Cannis Good Practice Standards
The management rules that organizations and people with an operational role within Cannis follow, so that every operation in the medical cannabis circuit can be proven: what happened, who did it, when and with what receipt.
This English version is provided for reference only. In case of any discrepancy, the Spanish version prevails.
What these rules say
A summary to help you find your way. It doesn't replace the full text: if anything differs, the rules below prevail.
01 Purpose and principle
The Cannis Good Practice Standards (NCBP) are the comprehensive management rules that every organization and every person with an operational role must follow to be part of the Cannis ecosystem. They translate the legal requirements of medical cannabis into day-to-day operating rules that can be verified within the platform.
They are guided by a simple principle: if an operation isn't traceable within the Cannis ecosystem, for Cannis it didn't happen.
02 Frame of reference
The NCBP are based on:
- Law 27,350 on medical and scientific research into the medicinal use of cannabis, and its regulations.
- Resolution 1780/2025 of the National Ministry of Health.
- Law 25,326 on Personal Data Protection.
- Law 27,553 on electronic or digital prescriptions.
As an international reference, they follow the criteria of the World Health Organization's Good Agricultural and Collection Practices for medicinal plants (GACP).
03 Who they apply to
- Civil associations, foundations and legal entities that take part in research and development projects.
- The authorized members of each organization: those who manage the membership roll, handle stock or record deliveries.
- Health professionals who prescribe and do follow-up.
- Technical leads and growers.
- Those responsible for logistics and shipping.
Patients take on no new obligations: the NCBP organize the work of those who care for them.
04 An open standard
The NCBP don't require using all of Cannis's services. An organization can manage its cultivation in another traceability software, and a professional can see patients and prescribe from another medical system.
The condition is that the data reaches the ecosystem and keeps its traceability: what happened, who did it, when and with what receipt. Each integration is agreed with the Cannis team over the platform's public API.
NCBP 1 Verified identity and defined roles
Each person operates with a validated identity and a profile suited to their role. The organization defines who delivers, who edits the membership roll and who only views. Users are not shared.
What is required
- One Cannis account per person. No one operates with someone else's account.
- Each member with the role that matches their function: board, secretariat, treasury, site manager, volunteer or other.
- Anyone who leaves the organization or changes role is removed or updated the same day.
What Cannis does today. Every operation is recorded under the account of whoever performed it. In Cannis OS the role decides what can be done: the till is operated by the board, secretariat, treasury and site managers, and the organization's settings by the board only. A site manager operates only their own site.
NCBP 2 Authorizations up to date
The organization keeps its legal personality, its REPROCANN registration and the appointment of its Medical Director and Technical Lead current. Professionals prove registration with REFEPS, training in medical cannabis and a registered digital signature.
What is required
- The organization's legal personality and registration current, with their expiry dates in view.
- A Medical Director and a Technical Lead appointed, with their acceptance.
- For each professional: license registered with REFEPS, proven training in medical cannabis and a digital signature.
What Cannis does today. Cannis reviews the organization's authorizations when it joins and during adaptation. A professional without a complete profile and an active Cannis Health plan cannot issue prescriptions.
NCBP 3 Real-time recording within the ecosystem
Every sign-up, stock movement, delivery and shipment is recorded when it happens, in Cannis or in a system integrated with the ecosystem. No loose spreadsheets or notes entered later.
What is required
- Record the delivery when you deliver, not at the end of the day or the week.
- Record every stock entry, adjustment or write-off with its reason.
- If an operation was done outside the system —a power cut, a field operation—, enter it as soon as possible and note why it was entered later.
What Cannis does today. Each dispensing and each stock movement is stored with its date, time and person in charge at the moment it's recorded, and each shipment with its dispatch and delivery dates. Whatever is entered late keeps the date it was entered: a record can't be passed off as made on time.
NCBP 4 Batch traceability
Each batch is identified from its origin, with its registered strain and associated lab analysis, and tracked without gaps to delivery. Cultivation can be managed in Cannis PRO or in another traceability software integrated with the ecosystem.
What is required
- An identifier per production batch, from sowing.
- The strain of each batch recorded, and its lab analysis —the chromatography report required by Resolution 1780/2025— linked to the batch.
- That every stock item entered says which batch it comes from.
What Cannis does today. Cultivation and batches arrive in November 2026 with Cannis PRO. Meanwhile, traceability within Cannis starts when the product enters a site's stock, and the batch is documented in the organization's cultivation system.
NCBP 5 Documented clinical practice
Each patient has a medical prescription, a signed bilateral informed consent, an electronic prescription when applicable and periodic follow-up of their progress. Clinical decisions always belong to the treating professional. Care can be managed in Cannis Health or in another medical system, as long as the record reaches the ecosystem.
What is required
- Each patient's medical prescription and bilateral informed consent, signed.
- The electronic prescription when the regulations require it.
- Periodic follow-up of progress, with adverse effects recorded.
What Cannis does today. In Cannis Health the professional enters the prescription and the treatment, issues electronic prescriptions through RCTA and does follow-up via WhatsApp, with alerts when a patient reports significant adverse effects. Consents are stored with their date, the address they were signed from and an integrity fingerprint of the document.
NCBP 6 Responsible delivery
Deliveries are only made to member patients with a current authorization, within the limits set per patient and period. Each delivery has its receipt and each shipment is confirmed at its destination.
What is required
- Deliver only to member patients who are active, with their REPROCANN approved and current.
- Respect the limits the organization set per patient and period.
- A receipt for every delivery, and confirmation of each shipment at its destination.
What Cannis does today. In the Cannis OS till, dispensing is only to active patients. Each category's daily limit is checked at the till, on the Sede Digital and in the panel, and a delivery without available stock isn't recorded. If the patient's REPROCANN isn't approved or has expired, the system warns before dispensing. Each shipment leaves with its Transfer Certificate, which can be checked with its code while in transit, and the organization confirms delivery.
NCBP 7 Protection of health data
Health data is sensitive data. Each member accesses only what their role requires, and that data doesn't travel through free-text messages or screenshots: it's shared within the platform, where every document has its access control.
What is required
- Treat health data as sensitive data, under the terms of Law 25,326.
- Don't take patient documents out of the platform to share them by other means.
- Give each member access only to what their role needs.
What Cannis does today. Regarding their patients' data, the organization and the professional are the controllers and Cannis is the processor, as the Privacy Policy states. In Cannis OS, one organization doesn't see another's data, and a patient's REPROCANN card can only be opened by their organization, without being stored in shared caches.
NCBP 8 Transparency and auditing
Contributions go through declared accounts with receipts, and each period closes with its accountability report. The organization answers audit observations and trains its team in using the system.
What is required
- Contributions collected through declared means, each with its receipt.
- A closing per period with its accountability report.
- Answers to audit observations, and a team trained in using the system.
What Cannis does today. The Cannis OS till closes each shift with its cash count —what was counted against what the book says, and the difference explained— and offers period closing. The activity log records changes to the organization, its membership roll and its professionals.
13 How they are applied
Organizations that join Cannis comply with the NCBP from the moment they join. Those already operating on the platform go through an adaptation process supported by the Cannis team, with a deadline of January 1, 2027.
Much of the standards doesn't depend on goodwill: the system already enforces it. A professional without a complete profile and an active Cannis Health plan cannot issue prescriptions; a delivery that exceeds its category's daily limit, or has no available stock, is rejected; and when a patient's REPROCANN isn't approved or has expired, the system warns before dispensing.
Cannis reviews compliance against its own records. If an organization persistently fails to comply, its operation within the ecosystem may be suspended until it is brought into line.
14 What they don't replace
Complying with the NCBP does not replace obligations towards REPROCANN or other agencies, and does not guarantee the approval of any application: that is decided by the enforcement authority. Nor is it a State authorization or certification.
What they ensure is that each organization can show, at any time, what it did, who did it and when.
15 Changes
Cannis may update these standards when the regulatory framework or the platform changes. Each version carries its number and date at the top of this document, and changes are announced in Institutional announcements with a reasonable period to adapt.
16 Questions
To ask about the standards or start your organization's adaptation:
- WhatsApp: +54 9 11 2655-5444
- If your organization isn't on Cannis yet: Bring your organization.
Why now, and the timeline
How we arrived at these standards, what changes on October 30 and what comes with Cannis PRO.