How Often Do Cannabis Companies Get Audited in Canada?

Every licensed cannabis operator asks the same question sooner or later: how often will we actually be audited? It is a fair question, because inspection readiness costs time and money, and no one wants to over invest or, worse, be caught unprepared. The honest answer is that there is no fixed schedule. Health Canada does not audit every producer on a set annual date. Instead, it uses a risk based approach, which means the real answer depends on what you do, how well you do it, and your history with the regulator.

On top of Health Canada inspections, most cannabis companies face several other kinds of audit during a normal year, from internal audits they run themselves to third party EU-GMP assessments and customer due diligence. This guide explains how often each type happens, what drives the frequency, and why the most successful producers stop counting inspections and simply stay ready all year round.

Executive Summary

Cannabis companies in Canada are audited more often than many new operators expect, and from more directions. The primary audit is a Health Canada inspection under the Cannabis Act and its regulations, scheduled on a risk basis rather than a fixed calendar. In fiscal year 2024 to 2025, Health Canada conducted 889 inspection activities and issued 37 non-compliant reports, up from 21 the year before, a clear signal that oversight is intensifying.

Beyond the regulator, a typical licence holder also runs internal audits, undergoes third party audits for standards such as EU-GMP or GACP if it exports, and responds to customer or partner due diligence. Provincial retail regulators and the Canada Revenue Agency add further review for those who sell to consumers or handle excise. Because so much of this activity is unannounced or triggered by events, the practical takeaway is not to predict the next audit but to keep records, practices, and people ready every day.

What Determines How Often You Are Audited?

Audit frequency is driven by risk, not by a fixed timetable. What it means: Health Canada and other auditors focus attention where the potential for harm or non-compliance is highest. Why it matters: your own behaviour and profile directly change how often you are inspected. What to do: lower your risk profile through a clean compliance history, and assume higher scrutiny if any of the risk factors below apply to you.

Health Canada applies a risk based inspection model to federal cannabis licence holders. Rather than inspect everyone equally, it weighs factors that raise or lower the likelihood and frequency of a visit. The most influential factors include the following.

Licence class and activities. A large standard cultivator or processor handling high volumes usually draws more attention than a small nursery or research licence.
Compliance history. A previous non-compliant report, a recall, or an unresolved corrective action raises your risk rating and can trigger follow up inspections.
Complaints and signals. Complaints, adverse reaction reports, promotion concerns, or media attention can prompt a targeted inspection outside any routine cycle.
Product and process risk. Activities with higher public health or diversion risk, such as certain extraction or edibles production, attract closer oversight.
Time since last inspection and licence changes. A new licence, a major amendment, or a long gap since the last visit can move you up the queue.

The Different Audits a Cannabis Company Faces

When operators ask how often they are audited, they are often thinking only of Health Canada. In reality a licensed producer is subject to several distinct types of review in a typical year, each with its own cadence and purpose. The table below summarises them.

Audit type	Who conducts it	Typical frequency
Health Canada inspection	Health Canada	Risk based; from less than annually to several times a year for higher risk sites
Internal audit	Your own quality team or a consultant	Scheduled through the year, often quarterly by area, at least annually overall
Mock inspection	Internal or external	At least once a year, more before a known inspection
EU-GMP or GACP audit	Certification body or importing authority	Every one to three years if you export to regulated markets
Customer or partner audit	Buyers, distributors, investors	On demand, during onboarding and due diligence
Provincial retail audit	Provincial or territorial regulator	Periodic for licensed retailers and farmgate stores
Excise or tax review	Canada Revenue Agency	Periodic or triggered by reporting

How Often Does Health Canada Inspect Cannabis Companies?

Health Canada inspects on a risk basis, so there is no single answer that fits every licence holder. What it means: some sites see an inspection less than once a year, while higher risk sites can be visited several times. Why it matters: you cannot plan around a predictable date, so readiness must be continuous. What to do: use the sector wide data as a guide, then assume your own risk profile decides the rest.

The clearest picture comes from Health Canada's own reporting. In its compliance and enforcement report for 2024 to 2025, the department recorded 889 inspection activities across the sector, up from 662 in each of the two previous years. That total is spread across several inspection types, as the breakdown below shows.

Inspection activity (FY 2024 to 2025)	Count
Regular inspections	437
Targeted inspections	101
Compliance verifications	128
Personal and designated production inspections	197
Promotion inspections	26
Total inspection activities	889

Two points stand out. First, the volume is rising, so the trend is toward more oversight rather than less. Second, the mix matters. Regular inspections are the routine cyclical visits most licence holders will experience, while targeted inspections and compliance verifications are usually triggered by risk, a complaint, or a follow up on a prior finding. A licensed producer with a clean record might see a regular inspection on a multi year cycle, while a site with open issues could face a targeted return visit within months.

Does Audit Frequency Differ by Licence Type?

Yes. The type of licence you hold, and the scale of what you do under it, shapes how often you can expect attention. A large standard cultivator or a processor making extracts and edibles handles higher volumes and higher risk activities, so it typically sits higher in the inspection queue than a micro cultivator, a nursery, or a research licence holder. Analytical testing laboratories draw scrutiny because their results gate product release across the whole supply chain, and sale for medical purposes brings its own reporting and client protection expectations.

Personal and designated medical production is a distinct and increasingly active area. In fiscal year 2024 to 2025, Health Canada carried out 197 inspections of registered personal and designated production of cannabis for medical purposes and revoked or refused 50 registrations, a sign that this stream is under closer watch than in earlier years. Promotion is another trigger point: the program created 436 cases of potential non-compliance related to promotion in the same year, leading to 130 actions, which shows how advertising and marketing activity can prompt review entirely separate from a facility inspection.

The lesson is not to assume your licence class makes you a low priority. Risk ratings move with your conduct, and even a small operation can jump up the queue after a complaint, a recall, or a missed corrective action.

Announced Versus Unannounced Inspections

A crucial part of the frequency question is whether you get warning. Health Canada conducts both announced and unannounced inspections, and it is not required to give advance notice. Many cyclical inspections arrive without warning, while certain types, such as pre-licence or security focused inspections, may be arranged in advance to make the visit workable.

The practical effect is that you cannot rely on a heads up. A producer whose records and practices only hold up when they know an inspector is coming is exposed the moment a visit is unannounced. This is exactly why the strongest operators build compliance into daily routines rather than treating it as pre inspection preparation.

It also helps to understand what usually prompts an unscheduled visit. A consumer or employee complaint, an adverse reaction report, a recall of your own or a comparable product, a promotion that appears to breach the rules, or a follow up on a previous finding can each bring an inspector to your door outside any routine cycle. You cannot control every trigger, but you can control whether your site would pass on the day one arrives.

Internal Audits and Third Party Audits

Health Canada is only one source of audit pressure. A mature quality system schedules its own internal audits across the year, often reviewing each functional area quarterly and covering the whole operation at least annually. The cheapest finding is always the one you catch yourself, and a strong internal audit program is the single best predictor of a clean Health Canada result. Our guides on how to pass a cannabis regulatory audit and passing a Health Canada inspection in six practical steps set out how to run these the way a regulator would.

Companies that export or supply regulated markets face a further layer. Selling into the European Union, for example, requires compliance with EU good manufacturing practices, verified by periodic EU-GMP audits, while cultivation for export often involves good agricultural and collection practices, or GACP. These certifications are typically reassessed every one to three years, with surveillance activity in between, and a failed reassessment can suspend your ability to ship into that market. Buyers, distributors, and investors add their own due diligence audits during onboarding, and a serious buyer will often want to see your most recent Health Canada inspection outcome, your corrective action records, and your testing data before committing to a supply agreement.

Why Constant Readiness Beats Counting Inspections

Because the frequency is unpredictable and the sources are many, trying to time your preparation to the next audit is a trap. The producers who pass are the ones whose records and practices would survive an unannounced visit on any ordinary day. Continuous readiness also protects you commercially, since buyers and partners increasingly review your inspection and corrective action history before they sign.

Continuous readiness rests on the systems inspectors examine most: Good Production Practices under Part 5 of the Cannabis Regulations, complete and retrievable records, current standard operating procedures that staff actually follow, a capable and security cleared Quality Assurance Person, and a disciplined corrective and preventive action process. When these are habits rather than projects, the audit frequency question stops mattering, because you are always ready. If you want a structured way to get there, our audit and inspection readiness services run gap assessments and mock inspections the way Health Canada does.

Year Round Audit Readiness Checklist

Use the following checklist to stay ready for an inspection whenever it arrives, from whichever direction.

Keep batch, distribution, destruction, and testing records complete, contemporaneous, and retrievable within minutes.
Maintain current, version controlled SOPs that match what staff actually do on the floor.
Perform and log Good Production Practices controls: sanitation, pest control, storage, and calibration on schedule.
Run at least one internal audit and one mock inspection each year, covering every area an inspector would.
Close every finding with a documented corrective and preventive action and verified effectiveness.
Keep a qualified, security cleared Quality Assurance Person, and at least one alternate, in place.
Confirm physical security systems and their records are functioning and current.
Track your compliance history and resolve open items quickly, since they raise your risk rating.
For exporters, keep EU-GMP or GACP documentation audit ready between certification cycles.

Common Mistakes to Avoid

Assuming a clean past means fewer future inspections. Risk ratings can change quickly after a complaint or a finding.
Preparing only when an inspection is announced. Many visits are unannounced.
Treating internal audits as a formality rather than an honest search for problems.
Leaving findings open. An unresolved corrective action is itself an inspection risk and raises your profile.
Overlooking non Health Canada audits from customers, provincial regulators, or the CRA.
Overstretching the QAP so that review becomes a rubber stamp.

Frequently Asked Questions

How often does Health Canada audit cannabis companies?

There is no fixed frequency. Health Canada uses a risk based approach and carried out 889 inspection activities across the sector in fiscal year 2024 to 2025. A lower risk site may be inspected less than once a year, while a higher risk site, or one with open findings, can be visited more than once.

Are cannabis inspections announced in advance?

Not always. Health Canada conducts both announced and unannounced inspections and is not required to give notice. Some inspections, such as pre-licence or security focused visits, may be arranged in advance, but many cyclical inspections arrive without warning.

What makes a cannabis company more likely to be audited?

Higher risk factors increase both the likelihood and frequency of inspection. These include a large or complex operation, a history of non-compliance, complaints or adverse reaction reports, promotion concerns, higher risk activities, and a long gap since the last inspection.

Do cannabis companies get audited by anyone other than Health Canada?

Yes. Most operators also run internal audits, undergo third party audits for standards such as EU-GMP or GACP if they export, and respond to customer and partner due diligence. Licensed retailers face provincial oversight, and the Canada Revenue Agency reviews excise and tax reporting.

How long does a cannabis inspection take?

It varies with the size and complexity of the site and the scope of the inspection. A focused verification may take part of a day, while a full inspection of a large facility can run over several days, including a facility walk through, records review, and staff interviews.

What happens if we fail an inspection?

You receive a non-compliant inspection report listing the deficiencies to address. Health Canada can escalate with tools such as warning letters, stop sales, seizure and detention, administrative monetary penalties, or licence suspension or revocation. A prompt, credible corrective and preventive action plan, with evidence it worked, is the way back to compliance.

How MFLRC Can Help

Because you cannot predict when an audit will arrive, the smartest investment is a program that is always ready. MFLRC helps cannabis licence holders build exactly that. Our audit and inspection readiness services include gap assessments and mock inspections run the way Health Canada runs them, so you find and fix problems before an inspector does.

We also strengthen the systems that determine your risk rating, from SOPs and recordkeeping through our quality assurance services, to CAPA and root cause coaching, QAP support, and ongoing regulatory affairs guidance so a rule change never catches you out. With more than 20 years of quality and regulatory experience across cannabis, pharmaceuticals, and natural health products, our senior led team turns compliance into a durable habit.

Facing an inspection, or want to be ready before one is scheduled? Contact MFLRC for expert guidance tailored to your licence, your site, and your timeline.

Book an inspection readiness consultation

Conclusion

How often do cannabis companies get audited? Often enough, and unpredictably enough, that the only safe answer is to stay ready all the time. Health Canada inspects on risk, not on a calendar, and its 889 inspection activities in 2024 to 2025 show an oversight program that is growing, not shrinking. Add internal audits, export certifications, and customer due diligence, and audits become a regular feature of operating a licensed cannabis business. Build strong Good Production Practices, records that hold up, and a disciplined corrective action process, and every audit becomes a confirmation of your standards rather than a threat to your licence. For a deeper look at preparation, see our guide on how to pass a cannabis regulatory audit.