Cannabis QA Compliance Checklist for Canadian Licence Holders

In Canada, cannabis quality assurance is not a nice-to-have. It is the legal backbone that keeps a federal licence valid. Health Canada holds every cultivator, processor, and seller to the Good Production Practices set out in the Cannabis Regulations, and a single gap in documentation, testing, or oversight can lead to a compliance order, a recall, or a suspended licence.

A well-built cannabis QA compliance checklist turns those legal duties into a repeatable daily routine. It gives your team a clear record of what was done, by whom, and when, so you can face an inspection with confidence instead of scrambling for paperwork. This guide, prepared by the regulatory team at MFLRC, breaks down what belongs on that checklist, the regulations behind each item, and the common mistakes that trigger findings.

What is cannabis QA compliance in Canada?

Cannabis QA compliance means running documented systems that prove every product is safe, accurately labelled, and made the same way every time. In Canada the core rules live in Part 5 of the Cannabis Regulations (SOR/2018-144), known as Good Production Practices, or GPP. Quality is not judged by the finished product alone. Health Canada expects controls at every step, from incoming materials to storage, with records that let an inspector trace each decision.

Why does it matter? A cannabis licence is conditional. If your quality system cannot demonstrate control, Health Canada can issue a compliance order, restrict activities, or revoke the licence. What should companies do? Map each GPP requirement to a written procedure, assign clear responsibility, and keep the evidence that shows the procedure was followed. A checklist is the simplest tool for making that happen day after day.

Three quality frameworks come up most often for Canadian operators. Knowing which one applies keeps your checklist focused on the right standard.

Standard	What it covers	When it applies to cannabis
Good Production Practices (GPP)	Canada's baseline production and quality rules in Part 5 of the Cannabis Regulations	Mandatory for all federal cultivation, processing, and sale licence holders
EU-GMP	Pharmaceutical-grade manufacturing standard under EudraLex Volume 4	Required to export cannabis to many European markets, such as Germany
GACP	Good Agricultural and Collection Practices for growing and harvesting plants	Expected upstream of EU-GMP for cultivated cannabis destined for the EU

Why a cannabis QA compliance checklist matters

A checklist matters because Health Canada inspections turn on evidence, not intentions. Inspectors repeatedly cite good production practices and record keeping among the most common areas of non-compliance, and most of those findings trace back to missing or inconsistent documentation rather than unsafe products. A checklist is what keeps the paper trail complete. It also protects your business from the real risks of ignoring cannabis QA, which range from failed batches to product recalls.

A structured checklist delivers three things at once: consistency, so every lot follows the same approved steps; transparency, so internal and Health Canada auditors can see what happened; and efficiency, so staff spend less time reconstructing records and more time producing compliant product.

The regulatory foundation: GPP, the QAP, and mandatory testing

Before you build the checklist, it helps to know the three pillars that hold up every cannabis quality system in Canada. Each one maps to specific sections of the Cannabis Regulations, so your checklist items should point back to them.

Good Production Practices (Part 5)

Part 5 sets the general requirements for sanitation, equipment, premises, storage, and the quality of cannabis. Health Canada explains its expectations in the Good production practices guide for cannabis. For a deeper walkthrough of these controls, see our guide to Good Production Practices. Your checklist should confirm that each GPP area has a current procedure and a record showing it was followed.

The Quality Assurance Person (QAP)

Under section 19 of the Cannabis Regulations, a holder of a processing licence must retain a Quality Assurance Person with the training, experience, and technical knowledge for the class of cannabis being handled. The QAP is responsible for assuring the quality of cannabis before it is made available for sale, investigating every quality complaint, and acting immediately when there is a suspected risk to human health. Since the March 2025 amendments (SOR/2025-43), a licence holder may designate one or more alternate QAPs, but the Minister must approve the alternate before that person can act.

Mandatory testing

Sections 90 to 92 require testing of each lot or batch for cannabinoid content and for microbial and chemical contaminants, using validated methods on a representative sample. A portion of that sample must be retained for at least one year after the last sale of any part of the lot or batch. Contaminant results must stay within tolerance limits from a publication referenced in Schedule B to the Food and Drugs Act. The table below summarizes the tests your checklist should confirm for every batch.

Test	What it confirms	Regulatory anchor
Cannabinoid content	Quantity or concentration of THC, THCA, CBD, and CBDA	Cannabis Regulations, s. 90 and s. 92
Microbial and chemical contaminants	Levels stay within tolerance limits in a Schedule B publication of the Food and Drugs Act	Cannabis Regulations, s. 91 and s. 93
Pest control product residues	Residues stay within Health Canada limits on the mandatory pesticide list	Mandatory cannabis testing for pesticide active ingredients
Dissolution or disintegration	Ingestible discrete units perform as intended	Cannabis Regulations, s. 91.1 and s. 95

The 10-point cannabis QA compliance checklist

The sections below are the core of a cannabis QA compliance checklist. Each one lists what to control and what to document. Adapt the detail to your licence class and facility, but keep every area covered.

1. Standard operating procedures and document control

SOPs are the written instructions behind every task. They must be clear, approved by the QAP, version controlled, and available to the staff who use them. Confirm that each critical activity has a current SOP, that old versions are removed from use, and that training records match the version in effect. Document control failures are one of the most frequent inspection findings.

2. Supplier and incoming material verification

Poor inputs create poor products. Before materials enter production, verify that the supplier is licensed where required, review the certificate of analysis for each incoming lot, and inspect deliveries for damage or contamination. Record the supplier, lot number, quantity received, and the accept or reject decision so the material is fully traceable.

3. Facility, equipment, and sanitation

Clean, well-maintained premises and equipment reduce contamination and keep results accurate. Your checklist should cover cleaning and sanitation schedules, equipment calibration and maintenance logs, pest control records, and environmental monitoring where relevant. Record who performed each task and when, and keep calibration certificates on file.

4. Personnel training and competency

A trained workforce is a regulatory expectation, not just good practice. Document onboarding and role-specific training, refresher courses, and sign-offs from both trainer and trainee. Link each employee to the SOP versions they are trained on, and update the record whenever a procedure changes.

5. Batch and production records

Every batch must be traceable from start to finish. Capture batch or lot numbers, production dates, the staff responsible at each stage, in-process checks, and any deviations with their corrective actions. Complete records are what allow a fast, targeted recall if a problem is found later.

6. Quality control testing and batch release

Testing confirms safety and potency before release. Ensure sampling is representative, that testing covers cannabinoids, contaminants, and pesticides using validated methods, and that the QAP reviews and approves results before the lot is released for sale. Store test data securely and link every certificate of analysis to its batch record.

7. Storage, security, and distribution

Finished cannabis needs controlled and secure conditions. Monitor storage temperature and humidity, protect packaging and labelling from mix-ups, and keep chain-of-custody records through distribution. Confirm that inventory reconciles and that physical security measures meet the requirements for your licence class.

8. Complaints, adverse reactions, and recalls

A working recall system is mandatory. The Cannabis Regulations require a system of control that allows the rapid, complete recall of a product. Your checklist should cover how complaints are logged and investigated, how adverse reactions are handled, and how a recall would be run, including a periodic mock recall to prove the system works. Learn more in our guide to avoiding cannabis product recalls.

9. Deviations, CAPA, and change control

When something goes wrong, the response is what inspectors examine. Record each deviation, investigate the root cause, and put in place corrective and preventive actions (CAPA) that stop it from recurring. Use change control so that any change to a process, supplier, or specification is assessed and approved before it takes effect. Structured CAPA remediation support keeps these investigations defensible.

10. Internal audits and continuous improvement

Routine self-checks keep the whole system honest. Schedule internal audits that review SOPs, training logs, and batch records, identify non-conformances, and track them to closure. Feed the findings into management review so the quality system improves over time instead of drifting.

Your quick-reference compliance checklist

Use the following as a fast review of your cannabis quality system. If you cannot answer yes with a record to prove it, that item is a gap worth closing before your next inspection.

Current, version-controlled SOPs exist for every critical activity and staff are trained on them.
Suppliers are verified and every incoming lot has a reviewed certificate of analysis.
Cleaning, sanitation, pest control, and equipment calibration are scheduled and logged.
Training records are complete and linked to the SOP versions in effect.
Each batch is fully traceable, with deviations and corrective actions recorded.
Mandatory testing is complete and the QAP has approved release for every lot.
Storage conditions, security, and chain-of-custody records are maintained and reconciled.
Complaint, adverse reaction, and recall procedures are in place and a mock recall has been run.
Deviations, CAPA, and change control are documented and closed on time.
Internal audits are scheduled, findings are tracked to closure, and results feed management review.

Common cannabis QA compliance mistakes

Most quality problems are not exotic. The same avoidable mistakes surface again and again during Health Canada inspections and internal audits.

Vague or missing SOPs. Procedures that do not match what staff actually do lead to inconsistent product and difficult investigations.
Weak record keeping. Incomplete, unsigned, or late records are the single most common reason a good process still fails an inspection.
Outdated training. Staff working to an old SOP version, or with no refresher training, make preventable errors.
Treating testing as a formality. Releasing product before results are reviewed, or using non-validated methods, puts the whole batch and the licence at risk.
Ignoring small deviations. Minor non-conformances that are never investigated tend to grow into systemic problems and repeat findings.
Skipping internal audits and mock recalls. Without routine self-checks, gaps stay hidden until an inspector or a real recall exposes them.

Frequently asked questions

Is a cannabis QA compliance checklist legally required in Canada?

A checklist itself is not named in the Cannabis Regulations, but the controls it captures are mandatory. Part 5 requires Good Production Practices, section 19 requires a Quality Assurance Person, and sections 90 to 92 require validated testing of each lot or batch. A checklist is simply the most practical way to prove those legal duties are met every day.

Who is responsible for cannabis quality assurance at a licensed site?

The Quality Assurance Person carries the legal responsibility. Under section 19 of the Cannabis Regulations, the QAP assures product quality before sale, investigates complaints, and acts on any suspected health risk. Since SOR/2025-43 came into force in March 2025, licence holders may designate one or more alternate QAPs, subject to Health Canada approval.

What cannabis testing is mandatory before a product can be sold?

Each lot or batch must be tested for cannabinoid content and for microbial and chemical contaminants, and screened against Health Canada's mandatory pesticide list. Testing must use validated methods on a representative sample, and a portion of that sample must be kept for at least one year after the last sale of the lot or batch.

How long must cannabis quality records be kept?

Retention periods vary by record type under the Cannabis Regulations, and many key records must be kept for years. Retained test samples must be held for at least one year after the last sale of the lot or batch. As a practical rule, keep quality records long enough to support a recall and to answer questions at your next inspection, and follow the specific retention periods in Part 11 of the regulations.

How often should the checklist and quality system be reviewed?

Review the checklist whenever a procedure, product, supplier, or regulation changes, and formally at least once a year through internal audit and management review. This keeps the system aligned with current Health Canada expectations and with what actually happens on your floor.

Does a QA checklist help with EU-GMP or export markets?

Yes. A disciplined GPP checklist is the foundation for stricter standards such as EU-GMP, which many European markets require for imported cannabis. The documentation habits, testing controls, and audit trails you build for Canadian compliance transfer directly. If your plan includes in-house testing, our guide to setting up a cannabis analytical testing lab explains the added requirements.

How MFLRC can help

Building and maintaining a compliant quality system can stretch even experienced operators. MFLRC works with cannabis cultivators, processors, and sellers to design quality assurance and quality control systems that fit each licence class, from SOP development and gap assessments to QAP support, staff training, and post-licensing compliance.

When an inspection is on the horizon, our team runs mock audits and inspection readiness reviews that test your checklist against real Health Canada expectations and close gaps before an inspector finds them. For a head start, read our tips on passing a cannabis regulatory audit.

Need help turning your quality obligations into a checklist your team will actually use? Contact MFLRC for expert guidance tailored to your licence and market.

Book a free consultation

Conclusion

A cannabis QA compliance checklist is more than a form. It is a daily safeguard for your licence, your brand, and the people who use your products. When it is built on Good Production Practices, backed by a strong QAP, and supported by validated testing and honest records, it lets you face inspections with confidence rather than stress. Review it often, keep it aligned with the regulations, and treat it as the working heart of your quality system.