Ohio's Cannabis GMP Rules, in Plain English — and Why CSQ Certification Is Worth It

No. Ohio does not currently mandate third-party GMP or QMS certification for cannabis licensees. The Ohio Division of Cannabis Control (DCC) regulates operations through OAC 1301:18 and ORC Chapter 3796/3780, which require written policies and procedures for safe, sanitary processing — but the rules do not require an outside auditor. Ohio's regulatory trajectory, however, is clearly toward manufacturing-grade oversight: the 2026 pre-roll manufacturing standards under OAC 1301:18-4-01 reference federally aligned manufacturing practices, and edible producers already comply with Chapter 901:3-1 (which adopts 21 CFR Parts 100-169). CSQ certification is voluntary in Ohio today and a proactive step toward where the rules are heading.

Five practical reasons. (1) License renewal confidence — DCC reviewers see documented, third-party-verified compliance. (2) Ahead of the curve — Ohio's trajectory mirrors states that eventually mandated certification; CSQ positions you before the rule changes. (3) Market differentiation — in a competitive dual-use market, CSQ signals quality to retail partners, patients, and adult-use consumers. (4) Operational improvement — many operators report meaningful efficiency gains from documented SOPs, internal audits, and CAPA. (5) Multi-state alignment — operators licensed in Ohio plus other states get a single standard across markets.

OAC 1301:18-4-01 (Processor Manufacturing Requirements) requires Ohio cannabis processors to establish, maintain, and comply with written policies and procedures for safe, sanitary, and clean processing, manufacturing, packaging, and labeling at the licensed premises. The rule covers documented SOPs, sanitation protocols, batch records and traceability, and quality checks for weight, moisture, and consistency. As of 2026, pre-roll manufacturing must meet standards aligned with federally recognized manufacturing practices. Edible cannabis manufacturers must additionally comply with Chapter 901:3-1, which adopts federal food safety standards (21 CFR Parts 100-169).

Cultivators (Level I and Level II) use CSQ Cultivation v2.0.0. Processors performing extraction use CSQ Extraction v2.0.0. Processors performing manufacturing (edibles, vapes, topicals, pre-rolls) use CSQ Manufacturing v2.0.0. Many Ohio processors do both extraction and manufacturing at the same site — Kiwa ASI can combine those audits to minimize disruption. Dispensaries use CSQ Retail v1.0.0. Dispensaries with on-site production use CSQ Deli-Style Retail v1.0.0. Wholesalers and distributors use CSQ Warehousing & Distribution v1.0.0. Operations selling dietary supplement products add the CSQ Dietary Supplement Addendum v2.0.0 on top of a Level 2 base.

Effective in 2026, OAC 1301:18-4-01 requires pre-roll manufacturing to meet standards aligned with federally recognized manufacturing practices. In CSQ terms, this maps to all of Module 2A (cGMP), Section 3C.2.5 (Inhalable Products), and Section 3C.2.5.3 (Non-Cannabinoid Ingredients for Inhalable Products). A practical consequence: food-grade or GRAS ingredients are not appropriate for inhalable cannabinoid products, including infused pre-rolls. Operators planning pre-roll production for the Ohio market should verify ingredient grade, dust cross-contamination controls, and route-of-administration risk assessments before the 2026 standards become enforceable.

Chapter 901:3-1 of the Ohio Administrative Code adopts federal food safety standards under 21 CFR Parts 100-169 and applies to processors making edible cannabis products. Those food-safety requirements line up directly with the cGMP foundation in CSQ Module 2A and the cannabinoid ingestible product requirements in CSQ Section 3C.2.6. If you make Ohio-licensed edibles, you are already operating under federal food-grade rules — CSQ certification documents and verifies that compliance through an accredited third party.

CSQ Level 1 (Modules 1, 2, and 3) is the recommended starting level for almost every Ohio license type — cultivator, processor (extraction or manufacturing), dispensary, deli-style retail, and wholesaler/distributor. HACCP is a CSQ Level 2 requirement, not an Ohio state requirement, so Level 1 is sufficient for compliance positioning. Multi-license or enterprise operators sometimes pursue Level 3 for the unannounced audit window and management-review elements that signal leadership across multiple sites. Operators selling dietary supplement products must hold Level 2 plus the Dietary Supplement Addendum.

There is no single published price because cost depends on six factors: (1) which CSQ standard applies (Cultivation, Extraction, Manufacturing, Retail, Deli-Style Retail, or Warehousing & Distribution); (2) which level you pursue (1, 2, or 3); (3) facility size and complexity; (4) whether this is your initial audit (which adds an offsite documentation evaluation day) or a surveillance audit; (5) whether you need a combined Extraction + Manufacturing audit or the Dietary Supplement Addendum; and (6) whether you also engage Kiwa ASI's separate consulting entity for a pre-assessment. Most Level 1 initial audits run two onsite days plus an offsite documentation day. 

SB 56, signed December 19, 2025 and effective March 20, 2026, is a comprehensive overhaul that consolidates Ohio's medical and adult-use cannabis frameworks under the Division of Cannabis Control (DCC). It strengthens DCC's regulatory authority, streamlines dual-use licensing, and is widely expected to drive additional implementing rules through 2026. For operators, the practical effect is a more unified regulatory regime and continued movement toward manufacturing-grade oversight. Operators should monitor DCC at cannabis.ohio.gov for proposed rules and guidance documents, and plan for implementing rules to roll out through 2026.

Yes — but as separate legal entities to safeguard certification body independence. CSQ certification audits are delivered by ASI Food Safety, LLC (the accredited certification body, ISO/IEC 17065 accredited and CSQ-licensed). Pre-assessments, gap analyses, training, and consulting are delivered by ASI Training and Consulting, LLC. The two entities operate independently to comply with ISO/IEC 17065 impartiality requirements and CSQ certification program rules. Contact info@asifood.com or 1 (800) 477-0778 for a customized Ohio scoping call.