Regulators first,
always.
Cannabis platforms get audited. Ours was designed for the audit. Every status transition, driver assignment, refund, manual price override, and verification decision writes to a permanent history table you can hand directly to a state regulator.
Prop 215/64,
from day one.
Most cannabis platforms treat compliance as an add-on. Kushify treats it as the substrate — the audit log is foundational, not a feature. Tax exemption isn't a checkbox; it's a verified-status query. ID verification isn't a workflow; it's a state machine with effective dates.
Bi-level ID verification
Three-photo capture (front, back, selfie) with optional medical recommendation upload for Prop 215 patients. Reviewer lightbox for human verification of edge cases.
Effective-expiration handling
Approved IDs roll back into the verification queue automatically when they expire. No surprise compliance failures because someone's ID lapsed yesterday.
Prop 215 tax exemption
Verified medical patients get automatic local + state tax exemption at the line level. Captured in receipts and audit log. Reconcilable for state reporting.
Daily purchase limits
Per-status purchase limits (adult-use vs medical) enforced at the cart and POS levels. Configurable per state regulation.
Immutable audit log
Every status transition, driver assignment, refund, manual price override, and verification decision writes to a permanent history table. Hand it to a state regulator unedited.
Metrc integration
Live two-way sync with Metrc for states that require it (CA, MO, NV, OR, MD, others). Sales reported automatically, package movements tracked.
BioTrack integration
Same depth of integration for BioTrack states (WA, NM, HI, others). Switch traceability providers if your state changes without changing platforms.
Leaf Data integration
Coverage for states using Leaf Data Systems for traceability.
Row-level security (RLS)
Database-level scoping ensures one operator's data never crosses into another's. SOC 2 evidence package available for Enterprise customers.
Compliance posture.
Compliance questions.
What does 'Prop 215/64 support' actually mean?
Tax exemption logic for medical (Prop 215) patients, separate purchase-limit tracking for medical vs. adult-use (Prop 64), age-gate flows with optional medical-recommendation upload for 18-20 patients, and ID verification with effective expiration handling so approved users get rolled back into the queue automatically.
Are you SOC 2 certified?
SOC 2 Type II evidence package is available to Enterprise customers and prospects under NDA. Operator and Multi-site customers get SOC 2 controls in production — the formal report is gated to Enterprise because the audit is paid annually and we don't redistribute it broadly.
What states do you support Metrc / BioTrack in?
Metrc: California, Colorado, Maryland, Massachusetts, Michigan, Missouri, Montana, Nevada, Ohio, Oklahoma, Oregon, and others. BioTrack: Washington, New Mexico, Hawaii. Leaf Data: a handful of additional states. If your state requires a traceability provider we don't list, we'll prioritize integrating it.
How do you handle ID verification across multi-site?
A verified ID on Storefront A doesn't automatically apply to Storefront B (different customer namespaces by design). But you can configure 'shared identity verification' at the operator level so customers who verify once are verified across all your storefronts.
What happens during a state audit?
Your audit log is the answer. Every status transition has a timestamp, an actor, and a payload. Refunds, overrides, verifications, deliveries — all recorded. We've supported customers through audits in CA, NV, MA, and MI; in every case, the auditor's first question was 'can you export this' and we said yes.
You might also want to explore.
Security
SOC 2 controls, encryption, RLS, and our responsible disclosure program.
POS — Prop 215 tax exemption
Verified medical patients trigger automatic exemption at the line level.
Switching from another platform
We import audit history and verification records during migration — no compliance gap.
Be audit-ready
by default.
See the audit log live. Book a 30-minute call with our compliance lead.