Cannabis due diligence checklist

What is cannabis due diligence, and how is it different?

Due diligence is the period, usually after a signed letter of intent, when the buyer tests everything the seller has claimed. In an ordinary small-business deal that mostly means the financials. In cannabis, three things sit ahead of the financials:

1. Whether you can legally own it. The asset you are paying for is a state licence that a regulator must agree to put in your name. Your own eligibility is covered in ownership eligibility, background checks, and residency.
2. Whether the numbers can be proven. Every gram is recorded in a state seed-to-sale system. That gives buyers an independent data set most industries lack.
3. Whether the tax file is a liability. Section 280E, cash handling, and excise taxes leave many operators with open exposure that can follow the business.

Work the checklist in order of what can kill the deal, not in order of what is easiest to collect. Licence, local approval, tax, and lease come first. IP and insurance come last.

This is an educational checklist, not legal or tax advice. Rules differ by state, so check the relevant state page and have a cannabis attorney and CPA run the actual review.

Priority map: which workstreams kill deals

Workstream	Typical deal impact	Who leads
Licence and regulatory	Deal-killer if not transferable or under discipline	Cannabis regulatory attorney
Local approvals	Deal-killer if the permit does not survive a new owner	Attorney, land-use consultant
Track-and-trace	Price and trust: proves or disproves revenue	Compliance consultant, CPA
Financial and 280E	Price: sets real after-tax cash flow	CPA
Tax	Deal-killer or holdback: liabilities can follow the buyer	CPA, tax attorney
Real estate	Deal-killer if landlord will not consent	Real estate attorney
HR	Price and transition risk	Attorney, HR adviser
Legal and corporate	Holdback or indemnity items	Attorney
IP and brand	Price, mostly for manufacturers and brands	IP attorney
Insurance	Cost and claims history	Cannabis insurance broker

1. Licence and regulatory checklist

The first question is how this state lets ownership change. The answers differ sharply:

• California. Licences are not assignable. Under 4 CCR 15023, new owners must be reported to the Department of Cannabis Control within 14 calendar days, and the business can keep operating only if at least one existing owner stays on. If every owner is leaving, the business cannot operate under the new structure until a new licence application is approved.
• Colorado. Under MED Rule 2-245, a proposed controlling beneficial owner cannot operate the business until it has a finding of suitability and the change-of-owner approval. A contingent approval lapses if the deal is not completed within one year.
• Massachusetts. Under 935 CMR 500.104, Commission approval is needed before anyone acquires 10% or more of the equity or a new person gains control.
• Illinois. Under section 15-60 of the Cannabis Regulation and Tax Act, as set out in IDFPR’s change of ownership guidance, a dispensing organisation cannot assign a licence or transfer it without prior approval, the adult-use change of ownership fee is $5,000, and no one may end up controlling more than 10 adult-use dispensary licences.

The process itself is explained in change of ownership approval. For diligence, collect and check:

• Every licence certificate: number, type, status, issue and expiry dates, and any conditions printed on it.
• Renewal history and proof that renewal fees were paid on time.
• The complete regulator correspondence file: inspection reports, notices of violation, warning letters, stipulated orders, fines, and corrective action plans. Pricing the history is covered in how compliance history affects value.
• Any open investigation or pending disciplinary matter. Ask the seller in writing, then verify with the agency’s public licence search.
• Every owner and financial interest holder disclosed to the regulator, compared with the actual cap table, loan documents, and profit-sharing arrangements. Undisclosed interests are a violation in most states; see true party of interest rules.
• Any management services, licensing, or consulting agreement that pays a share of revenue or profit. Nevada’s Cannabis Compliance Board, for example, must approve agreements that give a non-licensee significant control or a share of profits from overall operations (notice of 9 April 2024).
• Transfer restrictions attached to the licence itself: social equity holding periods, lottery conditions, or residency rules. See social equity transfer restrictions.
• Ownership caps: whether adding this licence pushes you over a state limit.
• Standard operating procedures on file with the regulator, and whether the business actually follows them.
• For medical licensees: DEA registration status. The April 2026 Schedule III order created an expedited DEA registration path for state medical licensees, with priority processing for applications filed within 60 days of publication, as summarised by Duane Morris. Ask whether the seller applied and what the status is.

2. Local approvals checklist

A state licence without local authorisation is not an operating business. Local approval is often the scarcer of the two.

• The local cannabis business permit, conditional use permit, or special use permit, with all conditions of approval.
• Whether the local permit is personal to the current owner or runs with the premises, and what the city requires when ownership changes.
• Zoning verification letter and buffer compliance (schools, parks, daycare, other cannabis businesses). Check whether a sensitive use has opened nearby since the permit was issued and how the ordinance treats that.
• Host community, development, or community benefit agreements, and whether payments are current.
• Local cannabis business tax registration and payment history.
• Certificate of occupancy, fire department approval, building permits for all improvements, and any open code enforcement case.
• Pending ordinance changes: caps, moratoria, tax rate changes, or sunset clauses.

Detail sits in local control and municipal approvals.

3. Track-and-trace checklist

The state system (Metrc in most markets, BioTrack or a state-built system in others) is the buyer’s best independent evidence. Request read-only exports rather than seller-prepared summaries.

• Sales, transfer, package, adjustment, and waste or destruction reports for at least 24 months.
• Count and size of package adjustments, with reason codes and notes. Metrc requires a reason code and a note for every quantity adjustment, so unexplained patterns are visible.
• Inventory reconciliation records. California requires licensees to reconcile physical inventory to the system at least every 30 calendar days and defines a significant discrepancy as a 5% difference.
• A physical count by the buyer’s team, tested against the system on the day.
• Transfer manifests matched to purchase invoices and to licensed counterparties.
• User list: who has system access, and whether former employees were removed.
• Testing results (certificates of analysis) linked to packages, failed batches, and any recalls.
• For cultivators: plant counts, harvest weights, wet-to-dry ratios, and waste weights compared with what the canopy could plausibly produce.

The step-by-step method for tying this data to the books is in verifying revenue with track-and-trace data.

4. Financial and 280E checklist

Cannabis financial statements are often built for tax positions, not for buyers. Rebuild them.

• Monthly profit and loss statements and balance sheets for three years plus year to date, with the general ledger.
• Bank statements for every account, and cash logs, vault counts, and armoured-car receipts for cash not banked.
• Point-of-sale exports by day, by product category, and by tender type.
• Discounts, loyalty redemptions, and employee sales as a share of gross sales.
• Cost of goods sold method. Under 280E, cost of goods sold is the only offset for adult-use activity, so aggressive cost allocations inflate reported after-tax profit and create audit exposure.
• Three views of earnings: EBITDA before 280E, cash flow after 280E tax actually due, and, for dual licensees, the medical and adult-use split. Treasury said on 23 April 2026 that guidance will address apportioning expenses for mixed businesses and a transition rule covering the full taxable year that includes the order’s effective date. Final apportionment rules had not been issued as of September 2026, so model a range.
• Add-backs, each supported by a document. Owner perks run through a cash business are hard to prove.
• Customer and supplier concentration, vendor terms, and aged payables. Unpaid vendors are common in oversupplied markets.
• Aged receivables for wholesalers and distributors, with a realistic collection history.
• Debt schedule, including loans from owners and any lender with conversion or profit rights.
• Capital expenditure history and deferred maintenance, especially HVAC, lighting, and extraction equipment.

How these inputs become a price is covered in how to evaluate a cannabis business for sale.

5. Tax checklist

• Federal and state income tax returns for every open year, with proof of filing and payment. The IRS generally has 3 years to assess, 6 years if more than 25% of gross income was omitted, and no limit where no return was filed.
• IRS and state account transcripts, not just the seller’s copies of returns.
• Any 280E position taken on a return that departs from the statute, any amended returns or refund claims, and the reserve held against them.
• Audit history, notices, installment agreements, liens, and levies.
• Sales tax, cannabis excise tax, and local cannabis tax returns tied to reported revenue.
• Payroll tax filings and deposits.
• Form 8300 filings for cash receipts over $10,000, which the IRS requires within 15 days.
• Tax clearance or successor-liability certificates available in the state. In California, a buyer who does not obtain a CDTFA clearance or withhold enough from the price can be liable for the seller’s unpaid tax up to the purchase price.

Sizing escrows against what you find is covered in tax liabilities and holdbacks in a sale.

6. Real estate checklist

• The lease and every amendment: remaining term, renewal options, rent escalations, and an express clause permitting cannabis use.
• Assignment and change-of-control provisions, and the landlord’s written willingness to consent. See landlord consent and cannabis lease clauses.
• Landlord’s mortgage: whether the lender knows about the cannabis tenant and whether the loan documents prohibit it.
• Personal guaranties the seller has given and whether you will be asked to replace them.
• If the property is owned: title report, survey, environmental assessment, and whether the property is in the licensed entity or a separate one.
• Utility capacity and bills, especially power for cultivation.
• Odour, noise, or nuisance complaints and neighbour disputes.
• Condition of tenant improvements and who owns them at lease end.

7. HR checklist

• Employee census: role, pay, tenure, status, and state worker permit or agent card where required.
• Wage-and-hour practices: meal and rest breaks, overtime, tip handling, and any cash payroll.
• Labour peace agreement or collective bargaining agreement, where the state or city requires one.
• Key employees (head grower, extraction lead, store general manager, compliance manager) and whether they will stay.
• Employment claims, workers’ compensation claims, and safety incidents.
• Independent contractor classifications.
• Training records required by the regulator.

Badge and permit logistics at handover are in employee transfer and agent badges.

8. Legal and corporate checklist

• Formation documents, operating agreement, minutes, and a cap table that reconciles to what the regulator has on file.
• Every option, warrant, convertible note, or side letter.
• Material contracts: supply, distribution, white-label, licensing, equipment leases, and software. Check assignment and change-of-control clauses.
• Litigation, threatened claims, and demand letters.
• Lien searches (UCC, tax, judgment) on the entity and its owners.
• Related-party transactions, especially rent paid to an owner-affiliated landlord.
• Product liability history: complaints, recalls, and failed tests.

Findings here feed directly into the reps, warranties, and compliance indemnities.

9. IP and brand checklist

• State trademark registrations. The USPTO refuses federal registration for marijuana goods and services because use must be lawful under federal law (Examination Guide 1-19, 2 May 2019), so brand ownership often rests on state filings and common-law use.
• Federal registrations for ancillary goods or lawful hemp products, if any.
• Who actually owns the brand, recipes, genetics, and packaging designs: the licensed entity, an affiliate, or a founder personally.
• Inbound and outbound brand licences, royalty terms, and territory limits.
• Domain names, social accounts, and customer data, with privacy compliance for loyalty programmes.
• Trade-secret protection: signed confidentiality and invention assignment agreements from growers and formulators.

10. Insurance checklist

• Current policies: general liability, product liability, property, crop (for cultivators), cargo or transit, workers’ compensation, cyber, and directors and officers.
• Any surety bond the state requires.
• Loss runs for three to five years.
• Exclusions that gut the cover, such as vape or health-hazard exclusions on a product policy.
• Whether policies can be assigned or must be rewritten, and quotes for your own programme so the cost is in your model.

How do you turn findings into deal terms?

Every finding should end in one of four outcomes:

1. Walk away. The licence cannot transfer, the local permit will not survive, or the landlord will not consent.
2. Reprice. Revenue that cannot be proven, margins inflated by cost allocations, or deferred capital spending.
3. Protect. Specific indemnities, escrows, and holdbacks for quantified exposures such as open tax years.
4. Condition. Items the seller must fix before closing: clearing a notice of violation, correcting the regulator’s ownership records, obtaining landlord consent.

The common warning signs and what each usually means are collected in red flags when buying a cannabis business. If you want a second set of eyes on a target before you spend on advisers, you can book a confidential intro call.