Every California cannabis license suspension we have seen in the last three years started the same way: a METRC variance. Not a diversion investigation, not a lab scandal , a number in METRC that did not match a number on a manifest, flagged by a DCC analyst in a quarterly reconciliation report. Everything else cascaded from that one discrepancy.
METRC is the California Department of Cannabis Control's primary audit tool. Before an inspector ever steps onto your premises, DCC has pulled your 30-day package report, your waste events, your transfer manifests, and your pending package count. They know what they are looking for before they ring the bell. The question is whether you know what they are going to find.
This is the pre-audit checklist we use when we run track-and-trace reviews for California cultivators, manufacturers, distributors, and retailers. It is built from 16 CCR section 15049 (cannabis waste documentation), the DCC Disciplinary Guidelines, and published decisions of the DCC Office of Administrative Adjudications. Pair it with our DCC Cannabis Inspection Checklist and you cover the two failure modes behind most California cannabis license actions: bad METRC data and bad premises practices.
Why METRC Audits Matter
DCC treats METRC the way DEA treats ARCOS: as the ground truth against which every physical inspection is measured. When an inspector weighs a pallet of trim, they are asking whether it matches what you told METRC yesterday. Pattern-matching algorithms flag variances by strain, batch, license, and time window. Outliers get referred to enforcement.
16 CCR section 15049 requires licensees to record every cannabis waste event in track-and-trace, including source package, weight, method of rendering unusable and unrecognizable, date and time, witness identity, and final disposal destination. A missing witness entry is a violation. A weight rounded to the gram instead of the tenth is a violation. A destruction entered the day after the physical event is a violation. Each is individually minor. Collectively, they are how DCC builds a suspension case.
The 16 CCR 15000 series governs nearly every operational aspect of your license, and the Disciplinary Guidelines assign presumed penalty ranges to each violation. Cannabis waste documentation failures fall into the moderate-to-major tier, with administrative fines up to $30,000 per day per violation and license suspension as a presumed consequence for repeat findings. METRC variances are not a paperwork problem , they are a license problem.
The Three Numbers That Must Match
Before you look at any of the 14 checkpoints below, understand the reconciliation triangle every cannabis operator must master:
- Physical inventory. What is actually on your scale, on your shelves, in your vault, and in your trim bins right now.
- METRC inventory. What your track-and-trace system says you should have.
- Hauler manifest totals. What left your premises in the last reconciliation window and what arrived on the receiving end.
These three numbers must reconcile daily , not weekly, not at month end. When they do not, the gap is a variance. When the variance exceeds your documented tolerance, it becomes a discrepancy. When a discrepancy goes unresolved for more than 24 hours, DCC enforcement treats it as a diversion indicator , whether or not any diversion actually occurred. The legal standard for an investigation is unresolved variance, not proof of wrongdoing.
The 14-Point METRC Pre-Audit Checklist
1. Pending Package Count (Should Be Zero at End of Day)
Pending packages are packages created without a finalized weight, strain, or batch assignment. They are the single most common finding in DCC audits. Every pending package is an open question about what is actually on your premises. End-of-day protocol must include a pending package sweep, with your closing supervisor signing off on a zero count.
2. 30-Day Variance Analysis (by Strain, by Batch)
Pull a 30-day package report segmented by strain and harvest batch. Compare total weight entered to total weight depleted. The remainder should match current package weights exactly. Variances above 0.5 percent on any single batch are DCC's standard flagging threshold. Variances above 2 percent on any strain get referred to field enforcement.
3. Waste Event Documentation (Same-Day Entry)
Every waste event must be entered in METRC the same business day as the physical destruction. 16 CCR section 15049 does not leave room for end-of-week batching. The entry must include source package, pre-destruction weight, rendering method, date and time, witness identity and badge number, and final disposal destination. Cross-reference every waste event against paper log and video index.
4. Transfer Manifest Reconciliation
For every outbound transfer in the last 30 days, verify that departing scale weight matches METRC package weight matches the manifest printed for the driver matches the weight recorded on the receiving side. Each leg is a separate data entry and a separate opportunity for error. Any gap larger than 1 gram needs a documented explanation.
5. Lab Testing Package Tags
Test samples are the most common source of package weight drift. Verify every lab testing package has a corresponding METRC test result, that sample weight was deducted from the source package at sampling, and that failed lots have correct remediation or destruction entries. Unresolved lab packages are automatic red flags.
6. Destruction Entries (Reason Codes Correct)
METRC requires a reason code for every destruction event. Confirm each of the last 30 days of entries carries the correct code: Waste, Destruction, Decay, Sample, or Pest. Mixing these up is a documentation violation even when the physical event was handled correctly.
7. Adjustment Entries (Documentation)
METRC allows weight adjustments for data entry errors, scale calibration, and moisture loss. Every adjustment must have a written justification in the notes field. Adjustments without notes are presumptively fraudulent under DCC enforcement standards. Back-fill any missing justifications before an audit.
8. Plant Batch to Harvest Batch Traceability
Every harvest batch must trace back to a plant batch with matching strain, plant count, and life cycle. Breaks in this chain create investigations. Cultivators should run a monthly plant-to-harvest traceability report and resolve any gaps immediately.
9. Package Weight Rounding Consistency
METRC accepts weights to three decimal places. Your scale, manifests, paper logs, and METRC entries must use the same precision. Some operators round to the gram in METRC but record tenths on paper. That inconsistency is itself a variance.
10. Employee METRC Permissions Audit
Pull the employee permissions report. Confirm every credential belongs to a current employee with duties matching their permission level. Residual access for terminated employees is a high-severity finding, especially if entries were made in that credential's name after the termination date.
11. System Time-Stamps vs. Physical Events
METRC stamps every entry with date and time. Time-stamps must align with video surveillance, scale logs, badge access, and paper logs. An entry stamped 14 hours after the physical event with no reconciliation is a violation.
12. Sales Receipts vs. Package Depletions
Retailers must reconcile every sales transaction to a package depletion. Run a 30-day comparison of POS report against package depletion log. Discrepancies in either direction require documented explanation before they become diversion flags.
13. Return/Recall Entry Handling
Customer returns, recalls, and product pulls must be entered as receiving transactions and then processed through destruction, remediation, or restocking. Returns are a common failure point because they interrupt the normal flow. Audit the last 12 months and confirm each closed out correctly.
14. Annual WMP Review Cycle
Your written Waste Management Plan is required under the 16 CCR 15000 series and must be available on the premises during any inspection. Review it annually , or whenever you change haulers, rendering methods, or destruction locations , and confirm the procedures in the plan match what your staff actually does and what your METRC entries actually show.
The 30-Day Variance Analysis Framework
Most operators run variance analysis monthly, in a single pass, with one spreadsheet. DCC runs it rolling 30 days, segmented by strain, batch, license type, and employee. Match their methodology.
Run a rolling 30-day report daily. Pull the last 30 days of package activity and compare beginning inventory plus additions minus depletions to ending inventory. Segment by strain and batch , a net-zero variance across your whole operation can hide a 47-gram variance on a single strain, exactly the number that shows up in published OAA decisions.
"Acceptable" variance is what your WMP documents as your tolerance, based on moisture loss curves, scale calibration error, and sampling attrition. Published DCC decisions have accepted WMP tolerances up to 2 percent on cultivation, 0.5 percent on distribution, and 0.1 percent on retail. Anything above documented tolerance is a discrepancy. Anything above 5 percent is a presumptive diversion flag regardless of your WMP.
Same-Day Entry Protocol (The Rule That Kills Most Operators)
The most common finding in DCC waste enforcement is lagged METRC entry: a physical destruction recorded the next day, the next week, or , in cases we have been called to defend , the next month. Under 16 CCR section 15049, destruction must be documented contemporaneously with the physical event, which DCC interprets as same business day.
Build your protocol so every waste event triggers four near-simultaneous actions: physical destruction on camera, METRC entry by a named employee, paper log signature by a witness, and a video timestamp cross-reference in the METRC notes field. These records must align within minutes, not hours. When a discrepancy of more than two hours appears, DCC enforcement treats it as evidence the paper record was fabricated after the fact.
Real DCC Enforcement Cases from METRC Variances
The DCC Office of Administrative Adjudications publishes disciplinary decisions. A representative sample:
A Southern California cultivator with an otherwise clean record received a 45-day suspension after a routine inspection identified a 47-gram variance on a single strain over a 30-day window. Total throughput that month was 2.3 million grams , the variance was less than 0.002 percent. DCC determined the variance was unexplained, no WMP tolerance covered it, and the absence of a contemporaneous explanation elevated it from discrepancy to diversion flag. Suspension upheld on appeal.
An Oakland microbusiness paid a $50,000 administrative fine after DCC found 14 waste events over six months had been entered in METRC the day after the physical destruction. No diversion was alleged. The finding was purely documentary , $3,500 per violation on 14 violations under the Disciplinary Guidelines, plus costs.
A Bay Area retail dispensary received a notice of violation after a 112-gram batch variance on a high-potency concentrate line could not be reconciled to a return, sample, or destruction. The retailer's internal audit had caught the discrepancy three weeks earlier but had not self-reported. DCC specifically called out the delay as an aggravating factor.
These cases share a pattern. The underlying variance is small. The documentation failure is clear. The penalty is severe because cannabis enforcement treats data integrity as a license condition, not a best practice.
Common Reason Code Mistakes
Waste, Destruction, Decay, Sample, and Pest are not interchangeable. Inspectors flag operators who use them inconsistently.
- Waste , routine organic plant material: trim, stems, roots, fan leaves. The highest-volume category for cultivators.
- Destruction , deliberate disposal of finished or in-progress product, usually because of a quality failure, business decision, or recall. Use for anything previously saleable.
- Decay , spoilage or deterioration. Product that was once viable and is no longer, typically due to moisture, age, or storage.
- Sample , material pulled for lab testing, QA, or R&D. Sample entries must tie to a returning lab result or a downstream destruction.
- Pest , material destroyed due to pests, mold, or microbial contamination. Triggers additional reporting obligations; use only when warranted.
Mixing these up is a documentation violation even when the physical destruction was handled correctly.
The 48-Hour Pre-Inspection METRC Walk
When you have reason to believe an inspection is coming , a competitor complaint, a renewal window, a recent enforcement action in your region , run this 48-hour walk:
- Pull the 30-day variance report by strain and batch.
- Resolve any pending packages. Target zero.
- Confirm the last 30 days of waste events all have same-day METRC entries.
- Cross-reference every waste event against paper log, video timestamp, and witness signature.
- Pull the employee permissions report and revoke any stale credentials.
- Confirm your WMP is on-site, current, and signed.
- Run a transfer manifest reconciliation on every outbound shipment in the last 30 days.
If you cannot complete this walk in 48 hours, your operation is not inspection-ready, and the right move is to call your compliance partner before the inspector calls you.
When to Self-Report a Variance
The DCC Disciplinary Guidelines treat voluntary disclosure as a significant mitigating factor. In published decisions, self-reported variances have received administrative fines roughly 30 to 50 percent lower than the same variance discovered by enforcement, and license suspensions have been avoided in cases that would otherwise have produced one.
Self-reporting is not without risk. A disclosure opens the door to a full audit of your last 12 months of METRC data and WMP compliance. Before you self-report, walk through your compliance posture with counsel and a compliance partner who can pressure-test your documentation. The math usually favors disclosure , but only if your underlying house is otherwise in order. If you self-report a 100-gram variance and the audit turns up a missing WMP, untrained METRC operators, and 14 lagged waste entries, you have made things worse, not better.
How BayArea Compliance Helps
We run METRC reconciliation audits on a quarterly or monthly cadence for California cannabis operators. Services include variance analysis with WMP-defined tolerance modeling, same-day waste entry protocol development, written Waste Management Plan drafting and annual review, employee METRC training, destruction event witnessing, and mock DCC inspections.
If you suspect an unresolved variance, an unlogged destruction event, or a METRC protocol your staff is not actually following, we can run a confidential diagnostic before any disclosure decision. AUDIT|360 mock reviews run in 48 to 72 hours and produce a full remediation punch list.
Our cannabis compliance practice is built for operators whose license depends on getting this right. See our cannabis compliance services or call 833-247-OSHA to schedule a METRC review.