Maine Cannabis Compliance Software

HashNet is purpose-built for Maine's dual regulatory framework. One system handles both adult-use compliance under Title 28-B and medical program requirements under Title 22 Chapter 558-C — automatically.

Maine's Dual Regulatory Framework

Maine is one of few states with entirely separate regulatory structures for adult-use and medical cannabis. Each program has different tracking requirements, testing mandates, and transfer documentation. HashNet handles both within a single system.

Adult-UseTitle 28-B

Metrc Seed-to-Sale Tracking Coming Soon

Maine's adult-use cannabis program requires seed-to-sale tracking through the Metrc system. Every package, transfer, and inventory adjustment must be reported to Metrc in real time.

  • Automatic API sync for all inventory movements — packages, adjustments, transfers, lab results
  • RFID tag management with 24-digit UID tracking and tag assignment
  • Mandatory lab testing before transfer per Section 602 — system blocks untested products from orders
  • Transfer manifest generation for licensee-to-licensee sales
  • Possession limit enforcement — Tier 1: 40 lbs, Tier 2: 200 lbs per §2423-F
  • Daily reconciliation comparing local inventory against Metrc state every 6 hours
  • Record retention per Title 36 §135 — 7-year minimum for adult-use records
MedicalTitle 22 Ch. 558-C

Trip Ticket Documentation

Maine's medical cannabis program operates under different rules. No Metrc integration is required under current law, and testing is optional (though tracked if performed).

  • Trip ticket generation for all medical cannabis transfers between licensees
  • No Metrc requirement — simplified workflow without seed-to-sale API overhead
  • Optional lab testing with automatic blocking on failed results (products can transfer without testing, but failed products are blocked)
  • Transfer documentation simplified to trip ticket workflow
  • Record retention per Title 22 §2430-J — 4-year minimum for medical records
  • LD 1847 ready — if the pending Maine bill passes requiring medical Metrc, HashNet's architecture supports enabling it with a configuration flag

Mandatory Testing Gates

HashNet enforces Maine's testing requirements at the system level. Compliance is not optional — it is built into the workflow.

Adult-Use: Mandatory Before Transfer

Per Title 28-B Section 602, every finished adult-use cannabis product must have a passing lab test result before it can be transferred to another licensee. HashNet enforces this at order fulfillment — the system will not allow untested products to be added to orders or marked as shipped. There is no override. This is the law.

Medical: Tracked but Not Required

Under current Maine law (Title 22 Chapter 558-C), medical cannabis products do not require lab testing before transfer. HashNet tracks test results when available and blocks transfers of products with failed test results, but does not require a passing result for medical transfers. This may change if LD 1847 passes.

Failed Test Workflows

When a product fails testing, it enters the failed lifecycle state. From there, it can only transition to remediating, testing (retest), or destroyed. It cannot be sold, moved, adjusted, or split. This prevents failed product from accidentally entering the supply chain.

Lifecycle State Machine

Every product moves through defined lifecycle states: activetestingpassed/failedremediatingdestroyed. Transitions are validated — no skipping states, no backdoor paths. Admin holds can freeze any product at any stage with documented reason.

Complete Audit Trail

Every action in HashNet is logged with who, what, when, and the before-and-after state. Your facility is always audit-ready.

Before/After State Diffs

Inventory adjustments, lifecycle transitions, and quantity changes record the complete before-and-after state. Auditors can see exactly what changed, by whom, and when.

Inventory Lot Lineage

The inventory_family graph tracks every transformation — which input lots produced which output lots, through processing and packaging. Any finished product can be traced back to its source flower in seconds.

Regulatory Retention

Adult-use records are retained for 7 years per Title 36 §135. Medical records for 4 years per Title 22 §2430-J. Automated retention policies ensure records are preserved for the required duration.

User Action Logging

Every login, logout, permission change, data export, and configuration update is logged with IP address, user agent, and timestamp. Account lockout after 5 failed attempts with 15-minute cooldown.

Stay Compliant Without the Headache

HashNet handles the regulatory complexity so your team can focus on making great products.