Cannabis Audit Readiness Checklist: Passing a Health Canada Inspection

A Health Canada inspector does not test whether your operation is good. They test whether you can prove it, on paper, signed and dated, the moment they ask.

A cannabis audit readiness checklist is the difference between an inspection that confirms what you already documented and one that surfaces findings you cannot explain on the spot. Under the Cannabis Act and the Cannabis Regulations, the standard a Health Canada inspector applies is documentary: the evidence has to be in hand, signed, dated, and traceable back to the batch it belongs to. This page walks the ten-point audit readiness checklist that an inspection-ready operation can clear without scrambling, explains the inspector’s evidentiary standard, and shows how linking standard operating procedures to batch records builds the audit trail that turns an inspection into a formality.

This page sits in our wider cannabis SOP guide, which covers the full standard operating procedure programme a licensed producer needs. For the upstream pieces, see the cannabis SOP template, the required cannabis SOPs library, and the document-control and training mechanics covered below.

What Does a Health Canada Inspector Actually Test?

An inspector is not auditing your intentions or your day-to-day diligence. They are auditing your records. The Cannabis Regulations (SOR/2018-144) require a licensed producer to establish, maintain, and retain documented procedures and records, and the inspection is the moment those documents are tested against reality.

The documentary standard breaks into four questions an inspector will ask of any procedure or record you produce:

  • Does the evidence exist and is it in hand? A procedure you follow but never wrote down does not exist for inspection purposes. An out-of-date, missing, or uncontrolled SOP is a compliance finding even when your actual practice is sound.
  • Is it signed? Every controlled SOP version needs the Quality Assurance Person (QAP) approval signature before it goes live. An unsigned procedure is a draft, not a controlled document.
  • Is it dated? Approval date, review date, training date, deviation date. A record without a date cannot be placed on the timeline an inspector reconstructs.
  • Is it traceable? The inspector should be able to pick any batch and trace which version of which procedure governed it, who was trained on that version, and which deviations referenced it. Traceability is the spine the other three questions hang from.

An operation that answers all four for every record is inspection-ready. An operation that answers them for most records but scrambles on a few has findings waiting to be written up. The cannabis audit readiness checklist below is built to surface those gaps before an inspector does.

Conformant practice without conformant records still fails

The most common inspection finding is not a broken process. It is a sound process with a documentation gap: a current SOP that no one signed, a review date that lapsed three months ago, or a training record that does not say which version of the procedure the employee was trained on. The work was done correctly. The proof was incomplete. Under the Cannabis Regulations, the proof is what gets graded.

Want the complete cannabis SOP programme?

The free SOPs Every Cannabis Operation Should Have guide covers the eight elements of a compliant SOP, the required SOP library under the Cannabis Regulations, document control and review cycles, training and competency verification, and this audit readiness checklist in a printable field format.

Download Free Guide

The 10-Point Cannabis Audit Readiness Checklist

This is the cannabis audit readiness checklist an inspection-ready operation can clear item by item, with the documentary evidence pulled and ready. Each point maps to a question an inspector will ask and the artefact that answers it. Work down the list, and for any item you cannot satisfy on the spot, treat the gap as a finding to close before the inspection rather than during it.

# Checklist item The evidence an inspector expects
1 All SOPs listed in a master SOP register A single index that names every controlled procedure, its current version, owner, and review date. The register is the map the inspector navigates by, and a procedure that exists but is not on the register reads as uncontrolled.
2 Every SOP has a current version number and approval date Each document carries an unambiguous version identifier and the date the current version was approved. Two procedures with the same number and different content is a control failure.
3 No SOP is past its review date Every SOP has a defined review date, typically annual. An overdue review is a compliance finding on its own, even if the procedure has not changed. The register should show no lapsed dates.
4 QAP signature present on all current versions The Quality Assurance Person approval signature on the live version of every controlled SOP. An unsigned current version means nothing is formally in force.
5 Superseded versions archived but accessible Old versions are retained, not deleted, and retrievable. The inspector may ask which version governed a batch produced eight months ago, and you need to produce that exact superseded text.
6 Training records link employees to specific SOP versions A record that ties each employee to the specific version of each procedure they were trained on, with dates. Training on a procedure in general is not enough. The link is version-specific.
7 Deviation log references the relevant SOPs For each deviation, incident, or non-conformance, the log names the procedure that applied and the investigation outcome. A deviation that does not reference a procedure cannot be assessed for whether the procedure or its execution failed.
8 SOPs accessible to staff in controlled areas Current procedures available at the point of work, with paper copies clearly stamped Controlled or Uncontrolled so no one follows a superseded printout.
9 Mock recall or emergency drill in the past 12 months A documented recall drill against the Product Recall and Market Withdrawal SOP, showing the trace ran end to end within the recall timeline. A recall procedure that has never been exercised is a procedure no one trusts.
10 A document-control SOP (the SOP for SOPs) exists and is current The procedure governing how procedures are written, numbered, reviewed, approved, distributed, and archived. Without it, every other control point is ad hoc rather than systematic.

Items two through five and item ten are document-control mechanics; the full version-control, review-cycle, and approval-signature detail behind them lives in our cannabis SOP document control reference. Item six is the training-and-competency layer, covered in cannabis SOP training and competency verification. Items one, seven, eight, and nine are where an operation most often discovers it is record-complete but trace-incomplete.

Why Does the Mock Recall Drill Carry So Much Weight?

Item nine deserves its own treatment because it is the one checklist line that tests the whole system at once. The Product Recall and Market Withdrawal SOP (SOP-QA-004 in the required library) sets out the step-by-step process for a voluntary or mandatory recall, including when and how Health Canada must be notified. A mock recall drill in the past twelve months proves the procedure is not theoretical.

A drill exercises every other point on the cannabis audit readiness checklist in a single run. To trace a recalled lot you need the master register to find the governing procedures, the version history to know which version applied at production, the training records to confirm the people who handled it were qualified, the deviation log to surface anything that happened to that lot, and the inventory reconciliation to locate every unit. If any of those records is missing or untraceable, the drill stalls at exactly the point a real recall would stall, and you find out in a rehearsal rather than during a public health event.

Inspectors read a completed mock recall as a proxy for organisational maturity. An operation that can pull a lot, trace it forward to every customer and backward to every input, and do it inside the recall timeline has demonstrated that its documentation is not just present but connected. The Health Canada guidance for licensed producers treats recall capability as a core licensing expectation, not an optional extra.

How Does SOP-to-Batch-Record Linkage Build the Audit Trail?

Every checklist item above resolves to the same underlying question: can you prove which procedure governed which batch, and that the procedure was followed by trained people? That linkage is the audit trail, and it is where paper systems break down and connected systems hold up.

On paper, the link between an SOP version and a batch record is implicit. The inspector asks which version of the harvest procedure was in force when batch 2025-0418 was produced, and someone walks to the binder, checks the version archive against the production date, cross-references the training matrix, and hopes the dates line up. Every step is a place the trail can break.

When SOPs are linked directly to batch records in your operations platform, that link becomes explicit and queryable. An inspector can see exactly which version of a procedure was in place when a specific batch was produced, who was trained on that version, and which deviations referenced it, without anyone reconstructing the timeline by hand. The version, the approval signature, the training record, and the batch all resolve from the same data, which is what makes the trail unbreakable rather than merely complete.

This is the practical payoff of treating document control, training, and seed-to-sale tracking as one system rather than three filing cabinets. GrowerIQ is cannabis seed-to-sale and operations software used by 200+ licensed facilities across nine countries, and the SOP-to-batch linkage is exactly the connective tissue that turns the ten-point checklist from a once-a-year fire drill into a standing property of the operation.

Standard Operating Procedures aren’t just a regulatory checkbox, they’re the foundation of a scalable, defensible cannabis operation. SOPs Every Cannabis Operation Should Have

How Should You Run the Checklist Before an Inspection?

Treat the cannabis audit readiness checklist as a recurring internal audit, not a pre-inspection panic. The operations that pass cleanly run the list quarterly and again the moment an inspection is scheduled, fixing each gap as a tracked action rather than a same-day improvisation.

  1. Pull the master register first. If the register is current and complete, items one through five fall out of it in minutes. If the register is stale, fix that before anything else, because every other check reads from it.
  2. Spot-check the version-to-training links. Pick three recently revised SOPs and confirm every affected employee has a dated training record against the new version. Revisions are where the training link most often lapses.
  3. Walk the deviation log against the SOPs. Confirm each entry names the relevant procedure and shows an investigation outcome. Open or unreferenced deviations are visible findings.
  4. Confirm the controlled-area copies. Walk the floor. Any printed procedure that is not stamped, or stamped Uncontrolled where work is happening, gets pulled or replaced.
  5. Verify the recall drill date. If the last mock recall is approaching twelve months old, schedule the next one now rather than letting item nine lapse.

Each gap you close before the inspection is a finding the inspector never writes. The checklist is most valuable as a habit, because an inspection-ready operation is one that was already ready last quarter and the quarter before.

Frequently Asked Questions

What is a cannabis audit readiness checklist?

A cannabis audit readiness checklist is a structured list an operation works through to confirm it can pass a Health Canada inspection on documentary grounds. It verifies that every SOP is registered, versioned, signed, in-date, and accessible; that training records link to specific SOP versions; that the deviation log references the relevant procedures; that a mock recall has run in the past twelve months; and that a document-control SOP governs the whole system. The checklist exists because under the Cannabis Regulations, an inspector grades the records, not the intentions, so the goal is to surface and close documentation gaps before the inspection rather than during it.

What does a Health Canada inspector look for during a cannabis inspection?

A Health Canada inspector applies a documentary standard. For any procedure or record they ask whether the evidence exists and is in hand, whether it is signed by the Quality Assurance Person, whether it is dated, and whether it is traceable back to the specific batch it governed. An out-of-date, missing, or uncontrolled SOP is a compliance finding even when the actual practice is sound. The inspector reconstructs a timeline from your records and tests whether it holds together, so the operations that pass are the ones whose documents are not just present but connected to the batches and people they relate to.

How often should a cannabis operation run an audit readiness check?

The operations that pass inspections cleanly run the cannabis audit readiness checklist quarterly as a recurring internal audit, and again the moment an inspection is scheduled. Running it quarterly keeps each gap small and fixable as a tracked action rather than a same-day scramble. It also keeps the most time-sensitive item, the mock recall drill, from lapsing past its twelve-month window. A once-a-year check that coincides with the inspection notice tends to find more gaps than there is time to close, which is the situation the recurring cadence is designed to avoid.

Why does Health Canada place so much weight on a mock recall drill?

A mock recall drill exercises the entire documentation system in a single run, which is why it carries weight out of proportion to its single line on the checklist. To trace a recalled lot you need the master register, the SOP version history, the training records, the deviation log, and the inventory reconciliation to all connect. If any one of them is missing or untraceable, the drill stalls at exactly the point a real recall would, so the rehearsal reveals the weak link before a public health event does. Inspectors read a completed drill, run inside the recall timeline, as a proxy for whether the operation’s records are genuinely connected rather than merely on file.

How does linking SOPs to batch records help during an inspection?

When SOPs are linked directly to batch records in an operations platform, the audit trail becomes explicit and queryable instead of implicit. An inspector can see exactly which version of a procedure was in place when a specific batch was produced, who was trained on that version, and which deviations referenced it, without anyone reconstructing the timeline by hand from binders. On paper the link is inferred from dates and risks breaking at every cross-reference; in a connected system the version, the approval signature, the training record, and the batch all resolve from the same data, which is what makes the trail unbreakable rather than merely complete.

Get the Full Cannabis SOP Guide

The free guide turns this audit readiness checklist into a printable field tool, alongside the eight elements of a compliant SOP, the required SOP library under the Cannabis Regulations, document control and review cycles, and SOP training and competency verification for a Health Canada licensed producer.

Download Free Guide
Cannabis audit readiness checklist guide

About GrowerIQ

GrowerIQ is a complete cannabis production management platform. Ours is the first platform to integrate your facility systems, including sensors, building controls, QMS, and ERP, into a single simplified interface.

GrowerIQ is changing the way producers use software - transforming a regulatory requirement into a robust platform to learn, analyze, and improve performance.

To find out more about GrowerIQ and how we can help, fill out the form to the right, start a chat, or contact us.

Start today.

Let us know how to reach you, and we'll get in touch to discuss your project.

GrowerIQ does not share, sell, rent, or trade personally identifiable information with third parties for promotional purposes. Privacy Policy