Software Limitations

Purpose

To ensure uninterrupted business operations, preserved data integrity, and continuous regulatory compliance during failures or limitations of cannabis software systems including POS, seed-to-sale, compliance platforms, ERP systems, and third-party integrations. This SOP prevents operational shutdowns, data loss, compliance breaches, and audit exposure caused by over-reliance on automated systems.

Role

General Manager
Inventory Manager
Compliance Manager
IT Support
Shift Lead

Timing

  • Immediately upon detection of any software failure
  • During POS, traceability, ERP, or network outages
  • During API sync failures
  • During cybersecurity incidents
  • During data corruption or loss events
  • During disaster recovery situations
  • Steps

  • Failure Detection & Immediate Escalation
    • Any employee who identifies a system failure must notify the Shift Lead and General Manager immediately.
    • IT Support must be contacted without delay.
  • Secure Inventory, Cash & Facility
    • All cannabis inventory must be secured in vaults or locked storage.
    • All cash drawers must be closed and locked in the safe.
    • No inventory movement or destruction may occur without written manual documentation.
  • Manual Operations Activation
    • Switch immediately to printed manual transaction logs for all sales.
    • Switch to manual inventory movement logs for all transfers, adjustments, intake, and waste.
    • Record customer identification and purchase details manually if legally required.
  • Manual Documentation Standards
    • All manual logs must include:
      • Date and time
      • Product name
      • Package ID
      • Quantity
      • Staff initials
      • Manager verification
    • All handwriting must be legible and permanent.
  • Transaction Continuity Controls
    • No refunds, voids, transfers, or destructive actions may occur without management approval while in manual mode.
    • High-risk activities (bulk adjustments, large transfers, multi-package destruction) are suspended unless required for safety.
  • System Restoration & Data Reentry
    • Once systems are restored, all manual transactions must be entered into the POS immediately.
    • Inventory Manager must perform a full reconciliation between:
      • Manual logs
      • POS records
      • State traceability system
  • Post-Recovery Compliance Verification
    • Any discrepancy affecting compliance must be escalated to the Compliance Manager.
    • If required, regulators must be notified according to state reporting rules.
  • Incident Reporting & Review
    • A formal internal incident report must be completed for:
      • Outages
      • Data loss events
      • Cyber incidents
      • Sync failures exceeding 24 hours
    • Management must review and implement corrective actions.
  • Equipment

  • Printed manual sales transaction logs
  • Manual inventory movement logs
  • Backup inventory count sheets
  • Secure document storage cabinet
  • POS data export tools
  • Incident report templates
  • Emergency escalation contact list
  • Backup SOP binder
  • Tip

    Manual failover controls should be executable within five minutes of system failure detection. If it takes longer, your operation is over-automated and under-prepared.