Arizona cannabis compliance, end to end.

How the Arizona program is structured

Arizona operates one of the more structurally unusual US cannabis programs. The state has had a regulated medical cannabis market since 2012, when retail launched under the Arizona Medical Marijuana Act (AMMA) — a citizen initiative passed as Proposition 203 in 2010. Adult-use cannabis came in November 2020 with Proposition 207 (the Smart and Safe Arizona Act), with retail sales beginning January 22, 2021. Both programs are administered by the Arizona Department of Health Services (ADHS) — a single regulator, in contrast to the split or specialized regulator models that dominate other state programs. The unified regulator under a health-department mandate is one of the most consequential structural features of Arizona compliance.

ADHS's identity matters. Unlike a liquor and cannabis board (Washington, Oregon, Massachusetts), a professional regulation department (Illinois IDFPR), or a purpose-built cannabis control commission (Colorado MED, Michigan CRA, Massachusetts CCC), ADHS is a generalist state health department. Its enforcement posture leans toward consumer protection and product safety: contamination findings, mislabeling, unverified medical claims, and adverse-event handling all draw faster and more thorough attention than equivalent operational issues might in other state programs. The rules at A.A.C. Title 9, Chapter 18 (adult-use) and A.A.C. Title 9, Chapter 17 (medical) reflect that posture in their detail on testing, labeling, recall response, and adverse-event reporting.

The second structural distinctive is vertical integration as the norm. Prop 207 was modeled on the AMMA framework, where Nonprofit Medical Dispensaries held vertically integrated authority covering cultivation, processing, and retail under a single license. Marijuana Establishment licenses inherited that shape — one license, one operator, the whole supply chain end-to-end. Operators that want to add scale typically pursue additional Marijuana Establishment licenses through allocation rounds or through acquisition of existing licenses; the framework doesn't anticipate the cultivator-only or retailer-only specialization patterns common in other state programs.

The third — and operationally most consequential — distinctive is the Dual License model. When Prop 207 passed, the state recognized that existing AMMA Nonprofit Medical Dispensaries had built operating infrastructure and customer trust that would be disrupted by a separately-licensed adult-use industry. The compromise: existing NMDs were given priority eligibility to convert to Marijuana Establishment licenses while retaining their AMMA authority, operating both programs from the same physical site. Most established Arizona operators took the conversion. The result is a Dual License-dominated market where the typical dispensary is selling to both AMMA-registered qualifying patients and adult-use customers — with mandatory segregation between the two programs at the inventory, sales-recordkeeping, METRC sub-account, and SOP levels. Staffing, security, training, and ownership infrastructure can be shared; everything else has to be segregated.

Layered onto these structural features are the workforce credentialing and traceability frameworks. Every employee at a Marijuana Establishment, NMD, or Dual License operation must hold a current Dispensary Agent (DA) card issued by ADHS — a personal credential tied to a background check and a defined renewal cadence. METRC has been Arizona's traceability platform since 2019 for the medical program and extended to adult-use at Prop 207 launch. METRC sub-accounts segregate medical and adult-use inventory within Dual License operations; commingling at the METRC level is a citable offense in its own right. Finally, the Social Equity Marijuana Establishment carve-out — a defined set of licenses reserved for applicants from communities disproportionately impacted by past cannabis enforcement — sits alongside the standard Marijuana Establishment license type with its own ownership-eligibility criteria and ongoing structural reporting obligations.

What ADHS inspectors actually check

An ADHS inspection — routine, complaint-driven, post-citation re-inspection, or product-safety audit — covers METRC integrity, security, SOP adherence, packaging and labeling, DA card currency, Dual License segregation (where applicable), product safety, and waste handling. The health-department lens shows through in the specific focus areas:

• METRC inventory integrity across the vertical chain. Inspectors will pull recent transactions and walk them backward through METRC — from retail sale back through processing to cultivation. Because Marijuana Establishments are vertically integrated, the entire chain of custody sits inside one operator's responsibility. Discrepancies at any point in the chain are licensee citations. Documented investigations within 24 hours of detection are the citation defense.
• Dispensary Agent card currency. Every employee on shift must hold a current DA card. Inspectors spot-check employees against ADHS-issued card records — expired or missing cards trigger immediate operational restrictions on the affected employees. This is one of the most common Arizona-specific citation categories because operators frequently underestimate the tracking discipline required across larger workforces.
• Dual License segregation (where applicable). For Dual License operations, inspectors check that medical and adult-use inventory is physically segregated, that METRC sub-accounts are properly assigned, that sales records distinguish AMMA-qualifying-patient transactions from adult-use transactions, and that SOPs reflect the program-specific protocols staff are actually following. Commingling at any level is a citation — and the citation runs against both license authorities.
• Pre-retail testing compliance. Inspectors verify that retail-ready inventory has corresponding COAs from ADHS-licensed Marijuana Testing Facilities and that testing happened in the correct sequence per A.A.C. R9-18-314 (adult-use) and R9-17-321 (medical). Untested or failed-test inventory found in retail-ready locations is grounds for embargo and mandatory destruction documented in METRC.
• Packaging and labeling. Random product samples are inspected against the rules — child-resistance, mandated warnings, lab result references, font-size minimums, THC content disclosure. ADHS's health-department posture is particularly attentive to mislabeling that could mislead consumers about product strength, intended use, or medical effect.
• Product safety and recall readiness. Inspectors verify that the operator can rapidly identify affected lots in the event of a product safety issue, that recall SOPs exist and have been exercised, and that adverse-event reporting workflows function. This is a heavier focus in Arizona than in most state programs and reflects the health-department regulator's institutional priorities.
• Camera and security plan compliance. Coverage of every required area, retention period adherence, and alarm-system functionality are routinely checked. Filed security plans are the bar; deviations need correction or filed amendments.
• Advertising compliance. A.A.C. R9-18-321 governs adult-use advertising; AMMA has parallel provisions on medical claims. ADHS's health-department lens makes advertising compliance particularly load-bearing — unverified medical claims (a common drift in cannabis marketing) draw faster enforcement attention here than in most other state programs.
• Ownership-structure currency. ADHS expects ownership and control filings to remain current. Change-of-control transactions require prior approval; deviations from the as-applied structure can result in enforcement attention, particularly for Social Equity Marijuana Establishment licensees with structural reporting obligations.

The pattern: an Arizona inspection looks for whether your systems produce the documentation an inspection requires, on the day of the inspection, without scrambling — and whether your operating discipline reflects the health-department regulator's product-safety priorities. ADHS has been enforcing cannabis rules since 2012; the playbook is mature.

Common violations and how to prevent them

Six categories produce the majority of ADHS citations:

1. METRC discrepancies. Daily inventory counts reconciled to METRC, with discrepancies investigated and documented within 24 hours. The vertically integrated structure of Marijuana Establishments means a single METRC discrepancy can implicate cultivation, processing, and retail operations — variance thresholds and documented investigations are the citation defense at every link in the chain.
2. Dispensary Agent card gaps. Track every DA card like a license — multi-stage alerts well before renewal due date, automated reminders to begin the renewal application. Manual tracking has a near-100% rate of missed renewals across multi-employee operations, particularly for high-turnover retail roles. The citation isn't always about the lapsed card itself; it's about the employee continuing to perform regulated work after the card expired.
3. Dual License segregation failures. Treat medical and adult-use as fully separate operations at the inventory, sales-record, METRC sub-account, and SOP levels. Shared infrastructure for staffing, security, training, and ownership is permitted and expected — but the operational discipline of segregation has to be tight. Verdaxi's multi-tenant architecture is built exactly for this partition.
4. Packaging, labeling, and advertising compliance. Pre-print review against the rules; versioned advertising approvals stored against every creative; SOPs that require review before any new packaging design or advertising activity goes live. Unverified medical claims are a recurring drift area — the SOP needs to explicitly prohibit them and the review workflow needs to catch them.
5. Product safety failures. Routine internal sampling and trend analysis on test results; immediate isolation of affected lots when any product safety issue is identified; documented recall capability that has been exercised. ADHS's health-department posture means a product safety finding moves faster than an operational finding — recall readiness is operational, not theoretical.
6. Ownership-structure currency. Annual structural attestation against the as-applied ownership filings, with proactive disclosure of any pending ownership or financial-control changes. For Social Equity Marijuana Establishment licensees, ongoing eligibility documentation is itself a load-bearing compliance commitment.

Required SOPs and recordkeeping

The required SOP categories listed above are the operating baseline for every Arizona Marijuana Establishment, NMD, and Dual License operation. Operating additions:

• Cultivation operations within the Establishment require pesticide-application and IPM SOPs, plus harvest, drying, and curing procedures. Larger cultivation operations face additional environmental and water-management SOP expectations.
• Processing operations within the Establishment running solvent-based extraction require extraction-method-specific safety SOPs, per-equipment operating procedures, and a master sanitation SOP. The waste handling SOP must specifically address solvent waste segregation and disposal.
• Retail operations within the Establishment require sale-to-minors prevention SOPs that mirror the POS system's age-verification flow, plus (for Dual License operations) qualifying-patient verification SOPs covering AMMA card scanning and recordkeeping.
• Dual License operations require a program-segregation SOP covering inventory separation, METRC sub-account tracking distinctions, sales-record separation, and the protocols staff follow when working across both programs.
• Social Equity Marijuana Establishment licensees must maintain ownership-eligibility documentation SOPs covering capital structure, operational control, and any changes to the as-applied ownership and eligibility criteria.
• Every licensee must maintain a recall and adverse-event SOP that reflects ADHS's health-department posture — rapid lot identification, consumer notification protocols, and ADHS notification workflows.

Recordkeeping retention defaults follow A.A.C. Title 9, Chapters 17 and 18 — generally multi-year retention for transactional records, defined retention windows for security camera footage (longer for incident-related footage), and personnel records held for the duration of employment plus an additional period. DA card records are themselves subject to retention requirements.

How Verdaxi maps to Arizona's requirements

Verdaxi was built for the operator-side discipline that Arizona's unified-regulator, health-department-led, Dual-License-dominated compliance regime demands. The compliance product covers state-specific checklists with citation linkage to A.A.C. Title 9, Chapters 17 and 18, automated inspection prep, violation tracking with ADHS penalty-matrix exposure estimates, versioned SOPs with per-version acknowledgments, retention-policy-enforced document vault, training matrix with multi-stage expiration alerts for DA cards, and a real-time compliance health score.

Where Arizona's complexity bites — the Dual License segregation discipline across inventory, sales, METRC sub-accounts, and SOPs; the DA card tracking obligation across multi-role workforces; the vertically integrated Marijuana Establishment chain of custody from cultivation through retail; the health-department posture on product safety and unverified medical claims; the Social Equity ownership-structure commitments — the Verdaxi compliance product earns its place. Multi-tenant architecture is the right shape for Dual License operations: medical and adult-use run as fully separate compliance entities with no implicit data crossing, but staffing, training, security, and ownership infrastructure are shared via cross-tenant workflows. DA cards are pre-templated in the training matrix with the renewal-tracking discipline ADHS expects. Versioned SOPs with per-version acknowledgments prevent the long-tail acknowledgment gaps inspectors specifically check for, particularly where medical and adult-use SOPs diverge inside a Dual License operation.

The product is system-agnostic on track-and-trace. Arizona runs METRC across both AMMA and Prop 207; Verdaxi's reconciliation workflows, audit log, and SOP discipline apply equally to METRC, CCRS, BioTrack, and any successor system — the same operator-side compliance posture works across state boundaries regardless of which track-and-trace platform the state mandates.

For multi-license Arizona operators — particularly Dual License holders running medical and adult-use at the same site, and multi-Establishment operators running multiple vertically integrated facilities — Verdaxi's multi-tenant architecture provides one platform across every license with org-wide rollup and per-license drill-down. Same code path for the single-license Dual License operator and the multi-Establishment portfolio.

Start with the free trial and run a full inspection-prep cycle on your own data, or book a demo to see Arizona-specific checklists and SOP templates side-by-side with what you have in place today.