For both sides
Retail build-out and security requirements
Federal and state law current as of September 2026 — verify with counsel.
A cannabis retail build-out is an ordinary shop fit-out plus a regulated security system. State rules dictate camera resolution and coverage, how long footage is kept (90 days in California and Massachusetts, 30 in Michigan), alarms, limited-access areas, and locked storage. Contractors quote roughly $350,000 to $750,000 to convert an existing building, more for new construction.
Key takeaways
- California requires cameras of at least 1280 x 720 pixels recording at 15 frames per second, around the clock, with footage kept for 90 calendar days (4 CCR 15044).
- Massachusetts requires a perimeter alarm, a backup alarm from a different vendor, four hours of backup power, 90-day video retention, and an annual security audit by an approved vendor (935 CMR 500.110).
- Michigan requires 720p cameras and only 30 calendar days of retention, but also a written log of who handles recordings (R 420.209).
- California storefront retailers must have security personnel licensed by the Bureau of Security and Investigative Services on site during operating hours (4 CCR 15045).
- One dispensary contractor puts small conversions at $350,000 to $500,000, mid-size at $500,000 to $750,000, and new construction at $900,000 to $3.5 million; treat these as contractor ranges, not appraisals.
What makes a dispensary build-out different from an ordinary shop?
The security system is written into law, and the floor plan is part of the licence. A clothing store can move a wall over a weekend. A dispensary’s premises diagram, camera layout, and limited-access areas are on file with the regulator, and the store must match them on inspection day. Everything else, from flooring to display cases, is normal retail construction.
Four elements separate a cannabis store from a vanilla shell:
- Controlled entry. A reception or check-in point where ID is verified before a customer reaches the sales floor.
- Limited-access areas. Back-of-house rooms for inventory, intake, and cash that only badged staff may enter.
- Secure storage. A vault or locked room for product and a separate safe for cash.
- Surveillance and alarm. Continuous recording of every area where product or cash moves, with footage retained for a period the state sets.
The point-of-sale system also has to report to the state’s track-and-trace system, which affects cabling, network, and backup power design.
What do state security rules actually require?
The rules are specific down to pixels and days. Three examples show the range.
| Requirement | California | Massachusetts | Michigan |
|---|---|---|---|
| Rule | 4 CCR 15044, 15045, 15047 | 935 CMR 500.110 | R 420.209 |
| Camera standard | At least 1280 x 720 pixels, 15 frames per second, recording 24 hours a day | Clear colour still images, live or recorded, with a synchronised date and time stamp | At least 720p; records continuously and on motion |
| Required coverage | Product handling areas, limited-access areas, entrances and exits from inside and outside, point of sale, retail displays | All areas with marijuana, vaults, safes, entry and exit points, parking lots | Product handling, limited-access rooms, entrances and exits, point of sale, destruction areas |
| Retention | 90 calendar days minimum | 90 calendar days minimum | 30 calendar days minimum |
| Alarm | Installed and monitored by a licensed alarm company | Perimeter alarm, duress and panic alarms, plus a backup alarm from a different vendor | Alarm system required; monitoring details on request |
| Backup power | Failure-notification system for recording interruptions | Security systems must run at least four hours in an outage | Not specified in the rule |
| Guards | Licensed security personnel during operating hours for storefront retail | Not required by the rule | Not required by the rule |
| Other | Point-of-sale cameras must capture the face of anyone buying or selling | Annual security audit by a Commission-approved vendor; incidents reported within 24 hours | Written log of staff who monitor, remove, or destroy recordings |
Three details cost real money. California’s point-of-sale rule means a camera aimed at each register, positioned for facial identification, not a wide shot of the room. Massachusetts requires a second alarm system from a different vendor, plus a paid annual audit, with a mitigation plan due within ten business days if the auditor finds gaps. And a 90-day retention period needs roughly three times the storage of a 30-day one for the same cameras.
Cities add their own layers. Local permits often set operating hours, guard requirements, exterior lighting, and odour control; see local control and municipal approvals and the zoning and buffer rules that decide whether the site qualifies at all.
How much does a dispensary build-out cost?
Expect a wide range, and treat published numbers as contractor marketing ranges rather than audited data. One dispensary builder, Grow America Builders (undated page, accessed September 2026), quotes:
| Project type | Quoted range |
|---|---|
| Small store, existing building | $350,000 to $500,000 |
| Mid-size store, existing building | $500,000 to $750,000 |
| Strip-mall unit | $500,000 to $850,000 |
| Old-building retrofit | $600,000 and up, plus about $100,000 contingency |
| Ground-up new construction | $900,000 to $3.5 million |
The same source itemises the cannabis-specific parts: security systems from about $75,000, and a vault at about $25,000 for metal stud with barrier mesh, $40,000 for masonry, or $60,000 prefabricated. Custom millwork runs $15,000 to $50,000 or more.
Illustrative budget. A 2,500 square foot leased unit at a mid-range $600,000 total works out to $240 per square foot. If security and the vault come to $115,000, that is about 19% of the budget spent on items an ordinary retailer would not buy. None of this includes licence fees, inventory, or working capital, which are covered in how much a dispensary costs.
Two timing points matter as much as the dollars. Rent usually starts before the store opens, so every month of permitting and construction is carrying cost. And most states will not issue a final licence or allow sales until the finished premises passes inspection.
What should a buyer check in an existing store?
Buying a built store skips construction risk but brings the seller’s compliance history with it. A broker will typically ask for these items early:
- Filed premises diagram against the real floor plan. Walk the store with the diagram in hand. Unapproved changes are a violation the buyer inherits; California requires prior approval for material physical changes under 4 CCR 15023.
- Camera audit. Count cameras, confirm resolution, and pull footage from the oldest required day. A system that only holds 45 days in a 90-day state is a citation waiting to happen.
- Alarm and monitoring contracts. Confirm they are assignable and current. In Massachusetts, ask for the last annual security audit report and any mitigation plan.
- Inspection and incident history. Security violations, break-ins, and diversion reports all appear in the regulator’s file and affect price; see how compliance history affects value.
- Who owns the equipment. Cameras, recorders, and access-control hardware are sometimes leased. Leased gear is a contract to assume, not an asset you are buying.
- Lease terms on improvements. Most fit-out becomes the landlord’s property at lease end. Check the surrender clause and the rest of the lease and landlord consent package.
Build these checks into the wider due diligence checklist rather than treating security as an afterthought.
How does the build-out affect a sale?
Sellers rarely recover fit-out cost dollar for dollar. A buyer prices the store on earnings and on the quality of its approved premises. A compliant, well-documented security system supports the asking price because it removes a risk; a system with gaps becomes a price reduction or a repair list in the purchase agreement. If you are preparing to sell, fix camera blind spots and retention shortfalls before going to market, and file any overdue premises modifications. A pre-sale compliance audit is the cheap way to find them first.
This is educational material, not legal or construction advice. Rules change and local requirements vary, so confirm current requirements with the state regulator and the local permitting office before you design or buy.
Frequently asked questions
How long does a dispensary have to keep security footage?
It depends on the state. California and Massachusetts both require at least 90 calendar days. Michigan requires at least 30 calendar days. All three extend the period when the regulator or law enforcement is investigating. Storage cost scales with camera count, resolution, and retention, so a 90-day state needs a much larger recording system than a 30-day state.
Do I need an armed guard at a dispensary?
State rules usually do not require an armed guard. California requires storefront retailers to have licensed security personnel on the premises during operating hours, but the regulation does not say they must be armed. Massachusetts and Michigan rely on alarms, cameras, and access controls instead. Local permits and insurers sometimes add guard requirements on top of state rules.
If I buy an existing dispensary, do I inherit its approved security plan?
You inherit the physical system, not a free pass. The premises diagram and security plan on file with the regulator describe the store as approved. If the seller moved walls, cameras, or the vault without filing a modification, the buyer takes on that non-compliance. Compare the filed diagram with the real floor plan before closing.
Can I change the store layout after I buy it?
Usually yes, but not without telling the regulator. California requires prior approval for physical changes that materially alter the premises, and other states have similar modification rules. Moving the sales floor, vault, or entrances also changes camera coverage and limited-access boundaries, so plan the regulatory filing and the construction together.
What part of a dispensary build-out holds its value in a sale?
Very little of it sells separately. Millwork, vault construction, and wiring are leasehold improvements that stay with the building. They add value only by making the store compliant and productive. Buyers pay for cash flow and a compliant, approved premises, not for what the seller spent on the fit-out.
Sources
- Cornell LII — Cal. Code Regs. Tit. 4, § 15044, Video Surveillance System — https://www.law.cornell.edu/regulations/california/4-CCR-15044
- Cornell LII — Cal. Code Regs. Tit. 4, § 15045, Security Personnel — https://www.law.cornell.edu/regulations/california/4-CCR-15045
- Cornell LII — Cal. Code Regs. Tit. 4, § 15047, Alarm System — https://www.law.cornell.edu/regulations/california/4-CCR-15047
- Cornell LII — Cal. Code Regs. Tit. 4, § 15023, Business Modifications — https://www.law.cornell.edu/regulations/california/4-CCR-15023
- Cornell LII — 935 CMR 500.110, Security Requirements for Marijuana Establishments — https://www.law.cornell.edu/regulations/massachusetts/935-CMR-500-110
- Cornell LII — Mich. Admin. Code R. 420.209, Security measures; required plan; video surveillance system — https://www.law.cornell.edu/regulations/michigan/Mich-Admin-Code-R-420-209
- Grow America Builders — The Cost of Building a Cannabis Dispensary (undated; accessed September 2026) — https://growamericabuilders.com/cannabis-dispensary-cost/