Ohio's Cannabis GMP Rules and Why CSQ Certification Is Worth It

No — although GMP itself is mandatory. Ohio does not currently mandate third-party GMP or QMS certification for cannabis licensees. The Ohio Division of Cannabis Control (DCC) regulates operations through ORC Chapter 3796 — the Marijuana Control Program, as consolidated by SB 56 — and OAC 1301:18, which make written GMP policies and procedures mandatory for every cultivator and processor (and processors should expect an Ohio Department of Agriculture GMP inspection before each license renewal), but do not require third-party GMP certification. That oversight is already manufacturing-grade, and it keeps tightening: the GMP rule (OAC 1301:18-4-01, effective January 1, 2026) is modeled on FDA food cGMP, new packaging and single-serving (pre-roll) standards took effect September 11, 2026, and a proposed DCC rule (OAC 1301:18-6-06) would make a GMP inspection a condition of issuing or renewing every processor's certificate of operation. CSQ certification is voluntary in Ohio today — it is how an operator documents and independently verifies the GMP it already owes.

Five practical reasons. (1) License renewal confidence — DCC reviewers see documented, third-party-verified compliance. (2) Ahead of the curve — Ohio's trajectory mirrors states that eventually mandated certification; CSQ positions you before the rule changes. (3) Market differentiation — in a competitive dual-use market, CSQ signals quality to retail partners, patients, and adult-use consumers. (4) Operational improvement — many operators report meaningful efficiency gains from documented SOPs, internal audits, and CAPA. (5) Multi-state alignment — operators licensed in Ohio plus other states get a single standard across markets.

OAC 1301:18-4-01 (Cultivator and Processor Good Manufacturing Processes, effective January 1, 2026) requires Ohio cultivators and processors to establish, maintain, and comply with written policies and procedures for the safe, sanitary, and clean cultivation and manufacturing of cannabis at the licensed premises. The rule is modeled on FDA food cGMP: personnel hygiene, sanitary operations and facilities, equipment and utensils, process controls — including allergen cross-contact and water-activity (moisture) controls — and appropriate quality-control operations. Related rules complete the picture: batch records and traceability (OAC 1301:18-5-03/-06 for cultivators and 1301:18-6-03/-05 for processors), packaging and labeling including the universal THC symbol (OAC 1301:18-4-04 and 18-4-19 to 18-4-21, effective September 11, 2026), and single-serving-unit standards for pre-rolls (OAC 1301:18-4-23, effective September 11, 2026). Cultivators and processors issued a certificate of operation before January 1, 2026 may request an exemption from a specific mandate that would require a major modification of an immutable, structural aspect of the licensed premises, if they also meet the variance factors in OAC 1301:18-9-06 (paragraph (H)). There is no broader grandfathering; any other relief would need a DCC variance under OAC 1301:18-9-06.

Cultivators (Level I and Level II) use CSQ Cultivation v2.0.0. Processors performing extraction use CSQ Extraction v2.0.0. Processors performing manufacturing (edibles, vapes, topicals, pre-rolls) use CSQ Manufacturing v2.0.0. Many Ohio processors do both extraction and manufacturing at the same site — Kiwa ASI can combine those audits to minimize disruption. Dispensaries use CSQ Retail v1.0.0. Dispensaries with on-site production use CSQ Deli-Style Retail v1.0.0. Transport and storage operations use CSQ Warehousing & Distribution v1.0.0 (Ohio has no separate distributor license; licensees transport product to other licensees under OAC 1301:18-3-13, with transfer manifests and bulk packaging under OAC 1301:18-3-16). Operations selling dietary supplement products add the CSQ Dietary Supplement Addendum v2.0.0 on top of a Level 2 base.

Ohio regulates pre-rolls as "single serving units" (raw and infused). Two 2026 rules matter: the new GMP rule (OAC 1301:18-4-01, effective January 1, 2026) applies FDA-style manufacturing practices to all processor production, including pre-rolls; and OAC 1301:18-4-23 (effective September 11, 2026) adds single-serving-unit requirements for lots, testing, packaging, and labeling. In CSQ terms, this maps to Module 2A (cGMP), Section 3C.2.5 (Inhalable Cannabinoid Products), Section 3C.2.5.3 (Inhalation Grade Ingredients), and — for infused pre-rolls — Section 3C.2.2.3. A practical consequence: food-grade or GRAS ingredients are not appropriate for inhalable cannabinoid products, including infused pre-rolls. Operators planning pre-roll production for the Ohio market should verify ingredient grade, dust cross-contamination controls, and route-of-administration risk assessments now — the single-serving-unit standards have applied since September 11, 2026.

Ohio's edible rules changed with the 2025–26 rule migration. Edible production now falls under the DCC's GMP rule (OAC 1301:18-4-01, effective January 1, 2026), which is modeled on FDA food cGMP — allergen cross-contact controls, water-activity (safe-moisture) controls, sanitation, and quality control — and processors should expect an Ohio Department of Agriculture GMP inspection before each license renewal. Edible ingredient lists follow federal labeling conventions (21 CFR Part 101, per OAC 1301:18-4-20). Those requirements line up directly with the cGMP foundation in CSQ Module 2A and the cannabinoid ingestible product requirements in CSQ Section 3C.2.6. If you make Ohio-licensed edibles, you are already operating under FDA-style food-grade rules — CSQ certification documents and verifies that compliance through an independent third party.

CSQ Level 1 (Modules 1, 2, and 3) is the recommended starting level for almost every Ohio operation — cultivators, processors (extraction or manufacturing), dispensaries, deli-style retail, and licensees' own transport/storage operations. HACCP is required from CSQ Level 2 up, not an Ohio state requirement, so Level 1 is sufficient for compliance positioning. Multi-license or enterprise operators sometimes pursue Level 3 for the unannounced audit window and management-review elements that signal leadership across multiple sites. Operators selling dietary supplement products must hold Level 2 plus the Dietary Supplement Addendum.

There is no single published price because cost depends on six factors: (1) which CSQ standard applies (Cultivation, Extraction, Manufacturing, Retail, Deli-Style Retail, or Warehousing & Distribution); (2) which level you pursue (1, 2, or 3); (3) facility size and complexity; (4) whether this is your initial audit (which adds an offsite documentation evaluation day) or an annual recertification audit; (5) whether you need a combined Extraction + Manufacturing audit or the Dietary Supplement Addendum; and (6) whether you also engage Kiwa ASI's separate consulting entity for a pre-assessment. Most Level 1 initial audits run one to two days onsite plus an offsite documentation day. 

SB 56, signed December 19, 2025 and effective March 20, 2026, is a comprehensive overhaul that consolidates Ohio's medical and adult-use cannabis frameworks under the Division of Cannabis Control (DCC). It repeals the separate adult-use chapter (ORC 3780), moves both programs into ORC Chapter 3796 (the Marijuana Control Program), combines medical and adult-use licenses into dual-use licenses, and requires DCC to adopt a series of new implementing rules. For operators, the practical effect is a more unified regulatory regime and continued tightening of manufacturing-grade oversight. Operators should monitor DCC's proposed rules and guidance at com.ohio.gov/divisions-and-programs/cannabis-control — including a proposed rule (OAC 1301:18-6-06) that would require an Ohio Department of Agriculture (or equivalent) GMP inspection of every processor before its certificate of operation is issued or renewed.

Yes — but as separate legal entities to safeguard certification body independence. CSQ certification audits are delivered by ASI Food Safety, LLC (the accredited certification body, ISO/IEC 17065 accredited and CSQ-licensed). Pre-assessments, gap analyses, training, and consulting are delivered by ASI Training and Consulting, LLC. The two entities operate independently to comply with ISO/IEC 17065 impartiality requirements and CSQ certification program rules. Contact US.Info@kiwa-asi.com or 1 (800) 477-0778 for a customized Ohio scoping call.