Sector

Cannabis

12 compliance framework entries tagged under this sector. Open each card for official documentation links.

  • 12 frameworks

42 CFR Part 2

Official

42 CFR Part 2 Compliance Assessment

Evaluate compliance with federal regulations protecting confidentiality of substance use disorder patient records

SAMHSA HHS Healthcare Cannabis

Security

Official

Cannabis Facility Security Requirements

Evaluate compliance with physical security, surveillance, and access control requirements for cannabis cultivation, manufacturing, and retail …

Cannabis

Lab Testing

Official

Cannabis Testing Lab ISO 17025 Compliance

Evaluate compliance with ISO/IEC 17025:2017 requirements for cannabis testing laboratories performing potency, contaminant, and safety testing

Cannabis

CCPA

Official

CCPA/CPRA Compliance Assessment

Evaluate compliance with California Consumer Privacy Act and California Privacy Rights Act requirements for businesses handling California resident …

California AG Data Privacy Biotech & Life Sciences

GDPR

Official

GDPR Compliance Assessment

Evaluate compliance with EU General Data Protection Regulation requirements for processing personal data of EU residents

European Commission EDPB Data Privacy Biotech & Life Sciences

GMP

Official

Good Manufacturing Practice (GMP) Assessment

Evaluate compliance with FDA Good Manufacturing Practice regulations for pharmaceutical and biotech manufacturing quality systems

FDA Healthcare Biotech & Life Sciences

ISO 27001

Official

ISO 27001:2022 ISMS Assessment

Evaluate alignment with ISO/IEC 27001:2022 requirements for establishing, implementing, maintaining, and continually improving an Information Security …

ISO Cybersecurity Biotech & Life Sciences

MA CCC

Official

MA Cannabis Control Commission Compliance Assessment

Evaluate compliance with Massachusetts Cannabis Control Commission regulations (935 CMR 500.000) for cultivation, manufacturing, testing, and retail …

Massachusetts CCC Cannabis

MA PATCH Act

Official

MA PATCH Act Compliance Assessment

Evaluate compliance with Massachusetts PATCH Act requirements for preventing opioid diversion and protecting controlled substances in healthcare …

Massachusetts Healthcare Cannabis

METRC

Official

METRC Seed-to-Sale Tracking Compliance

Evaluate compliance with METRC seed-to-sale tracking system requirements for cannabis establishments in regulated states

Metrc Cannabis

PCI-DSS

Official

PCI-DSS v4.0 Compliance Assessment

Evaluate compliance with Payment Card Industry Data Security Standard v4.0 requirements for organizations that store, process, or transmit cardholder …

PCI SSC Cybersecurity Healthcare

SOC 2

Official

SOC 2 Type II Readiness Assessment

Evaluate readiness for SOC 2 Type II audit based on AICPA Trust Services Criteria for security, availability, processing integrity, confidentiality, …

AICPA Cybersecurity Biotech & Life Sciences