Cannabis Compliance and Reporting Requirements for Canadian Dispensaries

Running a licensed cannabis dispensary in Canada means operating inside a compliance framework that touches nearly every transaction. The rules are not suggestions — they are conditions of your licence. Violations can result in fines, suspension, or permanent revocation. And yet, many dispensary operators are still tracking some of these requirements manually, which is both time-consuming and error-prone.

This guide covers the core compliance obligations that apply to most Canadian cannabis retailers, with specific attention to how POS systems can automate the work that used to live in spreadsheets.

Daily Purchase Limits and Equivalent Grams

Under the Cannabis Act, there is a federal limit on how much cannabis a customer can purchase in a single transaction: 30 grams of dried cannabis or its equivalent. This limit applies at the point of sale, and it is the retailer’s responsibility to enforce it.

The complication is that “30 grams” does not mean 30 grams of any product. Different product categories convert to dried flower equivalents at different rates. The federal equivalency table is:

Product Category	Equivalent to 1g Dried Flower
Dried flower / pre-rolls	1g
Fresh cannabis	5g
Edibles (solid or liquid)	15g
Concentrates / extracts	0.25g
Cannabis topicals	70g
Cannabis seeds	1 seed
Cannabis plants	1 plant

So a customer buying 7 grams of dried flower and 2 grams of concentrate has used 7 + (2 / 0.25) = 15 equivalent grams of their 30-gram limit. A customer buying 450 grams of edibles has used 450 / 15 = 30 equivalent grams, hitting the limit exactly.

Why This Matters at the Register

Your budtenders need to know, in real time, how close a customer is to the daily limit as they add items to the cart. If a clerk rings up a sale that exceeds 30 equivalent grams and the transaction goes through, you have a compliance violation on record.

A POS system that tracks equivalent grams should calculate the running total automatically as products are scanned or added. When the limit is approached, the system should warn the clerk. When the limit is reached, the system should block additional items in affected categories. This should not depend on the budtender doing mental arithmetic.

Some provinces and jurisdictions apply stricter limits or additional rules on top of the federal framework. Your POS should be configurable to reflect the specific limits that apply to your licence.

Provincial Reporting: SLGA and Beyond

Each province and territory has its own cannabis regulatory body, and reporting requirements vary. Saskatchewan’s Liquor and Gaming Authority (SLGA) is one of the more structured examples and illustrates what provincial reporting typically involves.

SLGA Reporting (Saskatchewan)

Saskatchewan dispensaries must submit regular reports to the SLGA that include:

Sales data broken down by product category, quantity, and revenue
Inventory records showing opening stock, purchases, sales, adjustments, and closing stock
Site identification using the SLGA-assigned site ID for each licensed location
Destruction records for any cannabis that is damaged, expired, or otherwise removed from saleable inventory

The SLGA requires that records be maintained in a format that can be provided on request. This means your POS needs to generate reports that align with SLGA’s expected categories and time periods — not just a generic sales summary.

Other Provincial Bodies

While the specifics differ, most provinces require similar reporting. Alberta’s AGLC, Ontario’s AGCO, and British Columbia’s LCRB all have their own reporting templates, inspection protocols, and data retention requirements. The common thread is that regulators expect detailed, accurate, and readily accessible records.

If you operate in multiple provinces — or plan to expand — your POS system needs to handle the reporting differences without requiring you to maintain parallel record-keeping systems.

Audit Trails

An audit trail is a chronological record of every action taken in your system: sales, voids, returns, inventory adjustments, product edits, price changes, user logins, and cash drawer opens. Each entry should record what happened, who did it, and exactly when.

What Auditors Look For

When a compliance auditor visits your dispensary, they are typically looking for:

Transaction integrity: Can you prove that every sale was recorded accurately? Are there gaps in transaction numbering that might suggest deleted records?
Void and return patterns: High void or return rates can indicate staff theft, process problems, or record manipulation. Auditors will look at who is voiding transactions and whether there is a pattern.
Inventory reconciliation: Does your recorded inventory match what is physically on your shelves? Discrepancies can suggest diversion, theft, or sloppy record-keeping — and regulators treat all three seriously.
User accountability: Can you identify which employee performed each action? Systems that allow shared logins or do not log user identity for every action create accountability gaps that auditors flag.
Time-stamped changes: If a product’s price was changed, who changed it and when? If inventory was adjusted, what was the justification? Auditors expect a clear record of modifications, not just current values.

Building a Reliable Audit Trail

A good POS system generates this trail automatically. Every transaction, void, return, and adjustment is logged with a timestamp and user ID. The audit log should be append-only — meaning records can be added but never modified or deleted, even by administrators. This protects against both intentional tampering and accidental data loss.

Some dispensaries try to maintain audit trails through manual logbooks or spreadsheets alongside their POS. This approach fails under scrutiny. Manual records can be altered, they are prone to human error, and they inevitably fall behind during busy periods. If your POS does not generate a comprehensive audit trail natively, it is not built for cannabis retail.

Age Verification

Every province requires that cannabis retailers verify the customer’s age before completing a sale. The legal age is 19 in most provinces (18 in Alberta and Quebec). While the physical ID check happens at the door or the counter, your POS should reinforce this with a verification prompt during checkout.

The prompt serves two purposes: it reminds the budtender to verify ID (particularly useful for customers who look close to the legal age), and it creates a record that the verification step occurred. Some regulators specifically look for evidence that age verification is part of the transaction workflow, not just the door policy.

This does not need to be complicated. A simple confirmation step in the checkout flow — “Has customer ID been verified?” — that must be acknowledged before the sale completes is sufficient. The key is that it is documented and consistent.

Record Retention

Cannabis regulations typically require that records be retained for a specified period. Federally, the Cannabis Act requires licence holders to maintain records for at least six years. Provincial requirements may overlap or extend this.

What counts as “records” is broad:

All sales transactions with itemized product details
Purchase orders and receiving records from licensed suppliers
Inventory counts, adjustments, and reconciliation reports
Employee records including training documentation
Destruction or disposal records
Customer purchase records (where applicable)
Compliance reports submitted to regulators

Your POS should store this data for the full retention period and make it exportable in standard formats (CSV, PDF). If you are using a cloud-hosted POS, confirm with your vendor how long data is retained and what happens to your records if you change providers. If you are on-premise, ensure your backup strategy covers the full six-year window.

How POS Automation Reduces Compliance Risk

The thread connecting all of these requirements is that manual compliance is fragile. It depends on staff remembering steps, performing calculations correctly, and maintaining records consistently — even during a Friday evening rush.

A POS system built for cannabis automates the parts that are most prone to human error:

Equivalent gram calculations happen automatically as items are added to the cart, with hard stops at the daily limit
Audit trails are generated for every action without any extra effort from staff
Reporting pulls directly from transaction data, formatted to match regulatory requirements
Age verification prompts appear in the checkout flow and cannot be bypassed
Inventory tracking updates in real time with every sale, return, and adjustment, making reconciliation straightforward
User attribution ties every action to a specific employee through individual logins or PIN codes

None of this eliminates the need for staff training or management oversight. But it removes the categories of compliance failure that stem from calculation errors, forgotten steps, and inconsistent record-keeping.

Staying Current With Regulatory Changes

Cannabis regulation in Canada is still evolving. Provinces adjust their reporting requirements, the federal framework gets updated, and new product categories introduce new equivalency calculations. Your POS vendor should be tracking these changes and updating the system accordingly.

Before selecting a POS, ask the vendor how they handle regulatory updates. Is there a dedicated compliance team? How quickly are changes implemented after a regulation takes effect? Do updates apply automatically, or do you need to request them? A vendor who treats compliance as a static checkbox rather than an ongoing obligation is a vendor who will leave you exposed when the rules change.

At Brother POS, compliance tools are built into the core system rather than added as optional modules. Equivalent gram calculations, daily purchase limit enforcement, SLGA reporting with site ID configuration, and comprehensive audit trails are all part of the standard platform. If you are opening a new dispensary or evaluating whether your current system meets compliance requirements, request a demo to see how automated compliance works in practice.