Cannabis supplier vetting checklist

Reviewed by BestWeedSuppliers.com Editorial Desk·Updated June 4, 2026

Use this checklist when you are onboarding or requalifying a cannabis supplier. The goal is not to reward menu visibility or a polished sales deck. The goal is to confirm that the supplier can produce current, lot-linked evidence, explain exceptions quickly, and stay reviewable when a hold, recall, or retest question appears.

Phase 1: Intake packet and entity match

Start by confirming who is actually asking for approval and which facilities or contract partners touch the product. Supplier vetting breaks quickly when invoices, licenses, and package labels point to different entities.

• Collect the legal entity name, DBAs, license numbers, facility addresses, and any co-manufacturer or packager tied to the product line.
• Require a named quality/compliance owner plus an escalation contact who can answer documentation questions the same day.
• Match the entity on the quote, invoice sample, and shipping paperwork to the entity that holds the relevant license or distribution responsibility.
• Pause the review if a broker or sales rep is the only source of documents and the operating entity never appears directly.

Phase 2: Document baseline and recency

Ask for the same records from every supplier and judge them on freshness, lot linkage, and version control. A good packet is not just complete; it lets a reviewer trace current inventory without asking what each file represents.

• Ask for current license evidence, a current SKU list, and the specific active lots being offered, not a generic catalog.
• Require the matching COAs, label copy or packaging photos, and one invoice or manifest example that shows how those lot IDs appear in commerce.
• Request a 12-month log of recalls, holds, quarantine decisions, and corrective and preventive actions, even if the answer is "none."
• Note whether each record originates from the supplier, a co-manufacturer, a distributor, or the testing lab so ownership stays clear during follow-up.

Phase 3: Lot-level COA verification

This is the center of the page. A COA is only useful if it can be tied cleanly to the product you may buy today.

• Match lot or batch ID, product form, package type, and sample dates against the active inventory list and label copy.
• Confirm the lab name, report number, issue date, and whether the file is a revision that supersedes a prior report.
• Check that the panel coverage fits the product type and note any omitted analytes, unusual units, or results sitting close to action limits.
• Compare current-lot results against at least one earlier comparable lot so large potency or contaminant swings are not treated as normal without explanation.
• Save the exact PDF or report version used for approval rather than screenshots, cropped tables, or sales-deck excerpts.

Phase 4: Escalation triggers and exception handling

Strong suppliers do not just send clean files. They can explain what happens when a file changes, a lot is held, or a result is questioned after product is already in motion.

• Confirm who can place a shipment hold, who approves a retest, and how downstream buyers are notified if a COA is corrected or a lot is quarantined.
• Review one real exception example, such as a late lab correction or packaging mismatch, and look for timestamps, owner names, and closeout notes.
• Escalate immediately if current inventory lacks a current-lot COA, if a revised report number appears with no explanation, or if different contacts describe the same incident differently.
• Treat "approve it now and we will send the paperwork later" as an exception request, not as normal intake behavior.

Phase 5: Approval controls and requalification

Convert the evidence review into a written decision with scope, expiry, and triggers. Conditional approvals should be narrow enough that missing evidence cannot silently become permanent approval.

• Record the decision state, approved SKUs or lots, unresolved items, owner, and next review date in one place.
• Limit conditional approval to named lots or SKUs and set a short expiry window for missing documents or pending clarifications.
• Require requalification when a supplier changes manufacturing site, lab partner, distributor-of-record, or ownership structure.
• Schedule periodic re-review for active suppliers even if no incident occurs so stale COAs or old contact chains do not linger indefinitely.

Minimum evidence package

If a supplier cannot produce this baseline without negotiation, the diligence process is still too early for approval.

• Entity and license sheet covering every facility or partner tied to the product line.
• Current SKU list with the exact lots currently offered for sale.
• Lot-linked COAs for those active lots plus at least one recent comparable lot for trend checking.
• Label copy or packaging photos that show the same lot IDs and product forms reflected in the COAs.
• 12-month incident log covering recalls, holds, quarantine decisions, and CAPA follow-up.
• Named quality/compliance contacts with expected response times for urgent documentation questions.

Approval matrix

Approve

Use full approval when the entity mapping is clear, current-lot COAs tie out cleanly, recent incident history is disclosed, and no open exception changes the current risk picture.

Conditional approval

Use conditional approval when the supplier is directionally acceptable but one bounded gap remains, such as a pending label photo, a minor lab clarification, or missing prior-lot trend data. Scope it to named lots or SKUs and set a short document deadline.

Hard stop

Do not onboard or requalify a supplier when license ownership is unclear, active lots lack matching COAs, revised reports cannot be explained, or a recent hold or recall has no documented corrective action.

Hard-stop red flags

• The same COA is reused across different SKUs, package sizes, or dates.
• Lot IDs on the COA, label, and invoice sample do not align and no one owns the discrepancy.
• Only screenshots or sales-deck excerpts are supplied instead of original reports.
• The supplier asks you to ignore a quarantine, recall, or revised report until a replacement lot is ready.
• Quality and sales contacts give materially different explanations about testing, ownership, or incident history.

Requalification triggers

• New manufacturing or packaging site, new co-manufacturer, or new lab partner.
• Any recall, embargo, quarantine, or material customer safety complaint trend.
• Two consecutive documentation misses, such as late COAs or unanswered follow-up requests.
• Large unexplained swings between comparable lots or repeated results near action limits.
• Change in legal entity, license status, or distributor-of-record.

Supplier vetting FAQ

What should a cannabis supplier send before the first review meeting?

Ask for the entity/license sheet, active SKU and lot list, matching current-lot COAs, label copy or packaging photos, recent incident log, and named quality/compliance contacts. A sales deck without lot-linked records is not a complete intake packet.

How many COAs should you spot-check before approving a supplier?

Review the current lots being offered plus at least one comparable recent lot for each major product form you may buy. The goal is to see whether the supplier can show stable documentation across time, not just one clean report.

When does a missing COA become a hard stop?

It becomes a hard stop when the missing COA relates to active inventory, when the supplier wants approval before the report arrives, or when a revised report appears without clear version history. Missing archive documents can sometimes fit conditional approval; missing current-lot evidence should not.

What should trigger supplier requalification?

Requalify when the supplier changes facilities, labs, ownership, or distributor-of-record, and after any recall, hold, or material documentation failure. Requalification should also be scheduled on a calendar so approved suppliers do not drift on stale records.