Nevada GMP for Cannabis
Nevada licenses and inspects every cannabis establishment — cultivation, production, sales, distribution, testing, and consumption lounges — through the Cannabis Compliance Board. Its manufacturing-practice (GMP) rules apply to cultivation, production, and sales facilities and consumption lounges (NAC 678B.460–678B.523), and production facilities also follow Nevada's cannabis-product production rules (NAC 678B.370–678B.447). Nevada does not require a third-party GMP certificate — but CSQ certification is an independent, third-party audit of the GMP program Nevada's rules already demand.
Nevada's Cannabis GMP Rules and Why CSQ Certification Is Worth It
START HERE
Does Nevada Require Cannabis Operators to Be GMP Certified?
WHO REGULATES WHAT
One regulator: the Cannabis Compliance Board
Nevada's medical and adult-use cannabis establishments are both regulated by the Cannabis Compliance Board (CCB) — a five-member board generally modeled after the Nevada Gaming Control Board; the CCB took over cannabis regulation from the Department of Taxation in 2020. Cultivation, production, sales, distribution, and testing establishments and consumption lounges are all CCB-licensed under NRS Title 56 and inspected under the Board's regulations (NAC Chapters 678A, 678B and 678D).
THE REQUIREMENT
Mandatory GMP rules + CCB inspection, not a certificate
Cultivation, production, and sales facilities and consumption lounges must follow Nevada's mandatory GMP rules (NAC 678B.460–678B.523); a production facility also meets the production and food-safety rules of NAC 678B.370–678B.447; and every lot is lab-tested before sale (NAC 678B.235). No accredited third-party GMP certificate is required, Nevada names no private GMP standard, and the GMP duties are Nevada's own — not federal 21 CFR.
WHERE CSQ FITS
Voluntary — third-party proof above Nevada's GMP floor
CSQ is a cannabis-specific GMP certification, audited and issued by ASI Food Safety, LLC, an ISO/IEC 17065-accredited certification body licensed by CSQ. Nevada doesn't require it, but it gives independent, audit-ready evidence on top of Nevada's mandatory GMP rules — valuable for CCB inspection readiness, diligence, and multi-state operators.
What Nevada actually requires
Nevada runs a dual market: a medical program (voter-approved in 2000; dispensary framework via Senate Bill 374 of 2013; NRS Chapter 678C) and an adult-use program (the Regulation and Taxation of Marijuana Act, Question 2 of 2016; retail sales began July 2017; NRS Chapter 678D). Both are regulated by the Cannabis Compliance Board (CCB) — a five-member board appointed by the Governor and generally modeled after the Nevada Gaming Control Board. The CCB was created by Assembly Bill 533 of 2019 and took over cannabis regulation from the Department of Taxation in 2020. The framework is NRS Title 56 and the CCB's regulations, now codified as NAC Chapters 678A, 678B and 678D — still citable as the Nevada Cannabis Compliance Regulations (NCCR), but the old Regulation 1–15 numbering is historical.
In Nevada, GMP is the law. The CCB's manufacturing-practice rules for the cultivation and preparation of cannabis (NAC 678B.460–678B.523, formerly NCCR Regulation 10) require cultivation, production, and sales facilities and consumption lounges to keep a quality-control unit and written production and process controls assuring “identity, strength, quality and purity,” with sanitary building, water, pest, and waste controls. For a cannabis production facility — the maker of edibles, concentrates, and infused products — the production rules (NAC 678B.370–678B.447, formerly Regulation 9) add extraction SOPs, closed-loop systems for hydrocarbon and CO₂ extraction, a certified food protection manager, and a HACCP plan for special processes such as canning. Every lot is tested before sale by an independent laboratory that must become ISO/IEC 17025-accredited within one year of licensure (NRS 678B.290; NAC 678B.235). Distinctively, Nevada carves cannabis production facilities out of the state food code (NRS and NAC chapter 446; NAC 678B.238) — they are regulated and inspected by the CCB under the cannabis rules, not by a health department. What Nevada does not do is require an accredited third-party GMP certificate — its rules name no private GMP or food-safety standard (no SQF, BRCGS, FSSC, ISO 22000/22716, or CSQ), and the GMP duties are Nevada's own, not federal 21 CFR Part 111 or 117. GMP is verified by CCB licensing and inspection. So in Nevada CSQ is voluntary: an independent, third-party audit of the GMP program Nevada's rules already demand.
FIND YOUR PATH
Match Your Nevada License to the Right CSQ Standard
Cannabis Cultivation Facility
NRS 678A.090 · CCBSTANDARD
CSQ Cultivation v2.0.0
MINIMUM LEVEL
Level 1
PREP TIME
6–9 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
Grows cannabis for other licensees. Foundation: cGACP (good agricultural and collection practices) plus cGMP, with Nevada's GMP rules (a quality-control unit and sanitation — NAC 678B.460–678B.523) and mandatory pre-sale testing of every lot by an independent, CCB-licensed lab that must become ISO/IEC 17025-accredited within one year of licensure (NRS 678B.290; NAC 678B.566).
Cannabis Production Facility
NRS 678A.125 · CCBSTANDARD
CSQ Extraction / Manufacturing v2.0.0
MINIMUM LEVEL
Level 1
PREP TIME
6–9 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
The maker of edibles, concentrates, and infused products — and the license where Nevada's rules bite hardest. On top of Nevada's GMP rules, the production rules require extraction SOPs, closed-loop systems for hydrocarbon and CO₂ extraction (with Nevada's own 99% purity floor for those solvents; ethanol must be food-grade), and a certified food protection manager (NAC 678B.400, 678B.420); this is where CSQ maps most directly. CSQ items to watch: process gases, including CO₂, at ≥99.5% purity with CO₂ that is beverage-grade or better; ethanol at ≥99.5% purity and not denatured (expected for extraction, required when ethanol is an ingredient); and inhalation-grade ingredients. Nevada's own edible rules apply on top: 10 mg THC per serving and 100 mg per package, lab-verified homogeneity of potency before sale, and the Nevada Universal Cannabis Symbol stamped or molded on each serving (NRS 678D.420; NAC 678B.403, 678B.599).
Cannabis Sales Facility
NRS 678A.130 · CCBSTANDARD
CSQ Retail v1.0.0
MINIMUM LEVEL
Level 1
PREP TIME
4–6 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
An adult-use cannabis retail store or a medical cannabis dispensary. Built on cGHP (good handling practices) — storage, handling, inventory control, and seed-to-sale tracking in Metrc, the CCB-designated system, plus product-hold and withdrawal handling. Nevada's GMP rules apply here too, including a quality-control unit (NAC 678B.490). If customers can see or smell exposed flower (for example, smell-jar display samples), confirm with the certification body whether your scope is CSQ Deli-Style Retail.
Adult-Use Cannabis Distributor
NRS 678A.030 · CCBSTANDARD
CSQ Warehousing & Distribution v1.0.0
MINIMUM LEVEL
Level 1
PREP TIME
4–6 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
Transports cannabis and cannabis products between adult-use cannabis establishments. Built on cGDP (good distribution practices) — storage, transport, and traceability, with transportation manifests generated in the seed-to-sale system (NAC 678D.020). Parts of Nevada's GMP rules bind distributors too — building, water, lighting, sanitation, and waste rules (NAC 678B.460–678B.475), employee cleanliness (NAC 678B.520), and the no-salvage rule (NAC 678B.523) — though the quality-control-unit rule (NAC 678B.490) does not.
Cannabis Independent Testing Laboratory
NRS 678B.290 · ISO/IEC 17025STANDARD
ISO/IEC 17025
MINIMUM LEVEL
N/A
PREP TIME
Varies
AUDIT LENGTH
Per accreditation body
Nevada requires product testing by an independent, CCB-licensed laboratory that becomes ISO/IEC 17025-accredited within one year of licensure (NRS 678B.290). CSQ does not certify testing labs; it requires certified operations to use ISO/IEC 17025-accredited labs for compliance testing — lab-competence accreditation, not the ISO/IEC 17065 accreditation held by product-certification bodies.
NEVADA REQUIRES VS. CSQ GOES FURTHER
What's a State Rule, and What's a CSQ Best Practice?
What Nevada requires (the legal floor)
- A CCB license for each establishment — NRS 678B.250 (adult-use) or NRS 678B.210 (medical; since 2024 issued or renewed only where a locality bans adult-use establishments, NRS 678B.215); program rules in NRS Chapters 678C and 678D; regulations at NAC Chapters 678A, 678B and 678D
- Mandatory GMP rules for cultivation, production, and sales facilities and consumption lounges — quality-control unit, written production and process controls, sanitation — NAC 678B.460–678B.523
- Production controls: extraction SOPs, closed-loop systems for hydrocarbon and CO₂ extraction, a certified food protection manager, and a HACCP plan for special processes — NAC 678B.373, 678B.400, 678B.420
- Pre-sale testing of every lot by an independent laboratory, ISO/IEC 17025-accredited within one year of licensure — NRS 678B.290; NAC 678B.235, 678B.566
- The Nevada Universal Cannabis Symbol on edible packaging, and stamped or molded on each serving of an edible (limited exceptions) — NAC 678B.596, 678B.599
- Edible THC limits: 10 mg per serving and 100 mg per package (other product forms differ) — NRS 678D.420; NAC 678B.403
- Opaque, child-resistant packaging and mandated warnings; no products shaped as a lollipop or bearing the likeness of a person, animal, or fruit — NRS 678B.520; NAC 678B.596
- Seed-to-sale tracking in Metrc, the CCB-designated system, with records kept at least five years — NRS 678B.505; NAC 678B.214, 678B.217
- No accredited third-party GMP certificate is required — Nevada names no private GMP standard, and its GMP is its own, not 21 CFR
What CSQ adds (voluntary best practice)
- An independent certificate audited and issued by ASI Food Safety, LLC, an ISO/IEC 17065-accredited, CSQ-licensed certification body — audit-ready evidence beyond CCB inspection
- A documented system for staying compliant with Nevada's own rules (Section 1.3, Regulatory Compliance), including the GMP and production rules of NAC 678B, with CSQ's GMP controls on top
- A documented internal audit program (Section 1.5) and CAPA system (Section 1.6)
- An annual mock recall (Section 1.8) and verified traceability test — recall, mock-recall, and product-withdrawal procedures that Nevada's rules do not require
- Cannabinoid and non-cannabinoid waste streams kept completely separated (Section 2A.4 / 2B.4)
- Process gases, including CO₂, at ≥99.5% purity, and CO₂ that is beverage-grade or better — medical-grade is not acceptable (Nevada's own floor is 99% purity)
- Inhalation-grade ingredients for inhalable products (food-grade/GRAS is not sufficient)
- CCB inspection readiness, investor/lender/M&A diligence, multi-state standardization, and buyer assurance
- A multidisciplinary HACCP team with a HACCP-certified individual and certified backup (Level 2 and above; CSQ Retail uses a basic HACCP module) — Nevada requires a HACCP plan only for special processes
- What CSQ does not replace: CCB licensing and inspection, mandatory lab testing, and the per-serving Nevada Universal Cannabis Symbol stamp/mold (NAC 678B.599) remain the operator's duty
Quick glossary — the terms that show up in a Nevada CSQ audit
Nevada cannabis laws
Cannabis Compliance Board (CCB)
Nevada Cannabis Compliance Regulations (NCCR)
Cannabis production facility
Nevada GMP rules (NAC 678B.460–678B.523)
Nevada Universal Cannabis Symbol
ISO/IEC 17025
ISO/IEC 17065
What a CSQ Audit Actually Looks Like
Scoring (100-point scale)
How CSQ scores you and what it means for your certificate
| Score | Outcome | Surveillance Cycle |
|---|---|---|
| 80–100 | Certificate issued | Annual recertification audit |
| 70–79 | Certificate issued | 6-month surveillance audit |
| Below 70 | No certificate | 6-month wait before re-audit |
Findings categories
Auto-fail finding
A requirement has not been implemented and is a significant risk to product safety and quality. Scored –100 (automatic failure): a single Critical finding fails the audit, no matter the other scores.
Significant gap
A gap against a CSQ requirement that, if not addressed, will likely lead to a risk to product safety and quality. Requires an approved corrective action within 30 calendar days.
Isolated finding
A gap against a CSQ requirement that, if not addressed, may lead to a risk to product safety or quality — often an isolated documentation or recordkeeping lapse. Still requires an approved corrective action within 30 calendar days.
Audit timing & certificate validity
What to expect onsite and on the calendar
| Item | Detail |
|---|---|
| Level 1 audit | Minimum 1 day onsite + 0.5 day report time |
| Level 2 audit | Minimum 1.5 days onsite + 1 day report time |
| Level 3 audit | Minimum 2 days onsite + 1 day report time (Level 3 audits are unannounced) |
| Initial audit add-on | +1 day for offsite documentation evaluation (all levels) |
| Corrective action window | 30 days to close nonconformities |
| Certificate validity | 1 year + 45 days from audit date |
| Unannounced audit | At least one every 3 years, at every level |
| Provisional certificate | Only where licensing requires an audit before a new operation opens and no records exist yet (valid 6 months; a follow-up audit then issues the full certificate) |
Nevada cannabis rules and corresponding CSQ 2.0 sections
| Requirement | Citation | CSQ Coverage |
|---|---|---|
| CCB licensing (cultivation, production, sales, distribution, lab, lounge) | NRS 678B.210, 678B.250; NAC Chapters 678A, 678B and 678D | Module 1 (CSQMS) + Section 1.3 (Regulatory Compliance) |
| Quality-control unit; written production and process controls; sanitation (cultivation, production, sales, lounges) | NAC 678B.460–678B.523 (formerly NCCR Reg. 10) | Section 2A.12 (Production and Process Controls) + 2A.3 (Cleaning and Sanitation) + 2A.10.2 / 2A.10.4 (Acceptance and Release; Hold and Release); Retail and W&D: 2B.11, 2B.3, 2B.9.2 / 2B.9.4 |
| Extraction SOPs; closed-loop hydrocarbon/CO₂ extraction; certified food protection manager | NAC 678B.400, 678B.420 (formerly NCCR 9.020, 9.015) | Section 2A.12.1 (Standard Operating Procedures) + Extraction Sections 3B.1.1–3B.1.2 + Section 2A.13.2 (Personnel Training); the food protection manager stays a Nevada duty |
| Employee hygiene and pre-sale QA testing | NAC 678B.226, 678B.229, 678B.235 (formerly NCCR 6.090, 6.092, 6.100) | Section 2A.13 / 2B.12 (Personnel Requirements: health, hygiene, handwashing) + Section 2A.12.9 / 2B.11.7 (Product Sampling and Testing) |
| Edible THC limits; Universal Cannabis Symbol on edible packaging + per-serving stamp | NRS 678D.420; NAC 678B.403, 678B.596, 678B.599 (formerly NCCR 9.045, 12.015, 12.020) | Section 2A.12.8 (Product Labeling and Packaging) / 2B.11.6 (Product Labeling) — CSQ verifies labels against Nevada's rules; it sets no dose limit of its own |
| Independent laboratory testing | NRS 678B.290; NAC 678B.530–678B.575 (formerly NCCR Reg. 11) | Section 2A.12.9 / 2B.11.7 (Product Sampling and Testing) — CSQ requires ISO/IEC 17025 labs |
| Seizure and quarantine; substantial-hazard suspension; hold orders once rules are adopted (no recall rule) | NAC 678B.104; NRS 678B.387–678B.3875; NAC 678A.540 (formerly NCCR 4.065); NRS 678A.455 (hold orders; regulations pending) | Section 1.8 (Product Recalls and Withdrawals) + Section 1.6 (CAPA) |
| Seed-to-sale tracking (Metrc) + records kept at least five years | NRS 678B.505; NAC 678B.214, 678B.217 (formerly NCCR 6.080, 6.082) | Section 2A.10.1 / 2B.9.1 (Identification and Traceability) + Section 1.4 (Documentation and Recordkeeping) |
How to Prepare | A Realistic Path to CSQ Certification
Why Nevada Operators Choose Kiwa ASI
ISO/IEC 17065 + CSQ-Licensed
Audits and certificates are issued by ASI Food Safety, LLC — an ISO/IEC 17065-accredited certification body licensed by CSQ.
Food-grade rigor for cannabis
Our auditors are credentialed food safety, GMP, and HACCP professionals with cannabis-specific qualifications. Cannabis is being regulated like food. We've been doing food for decades.
Direct scheduling, clear scope
Pre-audit scoping clarifies level, scope, and Module 3 requirements before you're onsite. Audit reports are turned around inside the standard CSQ timeline.
Training and consulting available
Pre-assessments and gap analyses are delivered by ASI Training and Consulting, LLC, a separate legal entity, kept structurally separate from the certification body to safeguard impartiality under ISO/IEC 17065.
Surveillance and recertification
We manage the full CSQ cycle: annual recertification before your certificate expires, plus the 6-month surveillance audit required after a 70–79 score. Continuity matters as much as the initial certificate.
Global Kiwa network
Operations in 30+ countries. Useful when a Nevada operator expands into other state markets or builds an international supply chain.
Frequently Asked Questions About Nevada Cannabis GMP & CSQ Certification
No. Nevada does not mandate an accredited third-party GMP certificate, and it names no private GMP standard. But GMP practices are far from optional: cultivation, production, and sales facilities and consumption lounges must follow Nevada's mandatory GMP rules (NAC 678B.460–678B.523); a cannabis production facility must also meet the production rules (NAC 678B.370–678B.447, including a certified food protection manager); and every lot must be lab-tested before sale (NAC 678B.235). CSQ certification is voluntary: an independent, third-party audit of that program.
Both. Nevada legalized medical cannabis by voter initiative in 2000 (dispensary framework via Senate Bill 374 of 2013) and adult-use under the Regulation and Taxation of Marijuana Act (Question 2 of 2016); adult-use retail sales began in July 2017. Both are regulated by the Cannabis Compliance Board (CCB).
The Cannabis Compliance Board (CCB) — a five-member board appointed by the Governor and generally modeled after the Nevada Gaming Control Board. It was created by Assembly Bill 533 of 2019 and took over cannabis regulation from the Department of Taxation in 2020. It is not a health department. The framework is NRS Title 56 and the Board's regulations, codified as NAC Chapters 678A, 678B and 678D.
Yes — as practices, not a certificate. A cannabis production facility must follow Nevada's GMP rules (NAC 678B.460–678B.523, which also bind cultivation and sales facilities) and its production rules (NAC 678B.370–678B.447: extraction SOPs, closed-loop systems for hydrocarbon and CO₂ extraction, a certified food protection manager, a HACCP plan for special processes). Nevada verifies this through CCB licensing, inspection, and lab testing — and its rules are Nevada's own, not federal 21 CFR Part 111 or 117. In fact Nevada expressly exempts cannabis production facilities from the state food code (NAC 678B.238) and regulates them under the cannabis rules instead.
No. GMP compliance is verified through CCB licensing, inspection, and mandatory lab testing — not by a required outside auditor. The testing laboratory tests the product; it does not certify the producer's GMP program. A CSQ certificate is voluntary and does not replace CCB inspection or lab testing.
No. Nevada's cannabis regulations (NAC Chapters 678A, 678B and 678D) name no private food-safety or GMP standard for producers — not CSQ, SQF, BRCGS, FSSC, or ISO 22000/22716. The only ISO standards in Nevada's cannabis rules sit on the laboratory side — chiefly ISO/IEC 17025 accreditation for testing labs (NRS 678B.290) — and none applies to cultivators, producers, or retailers. CSQ is a voluntary, third-party certification audited and issued by ASI Food Safety, LLC, an ISO/IEC 17065-accredited certification body licensed by CSQ; it is built to meet — not to satisfy or replace — Nevada's rules.
Nevada requires its Universal Cannabis Symbol — a rounded, upward-pointing warning triangle with a bold exclamation mark above the letters “THC” (not Colorado's red diamond) — on the packaging of edible cannabis products (NAC 678B.596), and stamped or molded on each serving of an edible (NAC 678B.599). Two exceptions: liquid edibles need no stamp if they are packaged as NAC 678B.596 requires, and edibles that are impractical to stamp (such as bulk goods or powders) may instead have each serving individually wrapped with the symbol on the wrapper, under a Board-approved exemption. That per-serving stamp is a manufacturing and mold constraint — a CSQ certificate does not discharge it. CSQ documents the controls around it, but the symbol duty remains the operator's.
For edibles, no more than 10 mg of THC per serving and 100 mg per package (NRS 678D.420; NAC 678B.403), and each serving of a multi-serving edible must be physically demarked and easily separable (NAC 678B.596). Other product forms have different caps — for example capsules and tinctures have higher per-package limits — so the 10 mg / 100 mg figures are an edibles rule, not a blanket cap for every product.
A cannabis production facility (edibles, concentrates, infused products) uses CSQ Extraction or Manufacturing v2.0.0; a cultivation facility uses CSQ Cultivation v2.0.0; a sales facility (retail store or dispensary) uses CSQ Retail v1.0.0, or CSQ Deli-Style Retail v1.0.0 if customers can see or smell exposed flower; an adult-use cannabis distributor fits CSQ Warehousing & Distribution v1.0.0; and consumption lounges are scoped case by case. Testing laboratories follow ISO/IEC 17025 (CSQ does not certify labs but requires certified operations to use ISO/IEC 17025-accredited labs). Kiwa ASI can combine scopes into one coordinated audit.
Because it adds independent, third-party verification on top of the GMP rules Nevada already requires — and adds the recall, mock-recall, and product-withdrawal procedures Nevada's rules do not require (Nevada has no recall rule; instead the CCB can seize or quarantine product (NAC 678B.104; NAC 678A.520), suspend operations for a substantial public-health hazard (NRS 678B.3875; NAC 678A.540), and publish public health and safety bulletins; a 2025 law also authorizes hold orders once the Board adopts rules for them (NRS 678A.455)). The highest-value cases: CCB inspection readiness, investor / lender / M&A due diligence, multi-state standardization (including a harder-posture state like New York, which mandates a third-party GMP audit), and buyer assurance.
Yes — but as separate legal entities to safeguard certification-body independence. CSQ certification audits are delivered by ASI Food Safety, LLC (the accredited certification body, ISO/IEC 17065 accredited and CSQ-licensed). Pre-assessments, gap analyses, training, and consulting are delivered by ASI Training and Consulting, LLC. The two operate independently to comply with ISO/IEC 17065 impartiality rules.