TLDR: A mock DEA inspection of a fictional California retailer, minute by minute: the lobby, the scope question, the records request, the totes on the receiving table, the count, the floor, the ownership question, and the entity structure that collapses. Every scene ends with the fix.
The best way to learn how to handle a DEA inspection is to go through one. I do not recommend that as a training plan. Short of the real thing, a mock inspection goes a long way: walking your operation, room by room, question by question, the way an investigator would, before an investigator does.
So that is what this issue is. Below is a mock inspection of a fictional operator, Fake Cannabis Company, LLC, built to illustrate the issues I think cannabis businesses should be concerned about when it comes to DEA inspections. Nothing here describes a real company or a real visit. But every mistake in it is one I can imagine a real operator making, because the habits behind them are everywhere.
The setup: Fake Cannabis Company, LLC is a California retailer selling both adult-use and medicinal cannabis, supplied in part by an affiliated cultivation operation. Before the spring registration window, they did the smart thing on paper: they formed a separate entity to hold the medicinal retail license, and that entity filed the DEA application. Then they went back to running the business exactly as before: one team, one bank account, one vault, product flowing wherever it was needed.
Here is their Tuesday, minute by minute. Watch where it goes wrong, and what the fix would have been.
9:12 AM. The lobby.
Two DEA investigators present credentials at the front desk. The front desk person panics, says “let me find my manager,” and leaves them alone in the lobby for eleven minutes while calling three people who do not pick up. The investigators spend those eleven minutes watching the salesfloor and listening.
The fix: a greeting protocol, one sentence long, that every front-line employee knows: “Welcome. Our designated contact for federal visits is Maria, our compliance lead. I’ll have her here in two minutes.” Who greets is the first line of your inspection protocol. It costs nothing and it sets the tone for the entire visit.
9:23 AM. The first decision.
Maria arrives flustered and starts answering questions immediately, eager to seem cooperative. Ten minutes in, she has speculated about license history, guessed at inventory numbers, and volunteered that the medicinal and adult-use product “shares the vault, but we keep it pretty separate.”
The fix: the second line of the protocol: confirm credentials, then one call. “We cooperate with inspections. Our procedure is that counsel gets a call now so they’re aware, then we can get started.” Ninety seconds. Nobody obstructed anything, and now someone whose job is precision is watching the clock with her. Decide in advance who calls counsel and when, so nobody decides it under pressure.
9:31 AM. The scope question.
“Walk us through what your federal registration covers.” Maria hesitates. The application names the medicinal entity, but in practice the entity is a filing cabinet, not a business. Which license, which inventory, which part of the premises is the federally covered operation? Her honest answer is “it’s all kind of together.” The investigators write that down.
The fix: a one-sentence answer, rehearsed: the registration covers this entity, holding this license, operating in these zones, with these records. If you cannot say that sentence today, that is the gap to close before anyone asks it on your premises.
9:50 AM. The records request.
“Show us receiving and disposition for the covered operation, last thirty days.” The POS mixes adult-use and medicinal sales. Inventory was never tagged by channel. Producing an accounting for just the federal side means reconstructing it line by line, under observation.
And then there is the search itself. The SOPs are in a binder somebody moved. Manifests live in three places: an office folder, an email inbox, and a drive nobody remembers the password to. Maria knows the documents exist. She spends twenty minutes proving it, clicking through folders while two federal investigators watch her look. Nothing about those twenty minutes is a violation. All of it is a message, and the message is: this operation does not have its house in order. That impression follows the investigators through every room, and every answer after it gets a little more scrutiny.
The fix: two habits. First, the dry run: once a quarter, ask “could we produce a complete accounting for the last thirty days, today, at this location?” and treat a no as a project. Second, one indexed federal file, physical and digital, where every registration document, manifest, SOP, and piece of DEA correspondence lives. Documents that surface in minutes tell the investigator you have your house in order before you say a word.
10:40 AM. The receiving area.
On the receiving table sit four totes of bulk flower from the cultivation affiliate, delivered Monday. The labels: “GG4” and a weight, handwritten. No batch identifier that matches the manifest. Nothing designating the material as medicinal or adult-use. The investigator asks: “Is this bulk material part of your federally covered medical inventory?”
Silence. Nobody can say. The paperwork says one thing, the totes say almost nothing, and the inventory system says the totes do not exist yet. The mislabeled bulk has just done three things at once: made the channel line unprovable, made the records unreconcilable, and turned a records question into a diversion question. Because that is how an investigator has to think about untraceable bulk cannabis in a registered facility: not “sloppy,” but “where else could this be going?” The rest of the visit is now about the totes.
The fix: every unit of bulk material carries a batch identifier, source license, weight, and channel designation, matching the manifest and the intake record, and nothing sits on premises that the system says does not exist. Your channel separation is only as good as what is written on the totes. A spot-check rule makes it durable: any staff member can pick any tote and trace it to a manifest and inventory record in under two minutes.
10:52 AM. The intake question.
Still in receiving, an investigator asks the person doing the unloading a simple question: “So when a shipment comes in, what do you guys actually do?”
The honest answer comes out: “We check the count against the invoice and put it away.” That is the whole procedure. Nobody verifies the packaging and labels against regulatory requirements. Nobody confirms the testing paperwork matches the batch. Nobody checks that what is about to go on the shelf is child-resistant, properly marked, and free of anything designed to appeal to a kid. There is no quarantine shelf for product that fails, because nothing has ever failed, because nothing has ever been checked.
The investigator picks up a package from Monday’s delivery: an edible in bright bubble lettering with a grinning cartoon fruit on the front. Maybe it technically passes state rules. Maybe it does not. The problem is that nobody at Fake Cannabis Company can say, because no one ever asked. The last checkpoint between that package and a customer’s home is a receiving process that counts boxes.
Here is why I would take this scene seriously. A federal drug agency has two questions at the center of its mission: where the product goes, which is the diversion question, and who it reaches, which is the kids question. I do not think it is a coincidence that states have been cracking down harder on child-attractive packaging as the federal government steps into cannabis. Keeping product out of the hands of children is going to be a federal focus the same way inversion and diversion are, and the retailer is the last set of hands before the public. An operator who cannot show a working intake control has no answer to “how do you make sure nonconforming product never reaches your shelf?”
The fix: a written intake and quality-assurance procedure that runs on every delivery: manifest match, testing paperwork present and matching the batch, packaging and labeling checked against current requirements, child-resistance and child-appeal screened, and a quarantine shelf with a documented rejection process for anything that fails. One page, one log, ten minutes per delivery. It turns “we count it and put it away” into “every unit on our shelf passed a documented check,” which is the only version of the answer that survives the question.
11:05 AM. The count.
One investigator opens the track-and-trace system. The other walks the vault with a scale. If there is one thing a drug diversion agency knows how to care about, it is the difference between what the system says and what the shelf holds.
The system says one number. The vault says another. Not wildly different. Different enough. And there is no innocent-sounding version of ghost weight: if the physical count runs over the system, the question is where the extra product came from, and that is an inversion question. If it runs short, the question is where the missing product went, and that is a diversion question. Fake Cannabis Company’s real answer is probably mundane: untagged intake, a lazy adjustment months ago, shrink nobody reconciled. But they cannot prove mundane, because the reconciliation was never done. And with both channels commingled on the same shelves, they cannot even say which side of the line the discrepancy lives on. A records gap, a channel gap, and a count gap have compounded into the worst kind of question, in front of the people whose job is to ask it.
The fix: make reconciliation a monthly ritual. Physical count against the system, discrepancies investigated and documented when found, adjustments explained in writing. Ghost weight is easiest to explain when it is one month old and impossible to explain when it is two years old.
11:40 AM. The floor.
An investigator asks a budtender, casually: “So medical and adult-use product, how do you keep those straight?” The budtender does her best. Her version contradicts the SOP, contradicts what Maria said an hour ago, and includes the phrase “usually we just.” Three words, a dozen follow-ups.
The fix: thirty minutes of floor training on the protocol: who answers what, what a helpful accurate deflection sounds like (“Maria handles walk-throughs for visits, want me to grab her?”), and the difference between answering a question and volunteering information. An inspection interviews your staff, not your binder.
12:05 PM. The ownership question.
“Your DEA application lists four owners. State records for your licenses show five financial interest holders. Explain the difference.”
Silence, then scrambling. Nobody in the room knows why the numbers differ. Maybe there is a good reason. Maybe there is not. But nobody can say, and an unexplained difference between what you told the state and what you told the federal government does not read as a paperwork quirk. It reads as a question about what else does not match.
And then the follow-up nobody in the room wants: “We also see monthly payments to a management company. Its agreement gives it a percentage of revenue and approval rights over hiring, vendors, and the bank accounts. Who is behind that company, and why do they appear on no disclosure anywhere?”
This is the question that separates a paperwork problem from a real one. Because a management agreement is a label, not a shield. If the deal walks like ownership, a percentage of the economics plus control over how the business runs, regulators at either level can treat the people behind it as owners or financial interest holders, whatever the document calls them. And if the structure was chosen precisely so those people would not be disclosed, that is not a timing lag or a definitional gap. That is the intentional omission, sitting in the bank records, waiting to be found on someone else’s timeline.
The fix has two layers. First, the disclosure crosswalk memo, written before anyone asks: it lines up the org chart and cap table against every filing, state, local, and federal, and where the lists differ, it says why. Sometimes the reason is legitimate: California’s financial-interest definition captures a lender the federal application did not require, and a multi-state operation may have three correct disclosure lists that do not match each other because three regimes define owner differently. The memo lets you educate the investigators on those definitions, calmly, from a document dated before they arrived. What hurts you is not the difference. It is the difference you cannot explain on the spot.
Second, the harder layer: every management agreement, consulting deal, and revenue share gets analyzed against the ownership and financial-interest definitions it actually lives under. If the substance is ownership, the choices are to disclose it or restructure the deal, made deliberately, with counsel, on your own timeline. A management agreement should be structured with the disclosure analysis done up front. It should never be the mechanism for keeping someone off the paperwork, because the payments are visible, the agreement is discoverable, and the question, once asked, has no good improvised answer.
12:15 PM. The thread that unravels the structure.
The investigators circle back to the entity question. “Your medicinal entity holds the registration. Who employs the staff we talked to today? Which entity’s account took Monday’s deposit? And this manifest shows adult-use product moved into the vault with no paper between the two companies.”
This is where Fake Cannabis Company’s paper structure collapses. Two entities on file with the Secretary of State mean nothing if the business runs as one: same staff with no shared-services agreement, one bank account paying everyone’s bills, inventory borrowed across the line whenever a shelf runs empty. Cosmetic separation may be worse than none, because it hands an investigator a structure that looks engineered on filings and ignored in practice, and it retroactively poisons every answer given earlier in the visit.
The fix: live the structure or do not build it. A shared-services agreement covering shared staff. Separate accounts and books per entity. Intercompany product transfers papered at arm’s length, every time. The structure you describe at 9:31 has to be the structure an investigator can see at 12:15. And if you are deciding right now whether to separate your medical and adult-use operations, or you separated and know the entities mostly run as one: those are the same conversation, with real tradeoffs, tax and licensing included, and it should happen deliberately, with counsel, before a Tuesday like this one.
12:30 PM. The door.
The investigators leave. Fake Cannabis Company spends the next month answering follow-up requests generated by its own improvisation, starting with a very uncomfortable set of questions about four totes of flower and a number the vault could not explain.
None of it required perfection to avoid. It required about nine decisions made in advance: who greets, who calls, what the registration covers, where the records live, what is written on the totes, what gets checked before anything reaches a shelf, whether the count matches, who answers what on the floor, and whether the paperwork and the practice tell one story. Every one of them is on the starter checklist from Issue 1. If you have not walked it with your team, this story is what the walk prevents.
Keep reading
Attorney advertising. This issue is a fictional illustration for general information, not legal advice and not a prediction of how any inspection will proceed. Reading it does not create an attorney-client relationship.