When a Health Canada inspector asks for the procedure that governed a specific batch, can your team produce the right version, signed and current, in under five minutes?
What You’ll Learn
- The eight elements that separate a defensible cannabis SOP from a paragraph that becomes a compliance finding on inspection day.
- The complete SOP library every licensed producer should maintain across security, cultivation, quality, sanitation, inventory, and personnel.
- Which procedures are explicitly required under the Cannabis Regulations and which are best practice but still inspection-relevant.
- How document control actually works in a cannabis facility: version numbers, review cycles, QAP approval, and controlled distribution.
- The audit-readiness checklist that turns a frantic scramble before inspection into a routine your team already runs.
- A printable SOP register and review-cadence framework you can fold straight into your quality management system.
Standard operating procedures are the connective tissue of a licensed cannabis operation. They are how a new hire performs a task the same way as a ten-year veteran, how a quality assurance person defends a decision to a regulator, and how a facility scales from one grow room to ten without quality drifting in the process. Strong cannabis SOPs are not a binder that sits on a shelf until inspection week. They are a living system that captures what your operation actually does, keeps it current, and proves it on demand. This guide walks through what a good SOP contains, the full library a licensed producer should maintain, how document control keeps that library defensible, and the audit-readiness checklist that ties it all together.
Why Are Cannabis SOPs a Regulatory Requirement, Not Just Good Practice?
Under Canada’s Cannabis Regulations, a licensed producer is expected to operate under documented procedures, and several specific SOPs are explicitly required, including procedures covering security, sanitation, and recordkeeping. The principle that runs through Health Canada’s Good Production Practices Guide is straightforward: if a process can affect the quality or safety of cannabis, the way you perform it must be written down, followed consistently, and recorded.
The trap many operators fall into is assuming that good practice in the room is enough. It is not. An out-of-date, missing, or uncontrolled SOP is a compliance finding on its own, even when the actual work is being done correctly. An inspector cannot evaluate what is in your team’s heads. They can only evaluate the documented system and the records that prove it was followed. When the SOP and the record agree, you pass. When they disagree, or the SOP cannot be located, you have a finding regardless of how clean your grow rooms are.
There is a commercial argument too. SOPs are how quality survives staff turnover, how a second site replicates the first, and how an investor or acquirer evaluates whether an operation is a going concern or a key-person risk. Treating cannabis SOPs as a quality asset rather than a regulatory chore is the mindset that separates operations that scale from operations that stall.
What Makes a Good SOP? The Eight Elements Every Procedure Needs
A well-written SOP is clear enough that a competent new employee could follow it on day one without additional instruction. That is the test. If a procedure requires tribal knowledge, a phone call, or a “you just have to know,” it is incomplete. Every defensible SOP should contain eight elements.
The anatomy of a defensible procedure
First, a stated purpose: what the procedure is for and why it exists. Second, a scope: where and to whom it applies. Third, responsibilities: which roles execute, review, and approve. Fourth, materials and equipment needed to perform the task. Fifth, the step-by-step procedure itself, written in plain, sequential, actionable language. Sixth, deviation handling: what to do when reality does not match the steps. Seventh, references to related documents, forms, and regulations. Eighth, document control information: version number, approval date, review date, and approver signature.
Those last items are where audits are won or lost. A procedure can describe the work perfectly and still fail if it has no version number, no approval signature, or no defined review date. Document control is not bureaucratic overhead. It is the evidence that the procedure your team is following is the procedure the quality assurance person actually approved.
Which SOPs Does a Cannabis Operation Actually Need?
The essential SOP library spans six functional areas. The list below is the backbone most licensed producers build from. Each procedure should be present in your master register, cross-referenced by a unique identifier, and owned by a named role.
Security and access control
Facility access control and visitor management governs who may enter secured areas, how access is granted and revoked, and how visitors are logged and escorted. It covers employee clearance levels, a zone access matrix, key and fob issuance, and the lost-credential protocol. A second core security procedure covers surveillance system monitoring: camera coverage requirements, footage retention, and review protocols for incidents and inspections. Both are reviewed at least annually and after any security incident, and both are explicitly relevant to your physical security obligations as a licence holder.
Cultivation and plant management
Seed-to-sale plant tracking defines how every plant, clone, and seed is identified, tagged, recorded, and traced through its lifecycle, including stage transitions, plant destruction, waste recording, and the reconciliation procedure for discrepancies. Integrated pest management documents approved pest control products, application rates, re-entry intervals, and scouting to prevent pesticide residue failures. Harvest, drying, and curing captures harvest timing, drying-room conditions, and moisture testing before processing. These procedures protect both yield and the analytical results that determine whether a batch can be sold.
Quality assurance and testing
This is the most inspection-sensitive cluster. Lot sampling and lab submission defines how representative samples are collected and submitted to an accredited laboratory. COA review and batch release defines how a batch is approved for sale after passing results are received. Deviation, incident, and non-conformance reporting establishes how process deviations, failed tests, and near-misses are documented, investigated, and resolved, including when Health Canada notification is required. Product recall and market withdrawal documents the step-by-step recall process. A mock recall drill against that last procedure is one of the highest-value exercises a quality team can run.
Sanitation and hygiene
Environmental cleaning and sanitation covers daily, weekly, and deep-clean procedures, including approved products, dilution rates, and contact times. Personnel hygiene and gowning defines hand-washing, personal protective equipment, gowning by zone, and illness reporting. Both are required, both are reviewed annually, and both are directly tied to microbial test outcomes.
Inventory, storage, and distribution
Inventory reconciliation and discrepancy management governs how physical counts are conducted and reconciled against the seed-to-sale system. Cannabis waste destruction covers approved destruction methods, witness requirements, recording, and reporting. Inventory discrepancies are a common source of regulatory attention, so the reconciliation procedure deserves particular care.
Personnel and training
Employee training and competency verification defines how staff are trained on the SOPs relevant to their role, how competency is verified, and how training records are maintained. This procedure is the linchpin that connects every other SOP to the people who execute it. An inspector who finds a current, approved SOP will often ask the next question immediately: can you show me the records that the people doing this work were trained on this version?
Get the Complete Cannabis SOP Guide
Get the full PDF: the complete SOP library with required and best-practice designations, review frequencies, and named owners for every procedure, plus the audit-readiness checklist and a master SOP register template ready to drop into your quality system.
How Does SOP Document Control Work in Practice?
Writing a good procedure is the first half of the job. Keeping it controlled is the half that gets tested on inspection day. Document control is the set of disciplines that guarantees the version your team follows is the version your quality assurance person approved, and that superseded versions cannot accidentally come back into use.
The five disciplines of document control
Version control: each SOP carries a unique version number, and superseded versions are archived rather than deleted. Review cycle: every SOP has a defined review date, typically annual, and an overdue review is a compliance finding in itself. Approval signatures: the quality assurance person signs off on each version before it goes live. Distribution control: staff can access only current versions, and paper copies are clearly marked as controlled or uncontrolled. Training on revisions: when a procedure is updated, affected staff are re-trained before the new version takes effect.
That last point is the one teams most often miss. Issuing a revised SOP without re-training the people who use it creates a gap between the approved procedure and actual practice, which is exactly the kind of disconnect an inspection is designed to surface. A controlled document system links each version to the training records of the staff certified on it, so the chain from procedure to person is unbroken.
How Do You Know Your Operation Is Audit-Ready?
Audit readiness is not a state you achieve the week before an inspection. It is the natural output of a document control system that runs every day. The checklist below is the quick self-assessment a quality team can run at any time. If every box is checked, an unannounced inspection is a routine event rather than a fire drill.
SOP Audit-Readiness Checklist
- All SOPs are listed in a master SOP register or index.
- Every SOP has a current version number and approval date.
- No SOP is past its review date.
- The quality assurance person’s signature is present on all current versions.
- Superseded versions are archived but accessible.
- Training records link employees to the specific SOP versions they were trained on.
- The deviation log references the relevant SOP for each incident.
- SOPs are accessible to staff in controlled areas.
- A mock recall or emergency drill has been conducted in the past twelve months.
- A document-control SOP, the procedure for managing procedures, exists and is current.
Required Versus Best-Practice SOPs: How Should You Prioritize?
Not every procedure carries the same regulatory weight, and a new operation cannot write everything at once. The practical approach is to triage. Procedures explicitly required under the Cannabis Regulations come first: security, sanitation, recordkeeping, and the quality procedures that govern sampling, batch release, deviation handling, and recall. These are the procedures an inspector will expect to see and will treat as non-negotiable.
Best-practice procedures, integrated pest management, harvest and curing, and detailed training matrices, are not always named in regulation but are still inspection-relevant because they protect the quality and safety of the product. They also tend to be where operational consistency and cost control live. A pragmatic sequence is to stand up the required quality and security SOPs first, then layer in the cultivation and operational procedures as the facility matures. The full guide marks each procedure as required or best practice so you can build the register in priority order.
How Do SOPs, Batch Records, and KPIs Fit Together?
SOPs do not operate in isolation. They are one corner of a quality system that also includes the records that prove procedures were followed and the metrics that tell you whether the system is improving. A procedure describes how a task should be done. A batch record captures evidence that it was done, signed and dated, for a specific lot. Linking the two, so that each batch record references the exact SOP version in force when the batch was produced, creates an audit trail that is difficult to dispute.
Metrics close the loop. A compliance KPI such as SOP review currency, the percentage of procedures in your register that are not overdue for review, turns document control from a periodic panic into a number you watch on a dashboard. Training compliance rate does the same for the people side. The companion cannabis KPI guide builds out that measurement framework in detail. Together, SOPs, batch records, and KPIs form the quality triangle that a mature licensed producer runs on.
Frequently Asked Questions
What SOPs are legally required for a cannabis operation in Canada?
The Cannabis Regulations explicitly require documented procedures in several areas, including security, sanitation, and recordkeeping, alongside the quality procedures that govern sampling, batch release, deviation handling, and recall. Health Canada’s Good Production Practices framework expects any process that can affect product quality or safety to be documented and followed consistently. Our free Cannabis SOP Guide marks each procedure in the library as required or best practice so you can prioritize.
How often should cannabis SOPs be reviewed?
Most SOPs should be reviewed at least annually, and several should also be reviewed after a triggering event, for example a security SOP after any security incident, or an integrated pest management SOP whenever a new product is introduced. An overdue review is a compliance finding on its own, so tracking review currency is essential. The full guide lists a recommended review frequency for every procedure.
Who is responsible for approving cannabis SOPs?
The quality assurance person signs off on each version of an SOP before it goes live, and that approval signature is part of the document control record. Individual procedures also have a named owner, often a department head such as the head grower, security manager, or facility manager, who is responsible for keeping the content current. The guide assigns a suggested owner to every SOP in the library.
What is the difference between a required and a best-practice SOP?
A required SOP is one the Cannabis Regulations explicitly call for, such as security, sanitation, and recordkeeping procedures. A best-practice SOP, such as integrated pest management or harvest and curing, is not always named in regulation but remains inspection-relevant because it protects product quality and safety. Both belong in your master register, but required procedures should be stood up first.
How many SOPs does a licensed cannabis producer need?
There is no single fixed number, because it depends on the scope of your licence and the activities you perform, but most licensed producers maintain at least a dozen core procedures spanning security, cultivation, quality assurance, sanitation, inventory, and personnel. The right benchmark is coverage rather than count: every process that can affect compliance, quality, or safety should have a controlled procedure behind it. The guide provides the full backbone library.
What happens if an SOP is out of date during a Health Canada inspection?
An out-of-date, missing, or uncontrolled SOP is treated as a compliance finding even when the actual work is being performed correctly, because the inspector evaluates the documented system, not unwritten practice. This is why review currency and document control matter as much as the content of the procedure itself. Our guide includes the audit-readiness checklist that prevents this scenario.
Get the Complete Cannabis SOP Guide
Stop rebuilding your procedure library from memory. Download the full guide for the complete required and best-practice SOP list, recommended owners and review frequencies, the document-control framework, and a printable audit-readiness checklist written for licensed producers.
Ready to Take Your Operation to the Next Level?
See how GrowerIQ links SOPs directly to batch records, so inspectors can see exactly which version of a procedure governed every batch you produced.
REQUEST DEMO
Ready to Level Up Your Operation?
Get the full PDF: the complete SOP library with required and best-practice designations, review frequencies, named owners, the document-control framework, and a printable audit-readiness checklist ready for your quality system.
Recommended For You
About GrowerIQ
GrowerIQ is changing the way producers use software - transforming a regulatory requirement into a robust platform to learn, analyze, and improve performance.
To find out more about GrowerIQ and how we can help, fill out the form to the right, start a chat, or contact us.