Compliance
Our commitment to regulatory compliance and industry standards
Regulatory Compliance
JointCommerce operates in full compliance with all applicable federal, state, and local laws governing cannabis technology platforms. We maintain strict compliance standards to ensure a safe, legal marketplace.
Compliance Framework
State Cannabis Licensing
All dispensaries verified for valid state cannabis licenses and regulatory compliance
Data Privacy & Security
CCPA compliant with industry-standard encryption and security practices
Age Verification
21+ age gating and verification across all platform touchpoints
Product Testing
Lab-tested products with COA (Certificate of Analysis) documentation
Advertising Standards
Compliant cannabis advertising following state-specific regulations
Transaction Compliance
Secure payment processing with cannabis-compliant financial partners
Certifications & Standards
CCPA Compliant
California Consumer Privacy Act
SOC 2 Type II
Security & Data Protection
PCI DSS
Payment Card Industry Data Security Standard
HIPAA Ready
Medical Information Protection
State-by-State Compliance
JointCommerce adheres to state-specific cannabis regulations across all operating states:
- •California (MAUCRSA): Full compliance with Medicinal and Adult-Use Cannabis Regulation and Safety Act
- •Colorado (MED): Marijuana Enforcement Division compliance and licensing
- •Washington (LCB): Liquor and Cannabis Board regulatory compliance
- •Other States: Compliance with all state-specific cannabis regulations where we operate
Dispensary Verification Process
All dispensaries listed on JointCommerce undergo thorough verification:
- •License Verification: We verify all state cannabis licenses are valid and current
- •Business Registration: Confirmation of legal business entity status
- •Compliance History: Review of regulatory compliance records
- •Ongoing Monitoring: Continuous monitoring for license status changes
Data Privacy & Security
We maintain compliance with data privacy regulations including:
- •CCPA Compliance: California Consumer Privacy Act rights including data access, deletion, and opt-out
- •HIPAA Ready: Medical information encrypted and protected for medical cannabis patients
- •Data Encryption: AES-256 encryption for sensitive data at rest and in transit
- •SOC 2 Type II: Annual audits for security, availability, and confidentiality
Age Verification
JointCommerce implements robust age verification measures:
- •Age gate on all pages
- •21+ age requirement clearly communicated
- •Age verification at checkout
- •Compliance with state-specific age verification requirements
Contact Compliance Team
For compliance inquiries, regulatory questions, or to report concerns:
Email: compliance@jointcommerce.com