Cannabis Dispensary Security Requirements by State (2026)

Few businesses are regulated for security as tightly as a licensed cannabis operation. Because dispensaries and cultivation sites handle a high-value, still-federally-illegal product and a lot of cash, state cannabis regulators write detailed security plan requirements into their license conditions — cameras, limited-access areas, alarms, a vault or safe, visitor logs, and in some states an on-site guard. Fail to meet them and you don't just risk a break-in; you risk failing inspection, a license hold, or a fine. This guide explains the common mandates, walks the biggest gray areas (on-site guards, armed guards, and how long you must keep footage), gives a state-by-state table with statute citations, and shows how to hire a security company that actually passes inspection.

Why cannabis is regulated differently

Ordinary retailers write their own security policy. Cannabis operators inherit theirs from the state. When you apply for a license, most cannabis control agencies require you to submit a security plan as part of the application, and your build-out is inspected against it before you can open. The rationale regulators cite is consistent: cannabis is a valuable, diversion-prone product that — because it can't be banked normally under federal law — often runs on cash, making dispensaries a target for both external robbery and internal theft. So the rules are prescriptive rather than advisory: specific camera frame rates, specific retention windows, specific areas that must be under surveillance, and specific records you must be able to produce on demand.

Two distinctions matter throughout. First, adult-use vs. medical: a state's medical program and its newer adult-use program can carry different rules (New York and Ohio are examples where retention numbers differ or were unified across programs). Second, retail vs. cultivation: a grow or processing facility has its own camera-coverage and access rules focused on the plant canopy, drying, and product-handling areas rather than a sales floor. Most competing "dispensary security" content is published by camera vendors and rarely cites the statute or separates these cases — which is exactly where operators get tripped up.

The five mandates almost every state shares

Regardless of state, a compliant cannabis security plan is built around five pillars:

• Video surveillance. Continuous, 24/7 recording covering sales floors, entrances and exits, limited-access and storage areas, points of sale, and (for cultivation) grow and processing rooms. States set minimum frame rates and image quality, and — critically — a minimum retention period for the recordings. See our video surveillance and CCTV guide for how to spec a system.
• Limited-access areas. Product and cash live in restricted zones that only authorized, badged personnel (and escorted visitors) may enter, with the boundaries defined in your plan.
• Intrusion alarm. A monitored alarm system covering perimeter doors, windows, and often glass-break and motion sensors, with backup power so it survives an outage.
• Vault or safe storage. Product and cash secured in a vault, safe, or locked cage — frequently required to be locked down at close of business.
• Visitor logs and access records. A record of who entered restricted areas and when, retained for a set period and producible for the regulator.

These five are the backbone. Where states diverge — and where operators most need current, verified information — is on the three questions below.

Do you actually need an on-site security guard?

This is the most over-claimed requirement in the industry. Plenty of vendor marketing implies every dispensary must post a guard; the statutes are more varied. The clearest hard mandate is California: under the Department of Cannabis Control's regulations, a licensed retailer must have at least one licensed security guard on the premises during hours of operation (with additional guards as the retailer's own risk assessment warrants). That is a genuine, citable statutory requirement.

Most other states are less explicit. Many require a robust security plan and often that security personnel or a designated employee monitor the alarm and camera systems, without prescribing a posted physical guard at the door the way California does. In several states the on-site-guard question is best described as "not clearly mandated as a posted guard — confirm with your state cannabis regulator and read your specific license conditions." Local rules add another layer: a city or county can require a guard even where the state doesn't, as a condition of your local permit. So the honest answer is: California clearly requires an on-site licensed guard for retail; elsewhere, verify against your current state rule and your local jurisdiction before assuming you can operate without one. Even where it's optional, many operators post a guard anyway — for deterrence, for staff safety during cash handling, and because it strengthens the "reasonable security" posture that matters if something goes wrong.

Armed or unarmed?

Where a guard is used, the next question is whether they can be armed. As a general rule across states, an armed guard is permitted only if that officer holds the state's armed-security credential — the same firearm permit or armed registration any armed guard needs, on top of the base guard license. Cannabis regulators generally defer to the state's private-security licensing board on this rather than writing their own firearm rules. Because the armed credential, training hours, and eligibility differ so much by state, don't try to reason about it from a cannabis rule — defer to the state licensing spoke. For California, see California security licensing; for Illinois, see Illinois security licensing. Those pages cover exactly which armed permit is required, the training, and the minimum age, so we won't re-explain licensing here.

The strategic question is whether armed is the right call, not just whether it's allowed. Cash-heavy operations, high-value inventory, and after-hours transport are the classic arguments for armed coverage; the counter-arguments are liability, cost, and the possibility that a visible firearm escalates a robbery. Our guide to armed vs. unarmed security guards and the armed security service page walk through that trade-off. Many dispensaries land on unarmed uniformed presence on the floor plus armed coverage only for cash transport, but the correct answer depends on your risk profile, your insurer, and what your state and locality allow.

CCTV and retention: get this one right

Because retention is the highest-failure item, it deserves its own checklist. A compliant cannabis video system generally needs to: record 24/7 at the state's minimum frame rate; cover every required area (entrances/exits, sales floor, points of sale, limited-access and storage areas, and — for grows — cultivation and processing rooms); keep footage for at least the state's minimum retention period; survive a power failure with battery/UPS backup for a set number of hours; and let you retrieve and export specific footage for the regulator within a required window. California, again, is a clean anchor: the DCC requires continuous recording and that footage be retained for a minimum of 90 days. Treat every state's published number as a floor, and build in margin — running out of storage a week before an audit is a self-inflicted violation.

Typical retail cannabis security requirements by state

The table below summarizes commonly-cited requirements. Treat it as a starting map, not legal advice: cannabis rules are amended frequently, adult-use and medical programs differ, and local permits can be stricter. Where a cell says "verify," the state's rule is less settled or we couldn't confirm a hard posted-guard mandate — read your current state regulation and license conditions before relying on it.

Rules change and vary by program (adult-use vs. medical) and locality. States that only allow low-THC or medical products (e.g., Texas, Georgia, Florida) carry their own separate rules. Always confirm the current requirement with your state cannabis regulator — for example California's Department of Cannabis Control, Illinois' regulators under 68 Ill. Adm. Code 1290, or your state's equivalent — before finalizing your security plan.

Cultivation and processing: what's different

A grow or manufacturing facility isn't a smaller dispensary — it's a different security problem. Instead of a sales floor and register, the high-risk zones are the cultivation canopy, drying and curing rooms, extraction/processing areas, and finished-product storage, plus loading and transport points. Camera coverage requirements shift accordingly: states typically require surveillance of every area where plants or product are grown, handled, weighed, or stored, so diversion can be traced through the whole chain of custody. Limited-access control tends to be even more granular, because a cultivation site has more restricted rooms than a retail store. The alarm, backup-power, retention, and record-keeping rules generally mirror retail, but the camera map is bigger and the internal-theft/diversion risk is the dominant threat rather than armed robbery. If you run both retail and cultivation under one license family, build two security plans, not one stretched to cover both.

Alarms, vaults, and cash transport

Beyond cameras and guards, three physical-security elements round out a compliant program. Intrusion alarms must generally be monitored, cover perimeter openings and often interior motion and glass-break, and keep working through a power loss — states specify a backup duration. Vaults and safes secure product and cash, frequently with a requirement that everything be locked down at close of business; the point is that a smash-and-grab after hours can't reach the inventory. And because cannabis remains a cash-intensive business, cash transport is its own risk: moving deposits or product between sites is when operators are most exposed. This is a common place for armed coverage even when the retail floor is unarmed, and it's worth handling with a documented procedure — varied timing and routes, two-person handling, and a guard who is trained and (where required) properly licensed and armed for the task.

Your pre-license security-plan checklist

Most operators find the gap the week of inspection, when it's slow and expensive to fix. Work this list while you're still in build-out, not after you've signed for the space:

• Pull your actual license conditions and the current regulation text — not a blog summary. Cannabis rules are amended often, and your specific license (adult-use vs. medical, retail vs. cultivation) may carry different numbers. Confirm the current requirement with your state cannabis regulator before you spec anything.
• Layer the local permit on top. Cities and counties routinely add conditions the state doesn't — a posted guard, specific hours, extra camera coverage, or neighbor-notice provisions. Read the conditional-use permit alongside the state rule.
• Map every camera to a required area — entrances and exits, the sales floor, each point of sale, limited-access and storage zones, and (for a grow) canopy, drying/curing, extraction, and product storage. A single blind spot over a register or a back door is a common write-up.
• Size storage above the retention floor. Take your state's minimum retention window, add margin, and verify the recorder actually holds that many days at the required frame rate and resolution — don't trust the box's advertised capacity.
• Prove the fail-safes. Confirm battery/UPS backup for the alarm and recorder meets the state's minimum duration, and that you can retrieve and export a specific date-and-time clip on demand within the required window.
• Lock down the limited-access plan. Define restricted areas, who is badged for each, how visitors are escorted and logged, and how long those access records are retained.
• Document the human layer. If your state or locality requires (or you choose) an on-site or armed guard, have the guard's state license, and any armed credential, on file and verified against the state board before opening day.

Walk this list with your installer and your security provider together. The camera, alarm, and guard vendors each tend to assume someone else owns the overlap — the retention math, the local overlay, the export procedure — and that seam is exactly where inspections fail.

How to hire a security company that passes inspection

Cannabis security is a compliance function first and a deterrence function second, so vet providers on both. Look for a company that:

• Holds a valid state security license and insurance — verify it yourself rather than taking the sales pitch at face value. Our guide on how to verify a security company's license shows exactly how.
• Has genuine cannabis experience and can speak to your state's specific rules — camera coverage, retention, limited-access, and whether an on-site or armed guard is required where you operate.
• Can document the work: guard logs, patrol records, and a surveillance setup whose retention and coverage you can show an inspector on demand.
• Provides properly licensed and, if armed, permitted officers — confirmed against the state board, not assumed.
• Understands the local overlay — the city or county permit conditions that can be stricter than the state rule.

If you operate in a major market, our directories are a fast way to find licensed providers who work with cannabis operators — for example security companies in Los Angeles or security companies in Chicago. From there you can compare experience, coverage, and price.

What cannabis security costs

Guard labor is billed hourly like any security post: unarmed uniformed officers commonly run roughly $20–$35 an hour in most metros, with armed and specialized coverage higher. A single continuously staffed post is the number to model — 24/7 coverage is a six-figure annual line item once you account for multiple shifts, relief, and overtime. Most dispensaries don't staff around the clock, though; a typical retail program is a guard (or two) during business hours plus armed cash-transport coverage as needed, which brings the labor cost well below a full 24/7 post. Cost splits into a one-time build and an ongoing operating line:

• Guard labor (ongoing). Your largest recurring cost if you post a guard. Model it as hours-per-week × blended rate, and remember that "one guard during business hours" is really more than one body once you cover shifts, breaks, and days off.
• Camera system (upfront). The build most tied to passing inspection — enough cameras to cover every required area at the mandated frame rate, plus a recorder with storage that comfortably exceeds your retention window. This is frequently the biggest first-year capital item.
• Monitored alarm with backup power (upfront + ongoing). Perimeter, motion, and glass-break sensors, professional monitoring, and battery/UPS backup sized to the state's minimum duration. Hardware is upfront; monitoring is a monthly fee.
• Vault, safe, and secure storage (upfront). Rated storage for product and cash, often required to be locked down at close.
• Access control and badging (upfront + ongoing). Electronic locks, badge readers, and the visitor-log system that documents your limited-access plan.

Cultivation and processing sites skew the mix further toward technology: more rooms and more restricted zones mean a larger camera and access-control build, while a single grow may need less floor-guard labor than a busy retail store — the dominant spend follows the dominant threat, which is diversion, not walk-in robbery. Across both, the upfront surveillance and alarm build is usually the larger first-year expense; guard hours are the ongoing one. Because the requirements are prescriptive, the cheapest quote that doesn't actually meet your state's camera-coverage and retention rules is the most expensive mistake you can make — it fails inspection, and a failed inspection can hold your license.

Ready to build a security plan that passes? Get free quotes from licensed security companies that work with cannabis operators, and confirm the current rules for your state and locality with your cannabis regulator before you finalize the plan.