Why now

Rescheduling didn’t raise the bar. It revealed where the bar always was.

Schedule III is federal law. First federal registrations land in weeks. The 60% of US rec-legal operators who think METRC plus lab testing equals GMP are about to meet the records half of GMP in the worst possible way: an auditor asking for a lot’s full history and getting a shrug.

The timeline that matters

What’s already happened. What’s about to.

April 22, 2026: Day One
DEA Schedule III order signed and effective

Acting Attorney General Todd Blanche signed the final order transferring FDA-approved marijuana products and state-licensed medical marijuana programs from Schedule I to Schedule III. Effective immediately. Adult-use stays Schedule I pending a separate hearing.

June 26, 2026: Window closed
Expedited DEA registration window ended

Operators who filed inside the 60-day window operate under state licenses pending federal review. Operators who missed it face standard DEA registration timelines.

Today: October 2026
You are here. Four months in. Six weeks to go.

DEA is roughly four months into the six-month processing commitment it made for in-window applicants. The compliance-consulting market is already saturated. The architecture layer underneath it is still empty, which is where SellStack lives.

Late November / December 2026
First federal registrations land

The first wave of operators becomes federally-registered under Schedule III. Pharma distributors, insurers, and institutional investors begin treating GMP posture as table-stakes diligence. Buyers start asking for records a lot of operators can’t produce.

2027
The compliant eat the non-compliant

M&A valuations begin reflecting GMP-readiness as a discount factor. Insurance underwriting hardens. Pharma distribution shelf space opens for the ready and closes for the unready. The quiet consolidation starts.

The shock cohort

Who’s about to find out they’re half-compliant.

We did the math on where the US rec-legal cannabis industry actually sits on GMP readiness. It’s uglier than most operators think. And the reason it’s ugly is that the industry conflated state track-and-trace with GMP, decades ago, and never corrected.

3-5%
Fully cGMP ready. Mostly biggest MSOs with pharma ambitions.
10-15%
Materially building toward GMP. Partial, missing validation.
55-65%
Think they’re compliant because METRC & lab tests. The shock cohort.
15-20%
Not even state-of-X compliant. Bigger problems.

If you’re an operator reading this and thinking “we’re probably in the 10-15%, right?”. Take the diagnostic. Most 55-65% operators think they’re in the 10-15%. That’s what the shock is.

Where do you actually sit? →

The question that answers itself

If a pharma distributor audited you Monday, what would they fail you on first?

That’s a question most operators have never been asked. The reason it feels uncomfortable is that it reveals the exact gap between the compliance posture the industry grew up with (state track-and-trace, lab testing, periodic audits) and the compliance posture Schedule III is pulling everyone toward (pharma-grade records, chain of custody, immutable ledger, audit-exportable evidence).

You passed your state audit. That’s great. Would you pass a pharma one?

The architecture that makes the second answer yes is what GMP-Commerce is for.

State track-and-trace is a floor. GMP is a staircase. The operators who built on the floor are about to find out they haven’t climbed.

Read the full position →

Six weeks to first federal registrations

Three dots or four?

Score your stack against the four GMP-Commerce pillars. The diagnostic will tell you where you stop.