GMP compliance for cannabis operators

We turn GMP Compliance into GMP-Commerce.

Schedule III just rewrote the compliance stack for every US cannabis dollar. We think the records half of GMP shouldn’t be a project at all. And we built the commerce engine that makes it a byproduct of operating normally.

Seed. To Sale. To Delivery. To GMP.
The shock

Most cannabis operators think they’re compliant.
They’re half-compliant and wholly surprised.

State track-and-trace isn’t GMP. Lab testing isn’t GMP. State audit pass isn’t GMP. Those are the floor. Schedule III raised the ceiling. And the operators who built on the floor are about to find out there’s a staircase they haven’t climbed.

~60%
of US rec-legal operators believe METRC + testing = GMP
<5%
of US cannabis facilities actually ship cGMP-ready records
~6 wks
to first federal registrations under Schedule III
0
retroactive edits allowed in a GMP-grade ledger

See the Schedule III timeline →

Out of the box

Four pillars most cannabis commerce stacks don’t ship together.

You get SellStack. You get GMP-Commerce out of the box.

Immutable records

Immutable 365 Cannabis ledger. No retroactive edits. The thing most cannabis-native tools explicitly lack.

Unbroken chain of custody

One stack, one ledger, lot continuity from Seed through Delivery. No stitching between systems.

Audit as an export

Your audit is a query, not a project. Records are the output of operating normally.

Dig into the pillars →

Horse’s mouth

What it sounds like from an operator who was already there.

“Those are the principles that we work under. Yeah, GMP. That’s why every plant past a certain stage is tagged and batched and connected. That is supposed to be the process.” A SellStack operator, October 2026, after the DEA inspected his dispensaries and said they were “more secure than a typical pharmacy”

The remodel from a hierarchical product model to a lot-based part number structure wasn’t a GMP project. It was a schema cleanup. GMP came out the other side for free. And the customer-facing presentation got sharper at the same time.

That’s what GMP-Commerce looks like. You don’t prepare for the audit. You already have what the audit asks for, because operating normally produced it.

Honest counter-claim

What GMP-Commerce out of the box does not include.

SellStack ships the records half of GMP. The practice half is still yours.

  • Facility design, environmental controls, HVAC validation
  • Personnel qualifications and training records
  • Deviation investigation: we log the deviation; the investigation is operator process
  • Change control process
  • Stability testing programs
  • Returned and salvaged product handling (features exist; may need extension)

We think honesty strengthens the pitch. Overclaiming “we solve GMP” pattern-matches to point-solution and triggers skepticism. We’d rather be the operator-grade stack that hands you the records half and lets your discipline carry the rest.

Six weeks to first federal registrations

Three dots or four?

Score your stack against the four GMP-Commerce pillars. Seven minutes. Tells you where you stop.