Most cannabis brands treat CR packaging documentation as a sourcing task. You ask for the test report, you receive it, you file it somewhere, and you move on. The packaging is certified. Box checked.

Then a state compliance inspection happens — or a retail buyer asks for documentation before a wholesale order — and the question isn’t whether you have CR-certified packaging. It’s whether you can prove, right now, that the specific packaging on the specific products currently on your shelf matches a valid certification document. And that’s a different question.

The brands that answer it cleanly are the ones that treat documentation as an operational system, not a one-time acquisition. This guide covers exactly how to build that system — what documents you need, how they’re structured, what changes between orders that can affect their validity, and how to stay child-resistant packaging audit-ready from first production run through every reorder.

Why “We Have Certified Packaging” Isn’t Enough

When a state cannabis regulator conducts a compliance inspection, they are not asking whether your packaging supplier told you the packaging was CR certified. They are evaluating whether the specific packages currently containing your products have demonstrably passed the applicable certification standard.

The documentation gap that creates problems in inspections is almost never a case of a brand knowingly using non-certified packaging. It’s a traceability gap — the brand has a test report from 18 months ago for a format that may have been modified since, or they have documentation for a different size than what’s currently on shelf, or they have a Certificate of Compliance from the supplier but not the underlying laboratory test report that the CoC is supposed to summarize.

Each of those gaps is treated the same way by a regulator: as an absence of demonstrated compliance for the product in front of them.

The documentation system described in this guide is designed to close those gaps permanently — not for a single inspection, but as a standing operational practice.

The Three Documents That Actually Matter

CR packaging compliance documentation has a hierarchy. Understanding which documents are primary and which are derivative is the starting point for building a system that holds up to scrutiny.

1. The Third-Party Laboratory Test Report

This is the primary document. Everything else derives from it.

A legitimate third-party laboratory test report for a CR package includes:

• The full name and accreditation status of the testing laboratory
• The date the testing was conducted
• The specific package format tested — including material, dimensions, and closure mechanism described in enough detail to identify the exact configuration
• The applicable standard (ASTM F1272, 16 CFR §1700.20, or both)
• The child panel results — the number of children tested, the age range, and the percentage who failed to open the package within the 10-minute window (must be ≥85% to pass)
• The adult panel results — the number of adults tested, the age range, and the percentage who successfully opened and closed the package within 5 minutes (must be ≥90% to pass)
• The pass/fail conclusion for each panel and for the overall certification

This document is what a regulator or a retail buyer with compliance requirements is ultimately asking for when they request “certification documentation.” A Certificate of Compliance is a summary of this document — it is not a substitute for it.

2. The Certificate of Compliance (CoC)

A Certificate of Compliance is a supplier-issued document that summarizes the test report and attests that the product being supplied matches the tested format. It typically includes the applicable standard, the pass status, the test date, and a reference to the underlying test report.

CoCs are useful for day-to-day documentation purposes because they’re shorter and easier to manage across a large SKU portfolio. But they have one critical limitation: they are only as valid as the test report they reference. A CoC without an accessible underlying test report is an assertion without evidence.

Maintain both — the CoC for operational reference, the underlying test report as the evidentiary document.

3. Supplier Declaration of Conformity

Some suppliers provide a Declaration of Conformity alongside or instead of a formal test report, particularly for formats with established certification history. This document is the supplier’s formal written statement that the product meets the specified standard based on testing that has been conducted.

Declarations of Conformity are acceptable in some regulatory contexts but are weaker than a third-party lab report because they are supplier-generated rather than independently verified. For state cannabis compliance purposes, a Declaration of Conformity without an underlying third-party test report is generally insufficient. Treat it as supplementary documentation, not primary.

What Changes Between Orders That Can Affect Certification Validity

This is the part most brands miss entirely — and it’s where documentation gaps most commonly develop.

CR certification attaches to a specific package configuration as it was tested. When anything material about that configuration changes, the existing test report may no longer accurately represent what you’re actually using. The changes that matter:

Closure mechanism modification. If your supplier changes the closure hardware — even to a functionally similar component from a different manufacturer — the new closure has not been tested. The original test report documents the original closure. This is the most common and most significant source of certification gap in production packaging.

Material or wall thickness change. Changes to the tube or container material, wall thickness, or laminate construction affect how the package interacts with the closure mechanism. A test report for a 200-micron wall tube does not certify a 180-micron wall version of the same SKU.

Dimensional tolerance drift. Manufacturing tolerances can drift between production runs, particularly for molded plastic components. A closure that performs correctly at nominal dimensions may not maintain the same CR resistance at the tolerance extremes of a different production run.

Factory change. If your supplier moves production to a different manufacturing facility — even one producing the same nominal specification — the manufacturing process, equipment, and quality controls are different. The original test report does not certify product from the new factory.

Size change within a format. A test report for a 30ml airless bottle does not certify the 50ml version of the same bottle, even if the closure mechanism is identical. Volume configurations are tested separately.

The practical implication of all of this is that you need to actively track whether the certification documentation you have on file actually covers the product you are currently receiving and selling. A test report is a snapshot of a specific product at a specific moment. Your documentation system needs to bridge that snapshot to your current production.

Building Your Audit-Ready Documentation System

Step 1: Create a Packaging Compliance Register

A packaging compliance register is a document — it can be a spreadsheet — that maps every active packaging SKU to its certification documentation. For each SKU, the register should include:

• SKU name and internal product code
• Format type (tube, tin, jar, bag, etc.)
• Supplier name and contact
• Applicable CR standard (ASTM F1272 / 16 CFR §1700.20 / both)
• Test report reference number and date
• Certificate of Compliance reference and date
• File location of the primary documentation
• Date of most recent supplier confirmation that current production matches the tested format
• Notes on any known changes since the test date

This register is your audit response tool. When an inspector asks for documentation, you open the register, find the SKU, and pull the document. If you cannot answer every field in that register for every active packaging SKU, you have a documentation gap.

Step 2: Establish a Reorder Documentation Protocol

Every time you reorder a packaging SKU, treat it as a documentation trigger — not just a procurement transaction. Before the reorder ships, confirm with your supplier in writing:

• That the packaging being shipped matches the specification that was tested
• That no changes have been made to the closure mechanism, material, dimensions, or manufacturing location since the test was conducted
• That the test report on file remains valid for the current production run

Get this confirmation in writing — an email is sufficient — and file it alongside the original test report. Over time, this creates a dated chain of supplier confirmations that demonstrates ongoing compliance awareness, not just point-in-time certification.

If the supplier cannot confirm that current production matches the tested specification, you need a new test report before you can claim that production run is certified to the same standard.

Step 3: Request Run-Specific Documentation for High-Stakes Orders

For large production runs, new SKU launches, or first orders with a new supplier, request documentation that is specific to the production run rather than relying solely on historical test reports. This means:

• A supplier Declaration of Conformity referencing the specific production run and lot number
• Confirmation of the manufacturing facility for this specific run
• Quality control inspection records if available

This level of documentation specificity is above what most compliance inspections require, but it creates a complete paper trail that insulates you from any ambiguity about whether historical certification covers current product.

Step 4: Set a Documentation Review Calendar

Documentation doesn’t stay current on its own. Build a calendar trigger — annually or at minimum every 18 months — to review the packaging compliance register and confirm that:

• Test reports are still valid for current production (no format changes since testing)
• Supplier CoCs are current
• Any new SKUs launched since the last review have been added to the register with complete documentation

This review takes less than two hours once the register exists. Without it, the register becomes stale and the documentation gaps reopen quietly over time.

What to Ask a New Supplier Before Your First Order

If you’re evaluating a new CR packaging supplier — or reviewing your current supplier’s documentation practices — these are the questions that reveal whether their compliance infrastructure is built for your audit-readiness or just for the sale:

“Can you provide the third-party laboratory test report for this specific format?” A supplier with legitimate certification provides this within 24 hours. Delays, substitutions, or CoCs offered instead of test reports are flags.

“Which accredited laboratory conducted the testing?” The lab should be identifiable and independently verifiable. If the supplier cannot name the lab or the lab is not independently accredited, the certification claim is not verifiable.

“Has anything changed about this format since the test was conducted?” This is the question most buyers don’t ask and most suppliers don’t volunteer an answer to. A trustworthy supplier answers it directly. An evasive answer means you need to investigate further.

“If I need to reorder in six months, what is your process for confirming that the new production run matches the tested format?” This question reveals whether the supplier thinks about certification as a one-time event or as an ongoing production responsibility.

“Can you provide a Declaration of Conformity specific to my production run?” Suppliers who can do this have quality systems that track production against specification at the run level. Suppliers who can’t are working at a less granular level of traceability.

TPC maintains full third-party test documentation for all CR formats in our catalog and can provide run-specific supplier confirmations as a standard part of our reorder process. Our documentation practices are built around the audit-readiness requirements of regulated-market cannabis and wellness brands who need to be able to respond to an inspection in under an hour.

Browse TPC’s full CR packaging line →

Read our guide to choosing a CR packaging supplier →

Contact TPC to discuss your documentation requirements →

Frequently Asked Questions

What is the difference between a Certificate of Compliance and a third-party test report? A Certificate of Compliance is a supplier-issued summary document attesting that a product meets a specified standard. A third-party test report is the independent laboratory document that records the actual panel testing results. The CoC derives from the test report — it is not a substitute for it. For state cannabis compliance purposes, the underlying test report is the primary evidentiary document.

How often do I need to update my CR packaging certification documentation? There is no fixed renewal interval — certification does not expire on a calendar basis. What triggers a documentation update is a change to the package itself: closure mechanism, material, dimensions, manufacturing location, or volume configuration. Build a reorder confirmation protocol with your supplier so that any changes to the format are identified before you receive product that may not match your existing certification documentation.

Can I use the same test report across multiple production runs? Yes, as long as the production runs match the specification that was tested. The test report documents a specific format — if that format is consistently manufactured to the same specification, the test report remains valid for subsequent runs. The risk is format drift that isn’t communicated by the supplier. A written reorder confirmation process closes this gap.

What happens if I can’t produce certification documentation during a compliance inspection? The absence of documentation is treated as an absence of demonstrated compliance. Consequences vary by state but typically include product hold, recall risk, and potential license review. The documentation system described in this guide is designed to make this scenario impossible — not to prepare for it, but to prevent it.

How do I know if my supplier’s certification documentation is current for my latest production run? Ask directly, in writing, with every reorder: has anything changed about this format since the test was conducted, and does the current production run match the tested specification? A supplier who answers this clearly and quickly has the quality systems to back it up. A supplier who is slow, vague, or redirects to historical documents without confirming current production alignment is a documentation risk.

Does TPC provide certification documentation for all CR formats? Yes. TPC maintains third-party laboratory test reports for all CR formats in our catalog and can provide supplier Declarations of Conformity specific to production runs on request. Contact our team to discuss your specific documentation requirements before or alongside your first order.