Getting a cannabis testing lab accredited to ISO/IEC 17025 is the single most important step a lab can take to prove its results are technically valid and defensible. The path involves building a documented quality system, validating your methods, and passing a rigorous on-site assessment from an accreditation body. It takes real effort — typically six to eighteen months from a standing start — but the framework is well-defined and entirely achievable.
This guide walks through the key phases, common obstacles, and practical considerations specific to cannabis testing labs.
Why ISO/IEC 17025 Accreditation Matters for Cannabis Labs
Many states and jurisdictions that have legalized cannabis require testing labs to hold ISO/IEC 17025 accreditation as a condition of licensure. Even where it is not yet legally mandated, regulators, dispensaries, and cultivators increasingly demand it as proof that potency, residual solvent, pesticide, heavy metal, and microbial results are trustworthy.
The standard addresses two broad areas: management requirements (how the lab is run, documents are controlled, and problems are corrected) and technical requirements (personnel competence, equipment, method validation, measurement uncertainty, and result reporting). Both must be satisfied for an accreditation body to grant a scope of accreditation.
Important: Accreditation requirements, regulated analyte lists, and mandatory reporting thresholds vary significantly by state and jurisdiction. Everything in this guide describes the ISO/IEC 17025 process generically. Always verify local regulations and confirm requirements with your accreditation body and state regulator before making compliance decisions.
Phase 1: Choose Your Accreditation Body
Accreditation bodies (ABs) are the organizations that assess labs and grant accreditation. In the United States, the most widely recognized AB for cannabis labs is A2LA (American Association for Laboratory Accreditation); PJLA, Perry Johnson Laboratory Accreditation, and others are also active in this space. Most ABs are signatories to the ILAC Mutual Recognition Arrangement, which means accreditation granted by one signatory is recognized by others around the world.
When selecting an AB, consider:
- Whether your state accepts accreditation from that AB — some states maintain an approved-AB list.
- The AB’s experience with cannabis matrices — an AB familiar with cannabis-specific methods can provide more meaningful technical guidance during the assessment.
- Program fees and annual maintenance costs, which vary by AB and scope size.
Contact your shortlisted ABs early. Many offer pre-application consultations, and some publish scope-specific guidance documents for cannabis labs that are worth reading before you invest in system-building.
Phase 2: Define Your Scope of Accreditation
Your scope defines exactly what you want to be accredited for: which analyte categories (potency, pesticides, heavy metals, etc.), which matrices (flower, edibles, concentrates, etc.), and which test methods. You are only assessed — and only accredited — for what is in your scope.
Be deliberate here. A narrow scope is easier to achieve quickly; a broad scope takes longer but may be required by state regulations. Review your state’s mandatory testing panel and map it to the methods you intend to use before finalizing your scope with the AB.
Phase 3: Build Your Quality Management System
This is the most document-intensive phase. ISO/IEC 17025 requires the lab to have a documented quality system that covers, at minimum:
Management System Documents
- Quality manual — a top-level document describing your management system, policies, and how the standard’s requirements are addressed.
- Document control procedure — how documents are approved, versioned, and withdrawn.
- Records management procedure — how raw data, calibration records, and test reports are created, stored, and protected.
- Internal audit procedure — how you systematically check your own conformance.
- Corrective action procedure — how nonconformities are investigated and resolved.
- Management review procedure — how leadership periodically reviews system performance.
Technical Procedures
- Standard operating procedures (SOPs) for every test method in scope — sample receipt, preparation, analysis, instrument operation, and result calculation.
- Method validation documentation — evidence that each method performs as expected in your hands with your matrices (accuracy, precision, linearity, LOD/LOQ, matrix effects, etc.).
- Equipment records — calibration status, maintenance logs, and out-of-tolerance history for every critical instrument.
- Traceability documentation — evidence that your measurements are traceable to national or international measurement standards through an unbroken calibration chain.
- Measurement uncertainty budgets — a documented, calculated estimate of uncertainty for each test method in scope.
Building this documentation from scratch takes months. Pre-built template kits (such as the ISO/IEC 17025 documentation kit) can compress this phase significantly — but remember that templates alone do not grant accreditation. Every document must be customized to reflect how your lab actually operates, and your team must implement what the documents say.
Phase 4: Implement the System and Collect Evidence
Writing procedures is necessary but not sufficient. The accreditation body will want to see that your system is running — not just documented. Before applying for the on-site assessment:
- Complete at least one full internal audit cycle covering all elements of your scope.
- Hold a management review meeting and record the outputs.
- Resolve any nonconformities identified in the internal audit and document the corrective actions taken.
- Accumulate proficiency testing (PT) results — most ABs require participation in PT programs as part of the assessment. Enroll early because PT rounds run on fixed schedules.
- Ensure personnel records are current, including training, competency evaluations, and authorization records for every analyst performing accredited tests.
A common mistake is applying for assessment before the system has been running long enough to generate meaningful evidence. Assessors look for a pattern of operation, not just the presence of documents.
Phase 5: Apply for and Pass the On-Site Assessment
Once you are confident your system is operational and evidence-based, submit your application to the AB. The assessment process typically includes:
- Application review — the AB reviews your documentation package for completeness.
- Document review — a technical assessor reviews your procedures and records before the site visit.
- On-site assessment — an AB team visits your lab to observe operations, interview personnel, review records, and witness testing.
- Corrective action phase — any findings (deficiencies) must be addressed before accreditation is granted.
- Accreditation decision — if all findings are resolved satisfactorily, the AB grants accreditation and issues a scope document.
During the on-site assessment, assessors will ask analysts to demonstrate testing in real time, walk through equipment calibration records, and show how measurement uncertainty is applied to reported results. Preparedness of your frontline staff is as important as the quality of your documentation.
Common Pitfalls to Avoid
- Weak method validation: Cannabis matrices are notoriously complex. Invest in thorough validation studies, especially for matrix-matched calibration and matrix spike recoveries.
- Gaps in traceability: Every calibration standard must trace to a certified reference material with a documented chain. Gaps here are a frequent finding.
- Undertrained personnel: ISO/IEC 17025 requires documented evidence that personnel are competent — not just that they have job titles. Competency assessments must be on file.
- Superficial corrective actions: When the internal audit or PT identifies a problem, the corrective action must address root cause, not just fix the instance.
Start with a Free Checklist
Before diving into documentation, orient yourself with our free accreditation readiness checklist. It maps the key requirements of ISO/IEC 17025 to the practical evidence your lab will need to produce — a useful gap analysis tool before you commit resources.
Frequently Asked Questions
Q: Is ISO/IEC 17025 accreditation required for all cannabis testing labs? A: Requirements vary by state. Many states mandate accreditation for licensed cannabis testing labs, but the specific AB, scope requirements, and deadlines differ. Check with your state regulator and your chosen accreditation body for current requirements in your jurisdiction.
Q: How long does it take to get a cannabis lab accredited? A: From building the quality system to receiving the accreditation certificate, most labs need six to eighteen months, depending on existing infrastructure, staff experience, and scope complexity. See our detailed breakdown in How Long Does ISO/IEC 17025 Accreditation Take?.
Q: What is proficiency testing and why is it required? A: Proficiency testing (PT) involves a lab analyzing blind samples provided by a PT provider and comparing results to expected values. It is an external check on your method performance. Most accreditation bodies require evidence of satisfactory PT participation before granting or maintaining accreditation.
Q: Can I use purchased template documents to become accredited? A: Template kits can dramatically reduce documentation time, but templates must be customized to reflect your actual procedures, personnel, and equipment. An assessor will verify that your documents describe how your lab actually operates — generic, unmodified templates are a finding risk.
Q: Do I need a separate license to operate a cannabis testing lab? A: In most jurisdictions, yes. State licensing and ISO/IEC 17025 accreditation are separate requirements that often must both be satisfied. The accreditation body handles accreditation; the state regulator handles licensing. Confirm both pathways with the relevant authorities in your state.