in the healthcare space for some time.

The company touts their platform as fully PCI-DSS and HIPAA compliant, allowing them to process payments and protect sensitive patient information. “Our patented technology, makes this not only possible, but simple for all users,” says Emerson. “We are excited to bring our product to the great state of Iowa and look forward to a long partnership with them. We believe strongly in what Iowa is attempting to do with their program and believe it is a perfect fit with our strategy for the cannabis industry.”

February 12, 2018

Audit Finds Oregon Lacking Regulatory Oversight and Proper Security

By Aaron G. Biros

No Comments

Last week, Oregon Secretary of State Dennis Richardson published his office’s audit of The Oregon Liquor Control Commission (OLCC). The audit uncovered a number of inadequacies with the regulatory agency, most notably the problems with their tracking system, designed to prevent cannabis form being sold on the black market.

The report highlights the need for Oregon to implement a more robust tracking system, citing reliance on self-reporting, overall poor data quality and allowing untracked inventory for newly licensed businesses. The audit also found an insufficient number of inspectors and unresolved security issues. According to The Oregonian, the OLCC only has 18 inspectors, roughly one for every 83 licensed businesses.

Auditors also found inadequacies in the application system, saying the OLCC doesn’t monitor third-party service providers and doesn’t have a process in place for reconciling data between the licensing and tracking systems. The audit found there is a risk that decisions made for the program could be based on unreliable data. It also found a risk of unauthorized access to the systems, due to a lack of managing user accounts.

Oregon Secretary of State Dennis Richardson

This audit’s publication is very timely. Most notably because U.S. Attorney Billy Williams, who called Oregon’s black market problem “formidable,” convened a summit this week to examine how Oregon can prevent cannabis being exported to other states. According to the Oregonian, Williams said Oregon has an “identifiable and formidable overproduction and diversion problem.” The audit’s findings highlighting security issues are also very timely, given that in the same week, Oregon’s neighbor to the North, Washington, experienced a security breach in its own tracking system.

The problems with the Oregon tracking system’s security features are numerous, the audit says. They found that the OLCC lacks a good security plan, IT assets aren’t tracked well, there are no processes to determine vulnerabilities, servers and workstations not using supported operating systems and a lack of appropriately managing antivirus solutions. “Long-standing information security issues remain unresolved, including insufficient and outdated policies and procedures necessary to safeguard information assets,” reads the report’s summary.

The audit proposes 17 recommendations for the state to bolster its regulatory oversight. Those recommendations intend to address undetected compliance violations, weaknesses in application management, IT security weaknesses and weaknesses in disaster recovery and media backup testing. You can read the full audit here.

February 9, 2018

Washington Security Breach Delays Traceability System Rollout

By Aaron G. Biros

No Comments

On February 8^th, Peter Antolin, the deputy director for the Washington State Liquor and Cannabis Board (WSLCB), sent an email to licensees explaining why the transition to their new traceability system was disrupted. Last Saturday, someone gained access to the sensitive information in Leaf Data Systems, the state’s traceability software that is powered by MJ Freeway.

“A computer vulnerability was exploited on Saturday, allowing unauthorized access to the traceability system,” Antolin told licensees in the email. “There are indications an intruder downloaded a copy of the traceability database and took action that caused issues with inventory transfers for some users. We believe this was the root cause of the transfer/manifest issue experienced between Saturday and Monday.”

The email goes on to say that no personally identifiable information was available to the ‘intruder,’ but some sensitive information was clearly accessed. That data includes route information of manifests filed between February 1^st and 4^th as well as transporter vehicle information including VIN, license plate number and vehicle type, according to the email.

That email leaves much to be desired. For one, they do not exactly have a solution, instead trying to alleviate licensees’ worries with a hollow inanity full of meaningless jargon: “The WSLCB and MJ Freeway continue to implement several strategies to prevent future vulnerabilities to future intrusions,” reads the email. “This includes full logging and monitoring and working with third-party entities. Since this remains an active investigation, details on security are not publicly available.” However, today the WSLCB is hosting a webinar where Peter Antolin, their IT division, the MJ Examiners unit and enforcement will be available to answer questions, according to the email.

This is by no means the first security breach that Washington and MJ Freeway have suffered. In May of 2017, Washington originally selected Franwell’s METRC as the contract partner for their traceability software system. Less than a month later in June of 2017, after a mistake in the selection process, Washington selected MJ Freeway instead of Franwell for the traceability contract. Three days later, MJ Freeway’s source code was stolen and published online. Then in September, Nevada cancelled their contract with MJ Freeway after a security breach, their services crashed in Pennsylvania and Spain, and in October it became clear that the company could not meet the October 31 deadline for their new Washington contract.

In November of 2017, BioTrackTHC, the company that held the previous contract for Washington’s traceability software, helped the state through the transition period with a temporary Band-Aid solution to hold the state over until January of 2018. A month after they expected to implement the new MJ Freeway system, the latest security breach occurred this week and disrupting the rollout yet again.

At the end of the email Antolin sent to licensees yesterday, he says there will continue to be attempts to breach the system’s security. “The bottom line is that this incident is unfortunate,” says Antolin. “There will continue to be malicious cyberattacks on the system. This is true of any public or private system and is especially true of the traceability system.” This begs a few questions: why aren’t we hearing about this kind of security breach in other states’ traceability systems? What are other companies doing that prevents this from happening? Why does this keep happening to MJ Freeway?