Evaluating an International Cannabis B2B Supplier: A Procurement Guide for 2026
Canada exported more than 46,000 kilograms of dried cannabis in 2025, the majority of it destined for Germany, Australia, and Israel. For procurement teams on the receiving end of that supply, the options have never been wider. That makes the supplier evaluation process more consequential, not less. A well-structured evaluation protects you from regulatory exposure, quality failures, and supply disruptions before you commit to a supply agreement. A poorly structured one just means you find the problems after your first shipment is held at customs.
This guide covers the five pillars of B2B cannabis supplier evaluation: licensing and regulatory standing, quality system certification, batch documentation standards, supply agreement structure, and the red flags that should end the conversation before it starts. None of these are theoretical standards. They reflect what sophisticated importers in Germany, Australia, and Israel actually require before onboarding a new Canadian Health Canada Licensed Producer.
Pillar 1: Licensing and Regulatory Standing
The first question is not whether a Canadian supplier has a Health Canada licence. It is which licence they hold and whether it covers what they are offering to sell you. Under the Cannabis Act and the Cannabis Regulations, a Standard Cultivation licence authorises the production of dried cannabis for commercial sale, but it does not automatically include export authorisation. That is a separate federal permission, issued by Health Canada under the Cannabis Regulations, and it must be active and specifically listed on the licence document before any international shipment can legally leave Canada.
Ask for a current copy of the supplier's Health Canada licence. Read the authorised activities section. If export is not listed, the supplier cannot ship to you legally, regardless of what they tell you verbally. This is not a technicality. Health Canada enforces export permit compliance strictly, and an unlicensed shipment creates liability for the importer as well as the producer.
For EU-bound supply, check whether the supplier holds EU-GMP certification issued by a European Medicines Agency member authority. Germany's BfArM will not issue a narcotic import permit for a batch that originated at a non-EU-GMP facility. If the supplier claims Canadian Good Production Practice (GPP) compliance is sufficient, they are wrong. The Mutual Recognition Agreement between Canada and the EU covers certain pharmaceutical sectors, but cannabis is specifically excluded. Your EU-destined supplier needs EU-GMP. Full stop.
Most LPs who have operated in export markets for more than two years have resolved this. LPs who are newer to export often haven't. The licence document tells you which group you're dealing with.
Pillar 2: Quality System Certification
EU-GMP certification confirms that a facility has passed inspection for pharmaceutical-grade manufacturing practice. It does not tell you what the product actually contains. For that, you need the lab testing layer, and the minimum standard for B2B cannabis procurement is ISO/IEC 17025-accredited testing on every commercial batch.
ISO/IEC 17025 is the international standard for testing and calibration laboratory competence. A Certificate of Analysis issued by an ISO/IEC 17025-accredited lab is a document you can rely on in a regulatory dispute. A COA from an unaccredited lab is a piece of paper. For shipments entering Germany, Australia, or Israel, regulatory authorities expect accredited testing. If your supplier uses an unaccredited lab, that alone should disqualify them from serious consideration for regulated-market supply.
Check the accreditation status directly. In Canada, you can verify a lab's ISO/IEC 17025 accreditation through the Canadian Food Inspection Agency or through Standards Council of Canada's directory. Don't rely on the lab's own marketing. The accreditation certificate should list the specific tests within scope. If cannabinoid potency or microbial testing is outside that scope, the accreditation is not covering what matters.
Beyond lab certification, ask whether the supplier operates a documented Quality Assurance Programme as required under the Cannabis Regulations. A quality assurance programme is not a marketing statement. It is a documented SOP library, a Qualified Person designation, a deviation management system, and a formal batch release process. Ask to see the batch release procedure. A serious supplier will provide it. One that hesitates probably doesn't have one that would survive an audit.
Pillar 3: Batch Documentation Standards
This is where most procurement evaluations fail. You can verify a licence and confirm EU-GMP status in an afternoon. Evaluating batch documentation standards takes longer, and the gaps are often invisible until a shipment is stopped.
Request a sample batch package from a recent shipment. A complete batch package for EU-bound cannabis should include: the full Certificate of Analysis (cannabinoids, terpenes, moisture, microbials, pesticide residues, heavy metals), the phytosanitary certificate issued by the CFIA, the Health Canada export permit, the BfArM narcotic import permit, and the EU-GMP batch release statement signed by the Qualified Person. Six documents, minimum. Some markets want more. Some markets require more.
What the documents say matters. What they don't say matters just as much. A COA that reports Total THC but not THCA and delta-9-THC separately is missing data that European pharmacists need to verify compliance. A microbial test that covers total yeast and mould but not Aspergillus species specifically will not satisfy the German pharmacopoeia standard. Small gaps in the COA become large problems at the point of product release in a German or Australian pharmacy supply chain. Align on COA format requirements before you sign a supply agreement, not after.
Check the dating on sample documents. Export permits are batch-specific and time-limited. Phytosanitary certificates expire. A supplier who provides documentation that is six months old as a sample is showing you the documents they keep on file, not the process they run. Ask for documents dated within the last 60 days, from a batch that actually shipped.
Pillar 4: Supply Agreement Structure
A supply agreement for international cannabis is not a standard commodity contract. Three clauses matter more than everything else combined.
First: specification sheets incorporated by reference. Every supply agreement should reference a detailed product specification document that defines cannabinoid potency ranges (not just minimums), terpene profile requirements, moisture content, bud size, trim standard, and acceptable microbial limits. If your supplier offers a supply agreement without a specification annex, you are buying a verbal promise. Specifications in a separate annex can be updated by mutual consent. Promises cannot be enforced.
Second: out-of-specification (OOS) and deviation protocols. Define in the contract what happens when a batch fails specification. Does the supplier re-test? Who pays for the retest? Does the importer have the right to reject at point of delivery? What is the claims window after a COA is provided? These clauses feel unnecessary until you need them. Then they are the only thing that matters.
Third: continuity and force majeure provisions. Cannabis production is subject to Health Canada site inspections, crop failures, and regulatory changes that can interrupt supply without warning. Your supply agreement should require the supplier to notify you within a defined window of any Health Canada inspection finding, licence amendment, or supply disruption. It should also define minimum inventory buffer requirements and the supplier's obligation to source replacement supply from a compliant alternate producer if they cannot deliver. Most procurement teams over-negotiate price and under-negotiate continuity. Price variation over a 12-month contract is minor compared to the cost of a supply gap in a regulated pharmaceutical distribution system.
Red Flags That End the Evaluation
Eleven years in B2B cannabis supply has produced a consistent pattern: the same warning signs appear in supplier evaluations that should have been stopped earlier. If any of the following appear during your evaluation, do not proceed.
The supplier cannot provide a current, complete copy of their Health Canada licence within 24 hours of being asked. This document is not confidential. Any licensed producer who delays providing it is either disorganised or has something to conceal. Either disqualifies them.
The supplier claims their export authorisation is pending or in process. Export permits are batch-specific, not standing authorisations. A supplier who conflates pending export authorisation with operational export capability does not understand the regulatory framework they are operating in.
The COA for a product described as EU-destined does not include a terpene panel. German pharmacy distributors expect terpene data as a standard deliverable. A supplier who doesn't run it routinely is not operating a EU-ready quality programme.
The supplier mentions EU-GMP certification as planned or offers alternative certifications as equivalent. There is no equivalent. If the certification is not active and listed on a facility inspection report from a European competent authority, it does not exist for procurement purposes.
The supplier pressures you to sign a supply agreement before completing documentation review. A supplier confident in their compliance posture will welcome documentation review. Pressure to close before review is complete is the clearest signal that the review would find something disqualifying.
AlphaLeaf: Built for Procurement Evaluation
AlphaLeaf is a Health Canada Licensed Producer with active export authorisation, operating from a single indoor facility in Montreal. Every commercial batch is produced from refined genetics, hand-trimmed for large-bud format, and tested by an ISO/IEC 17025-accredited laboratory with full terpene, potency, microbial, pesticide, and heavy metals panels. EU-GMP certification supports supply into Germany and other European medical markets. Full batch traceability and a complete documentation package are standard on every shipment. If your evaluation framework is serious, we'll pass it. Contact our international team to start the documentation review, or visit our certifications page for a summary of our compliance posture. Ready to proceed? Reach out here.
Frequently Asked Questions
What documents should I request from a Canadian cannabis supplier before signing a supply agreement?
Request the current Health Canada licence with export authorisation listed in the authorised activities section, the EU-GMP certificate if the supply is EU-destined, a sample COA from a recent commercial batch dated within 60 days, a sample phytosanitary certificate from a completed shipment, and the supplier's batch release procedure. Together these five documents give you a clear picture of regulatory standing and documentation quality before you commit to a contract.
Is Good Production Practice (GPP) certification equivalent to EU-GMP for exporting to Germany?
No. Health Canada's Good Production Practices framework governs Canadian LP operations under the Cannabis Regulations, but it is not recognised as equivalent to EU-GMP by BfArM or other European competent authorities. The Canada-EU Mutual Recognition Agreement covers certain pharmaceutical sectors, but cannabis is excluded. A supplier intending to ship into Germany needs an active EU-GMP certificate issued by a European Medicines Agency member authority. GPP compliance alone does not satisfy this requirement.
How do I verify that a Canadian cannabis lab's ISO/IEC 17025 accreditation covers cannabinoid testing?
Accreditation scope is the critical detail. A lab may hold ISO/IEC 17025 accreditation but only for specific test methods, and cannabinoid potency may be outside that scope. Request the lab's current accreditation certificate and the schedule of accredited tests. In Canada, you can verify accreditation status through the Standards Council of Canada or the Canadian Association for Laboratory Accreditation. If cannabinoid potency, terpene analysis, and microbial testing are not listed as in-scope accredited methods, the COA for those tests does not carry accreditation-backed validity.
What is the minimum batch documentation package for cannabis shipments entering Germany?
For shipments entering the German medical cannabis channel, the minimum documentation package includes the ISO/IEC 17025 COA with full analyte panel, the BfArM narcotic import permit issued to the German importer, the Health Canada export permit, the CFIA phytosanitary certificate, the EU-GMP batch release statement signed by the Qualified Person, and a chain-of-custody document. Some German pharmacy distributors require additional documentation including a declaration of conformity with the European Pharmacopoeia. Confirm requirements with your specific distributor before the first shipment.
How should a supply agreement handle out-of-specification cannabis batches?
Supply agreements for B2B cannabis should include a dedicated OOS protocol clause that defines the retest procedure, who bears the retest cost, the importer's right to reject at delivery, the claims window after the COA is issued, and the supplier's obligation to replace or credit rejected product within a defined timeline. Without these clauses, OOS disputes default to general contract law in the supplier's jurisdiction, which is rarely in the importer's favour. Negotiate these provisions before signing, not after a rejection occurs.
