METRC Cannabis Tracking Requirements (2026)

CG

Chad Griffith, Founder & CEO

FileFlo — AI compliance document intelligence for DOT, OSHA, and EPA regulated businesses. LinkedIn · About

Last reviewed · By Chad Griffith

METRC (Marijuana Enforcement Tracking Reporting Compliance) is the seed-to-sale tracking system used by approximately 20 US state Cannabis Regulatory Authorities to monitor every plant, harvest, package, and sale in regulated cannabis markets. Licensees must tag every plant and package with RFID barcodes and report all events to METRC within state-specific reporting windows. This guide covers reportable event types, reporting deadlines, common compliance violations, and reconciliation procedures.

States Using METRC

METRC operates as the official track-and-trace system in: California (DCC), Colorado (MED), Maine (OCP), Maryland (MMCC), Massachusetts (CCC), Michigan (CRA), Missouri (DCR), Montana (CCD), Nevada (CCB), Ohio (DCC), Oregon (OLCC), West Virginia (OMC), Louisiana, Mississippi, New Jersey (CRC), and several others. Other states use BioTrack THC, state-built systems, or hybrid approaches. Always verify the current system on the state CRA's website before assuming METRC applies.

Reportable Events

Required reportable events typically include: (1) planting — when an immature plant is moved into vegetative growth; (2) flowering transition — moving plants into flowering rooms; (3) harvest — drying weight assignment to a harvest batch; (4) package creation — assigning RFID tag to a finished package; (5) lab sample creation — pulling a sample for testing; (6) lab result receipt — uploading the COA result; (7) package transfer — moving cannabis between licensees with manifest; (8) package conversion — converting flower into extracts or edibles; (9) retail sale — sale to an end consumer or patient; (10) destruction — disposal of cannabis with waste log entry.

Reporting Deadlines

Reporting deadlines vary by state. California's DCC requires immediate reporting of certain events and 24-hour reporting of most others. Colorado MED requires reporting within 24 hours of the event. Michigan CRA requires same-day or next-business-day reporting depending on event type. Multi-state operators must layer deadline rules per state. Late reporting is among the most common citations issued by state CRAs.

Common Violations

Frequent enforcement findings: physical inventory discrepancies vs METRC count (most common), late event reporting, untagged packages found during inspection, transfer manifests missing required information, package weight mismatches at receipt, failure to record waste/disposal events, and conversion records missing yield documentation. Discrepancies above state-defined thresholds typically trigger investigations.

Reconciliation Procedures

Best-practice reconciliation: daily physical inventory cycle counts of high-velocity SKUs; weekly full vault reconciliation; monthly METRC-to-physical reconciliation with documented variance log; written corrective action for any variance over state-defined thresholds. Most state CRAs allow corrections to METRC data with documented justification — but undocumented or repeated corrections trigger investigation.

Frequently Asked Questions

What is METRC and why is it required?

METRC is a state-mandated track-and-trace system that records every event in the cannabis supply chain from plant to consumer sale. It is operated by Franwell, Inc. and used as the official system in approximately 20 US state cannabis programs. State Cannabis Regulatory Authorities require METRC reporting to prevent diversion of legal cannabis to the illicit market and to ensure tax collection on every transaction.

How often must METRC be updated?

Reporting deadlines vary by state and event type. Most states require 24-hour reporting on most events. California requires immediate reporting on some events. Multi-state operators typically configure automated reporting integrations rather than rely on manual data entry to meet deadlines consistently.

What happens if METRC records don't match physical inventory?

Discrepancies trigger increasing levels of state CRA scrutiny. Small variances (within state-defined thresholds, often 1-3%) may require only a documented variance log. Larger variances trigger investigations, potential civil penalties ($1,000-$25,000 per violation), and in willful or repeated cases license suspension or revocation.

Are METRC records public?

No — individual licensee METRC data is confidential. State CRAs have full access. Aggregate market data (statewide harvest yields, sales volumes) is published by some states. Lab COA data may be exposed via consumer-facing QR codes on packaging in states that require it.

How long must METRC records be retained?

Retention rules vary by state but typically run 3-7 years matching the state's overall cannabis recordkeeping retention. Records must include both the METRC system data and supporting documentation (manifests, COAs, destruction logs). Retention applies even if a license is surrendered or revoked.

Authoritative sources

← Back to Cannabis Compliance Guide