On 13 October 2026, Canopy Growth announced EU-GMP certification for its Smiths Falls, Ontario facility. The press release backed the claim with a footnote: a review of certificate records in the EudraGMDP database as of 9 October 2026. The footnote is worth copying. A dated database search is evidence a Qualified Person can rely on, and a PDF attached to an email is not.
Verifying a cannabis EU-GMP certificate in EudraGMDP means finding the record in the public database run by the European Medicines Agency and matching its site address to the facility that handles your flower. You then confirm the latest inspection is under three years old and read Part 2 to see which operations are covered. No live record means no verification.
If you run procurement or quality for an EU importer, here's how each check works, where buyers misread certificates, and what to request from a Canadian Licensed Producer.
What EudraGMDP shows for a cannabis EU-GMP certificate
EudraGMDP is the European Union's database for manufacturing and import authorisations, GMP certificates and statements of non-compliance. National inspectorates upload each certificate they issue, as required by Article 111(6) of Directive 2001/83/EC, and the public search lets anyone pull up the record. Every certificate states that its authenticity may be checked in EudraGMDP and that, if it doesn't appear, you should contact the issuing authority.
For a Canadian cannabis site, the issuing authority is always an EU member state inspectorate. It is never Health Canada. The Canada-EU Mutual Recognition Agreement covers pharmaceutical GMP, but cannabis sits outside its scope. Health Canada regulates Licensed Producers under the Good Production Practices in Part 5 of the Cannabis Regulations, not GMP. So an EU authority, often a German state inspectorate, flies in and inspects the Canadian facility itself. Our guide to EU-GMP certification for a Canadian cannabis facility covers that path from the producer's side.
Each certificate has two parts. Part 1 names the manufacturer, the site address, the issuing authority, the legal basis and the date of the latest inspection. Part 2 lists the operations the site was found compliant for. The certificate text itself says it is valid only when both parts are presented together.
A certificate number alone tells you who was inspected, not what was approved. Ask for both parts every time.
The EudraGMDP 5-point certificate check
Run these five checks on every new supplier, and again before each annual requalification.
1. Match the site, not the company
Search the GMP certificates section by country and manufacturer, then compare the site address on the record line by line with the facility named on your certificate of analysis and shipping documents. Recent certificates also carry an OMS organisation ID and location ID. Ask your supplier for both and confirm they match. Canadian cannabis groups often hold several licences across provinces, and a certificate for one building says nothing about another.
2. Check the inspection date against the three-year line
The standard Union-format wording says a certificate reflects the site's status at the time of inspection and shouldn't be relied on once more than three years have passed since that inspection. Authorities can shorten or extend that period through the restrictions or clarifying remarks, and some state a two-year term directly on the certificate. Read the date. Then read the remarks.
3. Read Part 2 for the operations you're actually buying
Part 2 lists activities such as quality control testing, primary packaging, secondary packaging, batch certification and importation. A site certified only for quality control testing hasn't been certified for packaging the flower you receive. Canopy's October announcement spelled out its scope in detail: softgel manufacturing plus primary packaging of softgels, oral liquids and dried flower.
4. Confirm status and search the non-compliance register
Withdrawn certificates stay visible with a withdrawal date and comments. Often the comment says the certificate was superseded by a newer number, so follow the chain to the current record. Then search the Non-Compliance Report section for the same site. A statement of non-compliance outweighs any certificate a supplier sends you.
5. Read the clarifying remarks in full
Remarks record restrictions, adjusted validity and how the assessment was done. Ireland's HPRA, for example, has issued certificates noting a distant assessment using live video, with no on-site inspection. That doesn't make the certificate invalid, but your quality team should know it before relying on it.
All five checks use the public search, so your own quality team can complete them before the purchase order goes out.
Where B2B buyers misread EU-GMP certificates
The common problem is a mismatch between what a supplier says in a sales conversation and what the database record covers.
| Supplier claim | What EudraGMDP may show | What to request |
|---|---|---|
| Our group is EU-GMP certified | A certificate for one licensed site only | Address and OMS location ID of the shipping site |
| We are EU-GMP compliant | No certificate at all | Certificate number and issuing authority |
| Certified since 2022 | Latest inspection more than three years old | Date of the most recent inspection |
| Full EU-GMP scope | Testing or packaging only in Part 2 | The Part 2 page listing operations |
| A certificate PDF by email | Withdrawn or superseded status | The live database record |
The harder case is split supply chains. Much Canadian flower reaches Germany under a GACP-to-GMP model: grown and dried in Canada under agricultural standards, then processed and released at an EU GMP site. In that model the certificate that matters may belong to the EU processor, not the Canadian grower, so you need to verify both legs. On 8 June 2026 the Hessian State Office for Health and Care published guidance treating controlled drying as a manufacturing step, which puts pressure on exactly that split. Our analysis of Germany's GMP washing crackdown explains what changed.
Hesse's guidance landed in June. By October, a Canadian producer was quoting a dated EudraGMDP search to prove the exact operations its site covers, which suggests buyers now read the scope line closely.
A certificate PDF sent by email is not verification. If the record isn't live in EudraGMDP, don't place the order.
One caution in the other direction. EudraGMDP itself warns that inspections of active substance manufacturers are risk-based, so the absence of a certificate doesn't by itself prove non-compliance. That's fair for regulators. For an importer whose release depends on that certificate, a missing record still means you can't use the supplier yet.
What to request from a Canadian LP alongside the certificate
The database record confirms what an inspector saw. Your supplier qualification file needs the documents that show how the site runs between inspections. Request these alongside the certificate:
- Certificate number, issuing authority and full copies of Part 1 and Part 2
- Date of the most recent inspection and the status of any follow-up commitments
- A current site master file describing the facility and its quality system
- Batch certificates of analysis from an ISO/IEC 17025 accredited laboratory
- GACP evidence for cultivation if growing and processing happen at different sites
Your Qualified Person will look at the same file before signing off a batch, so building it early shortens the path to EU QP batch release. A gap found at batch release can hold a shipment for weeks, while the same gap found during qualification usually takes one document request to close.
AlphaLeaf is a Health Canada Licensed Producer in Montreal, growing indoor, hand-trimmed cannabis flower from refined genetics. We hold export authorisation under the Cannabis Act and keep ISO/IEC 17025 batch testing and full traceability records ready for the supplier qualification files EU importers build before a first order.
Start with the database check. Then request AlphaLeaf's supplier qualification documents through our contact page.
Frequently Asked Questions
How do I verify an EU-GMP certificate for a Canadian cannabis producer?
Search the GMP certificates section of EudraGMDP by country and manufacturer, then match the site address and OMS location ID to the facility shipping your flower. Confirm the latest inspection is under three years old, read Part 2 for the operations covered, and check the Non-Compliance Report section for the same site.
Does Health Canada issue EU-GMP certificates for cannabis?
No. Cannabis falls outside the Canada-EU Mutual Recognition Agreement, and Health Canada regulates Licensed Producers under Good Production Practices in the Cannabis Regulations. EU-GMP certificates for Canadian cannabis sites are issued by EU member state inspectorates after they inspect the facility.
How long is an EU-GMP certificate valid?
A certificate reflects the site's status at the date of inspection and should not be relied on once more than three years have passed since that inspection. The issuing authority can shorten or extend that period in the restrictions or clarifying remarks, so always read both.
What does a withdrawn certificate in EudraGMDP mean?
It means the certificate is no longer current. The record shows a withdrawal date and comments, which often state that a newer certificate superseded it. Follow the reference to the current record before relying on the supplier.
What should I do if a supplier's certificate is not in EudraGMDP?
Treat it as unverified. The certificate wording itself directs you to contact the issuing authority if the record does not appear. Do not place an order until the authority confirms the certificate or the record goes live.
Is EU-GMP compliant the same as EU-GMP certified?
No. Certified means an EU inspectorate inspected the site and issued a certificate you can find in EudraGMDP. Compliant is a supplier's own description and carries no regulatory weight until a certificate exists.
