California Cannabis Dispensary Security Requirements (DCC Compliance Checklist)

If you operate a California-licensed cannabis facility — dispensary, cultivation, manufacturing, or distribution — the security requirements you have to meet are some of the most prescriptive in any U.S. industry. The California Department of Cannabis Control (DCC) enforces specific, audited requirements on video surveillance, alarm systems, access control, cash handling, and personnel. Failure to meet them can result in fines ranging from $5,000 to $30,000 per violation, license suspension, or in severe cases, revocation. Below is a practical compliance checklist drawn from current DCC requirements (Title 4, California Code of Regulations) plus the operational reality of running Bay Area cannabis facilities in 2026.

The Core DCC Security Requirements

Every licensed California cannabis operation must maintain a written security plan and execute against it. The plan covers six core categories, all of which are subject to DCC inspection:

1. Video Surveillance

• Coverage: All limited-access areas, point-of-sale terminals, entries and exits, areas where cannabis or cannabis products are stored, transit areas, parking lots, and exterior perimeters where cannabis is loaded or unloaded.
• Recording: Continuous 24-hour recording. Minimum resolution must allow facial identification within 20 feet of camera placement.
• Retention: Minimum 90 calendar days of recorded footage. Many local jurisdictions require longer — Oakland and Berkeley specifically require longer retention windows for retail dispensaries.
• Backup and integrity: Footage must be backed up, time-stamped, and tamper-evident. DCC inspectors will ask to review specific date/time windows during audits.
• Failure protocols: Any 24+ hour outage must be documented and reported to the DCC.

2. Alarm Systems

• Professionally monitored alarm system covering all entries, exits, and limited-access areas.
• Panic alarm capability for retail and cash-handling areas.
• Maintenance and testing logs maintained.
• Coordination with local law enforcement (many Bay Area cities require the dispensary to file an alarm response protocol with local PD).

3. Access Control

• Limited-access areas must be physically restricted (locked doors, badge-controlled entry, mantrap systems where required).
• Employee access logs for any limited-access area.
• Visitor logs with name, time of arrival, time of departure, and purpose of visit. Required for any non-employee on the premises.
• Vendor and contractor access protocols documented and enforced.

4. Cash Handling

• Cash storage in locked, alarmed, restricted-access area.
• Documented cash-handling protocols including transit procedures, deposit timing, and reconciliation cadence.
• Two-person rule for cash counts and transit where feasible.
• Cash transit windows minimized — federal banking restrictions still limit dispensary banking options, so cash buildup is a regulated reality. Frequent, documented transit is required.

5. Security Personnel

• Personnel coverage during operating hours is mandatory for retail dispensaries and strongly recommended for cultivation, manufacturing, and distribution facilities.
• Armed coverage is required by some local jurisdictions and many insurance carriers; check both your city ordinance and your insurance policy. Many Bay Area cities including Oakland, San Francisco, and Berkeley have specific armed coverage requirements.
• All security officers must hold an active California BSIS Guard Card. Armed officers must additionally hold an active BSIS Exposed Firearms Permit.
• Personnel must complete background checks per DCC requirements and cannabis-specific de-escalation training.

6. Inventory Control and Transit

• Cannabis inventory must be tracked through the California METRC system (Track-and-Trace).
• Transit between licensed cannabis operators must use a licensed distributor with documented manifest and security protocols.
• Loading and unloading areas covered by video surveillance.
• Documented chain-of-custody for every transit event.

Bay Area Local Ordinances That Layer on Top of DCC

State DCC requirements are the floor. Bay Area cities layer additional requirements that you must comply with based on where you operate:

• Oakland — additional surveillance retention requirements, specific armed coverage rules for certain dispensary types.
• San Francisco — additional cash handling protocols and operating hours restrictions.
• Berkeley — specific zoning + security overlay requirements.
• Emeryville and San Jose — specific operating hours, parking, and customer queue management protocols.

Verify your local jurisdiction’s ordinance directly with your city’s planning or cannabis regulatory office. Operating in compliance with DCC but out of compliance with local ordinance still results in fines, complaints, or worse.

Why Armed Coverage Is Often the Right Call for Dispensaries

The combination of high-value inventory, large cash reserves on-site (commonly $50,000 to $500,000+ depending on volume), federal banking restrictions that prevent normal deposit cycles, and the documented pattern of armed dispensary robberies in California pushes the threat profile firmly into armed coverage territory.

Beyond the regulatory mandate (where one exists), armed coverage is appropriate for cannabis operations because:

• Insurance carriers increasingly require armed coverage as a condition of dispensary insurance underwriting.
• Most documented dispensary robberies involve weapons; visible armed presence is a strong deterrent.
• The cash handling and transit windows create concentrated risk points that armed officers are trained to manage.

For more on armed coverage and California licensing, see our armed security page.

Common Compliance Gaps DCC Inspectors Find

• Surveillance gaps. Cameras missing from a corner of the storage room or a loading dock area. Cameras with insufficient resolution to identify faces at distance.
• Retention shortfalls. Backup systems that quietly fail or footage rotated faster than the 90-day minimum.
• Visitor log inconsistencies. Missing entries during high-traffic periods or audit-day spot checks revealing gaps.
• Cash handling documentation gaps. Missing reconciliation records, undocumented transit events, single-person cash counts without two-person verification.
• Security personnel credential gaps. Guards on duty without active BSIS Guard Cards, or armed coverage with expired Exposed Firearms Permits.
• Background check gaps. Employees added to limited-access areas without documented background check completion.

These gaps generate citations even at otherwise well-run operations. Most are preventable with documented internal audit procedures.

Compliance Checklist for Your Operation

• ☐ Written security plan documented and reviewed annually
• ☐ 24-hour video surveillance covering all required areas, 90+ day retention
• ☐ Professionally monitored alarm system with panic capability
• ☐ Limited-access areas physically secured with documented access logs
• ☐ Cash handling protocols documented including two-person rules where applicable
• ☐ Security personnel on premises during operating hours (armed if required by jurisdiction or insurance)
• ☐ All security personnel verified with active BSIS credentials
• ☐ METRC system integrated and current
• ☐ Local jurisdiction ordinance compliance verified separately from DCC
• ☐ Annual internal security audit completed and documented

How Surefire Supports Cannabis Compliance

Surefire Security provides armed and unarmed officer coverage for Bay Area cannabis operations — dispensary, cultivation, manufacturing, and distribution. Every cannabis engagement starts with a free site assessment where our coordinator reviews your existing security stack against current DCC requirements and your local city ordinance, identifies any compliance gaps, and proposes coverage that fits your operational pattern.

Surefire is California PPO 121780. Our officers are BSIS-certified, our armed officers carry active BSIS Exposed Firearms Permits with annual range requalification, and we carry insurance that exceeds California minimums with cannabis-vertical underwriting in place. See our Cannabis & Dispensary Security page for full operational and pricing detail.

For dispensary operators planning 2026 budget or facing a DCC inspection window, request a free site assessment or call (510) 789-6304. We provide a written compliance gap report at no charge.