In cannabis finance, your books don’t just have to be right. They have to agree with regulators, POS systems, and tax authorities simultaneously. Cannabis audit preparation isn’t something you start when the auditor calls—it’s a year-round discipline that separates operators who sail through audits from those who face expanded scope and six-figure fees.
Most operators rely on late fixes, manual workarounds, and undocumented judgments instead of disciplined close and control processes. They focus on reported profits while ignoring cash flow inconsistencies, inventory volatility, and recurring process breakdowns. These behaviors quietly signal risk to auditors, triggering expanded testing long before management is notified.
Auditors notice the gaps before they say a word. And by the time they tell you, the damage is already done.
The Problem: Financial Housekeeping That Looks Fine on the Surface (But Fails Cannabis Audit Preparation)
A New York dispensary operator came to us after receiving an audit notice. On paper, everything looked clean—their books closed on time, inventory counts matched METRC at month-end, and profit margins held steady quarter over quarter.
But their cannabis audit preparation had a fatal flaw: they focused on cosmetic cleanliness instead of control discipline.
But when the auditor arrived, three issues surfaced within the first week:
- POS sales didn’t match general ledger revenue—discrepancies averaged $12,000 per month across six locations
- Inventory quantities differed from seed-to-sale records—shrinkage wasn’t properly documented, and manual adjustments lacked approval trails
- Cash deposits lagged behind reported sales—deposits were often 3–7 days late, creating unexplained timing gaps
None of these issues were catastrophic individually. But together, they signaled to the auditor that controls were weak, documentation was inconsistent, and management might not have full visibility into the numbers.
The audit scope expanded. What started as a standard financial statement audit became a detailed examination of revenue recognition, inventory accounting, and cash handling procedures. Three months later, the operator faced $140,000 in additional fees, internal control deficiencies documented in a management letter, and questions from their investors about finance team competency.
The operator asked us: “Why didn’t they just tell us what they needed upfront?”
The answer: they did. They asked for reconciliations, supporting documentation, and process narratives. The operator provided them. The auditor just didn’t like what they saw. This is why cannabis audit preparation must focus on process quality, not just deliverable completion.
What Auditors Actually Look For (Before They Expand the Scope of Cannabis Audit Preparation)
Auditors don’t make snap judgments. They follow a risk-based approach: assess control environment, test key processes, identify gaps, expand testing where risk is elevated.
The behaviors that trigger expanded testing aren’t always obvious to operators. Here’s what auditors notice—and what they mean for your cannabis audit preparation:
1. Reconciliations That Exist, But Aren’t Reviewed or Approved
A growing multi-location operator implemented a new ERP system mid-year. The finance team continued closing on time, hitting every deadline. But they relied heavily on manual spreadsheets to reconcile subledgers to the general ledger.
Auditors requested reconciliation documentation. The operator provided Excel files for every account—bank reconciliations, inventory reconciliations, intercompany balances.
But when auditors dug deeper, they found:
- Key reconciliations were not reviewed or formally approved
- Journal entries correcting system mapping errors lacked documentation
- Prior-period adjustments quietly recurred each month
From the operator’s perspective, the books were reconciled. From the auditor’s perspective, there was no evidence of management oversight. That’s a control deficiency.
Auditors expanded testing to verify account balances independently. The operator spent weeks recreating documentation that should have existed in the first place.
2. Cash Flow Inconsistencies That Don’t Match Reported Revenue
A Sacramento cultivator reported strong revenue growth—32% year-over-year. But their cash flow from operations was flat. Auditors noticed the divergence immediately. Proper cannabis audit preparation includes understanding how auditors use cash flow analysis to validate reported earnings.
The explanation: the operator had front-loaded revenue recognition based on contracted sales, but payments were structured as milestone-based over six months. The operator believed they were following accrual accounting principles correctly. The auditor disagreed on the timing.
The mismatch wasn’t fraud. It was a judgment call on revenue recognition that the operator made without consulting their auditor or reviewing ASC 606 guidance specific to their contracts.
The auditor challenged the revenue recognition policy. The operator had to restate two quarters of financials, adjust deferred revenue, and document a revised policy for future periods.
Cash flow doesn’t lie. When operating cash flow lags significantly behind reported earnings, auditors dig into revenue recognition, receivables aging, and whether the business is actually as profitable as the financials suggest.
3. Inventory Volatility Without Clear Explanations
A Massachusetts operator’s inventory balance swung wildly quarter to quarter—up 40%, down 25%, up 30% again. Management attributed it to seasonality and changing product mix. Strong cannabis audit preparation requires documenting inventory movements before volatility triggers auditor skepticism.
When auditors tested inventory, they found:
- Physical counts didn’t match perpetual records
- Waste documentation was incomplete
- Intercompany transfers between cultivation and retail entities weren’t properly tracked
The operator wasn’t intentionally misrepresenting inventory. They just didn’t have disciplined processes for tracking movement, waste, or valuation. And when auditors see unexplained volatility, they assume control weaknesses exist until proven otherwise.
The result: full physical inventory observation at all locations, detailed testing of cost flows, and expanded procedures around 280E cost allocation. What should have been a straightforward inventory test turned into a month-long examination.
What This Actually Costs Operators
Late fixes, expanded audit procedures, and internal control deficiencies aren’t just inconvenient. They’re expensive.
Incremental audit fees: Expanded testing adds $40,000–$120,000 in additional fees, depending on scope. For high-growth operators seeking institutional capital, a qualified opinion or material weakness can delay fundraising for 6–12 months.
Internal time drain: Finance teams spend weeks recreating documentation, explaining variances, and responding to auditor requests. That’s time not spent on forecasting, margin analysis, or strategic planning.
Investor confidence: Management letters documenting control deficiencies raise questions with investors, lenders, and acquirers. Even if the issues are remediated, they create doubt about finance team competency and management oversight.
The opportunity cost is the hardest to measure. A Brooklyn operator delayed a $15M growth equity raise by nine months because their audit dragged on due to revenue recognition issues. By the time the audit cleared, market conditions had shifted, and they closed the round at a lower valuation.
How to Build an Audit-Ready Finance Function Through Proper Cannabis Audit Preparation
The gap between “clean books” and “audit-ready books” comes down to process discipline, documentation standards, and proactive controls testing. According to the AICPA’s audit quality framework, effective cannabis audit preparation requires year-round attention to internal controls, not last-minute documentation.
Here’s what operators should prioritize:
1. Daily Reconciliation Between POS, Inventory, and General Ledger
Cannabis operators juggle three systems that must agree: point-of-sale (POS), seed-to-sale tracking (METRC, BioTrack, Leaf), and the general ledger. Effective cannabis audit preparation means these systems reconcile daily, not monthly.
Most operators reconcile these systems monthly. That’s too late. By the time discrepancies are identified, the root cause is buried under 30 days of transactions.
What audit-ready operators do:
- Reconcile POS to GL daily (or at minimum, weekly)
- Run automated variance reports flagging discrepancies over $500 or 2%
- Document and resolve variances within 48 hours
- Maintain a log of recurring issues and process improvements
A Bay Area operator implemented daily POS-to-GL reconciliation across five dispensaries. They identified and fixed a pricing error that was costing them $8,000 per month in unrecorded sales. The auditor reviewed their reconciliation log and reduced substantive testing—saving the operator $15,000 in audit fees.
2. Strong Cash Handling SOPs With Documented Enforcement
Cash-intensive businesses face heightened audit scrutiny. Auditors assume cash controls are weak until they see evidence otherwise.
What audit-ready operators do:
- Implement dual-custody cash counts at every shift change
- Reconcile cash counts to POS sales before deposits
- Document variances over $50 with manager approval
- Enforce separation of duties (counter staff don’t prepare deposits)
- Conduct surprise cash audits quarterly
A New Jersey operator had clean cash handling SOPs documented in their employee handbook. But when auditors tested compliance, they found the procedures weren’t consistently followed. The operator implemented a cash log with manager sign-off at every shift change. Within three months, cash variances dropped from $3,200 per month to under $400.
Documentation matters. But documented enforcement matters more.
3. Clear 280E Expense Allocation Methodologies
Cannabis operators face unique tax challenges under IRC Section 280E, which disallows deductions for expenses related to trafficking in controlled substances. Only cost of goods sold (COGS) is deductible. Strong cannabis audit preparation requires documented 280E allocation methodologies before the auditor arrives.
The line between COGS and operating expenses is blurry. And auditors—both financial statement auditors and IRS examiners—scrutinize these allocations closely.
What audit-ready operators do:
- Document allocation methodologies upfront (not during the audit)
- Use activity-based costing or headcount ratios to allocate shared costs
- Maintain detailed timesheets for employees split between COGS and non-COGS functions
- Review allocations quarterly and adjust for operational changes
A California cultivator allocated 70% of facility costs to COGS based on square footage used for cultivation vs. general admin. But when auditors tested the allocation, they found the methodology hadn’t been updated after the operator expanded into manufacturing. The auditor challenged the allocation, and the operator ended up overstating COGS by $180,000—resulting in a tax adjustment and penalties.
4. Mock Audits and Internal Controls Testing Before Year-End
Most operators wait for the auditor to tell them what’s broken. Effective cannabis audit preparation means testing your own controls before the auditor arrives—not scrambling when they’re already on-site.
What audit-ready operators do:
- Conduct a mock audit in Q3 or early Q4
- Test key controls: revenue recognition, inventory counts, cash handling, intercompany transactions
- Document deficiencies and remediate before year-end
- Request a pre-audit call with the auditor to align on scope and expectations
A Minnesota operator brought us in to conduct a mock audit in October. We identified three material control deficiencies: incomplete intercompany reconciliations, unsigned journal entries, and missing vendor verification for large purchases.
The operator remediated all three issues before year-end. When the actual audit started in February, the auditor confirmed controls were operating effectively. The audit wrapped up in five weeks instead of the usual twelve.
5. Technology-Enabled Monitoring Instead of Spreadsheet-Driven Reviews
Auditors trust automated controls more than manual reviews. A properly configured ERP system with exception reporting reduces audit risk and testing burden—and strengthens your overall cannabis audit preparation strategy.
What audit-ready operators do:
- Implement automated three-way matching for purchase orders, invoices, and receipts
- Use exception dashboards to flag unusual journal entries, pricing variances, or inventory movements
- Automate month-end close checklists with sign-off workflows
- Enable audit trails for all system changes (user access, master data updates, etc.)
A multi-state operator migrated from QuickBooks to NetSuite mid-year. They configured automated controls for journal entry approval, PO matching, and inventory valuation. The auditor reduced substantive testing by 40%, and the operator cut two weeks off their close cycle.
Spreadsheets create audit risk. Systems create audit evidence.
The Reality: Cannabis Audit Preparation Isn’t About Perfection
Auditors don’t expect perfect processes or zero variances. They expect evidence of management oversight, documented controls, and a commitment to continuous improvement.
The operators who sail through audits aren’t the ones with the fanciest systems or the biggest finance teams. They’re the ones who prioritize cannabis audit preparation year-round:
- Reconcile daily instead of monthly
- Document judgments instead of relying on memory
- Test their own controls before the auditor arrives
- Treat the audit as a process review, not a compliance checkbox
The operators who struggle are the ones who think “clean books” means the same thing to auditors as it does to them. It doesn’t.
Auditors notice the gaps before they say a word. The question is: do you notice them first?
Ready to strengthen your cannabis audit preparation?
We’ve created a comprehensive Audit Master Guide to help cannabis operators prepare for audits year-round—not just in tax season. It includes:
- ✅ 25-item audit readiness checklist (are you actually ready, or just hoping you are?)
- ✅ Year-round audit calendar (monthly and quarterly actions to stay ahead)
- ✅ Fix now vs. fix later cost comparison (what to prioritize based on audit risk and dollar impact)
Book a free consultation call to discuss your cannabis audit preparation strategy and get the full Audit Master Guide.
Daniel Sabet is the CFO at GreenGrowth CPAs, a cannabis accounting firm specializing in multi-state operators, cannabis audit preparation, 280E tax strategy, and CFO infrastructure for high-growth cannabis businesses. GreenGrowth works with operators in California, New York, New Jersey, Minnesota, and Delaware.
