labs@atheron:~/industries/cannabis/compliance$ audit --controls --evidence

Cannabis compliance

Health Canada reporting and record-keeping, scoped with you.

A cannabis licence brings record-keeping, monthly tracking reports, labelling rules and age checks. We scope that work with your quality assurance person and your advisers, build to the controls and support your audit; certification and attestation reports are issued by independent auditors, and we give no legal advice.

Start a project See the example projects

// what matters here

What is different in this industry.

Records kept as the work happens

Every plant, batch, lot, destruction and sale recorded with who did it and when, with nothing editable after the fact.

Monthly reports prepared, not filed

The tracking report is prepared from the records for your quality assurance person to review and file. Responsibility for the report stays with your licence holder.

Labels within approved templates

Label templates are approved by your quality assurance person, and the system fills them only from the record.

Age checks recorded

Each age check at the door and online is recorded, so you can show how the rule was applied.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb appMobile appMaterials tracking

Seed-to-sale with labels

Hypothetical. Not a client, not a result.

// The problem

A licensed producer with cultivation and processing tracks plants, batches and lots in spreadsheets, and its quality assurance person rebuilds the monthly Health Canada tracking report by hand.

// What we would build

A web system and an Android app on rugged scanners that follow every plant, harvest, batch and lot through rooms and processes by barcode, record destruction and samples, prepare the monthly tracking report from the records for the quality assurance person to review, and print compliance labels from approved templates. We scope the reporting with your quality assurance person; we do not give legal advice.

// What is in it

Plants, harvests, batches and lots tracked by barcode through every room and process
Destruction, samples and losses recorded with witnesses and reasons
The monthly report for the Cannabis Tracking and Licensing System (CTLS) prepared from the records, for your review before it is filed
Compliance labels printed from templates your quality assurance person approves
Sales and shipments to provincial distributors recorded against each lot
Rugged scanners, mobile computers, label printers and labels listed by quantity

// Stack

Next.js
Kotlin for Android
PostgreSQL
Label printer languages
AWS Canada

// estimate

Build: ≈ US$188,000 to US$287,000, delivered within 41 weeksCAD 267,000 to 408,400
Hosting: ≈ US$492 a monthCAD 700 a month
Support: ≈ US$5,010 a monthCAD 7,135 a month
Hardware: ≈ US$28,800CAD 41,070

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Discovery and site walk-through: 0.4 weeks
Design approved: 3.9 to 6.4 weeks
Label templates approved by your quality assurance person: 3.4 to 5.9 weeks
Core features: 1.9 to 2.9 weeks
Full build: 0.9 to 1.9 weeks
First build on devices: 2.4 to 4.4 weeks
Stock, receiving and transfers: 2.9 to 4.9 weeks
Tracking and devices working: 1.9 to 3.4 weeks
Testing and fixes: 0.4 weeks
Store submission: 0.4 weeks
Pilot site live: 2.9 to 3.4 weeks
Report reconciled against a past month: 2.9 to 3.4 weeks
Launch: 0.9 to 1.4 weeks
Rollout: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

App store review: 1 week
Hardware delivery, after it is ordered: 1 to 2 weeks
Provincial distributor data access: 1 to 4 weeks

How it is paid

Deposit 20%: CAD 53,400 to 81,680
Discovery 3.6%: CAD 9,612.00 to 14,702.40
Discovery and site walk-through 2.8%: CAD 7,476.00 to 11,435.20
Design approved 6.5%: CAD 17,355 to 26,546
Label templates approved by your quality assurance person 7.7%: CAD 20,559.00 to 31,446.80
Core features 3.7%: CAD 9,879.00 to 15,110.80
Full build 2.5%: CAD 6,675 to 10,210
First build on devices 7.3%: CAD 19,491.00 to 29,813.20
Stock, receiving and transfers 8.6%: CAD 22,962.00 to 35,122.40
Tracking and devices working 5.7%: CAD 15,219.00 to 23,278.80
Testing and fixes 1.2%: CAD 3,204.00 to 4,900.80
Store submission 2.4%: CAD 6,408.00 to 9,801.60
Pilot site live 2.8%: CAD 7,476.00 to 11,435.20
Report reconciled against a past month 7.7%: CAD 20,559.00 to 31,446.80
Launch 3.6%: CAD 9,612.00 to 14,702.40
Rollout 3.9%: CAD 10,413.00 to 15,927.60
Holdback, 30 days after launch (10%): CAD 26,700 to 40,840
Rugged barcode scanner x 8: CAD 14,080. Billed up front, at cost, outside the milestones
Mobile computer with scanner x 6: CAD 10,560. Billed up front, at cost, outside the milestones
Industrial label printer x 3: CAD 7,140. Billed up front, at cost, outside the milestones
Labels and ribbons, starter stock x 30: CAD 9,000. Billed up front, at cost, outside the milestones
Corded barcode scanner, for our build and testing: CAD 290. Billed up front, at cost, outside the milestones

Start from this example

Example projectWeb app

Retail store with age checks

Hypothetical. Not a client, not a result.

// The problem

A licensed retailer with several stores checks ID by eye at the door, takes online orders without a reliable age check, and reconciles its POS with its books by hand.

// What we would build

An online store with an age check before anything is shown and identity verification through a vendor such as Didit or Persona at checkout, ID scanners at the store door, inventory and sales from the POS, and daily sales posted to QuickBooks Online, built on the QuickBooks Online API. Promotion rules are set with your advisers, and nothing is designed to appeal to young people.

// What is in it

An age gate before any product is shown, and identity verification at checkout
ID scanners at the door that read the barcode on the back of a licence
Click and collect with the ID checked again at pickup
Inventory and sales read from the POS, in English and French
Daily sales summaries posted to QuickBooks Online

// Stack

Next.js
PostgreSQL
POS API
Identity verification API
QuickBooks Online API
AWS Canada

// estimate

Build: ≈ US$149,000 to US$228,000, delivered within 33 weeksCAD 211,900 to 324,100
Hosting: ≈ US$492 a monthCAD 700 a month
Support: ≈ US$2,500 a monthCAD 3,565 a month
Hardware: ≈ US$829CAD 1,180

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Data mapping and sandbox connection: 0.4 weeks
Design approved: 8.4 to 14.4 weeks
Core features: 2.9 to 4.9 weeks
Full build: 1.9 to 2.9 weeks
Sync built and reconciled in sandbox: 2.4 to 3.9 weeks
Testing and fixes: 1.4 to 1.9 weeks
Launch: 0.9 to 1.4 weeks
Live cutover: 0.9 to 1.4 weeks
Hypercare: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Hardware delivery, after it is ordered: 1 to 2 weeks
POS API access from your vendor: 1 to 4 weeks

How it is paid

Deposit 20%: CAD 42,380 to 64,820
Discovery 5%: CAD 10,595 to 16,205
Data mapping and sandbox connection 4.1%: CAD 8,687.90 to 13,288.10
Design approved 5%: CAD 10,595 to 16,205
Core features 15%: CAD 31,785 to 48,615
Full build 10%: CAD 21,190 to 32,410
Sync built and reconciled in sandbox 12.4%: CAD 26,275.60 to 40,188.40
Testing and fixes 5%: CAD 10,595 to 16,205
Launch 5%: CAD 10,595 to 16,205
Live cutover 4.1%: CAD 8,687.90 to 13,288.10
Hypercare 4.4%: CAD 9,323.60 to 14,260.40
Holdback, 30 days after launch (10%): CAD 21,190 to 32,410
Corded barcode scanner x 4: CAD 1,180. Billed up front, at cost, outside the milestones

Start from this example

// questions

Questions we get about this.

Will it keep us compliant with the Cannabis Act?

No system can promise that. We build the records and reports to the scope you and your advisers set; compliance stays with your licence holder.

Can you help with a Health Canada inspection?

We can make sure the records an inspector asks for are complete and quick to produce. Inspection preparation and interpretation are for your quality assurance person and advisers.

Do you advise on cannabis promotion rules?

No. Promotion and packaging rules are for your advisers. We build the store and labels to the rules they set.

Back to the industry: Cannabis About the service: Compliance and security engineering

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Start a project Book a call