When the Numbers Don't Match: How Track-and-Trace Discrepancies Are Putting Cannabis Retail Licenses at Risk

For cannabis retailers operating in regulated markets, the assumption that compliance is a back-office function has proven costly. Across multiple states, regulatory agencies are moving away from scheduled inspections toward unannounced audits that cross-reference physical inventory counts against state track-and-trace systems—most commonly METRC, but also BioTrackTHC and other state-mandated platforms. What auditors are finding, with troubling regularity, is that the two sets of records frequently disagree.

The penalties attached to these discrepancies are not administrative inconveniences. They represent existential threats. Retailers in California, Colorado, Michigan, and Massachusetts have faced fines exceeding $100,000, mandatory product recalls, and in several documented cases, license suspensions that effectively shuttered operations. For businesses already navigating thin margins and restrictive banking conditions, a single adverse enforcement action can be unrecoverable.

Why Discrepancies Occur More Often Than Retailers Expect

The instinct among many operators is to assume that discrepancies signal deliberate misconduct—diversion, theft, or intentional underreporting. In practice, the majority of mismatches traced through enforcement actions originate from far more mundane sources, which makes them simultaneously easier to prevent and more frustrating to explain to a regulator standing in your stockroom.

Supplier Reporting Errors at the Point of Transfer

When a licensed distributor transfers product to a retail location, that transfer must be accurately logged in the state system before or at the time of physical delivery. Errors made upstream—incorrect package tags, transposed quantities, or failed manifest submissions—arrive at the retail level already embedded in the data. The retailer receives the physical product, reconciles it against the paper manifest, and believes the transaction is complete. Meanwhile, the state system reflects something different. Because most retailers lack the operational bandwidth to independently verify every upstream entry in real time, these inherited errors can compound over weeks or months before surfacing during an audit.

Timing Lags Between Physical and Digital Transactions

State systems require that certain transactions—sales, adjustments, transfers in and out—be recorded within specific windows, often same-day or within 24 hours. During high-volume periods, particularly weekends and promotional events, retail staff may process dozens of transactions in rapid succession. When system latency, internet connectivity issues, or simple human fatigue cause entries to fall outside required windows, the audit trail develops gaps that regulators interpret as potential violations, regardless of intent.

Adjustment Entries Made Without Proper Documentation

Product loss is a reality in cannabis retail. Items are damaged, mislabeled, or returned in unsellable condition. Each of these events requires a formal adjustment entry in the track-and-trace system, accompanied by appropriate documentation. Many retailers make the adjustment entry but fail to preserve the supporting records—or make no entry at all, assuming the discrepancy is too minor to warrant attention. Auditors do not share that assessment.

Recent Enforcement Actions Illustrate the Stakes

In Michigan, the Cannabis Regulatory Agency issued administrative complaints in 2023 against multiple provisioning centers for METRC discrepancies identified during unannounced inspections. Several facilities reported inventory variances exceeding five percent of their recorded stock—a threshold that triggers enhanced scrutiny under state rules. License holders in those cases faced fines structured per-violation, meaning that a single audit identifying 30 separate line-item discrepancies could generate 30 individual penalty assessments.

In California, the Department of Cannabis Control has publicly documented cases in which retailers were found to possess products whose package tags did not appear in METRC at all—often the result of purchasing from a distributor who had failed to complete the transfer manifest. Even where the retailer had no knowledge of the upstream failure, possession of untracked product constitutes a violation under California law. The regulatory posture is unambiguous: the retailer bears responsibility for ensuring that every item on their shelves has a verifiable, unbroken chain of custody in the state system.

Colorado's Marijuana Enforcement Division has similarly increased the frequency of compliance checks focused specifically on seed-to-sale tracking integrity, with particular attention to licensed retailers who have recently changed ownership, expanded locations, or taken on new supplier relationships—all circumstances that regulators associate with elevated diversion risk.

Building Audit Readiness: A Practical Framework

The retailers who weather surprise audits with minimal disruption share a common characteristic: they treat their track-and-trace records as a live operational asset rather than a retrospective reporting obligation. The following framework reflects practices adopted by operators who have successfully navigated regulatory scrutiny.

Conduct Internal Cycle Counts on a Rolling Basis

Rather than waiting for an annual physical inventory, implement a rotating cycle count schedule that covers the entire inventory at least once per month. Each count should be reconciled against the current state system record immediately, with any variances documented, investigated, and corrected before they accumulate.

Verify Incoming Transfers Before Accepting Physical Custody

Establish a receiving protocol that requires staff to confirm the incoming transfer manifest against the state system entry prior to signing off on delivery. If the system record does not match the physical shipment, the discrepancy must be resolved with the distributor before the transfer is accepted. This single practice eliminates the largest category of inherited upstream errors.

Assign Dedicated Track-and-Trace Accountability

In operations with more than three or four staff members, compliance data entry should not be a shared, informal responsibility. Designate a specific individual—or a primary and backup—who owns the accuracy of the state system record. Accountability structures reduce the frequency of missed entries and create a point of contact when regulators have questions.

Maintain Supporting Documentation for Every Adjustment

For each inventory adjustment entry, retain the supporting record—a photograph of damaged product, a return authorization from the supplier, a staff incident report—in a format that can be produced during an audit. Digital records stored in a cloud-accessible system are preferable to paper files that may not be immediately accessible during an unannounced inspection.

Run Pre-Audit Simulations Quarterly

At least once per quarter, conduct an internal mock audit using the same methodology a state inspector would apply: pull a random sample of SKUs, count physical units, and compare against the state system record. Treat any variance as a genuine compliance event, even if the discrepancy appears minor. This practice surfaces systemic issues—staff training gaps, system configuration errors, supplier data problems—before they become regulatory findings.

The Broader Implication for Supplier Relationships

For retailers sourcing product through multiple distributors and suppliers, the track-and-trace compliance burden extends beyond internal operations. Upstream partners who consistently submit inaccurate or late transfer manifests create downstream liability that the retailer ultimately absorbs. As part of supplier vetting and ongoing relationship management, retailers should request documentation of a prospective partner's METRC compliance record and establish contractual provisions that assign responsibility for correcting supplier-originated data errors.

Platforms that facilitate B2B cannabis transactions are increasingly incorporating compliance verification tools that flag transfer manifest inconsistencies before they reach the retail level—a development that reflects the industry's recognition that track-and-trace integrity is a shared supply chain responsibility, not merely a retail problem.

The regulatory environment is not becoming more lenient. As state agencies develop more sophisticated data analytics capabilities, the probability of a discrepancy going undetected diminishes with each passing year. Retailers who invest in audit readiness now are not simply avoiding fines—they are protecting the license that every other aspect of their business depends upon.