February 20, 2026

Co‑Manufacturing Hemp and Cannabis Under One Roof: Licenses, Segregation, and GMP to Prevent Cross‑Contamination (2025–2026 Compliance Guide)

Co‑Manufacturing Hemp and Cannabis Under One Roof: Licenses, Segregation, and GMP to Prevent Cross‑Contamination (2025–2026 Compliance Guide)

Why co-manufacturing is surging in 2025–2026

Co‑manufacturing hemp-derived cannabinoid products and state-regulated cannabis products in the same building is no longer a fringe strategy. It’s a rational response to:

  • Margin compression in single-channel manufacturing
  • The rise of infused beverages and “better-for-you” form factors that look like traditional food manufacturing
  • States increasingly treating intoxicating hemp as a public health and misbranding problem—and folding oversight into (or aligning it with) established cannabis programs

But regulators are also converging on one message: if you run both categories under one roof, you must be able to prove—on demand—that you can prevent cross‑contamination, commingling, diversion, and misbranding.

This guide explains what “co-manufacturing hemp cannabis facility compliance 2025” looks like in practice across the U.S., and how to build a shared GMP backbone that survives inspections.

Informational only, not legal advice.

Start with the legal reality: “one roof” rarely means “one license”

Federal baseline: hemp definition is narrow, and product categories still trigger other federal rules

At the federal level, hemp is defined by the ≤0.3% delta‑9 THC on a dry weight basis threshold, and USDA’s domestic hemp framework is codified at 7 CFR Part 990 (effective since March 22, 2021). See USDA’s hemp laws and regulations overview and the current eCFR text for Part 990:

However, USDA’s authority is primarily production (cultivation). Once you move into foods, dietary supplements, cosmetics, and animal products, other federal regimes matter:

And FDA continues to take the position that many cannabinoid-infused conventional foods/supplements are being marketed unlawfully (often via unapproved drug claims, adulteration, or misbranding). FDA’s enforcement posture is visible in its warning letter hub:

State reality: co-location is typically allowed only with hard separation (and sometimes prohibited)

The biggest operational mistake we see is assuming that because hemp is “federally legal,” you can simply add hemp SKUs into a licensed cannabis building (or vice versa). In practice, states tend to require one or more of the following:

  • Separate licenses (often with separate inspections)
  • Physical and procedural segregation
  • Distinct inventory systems and reconciliation
  • Distinct labeling and testing pathways

Some jurisdictions even publish explicit restrictions. For example, Massachusetts guidance indicates that hemp processing facilities may not be co-located with marijuana operations to ensure compliance with state and federal law:

Takeaway: Before you design a facility, confirm whether your target states allow co-location at all, and under what conditions.

A risk map for co-manufacturing: cross-contamination isn’t just “residue”—it’s misbranding and diversion

When regulators say “cross-contamination,” they don’t only mean microbial or chemical residue. In a dual-regime plant facility, the most common high-risk scenarios look like this:

  • Cannabis-only active (e.g., high-THC distillate) unintentionally entering a hemp SKU through shared equipment, rework, or poor line clearance
  • Hemp concentrate mistakenly being used in a cannabis batch in a way that breaks state sourcing rules
  • Label/pack mix-ups: correct product, wrong label (or wrong potency statement)
  • Shared bulk storage where totes, tanks, or drums are not controlled by status (quarantine/released/rejected)
  • Waste and rework streams that allow commingling or untraceable destruction

In 2025–2026, enforcement pressure is also rising on “look‑alike” products and youth appeal. The FTC and FDA have jointly targeted edible products containing delta‑8 THC that mimic well-known snack brands:

Practical point: Even if your process controls are excellent, weak packaging/label controls can sink the entire compliance posture.

Licensing separation: how to think about “two programs, one building”

Because this article is U.S.-wide, the right approach is a framework rather than a 50-state list.

Step 1: Identify each product family and its regulator

Most co-manufacturing facilities end up with at least two regulatory “owners”:

  • State cannabis regulator (e.g., Department/Office/Commission) for cannabis manufacturing/processing
  • State health/agriculture regulator for hemp-derived cannabinoid foods/supplements/cosmetics (varies widely)

Examples of how different states place hemp cannabinoid oversight:

Step 2: Confirm whether the state requires separate licensed premises

Some states treat the licensed premises boundary as non-negotiable (one license = one controlled premises). If co-location is allowed, it may require:

  • Distinct suite(s) with controlled access
  • Separate storage cages/rooms
  • Separate receiving/shipping points or controlled scheduling

If you are building for multi-state expansion, design as if regulators will require dedicated suites—because many will.

Step 3: Align track-and-trace versus “general market” inventory control

Cannabis programs typically require seed-to-sale tracking (e.g., Metrc in many markets). New York’s OCM, for example, published a specific integration deadline for its seed-to-sale rollout for licensees (Dec 17, 2025), with retail inventory entry deadlines in January 2026:

Hemp programs generally do not use seed-to-sale tracking, but regulators increasingly expect batch/lot traceability, COA linkage (often QR), and robust recalls.

Co-manufacturing trap: If your ERP/QMS can’t reconcile cannabis tracked inventory with hemp batch lots and finished goods, you will struggle to prove segregation during an inspection.

Facility and process segregation: build “allergen-like” separation

The most successful co-manufacturers treat cannabis-only actives as if they were a high-risk allergen family.

Physical segregation (minimum viable design)

At minimum, design for:

  • Dedicated suites for cannabis-only processing and finishing
  • Quarantined storage for each regime: receiving quarantine, released, rejected/hold
  • Closed transfer where feasible (hard piping, sealed totes, lidded bins)
  • Controlled personnel flow: gowning rules, badge access, directional movement
  • Dedicated utensils (color-coded) and controlled staging areas

If you must share certain equipment (e.g., bottling line), assume you will need validated cleaning plus enhanced line clearance and documentation.

Procedural segregation (where inspections are won or lost)

Regulators can tolerate shared walls. They rarely tolerate shared chaos. Implement:

  • Scheduling controls: campaign production by product family, with documented changeover
  • Status labeling: every container/tote/tank has content ID, batch/lot, regime (hemp vs cannabis), and disposition status
  • Line clearance: documented removal of labels, components, residual materials, and prior batch documents before the next run
  • Batch reconciliation: proves that inputs, yields, and scrap align; investigates unexplained loss

Build a shared GMP backbone that satisfies both regimes

Choose a quality framework that scales

Co-manufacturing works best when you adopt a single QMS backbone and “bolt on” state-specific requirements. Many operators use:

  • FSMA-style food safety plan concepts (hazard analysis, preventive controls, recall readiness)
  • Dietary supplement cGMP structure for documentation rigor
  • Cannabis state rules for security, access, and inventory

For industry-standardization, ASTM’s D37 committee has published QMS and GMP standards (e.g., D8556 and D8557) designed as practical roadmaps:

Validated cleaning: treat “regime change” like worst-case allergen changeover

Your cleaning program must be more than “wipe it down.” FDA’s food allergen cross-contact guidance emphasizes segregation, dedicated equipment, and verification methods beyond ATP alone. For reference:

Apply the same logic to cannabis-only actives:

  • Define “product families” (hemp-only, cannabis-only, shared base formulas)
  • Identify “hard-to-clean” residues (oils, distillates, emulsions)
  • Establish acceptance criteria (swab/rinse) and validate worst-case changeovers
  • Revalidate after equipment changes, chemical changes, or major formula shifts

Documentation must show: the cleaning method is effective, reproducible, monitored, and verified.

Equipment line clearance and label control

Most cross-contamination events in regulated manufacturing are actually mix-ups.

Implement:

  • Dual sign-off line clearance (production + QA)
  • Controlled label issuance and reconciliation (counts in/counts out)
  • Component verification at point-of-use (barcode scanning where possible)
  • Physical separation of packaging components by regime and SKU

This is where co-manufacturing facilities often fail during surprise inspections: a stray label roll, an open box of pre-printed pouches, or mixed cartons in a staging area.

Batch reconciliation that proves “no cannabis-only actives entered hemp runs”

If you make both categories, your batch record structure should be able to answer:

  • Which lots of active ingredients were issued?
  • Which lots were returned, destroyed, or reconciled?
  • What is the theoretical yield and actual yield?
  • Where did rework go, and under which regime?

Best practice: Lock rework to the same regime unless you have a regulator-approved method and labeling pathway.

Testing and COA harmonization without blending standards

Don’t “average” requirements—meet the strictest applicable spec per SKU

States often require cannabis goods to be tested via state-licensed labs and panels, while hemp programs may use different lab requirements. California, for example, requires licensed testing labs to maintain ISO/IEC 17025 accreditation:

In hemp programs, some states specify product registration requirements with COA submission (e.g., Utah):

For multi-channel operations:

  • Create a master COA specification library (potency analytes, contaminants, action limits)
  • Map each SKU to its governing rules (state cannabis vs state hemp)
  • Control COA versioning and linkage (QR code systems, document control)

Chain of custody and sampling plans must match the regime

Even when the same lab is used, sampling rules may differ. Cannabis programs may have distributor-controlled sampling or specific representative sampling rules. Hemp programs may require different batch definitions. Your SOPs should prevent staff from using the “wrong” sampling plan.

Labeling, packaging, and marketing: where misbranding risk spikes

Two regimes = two label rulebooks

A co-manufacturer must be able to show:

  • Label content controls (correct warnings, symbols, potency statements, net contents)
  • Packaging controls (child-resistant requirements when applicable)
  • Marketing review controls (no unapproved health claims; no youth appeal)

Remember that federal agencies have targeted child-appealing edible packaging for delta‑8 THC products (FTC/FDA links above). That enforcement logic is increasingly mirrored by states.

Operational control to implement: a pre-release label approval workflow that includes regulatory mapping, not just brand sign-off.

Storage, quarantine, and material status: make “mixing” physically difficult

A robust segregation program uses:

  • Quarantine cages at receiving (no material moves to production until released)
  • Locked high-risk storage for cannabis-only actives with limited access
  • Clearly defined disposal areas with witnessed destruction where required
  • Environmental controls appropriate to product type (temperature/humidity monitoring)

Even if your state doesn’t require formal quarantine, inspectors understand it as a GMP marker of control.

Recall readiness and mock recall drills across both regimes

Co-manufacturing multiplies recall complexity. You need to be able to:

  • Identify affected lots quickly
  • Notify the correct regulator(s) and downstream partners
  • Remove product from commerce and document effectiveness

FDA’s recall framework is anchored in 21 CFR Part 7 Subpart C, and FDA publishes recall procedure resources:

Best practice: Conduct at least one mock recall per regime per year, plus a combined drill that tests your ability to segregate regimes during a crisis (e.g., “hemp SKU suspected of containing cannabis-only active”).

Insurance and “dual exposure”: update binders before you expand production

When you manufacture both categories, your risk profile changes. Many carriers will want to know:

  • Product liability exposures by category (food, ingestible, topical, inhalable)
  • Cargo and distribution routes
  • Stock throughput values and storage controls

Stock throughput coverage (goods in transit + storage) is commonly discussed in cannabis insurance markets; regardless of provider, ensure your policies reflect dual product families and correct declared operations.

Operational action: update your insurance application narrative to describe segregation controls, validated cleaning, QA release, and recall readiness. Underwriters price uncertainty.

A practical 10-point compliance checklist for co-manufacturing (2025–2026)

  1. Regulatory map every SKU to governing authority (state cannabis vs state hemp; food/supplement/cosmetic).
  2. Confirm co-location permissibility per target state; identify whether separate premises are required.
  3. Design dedicated suites or at least controlled-access zones with documented personnel/material flow.
  4. Implement quarantine/release status controls for all incoming materials and finished goods.
  5. Adopt validated cleaning for shared equipment with worst-case changeover and analytical verification.
  6. Enforce line clearance and label/component reconciliation (prevents the most common mix-ups).
  7. Batch reconciliation and yield investigations that prove no cross-regime ingredient entry.
  8. Harmonize COA specs without averaging standards; maintain controlled documents and QR link integrity.
  9. Run recall drills per regime and a combined drill; document corrective actions.
  10. Update insurance binders for product liability, cargo, and stock throughput reflecting dual exposures.

Final thoughts: build once, prove always

Co-manufacturing is viable in 2025–2026, but only for operators who treat compliance as an engineered system: facility design, segregation, training, cleaning validation, label control, and reconciliation that can withstand both scheduled and unannounced inspections.

If you want help building (or auditing) your co-manufacturing compliance program—SOPs, QMS structure, recall drills, label controls, and state-by-state licensing strategy—use https://www.cannabisregulations.ai/ to get jurisdiction-specific guidance and ongoing compliance support.