Can this form be signed electronically?

Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. ch. 96) and UETA in most states, provided the signer’s intent to sign and record retention are demonstrable. Certain narrow exceptions, such as some court filings or wills, may not be eligible for e-signature.

Is notarization required for the form?

Not always. Whether notarization is required depends on the receiving party or state registry. If a state or regulator requests notarized attestations, follow its rules; some jurisdictions permit remote online notarization subject to identity-proofing and retention requirements.

What if the COA conflicts with the label?

If a COA shows results inconsistent with label claims, do not ship affected lots. Update labels or COAs as required, notify partners, and retain records of corrective actions; failure to reconcile discrepancies can lead to enforcement or recall.

How long must I keep these records?

Retain signed forms and COAs per the most stringent applicable rule: at least 3 years for IRS-relevant records (IRC §6501(a)) and 6 years for HIPAA-covered records (45 CFR §164.530(j)) when health information is involved. State rules may require longer retention.

Who should sign the attestation?

An authorized company officer or delegated Compliance Manager should sign. The signer must have authority to attest to product testing and labeling accuracy and should be identified by name, title, and contact information on the form.

How do I correct a completed form?

If errors are discovered post-signature, prepare a signed amendment or corrected form that references the original lot and signature, include the reason for correction, and retain both records to preserve an audit trail for inspections or disputes.

CBD Compliance Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

CBD Compliance Form

This CBD Compliance Form (the "Agreement") is entered into as of Effective Date: between Supplier Name: and Recipient Name: .

Recitals

WHEREAS, Supplier manufactures, packages, labels and/or distributes cannabidiol ("CBD") products that are intended for commercial distribution and sale; and

WHEREAS, Recipient purchases, markets, or sells CBD products and requires Supplier to represent and warrant that each product supplied complies with applicable product safety, labeling, THC concentration limits, and testing requirements described in this Agreement; and

WHEREAS, the parties wish to set forth the compliance obligations, testing documentation, certifications, and remedies applicable to the sale and distribution of the specified CBD products.

Supplier and Recipient Information

Supplier Business Address Supplier Contact Person Recipient Business Address Recipient Contact Person

Scope of Compliance

Supplier will ensure that all CBD products supplied to Recipient meet the specifications and compliance obligations stated below and as further detailed in the Scope of Work.

Scope of Work — Description of Products, Batches, and Compliance Activities Covered Product Types (select all that apply)

Full-spectrum Broad-spectrum Isolate Topical Ingestible

Testing, Documentation and Certification

Supplier certifies that each lot or batch described in the Scope of Work is accompanied by a Certificate of Analysis ("COA") prepared by an accredited third-party laboratory demonstrating cannabinoid content, potency, and contaminants screening. Supplier will provide COAs to Recipient at or before shipment.

Certificate of Analysis (COA) — Laboratory Name COA Date COA Reference / Report Number

Supplier warrants that the delta-9 tetrahydrocannabinol (THC) concentration in finished product does not exceed the applicable legal threshold for hemp-derived CBD products. Supplier shall maintain and provide sampling and testing records for at least three years following shipment.

Payment Terms

Compliance Fee Amount Payment Schedule and Terms Late Payment Fee (percentage)

All fees due under this Agreement are exclusive of taxes. If Recipient fails to pay amounts when due, Supplier may suspend delivery of further product or services after providing written notice and the agreed cure period specified in Term and Termination.

Term and Termination

This Agreement commences on Start Date: and continues until End Date: unless earlier terminated in accordance with this section.

Notice Period for Termination (days)

Either party may terminate this Agreement for material breach if the breaching party fails to cure such breach within the notice period specified above following receipt of written notice. Termination shall not release either party from obligations accrued prior to termination, including payment obligations and record retention.

Confidentiality

Each party shall treat as Confidential Information all non-public business, technical and trade secret information disclosed in connection with this Agreement, including COAs, manufacturing processes, formulations, pricing, and customer lists. Confidential Information shall not include information that is (i) publicly known through no fault of the receiving party, (ii) rightfully received from a third party, or (iii) independently developed by the receiving party without use of the disclosing party's Confidential Information.

The receiving party shall use at least the same degree of care to protect the disclosing party's Confidential Information as it uses to protect its own confidential information, but in no event less than reasonable care. Disclosure required by law is permitted if the receiving party provides prompt notice and cooperates with the disclosing party to seek protective measures.

Representations and Warranties; Indemnification

Supplier represents and warrants that, to the best of its knowledge, each product supplied under this Agreement (a) conforms to the specifications set out in the Scope of Work, (b) is accompanied by accurate COA documentation, and (c) does not contain contaminants or concentrations of controlled substances inconsistent with industry standards. Supplier shall indemnify and hold harmless Recipient from third-party claims arising from Supplier's breach of these representations.

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction specified below, without regard to conflict of laws principles.

Governing Jurisdiction (State)

Entire Agreement

This Agreement, including all attachments and the Scope of Work, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior written or oral agreements. Any amendment must be in writing and signed by authorized representatives of both parties.

Attestations and Acknowledgments

The undersigned authorized representative of Supplier certifies, under penalty of perjury, that the representations and warranties in this Agreement are true and accurate, and that Supplier maintains procedures reasonably designed to ensure ongoing product compliance. The undersigned of Recipient acknowledges reliance on Supplier's certifications in accepting product shipments.

Supplier Attestations (check to certify) Supplier certifies that delta-9 THC levels comply with the applicable hemp-derived threshold. Supplier has provided COA(s) from an accredited third-party laboratory for each batch. Supplier confirms that product labeling and ingredient declarations comply with applicable labeling requirements.

Record Retention and Audit Rights

Supplier will retain manufacturing, testing, and distribution records related to the products for a minimum of three (3) years following shipment. Upon reasonable notice, Recipient may audit Supplier's relevant records during normal business hours for compliance verification; audits will be limited in frequency to avoid undue burden.

Remedies

If Supplier materially breaches its obligations, Recipient may (a) require corrective action, (b) reject non-conforming product, and (c) seek damages, including reasonable costs to recall or remediate non-conforming product. The parties' remedies are cumulative and in addition to any remedies provided by law.

Supplier Printed Name:

By:

Date:

Recipient Printed Name:

By:

Date:

What the CBD Compliance Form is

The CBD Compliance Form documents product, testing, labeling, and supply-chain details required to demonstrate regulatory compliance for cannabidiol (CBD) products sold or distributed in the United States. It typically records product identity, cannabinoid concentration, third-party lab test results (COA), manufacturing lot numbers, and distributor information so regulators, retailers, and business partners can verify that a product meets state and federal requirements.

Why maintaining a CBD Compliance Form matters

A complete form reduces regulatory risk, speeds retailer onboarding, and preserves evidence in audits or recalls. Accurate documentation supports labeling claims, helps meet state permit or registry requirements, and protects against enforcement actions by demonstrating proactive quality controls.

Who typically prepares and relies on this form

Teams across product, quality, legal, and distribution functions use the CBD Compliance Form to record and verify compliance-critical data before shipment, listing, or sale.

Quality assurance teams verify COAs, stability data, and testing lab credentials before approving release.
Regulatory or legal staff confirm labeling, claims, and jurisdictional registration requirements are satisfied.
Supply-chain or purchasing teams collect vendor certificates and lot tracking for traceability and recalls.

Proper role alignment ensures accuracy: operations supply manufacturing data, quality uploads lab results, and legal confirms labeling language and disclosures.

Primary signers and approvers

Compliance Manager

As document owner, the Compliance Manager compiles testing results, confirms labeling claims match COAs, and attests that the product complies with applicable state registration rules; they authorize release and retain documentation for audits.

Corporate Counsel

Legal counsel reviews marketing language, confirms consumer-facing disclosures meet state and federal requirements, and verifies that the attestation language in the form limits civil exposure while remaining enforceable under relevant statutes.

Core sections of a professional CBD Compliance Form

A complete professional form is modular: it captures product identity, laboratory verification, manufacturing traceability, labeling and claims, distributor and lot information, and signatures with attestations to accuracy.

Product Identification

Brand and SKU, product form (tincture, topical, edible), net quantity, and declared serving size to tie lab data to the exact marketed item.

Cannabinoid Profile

Declared CBD/THC concentrations and testing method used, enabling quick comparison between label claims and measured values from the COA.

Certificate of Analysis

Third-party lab name, accreditation status, COA date, and a reference or embedded copy showing test results for cannabinoids, pesticides, heavy metals, and residual solvents.

Manufacturing Details

Manufacturer name, address, lot or batch number, production date, and expiry or best-by date where applicable for traceability and recall support.

Labeling and Claims

Exact on-label statements, health or therapeutic claims, and confirmation that claims comply with federal and state restrictions for CBD products.

Certification & Signature

Authorized signer name, title, date, and an attestation that the information is accurate and complete under penalty of law or company policy.

Step-by-step: completing the CBD Compliance Form

Follow these steps in order to prepare a compliant, review-ready submission that links lab data and production records to marketed products.

01

Step 1: Gather COA, lot records, and label artwork.
02

Step 2: Enter product identity and supplier information.
03

Step 3: Attach COA and confirm test parameters.
04

Step 4: Obtain authorized signature and record approval date.

How to configure the online completion workflow

Configure a simple reviewer and signer flow to capture approvals, attachments, and an audit trail before distribution.

Field	Configuration
Upload Template	Store a master PDF or DOCX template in the document library for reuse.
Attach COA File	Require a PDF or image upload field limited to accepted file types.
Review Order	Set role-based reviewer before final signer to prevent premature approval.
Retention Rule	Set automatic export to secure archive after signing for records retention.

Submission and verification flow

A consistent flow reduces processing time and ensures evidence is available for audits or retailer onboarding checks.

Prepare Document: Populate fields and attach COA and lot records.
Internal Review: Quality confirms test results and labeling claims.
Authorized Sign: Compliance Manager signs and dates the form.
Distribute Copy: Send signed form to retailers, registries, or regulators.

Digital tools and file formats to support e-submission

Use a platform that supports PDF and DOCX templates, secure attachments, audit trails, and integrations for distribution to registries or retail partners.

File Formats: Accept PDF and DOCX for templates; require PDF for final signed archival copies.
Integrations: Connectors for Google Workspace, Box, NetSuite, and Salesforce simplify distribution and recordkeeping.
Security Controls: Ensure TLS in transit and AES-256 at rest for attachments and signed records.

Ensure the platform captures an immutable audit trail (timestamps, IP, signer identity) and can export a reproducible signed PDF for regulatory or retailer requests.

Security and compliance features to document on the form

Encryption: TLS 1.2/1.3, AES-256

Audit Trail: Timestamped events

HIPAA BAA: Available if required

Authentication: Email, SMS, or stronger

Access Controls: Role-based permissions

Retention Export: PDF/A archival export

Common preparation mistakes to avoid

Attaching an outdated COA that predates the production lot leads to rejected submissions and delays with retailers or regulators.
Mismatched identifiers between label SKU, lot number, and COA prevent effective traceability and can trigger recall escalations.
Using imprecise concentration units or omitting per-serving vs per-container values causes confusion during potency verification.
Failing to capture lab accreditation details or chain-of-custody information reduces the evidentiary value of the COA during inspections.

Regulatory and commercial risks of incomplete or inaccurate forms

Regulatory Fines: Civil penalties possible

Product Seizure: Enforcement removal risk

Retail Rejection: Listings denied or delisted

Recall Costs: Direct financial exposure

Civil Liability: Potential consumer suits

Reputational Harm: Long-term brand damage

Typical timelines and processing expectations

Set internal deadlines to ensure testing, documentation, review, and distribution complete before shipment or retailer listing.

Testing Turnaround:

Allow 5–14 business days for third-party lab analysis depending on test scope.

Internal Review:

Quality and legal review should be completed within 3 business days after COA receipt.

Submission Processing:

Registries or retailers typically review submissions within 7–21 days; plan buffer time for corrections.

Document Updates:

If a COA is superseded, update form records within 48–72 hours of receiving new results.

Audit Response Window:

Maintain capability to produce requested records within 10 business days for most regulator inquiries.

Practical tips for accurate, efficient completion

Adopt consistent templates, automation, and role-based approvals to reduce errors and speed processing.

Use a Master Template

Standardize a single validated PDF/DOCX template for all products. Lock critical fields and require file attachments for COAs to avoid omission of essential test data during manual preparation.

Require Verifiable COAs

Mandate COAs from ISO/IEC 17025-accredited labs and capture accreditation identifiers. Record the lab’s chain-of-custody and test method to increase evidentiary value when regulators review potency or contaminant results.

Track Versions and Lots

Embed batch or lot numbers and record form version history. When a corrective action or recall happens, these records enable rapid identification and targeted notifications to downstream partners and customers.

Automate Approvals

Implement role-based routing with automated reminders and audit trails so approvals do not bottleneck at a single person; this lowers turnaround time and creates a reliable paper trail for inspections.

eSignature vendor pricing and capability snapshot

The table compares starting price and core capabilities for common eSignature providers. signNow appears first; verify vendor details with each provider before purchasing.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Real-world examples of form use

Two concise examples show how organizations use the CBD Compliance Form to support distribution and audits.

Manufacturer Example

A small manufacturer attaches ISO 17025 lab COAs to each lot submission and records lot numbers on the form to support retailer onboarding

This links batch identity with potency testing in one place
As a result, the manufacturer reduced onboarding questions by consolidating evidence and avoided a product hold during a routine retail audit by providing clear traceability and up-to-date test results.

Retailer Example

A regional retailer requires a completed compliance form before listing new SKUs and rejects incomplete submissions that lack COAs

The retailer uses the form to verify claimed concentrations across suppliers
Centralizing submissions enabled faster listing approvals and reduced time-to-shelf while ensuring each SKU met state-level testing and labeling expectations.

Frequently asked questions about the CBD Compliance Form

Answers address common legal, practical, and technical questions to help practitioners avoid mistakes and know when to seek specialized counsel.

Need help? Contact support

Can this form be signed electronically?
Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. ch. 96) and UETA in most states, provided the signer’s intent to sign and record retention are demonstrable. Certain narrow exceptions, such as some court filings or wills, may not be eligible for e-signature.
Is notarization required for the form?
Not always. Whether notarization is required depends on the receiving party or state registry. If a state or regulator requests notarized attestations, follow its rules; some jurisdictions permit remote online notarization subject to identity-proofing and retention requirements.
What if the COA conflicts with the label?
If a COA shows results inconsistent with label claims, do not ship affected lots. Update labels or COAs as required, notify partners, and retain records of corrective actions; failure to reconcile discrepancies can lead to enforcement or recall.
How long must I keep these records?
Retain signed forms and COAs per the most stringent applicable rule: at least 3 years for IRS-relevant records (IRC §6501(a)) and 6 years for HIPAA-covered records (45 CFR §164.530(j)) when health information is involved. State rules may require longer retention.
Who should sign the attestation?
An authorized company officer or delegated Compliance Manager should sign. The signer must have authority to attest to product testing and labeling accuracy and should be identified by name, title, and contact information on the form.
How do I correct a completed form?
If errors are discovered post-signature, prepare a signed amendment or corrected form that references the original lot and signature, include the reason for correction, and retain both records to preserve an audit trail for inspections or disputes.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now