Cannabis and CBD purchasing needs a clear distinction between organizing purchase evidence and deciding whether a transaction is permitted. A purchase order can retain supplier details, documents, quantities and receiving decisions. It cannot establish that a product is lawful to buy or sell merely because a certificate is attached.
This guide covers supplier-side purchasing records for licensed cannabis operators and businesses evaluating CBD products. Their rules differ by product and jurisdiction. Medical products and prescription drugs have separate requirements and should not be folded into a generic “regulated retail” checklist.
Define the category before the document checklist
For a licensed cannabis business, start with the current requirements of the relevant regulator and your authorized compliance lead. Identify the license types involved, allowed activities, product category, transport requirements and reporting system before configuring purchasing fields.
California is one example: the Department of Cannabis Control explains that licensed testing laboratories report results on a certificate of analysis and upload it to the track-and-trace system. That is a California process, not a universal list for every state or CBD product. See DCC's testing laboratory guidance.
CBD also needs separate product review. FDA states that CBD cannot lawfully be marketed by adding it to food or labeling it as a dietary supplement under the framework described on its site. A supplier COA does not override that position or establish permission to sell. Check the particular product and intended market using FDA's cannabis and CBD guidance.