Introduction
For large-scale cannabis cultivators moving into federally authorized research or pharmaceutical supply chains, compliance involves an entirely different regulatory environment from the state-licensed commercial cannabis industry.
Federal authorization to cultivate cannabis for research or other lawful purposes under the Controlled Substances Act requires operators to navigate overlapping registration, production, security and distribution requirements. Two of the most important components are DEA Form 225, used to apply for registration as a bulk manufacturer, and the purchase-and-sale framework established under 21 CFR Part 1301.13(k) for state medical licensees or 21 CFR Part 1318 for Schedule I research bulk manufacturers.
For C-suite executives, Quality Assurance directors and legal teams accustomed to state cannabis regulation, one of the biggest differences can initially seem counterintuitive: a federally registered grower does not simply harvest cannabis and sell it directly to its contracted customer.
Federal regulations give the Drug Enforcement Administration a central role in the transaction.
The system originates in U.S. obligations under the 1961 Single Convention on Narcotic Drugs. To comply with those obligations, DEA established a framework under which registered manufacturers transfer ownership of cannabis crops to the agency before the material is subsequently distributed to authorized purchasers.
In situations where the grower and purchaser are the same entity, or are related business units, federal regulations allow what is commonly described as a nominal purchase-and-resale transaction. The company can establish a nominal price for the cannabis. DEA purchases the material at that price and sells it back at the same price, with the applicable DEA administrative fee added to the transaction.
For the calendar year 2026, that administrative fee is $113 per kilogram.
The transaction may look largely procedural from a commercial perspective, but its compliance implications are significant. DEA-registered cannabis manufacturers must also operate within approved production quotas, establish qualifying supply arrangements and maintain security systems capable of preventing theft and diversion.
The process begins before the first federally authorized crop is harvested.
Businesses seeking a DEA bulk manufacturer registration must apply using DEA Form 225. Applicants should be prepared for federal scrutiny of their proposed operations and security controls, including requirements governing the storage of Schedule I and II controlled substances under 21 CFR § 1301.72.
For large cultivation enterprises and pharmaceutical drug developers, this means that facility design, security planning and harvest workflows cannot be treated as issues to resolve after registration. Decisions made during facility development can directly affect an operator’s ability to satisfy DEA requirements later.
CannDelta works with commercial applicants preparing for this transition, including support with DEA registration, security reviews and audits of operational workflows. Identifying weaknesses before federal review can be particularly important when deficiencies involve physical infrastructure or procedures that are difficult to change quickly.
Understanding the federal framework begins with understanding what DEA registration actually changes about the cultivation and sale of cannabis.
Key Takeaways
- DEA Form 225 is the application used to seek registration as a DEA bulk manufacturer of cannabis.
- Federal cannabis cultivation operates differently from ordinary state-licensed commercial cultivation. DEA plays a direct role in the purchase, ownership and resale framework for federally authorized crops.
- The nominal purchase-and-resale process can apply when the grower and buyer are the same or related entities. DEA purchases the cannabis at the established nominal price and resells it at that price plus the applicable administrative fee.
- The 2026 DEA administrative fee is $113 per kilogram.
- Federal compliance extends well beyond filing an application. Production quotas, supply agreements, physical security and harvest procedures can all affect a bulk manufacturer’s ability to operate successfully.
How the DEA's Paper Buyback Process Actually Works
The DEA’s purchase-and-sale framework can appear complicated on paper, but its purpose is relatively straightforward. Federally authorized cannabis production operates under a system designed to give the federal government control over the lawful supply and distribution of cannabis produced by registered manufacturers.
For cultivators, that means production begins with more than simply determining how much cannabis a customer wants to purchase.
Two concepts are particularly important: the Bona Fide Supply Agreement (BFSA) and the Individual Manufacturing Quota (IMQ).
A Bona Fide Supply Agreement documents a legitimate supply relationship between a registered manufacturer and an authorized purchaser. It helps establish that cannabis being produced within the federal system has an identified lawful destination rather than being cultivated speculatively for an unrestricted commercial market.
An Individual Manufacturing Quota, meanwhile, establishes the amount of a controlled substance that a registered manufacturer is authorized to produce during a given calendar year. Unlike many state-licensed cannabis businesses, which may base cultivation decisions primarily on facility capacity and anticipated consumer demand, a DEA-registered bulk manufacturer cannot simply increase production whenever market conditions appear favorable.
Production must remain within the limits authorized by the federal quota system.
These controls become particularly important when harvest occurs and the cannabis enters the federal purchase-and-sale process governed by 21 CFR Part 1318.
One of the most unusual scenarios occurs when the cultivator and the intended buyer are the same company or related entities. For example, a pharmaceutical company could operate a cultivation division producing cannabis that will subsequently be used by another part of the organization for research or drug development.
Under the nominal purchase-and-resale mandate, the parties may establish a nominal price for the crop. For illustration, that price could be $1.
DEA then purchases the cannabis at the established nominal price and resells it at the same nominal price, with the applicable administrative fee added to the transaction. In 2026, that administrative fee is $113 per kilogram.
Economically, the transaction may therefore have little resemblance to a conventional wholesale cannabis sale. Legally and administratively, however, it serves an important purpose within the federal control system by placing DEA into the chain of ownership and distribution.
This is why describing the process simply as the federal government “buying cannabis” can be misleading. In a nominal transaction between related parties, DEA is not negotiating a market price or purchasing cannabis because the agency intends to consume or commercially market the crop. The transaction is part of the regulatory mechanism governing federally authorized cannabis production and distribution.
Cultivators must nevertheless be prepared for the operational requirements surrounding that transaction.
Production quantities, approved purchasers, harvest documentation and secure storage all need to align with the manufacturer’s federal authorization. Depending on the transaction, DEA may also take physical possession of harvested cannabis or authorize it to remain in a previously approved secure location while being held on the agency’s behalf.
For large-scale cultivators, the practical lesson is that federal compliance must be incorporated into the harvest workflow itself. The moment a crop is ready for transfer cannot be the first time operations, QA and legal teams determine how DEA ownership, documentation, storage and subsequent distribution will be handled.
State Cannabis Licenses vs. Federal DEA Bulk Permits: Key Differences
A state cannabis cultivation license and a federal DEA bulk manufacturer registration may both authorize the production of cannabis in certain circumstances, but they operate within fundamentally different regulatory systems.
For businesses considering federally authorized cultivation, understanding those differences is essential. A facility that complies with state cannabis requirements should not assume that its existing licensing, security or production systems will satisfy DEA requirements.
The principal differences can be summarized as follows:
| Operational Feature | State-Licensed Commercial Grower | DEA Bulk Manufacturer (Federal Rules) |
| Main Application | Application through the applicable state cannabis regulatory agency | DEA Form 225 for registration as a manufacturer under 21 CFR Part 1301 |
| Crop Ownership | Grower generally retains ownership through the ordinary state-regulated supply chain | Federally authorized cannabis is subject to DEA’s purchase-and-sale framework under 21 CFR 1301.13(k)(6) for state licensees (and Part 1318 for Schedule I bulk manufacturers) |
| Government Fees | State application, licensing and renewal fees vary by jurisdiction | DEA administrative fee applies to cannabis purchased and sold through the federal system; for 2026, the fee is $113/kg in addition to the mandatory DEA manufacturer registration fee. |
| Vault and Storage Rules | Security requirements are established primarily under applicable state regulations | State-licensed medical marijuana entities are fully exempt from standard federal physical security storage requirements . Under 21 CFR 1301.13(k)(10), they are deemed to have sufficient physical security as long as they meet state-law requirements. |
| Production Limits | Production may be determined by state licensing restrictions, facility capacity and market conditions | Bulk production is controlled through DEA manufacturing quotas, including Individual Manufacturing Quotas |
The differences extend beyond paperwork.
State cannabis businesses are accustomed to regulators overseeing areas such as inventory tracking, surveillance, transportation and product testing. Federal bulk manufacturing adds another layer of controlled-substance regulation built around diversion prevention, authorized production quantities and tightly controlled distribution.
For executives considering entry into federally authorized cannabis production, this makes a gap analysis particularly valuable. Existing state-compliant infrastructure may provide a useful foundation, but federal registration should be treated as a separate compliance project rather than an extension of a state license.
Security is a good example. A cultivation facility may have cameras, alarms, restricted-access areas and secure storage that satisfy its state regulator, yet still require modifications to meet the physical security standards applicable to its DEA registration.
Production planning is another significant difference. A state cultivator may respond to increased demand by expanding canopy utilization or scheduling additional production within the limits of its license. A federal bulk manufacturer must also account for the quota system governing the amount it is authorized to manufacture.
These distinctions make early planning important. Discovering after filing that a facility requires substantial physical modifications, or that internal procedures do not align with federal controlled-substance requirements, can create avoidable delays.
What It Takes to Apply for DEA Form 225
For prospective bulk manufacturers, the federal registration process begins with DEA Form 225, the application used for a new registration to manufacture controlled substances.
The application is submitted through the DEA Diversion Control Division’s registration system. Businesses seeking authorization for cannabis-related bulk manufacturing must identify the controlled substances and activities for which registration is sought and provide the business and ownership information required by DEA.
The application process should not be viewed as a simple administrative filing.
DEA evaluates whether an applicant can operate consistently with the Controlled Substances Act and applicable federal regulations. For a cannabis bulk manufacturer, facility security, ownership and operational controls can therefore become important parts of the registration review.
Applicants should be prepared to provide accurate information concerning the business and its proposed controlled-substance activities and to demonstrate that the facility is capable of maintaining appropriate security against theft and diversion.
That preparation becomes especially important when DEA evaluates the physical location where federally controlled cannabis will be manufactured and stored.
Building Your Vault to Pass the DEA Security Inspection
Physical security is one of the areas where the differences between state cannabis regulation and federal controlled-substance requirements become particularly significant.
Under 21 CFR 1301.13(k)(10), state-licensed medical marijuana manufacturers are exempt from standard federal storage rules. The DEA deems physical security requirements sufficient if the registrant simply meets the requirements of their state licensing laws.
Federal regulations provide specifications for vault construction, including walls constructed of reinforced concrete or other substantial materials that provide equivalent security. For qualifying vaults constructed after September 1, 1971, the regulations specify walls of at least eight inches of reinforced concrete, reinforced vertically and horizontally, or another structural configuration offering equivalent protection.
Vault doors must likewise meet applicable resistance standards and be equipped as required by the federal security framework. Alarm and intrusion-detection systems are also central components of DEA-controlled-substance security.
The practical implication for cultivators is important: vault design should be considered before filing DEA Form 225, not after a facility is otherwise complete.
Retrofitting a cultivation or pharmaceutical manufacturing facility to accommodate federal storage requirements can be expensive and disruptive. Doorways, wall construction, access points, alarm systems and the relationship between cultivation, processing and secure storage areas can all affect whether an existing facility is suitable for the proposed controlled-substance activities.
Access also needs to be tightly controlled. Federal regulations require registrants to limit access to controlled-substance storage areas to the minimum number of employees necessary for efficient operations. For large facilities with cultivation, extraction, QA, maintenance and administrative teams, this can require a different approach from ordinary employee access controls.
Security planning should therefore be treated as both a physical and operational exercise. A compliant vault is only one component. Operators also need procedures governing who can access controlled material, how harvested cannabis moves into secure storage and how inventory is handled while awaiting an authorized transaction.
For businesses already operating under state cannabis licenses, a CannDelta DEA compliance audit can help identify where existing security infrastructure and SOPs may differ from federal expectations before those gaps become obstacles during registration or facility review.
The goal is not simply to build the strongest vault possible. It is to develop a security program appropriate to the controlled substances, quantities and activities covered by the registration and capable of demonstrating effective protection against theft and diversion.
That same principle applies beyond physical security. A successful federal cannabis operation must coordinate its production limits, supply agreements, harvest procedures, documentation and DEA transactions as parts of a single compliance system.
Five Simple Steps to Prepare Your Harvest for Federal Rules
For large-scale cultivators, preparing a harvest for the federal system becomes more manageable when the process is broken into a series of compliance checkpoints. The following five steps provide a practical framework for preparing operations before federally authorized cannabis reaches the point of harvest.
The details of each harvest will depend on the manufacturer’s registration, quota and supply arrangements, but cultivators can use five core steps to reduce the risk of compliance problems.
1. Confirm Your Manufacturing Quota Before Production
Before committing a crop to federally regulated production, confirm that the planned quantity falls within the manufacturer’s authorized Individual Manufacturing Quota.
The IMQ is not simply an estimate of expected production. It establishes a federal limit on the quantity a registered manufacturer is authorized to produce during the applicable calendar year. Cultivation and operations teams therefore need to coordinate production forecasts with regulatory personnel rather than treating planting decisions solely as commercial or agricultural matters.
Changes in expected yield should also be monitored. A large-scale cultivation operation can experience meaningful differences between projected and actual production, making quota oversight an ongoing responsibility rather than a one-time planning exercise.
2. Verify the Authorized Buyer and Supply Arrangement
Before harvest, confirm the lawful destination for the cannabis and ensure that the applicable supply documentation is in place.
Where a Bona Fide Supply Agreement is being used to support production and distribution, the agreement should accurately reflect the relationship between the manufacturer and the authorized purchaser. Operations, legal and compliance teams should all understand how the material is expected to move through the federal system.
If the grower and buyer are the same company or affiliated entities, determine in advance how the nominal purchase-and-resale process will be handled.
3. Prepare Secure Harvest and Storage Procedures
Harvested cannabis must remain protected against theft and diversion throughout the process.
Before cutting begins, operators should know where controlled material will be moved, who is authorized to handle it and how access will be restricted. Secure storage areas and applicable security systems should already be operational rather than being completed after harvested material is waiting for storage.
Written SOPs should clearly assign responsibilities for harvesting, movement, storage, access and inventory control.
4. Prepare for the DEA Purchase-and-Resale Process
Operators should understand the documentation and transaction process required under 21 CFR Part 1318 before harvest occurs.
For a nominal transaction involving the same or related grower and buyer, the purchase and resale price may be nominal, but the transaction still needs to follow the applicable federal process. The manufacturer’s financial planning should also account for the DEA administrative fee, which is $113 per kilogram in 2026.
At scale, that fee becomes significant. A 1,000-kilogram transaction, for example, would generate $113,000 in administrative fees at the 2026 rate.
5. Conduct a Pre-Harvest Compliance Audit
Before the crop reaches the transaction stage, conduct a final review of the entire compliance chain.
Confirm that production remains within authorized limits, the buyer and supply arrangement are appropriate, required documentation is complete, security controls are functioning and employees understand their responsibilities.
This is also an opportunity to identify inconsistencies between written SOPs and what actually happens inside the facility. A procedure may appear compliant on paper while employees follow a different workflow in practice.
For large-scale cultivators, a pre-harvest audit can therefore function as a final stress test of the federal compliance program. The objective is to identify problems internally while they can still be corrected rather than allowing them to surface during a DEA review or regulated transaction.
Final Thoughts
For large-scale cannabis cultivators, moving into federally authorized production is not simply a matter of obtaining another license. It requires adapting operations to a regulatory framework built around federal controlled-substance registration, production quotas, physical security and DEA oversight of cannabis transactions.
DEA Form 225 is the starting point, but successful registration depends on much more than completing the application. Facility design, storage infrastructure, security procedures and production planning should all be evaluated against federal requirements before an operator begins manufacturing controlled substances.
The same is true of the nominal purchase-and-resale mandate. Although the transaction can appear unusual to businesses accustomed to state cannabis markets, it is part of the federal system governing the lawful production and distribution of cannabis. Operators need to understand how their manufacturing quotas, supply arrangements, harvest procedures and DEA transactions work together rather than treating each requirement as an isolated compliance task.
For large-scale businesses, planning becomes particularly important because seemingly small compliance issues can become expensive at commercial scale. A security deficiency may require physical modifications to a facility, while inaccurate production planning can create problems with authorized manufacturing quantities. The $113-per-kilogram DEA administrative fee applicable in 2026 also needs to be incorporated into financial forecasts for federally regulated production.
The strongest approach is therefore to build federal compliance into the operation before production begins. Legal, QA, cultivation, security and executive teams should understand their respective responsibilities and maintain procedures that reflect how work actually occurs inside the facility.
A CannDelta DEA compliance audit can help prospective bulk manufacturers assess these systems before regulatory review, identifying potential weaknesses in security, documentation and operational workflows while there is still time to address them.
For cultivators pursuing federal authorization, preparation is ultimately about more than passing an inspection. It is about creating a controlled-substance manufacturing operation capable of maintaining compliance from registration through harvest, storage and final distribution.
Schedule a DEA Compliance Audit with CannDelta Today.
Frequently Asked Questions
What is DEA Form 225 and why cvo commercial growers need it?
DEA Form 225 is the application used to seek a new DEA registration for activities including the manufacture of controlled substances. Cannabis businesses seeking authorization to operate as federal bulk manufacturers use the form as part of the DEA registration process.
Registration under the Controlled Substances Act is distinct from holding a state cannabis cultivation license. A state license does not by itself authorize a cultivator to manufacture cannabis within the federal controlled-substance system. Prospective federal manufacturers must satisfy the applicable DEA registration, security and operational requirements.
How much does the DEA charge in administrative fees per kilogram?
For the calendar year 2026, the DEA administrative fee applicable to cannabis purchased and sold through the federal system is $113 per kilogram.
For large-scale cultivators, this can become a material operating expense. At the 2026 rate, for example, 1,000 kilograms would result in $113,000 in administrative fees. Operators should therefore incorporate the applicable DEA fee into financial planning when assessing the economics of federally regulated cannabis production.
Does the DEA take physical control of your cannabis crop?
DEA’s role goes beyond simply approving a transaction. Under the federal framework, DEA takes title to cannabis produced by registered manufacturers as part of the purchase-and-sale process.
How physical possession is handled can depend on the transaction. DEA’s published procedures contemplate agency personnel taking physical possession of cannabis, while material may also be stored at a secure location previously approved by DEA and held on the agency’s behalf.
For transactions involving the same or related grower and buyer, the regulations also provide for the nominal purchase-and-resale mechanism discussed above. Operators should therefore establish the applicable procedures with DEA rather than assuming that federal ownership is purely a paperwork exercise.
How can CannDelta help your business get DEA approved?
CannDelta assists commercial cannabis operators preparing for federal regulatory requirements, including DEA Form 225 application support, security reviews and compliance assessments.
For prospective bulk manufacturers, that can include reviewing facility security and vault infrastructure, assessing SOPs and harvest workflows, and identifying potential compliance gaps before they create delays during the registration process.
Federal cannabis manufacturing brings together controlled-substance registration, physical security, production planning and transaction requirements. Addressing those areas before regulatory review can help operators enter the process with systems designed around DEA requirements rather than attempting to retrofit compliance after problems arise.
Navigating the DEA’s 21 CFR Part 1318 requirements and preparing for federal registration requires careful regulatory planning. Vault design deficiencies, non-compliant SOPs or administrative problems can delay a bulk manufacturing application. CannDelta provides end-to-end security reviews, DEA Form 225 application support and mock site audits tailored to pharmaceutical-grade cultivators.
