What the Processor ReadsWhat the Processor Reads

A batch of medical cannabis can leave a certified farm clean and on time, and still be turned away by the European manufacturer that was supposed to accept it. The certificate is rarely the reason. The certificate answers a question about the farm. The manufacturer asks a question about the batch.

The certificate is GACP, short for Good Agricultural and Collection Practice: the standard a medical-cannabis farm is audited against, covering how it cultivates and documents its crop.^{[1][1]1EMAGuideline on Good Agricultural and Collection Practice (GACP) for starting materials of herbal origin, Revision 1 (EMA/HMPC/246816/2005 Rev. 1)Open source ↗} The manufacturer is the processor: the EU-GMP-licensed facility that turns farm flower into pharmacy-grade medicine under the EU’s pharmaceutical manufacturing rules.^{[2][2]2European CommissionEudraLex Volume 4, Chapter 4: DocumentationOpen source ↗} Every batch that reaches a German pharmacy passes from the first system into the second.

Processor intake asks something narrower and harder than the farm audit ever did. The question is whether this batch can enter a manufacturing file that a Qualified Person (QP) will later sign.^{[3][3]3European CommissionEudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch ReleaseOpen source ↗} The QP is the named officer legally answerable for every batch released. The farm’s certificate file and the processor’s batch file are different documents, read by different reviewers against different standards. A farm that prepared for the certificate often meets the second standard for the first time with a batch already on a truck.

A GACP audit examines cultivation discipline, hygiene, storage, and the records that tie a harvest back to a field.^{[1][1]1EMAGuideline on Good Agricultural and Collection Practice (GACP) for starting materials of herbal origin, Revision 1 (EMA/HMPC/246816/2005 Rev. 1)Open source ↗} The evidence is real and it is necessary. It is also evidence about a place and its practices, and a batch is neither. Nothing in the certificate promises that a given batch will satisfy the intake standard of a given processor, because the processor is not re-auditing the farm. It is admitting a batch into its own quality system, toward a release its own Qualified Person will sign.^{[3][3]3European CommissionEudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch ReleaseOpen source ↗}

The useful question is more concrete: whether this batch can be read inside the processor’s file without being rebuilt at the door. Readiness work has to answer it before the first harvest is offered.

The same batch is read four times. The GACP audit reads cultivation discipline and the trace from harvest back to field.^{[1][1]1EMAGuideline on Good Agricultural and Collection Practice (GACP) for starting materials of herbal origin, Revision 1 (EMA/HMPC/246816/2005 Rev. 1)Open source ↗} The processor checks whether the test methods, the deviation history (the log of what went wrong and how it was resolved), and the document control can sit inside a manufacturing file.^{[2][2]2European CommissionEudraLex Volume 4, Chapter 4: DocumentationOpen source ↗} The Qualified Person reads for release, leaning on stability data, the evidence that a product holds its quality over time, and on retained samples, record types GACP never required.^{[3][3]3European CommissionEudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch ReleaseOpen source ↗} The German trader, the licensed company that carries the product into Germany, answers for the named origin and source the import file has to state.^{[5][5]5BfArMHinweise für Händler nach § 4 MedCanG (Stand 09/25)Open source ↗}

The matrix below maps whose call each record is, from the farm’s audit through to the German trader. Read the GACP column against the Qualified Person’s: the certificate decides the trace back to the field, and little else that release will hang on.

A certificate of analysis (COA) is the lab report that travels with every batch, and it is only as strong as the test methods behind it. The European Pharmacopoeia’s cannabis flower monograph, in force since July 2024, sets the EU-wide quality standard those results are read against.^{[4][4]4EDQM / European PharmacopoeiaCannabis flower monograph (07/2024:3028), effective 1 July 2024} Method names, validation status, detection limits, sample handling, reporting format: any one of them can stall a submission that looked complete on the farm.

The work therefore begins upstream of the result, at the test itself. A farm that knows how its own methods are validated, and whether the numbers survive an outside reviewer, is already preparing the part of the file that fails first.

Chapter 4 of EudraLex opens with a plain principle: “Good documentation constitutes an essential part of the quality assurance system and is key to operating in compliance with GMP requirements.”^{[2][2]2European CommissionEudraLex Volume 4, Chapter 4: DocumentationOpen source ↗} A record is a control on the work, and it is graded as one. Format is a live question in that grading. Current versions, signatures, and change history decide whether the receiving quality unit can use a document at all.

Sound content in the wrong structure still fails. A batch record that is accurate but unversioned, or a lab report that is correct but stripped of its supporting context, cannot enter the receiving system. It goes back to be rebuilt, and the clock starts again.

A processor does not weigh the whole file at once and average it. The review runs in sequence. Admissibility first, whether the batch may enter the route from farm to German pharmacy at all. Identity next, whether the records describe one batch and reconcile. Then the methods, then the format. Only a file that held at every earlier step reaches the question of release.^{[3][3]3European CommissionEudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch ReleaseOpen source ↗}

The order is the point. A strong method summary does not rescue a batch that fails admissibility, and a clean batch record does not rescue a lab report the processor cannot use. A farm can answer the right question in the wrong place and never have its best evidence read.

The processor’s file is not the last one the batch package serves. BfArM, Germany’s federal medicines agency, requires the licensed German trader under § 4 of the Medizinal-Cannabisgesetz, the medical-cannabis act, to stand behind the named product, its cultivation country, its grower, and its supply source.^{[5, 6][5, 6]5BfArMHinweise für Händler nach § 4 MedCanG (Stand 09/25)Open source ↗6Gesetze im InternetMedizinal-Cannabisgesetz (MedCanG)Open source ↗} Flower from outside the EU and EEA also needs an import licence under § 72 of the German medicines act.^{[7][7]7Gesetze im InternetArzneimittelgesetz § 72 (Einfuhrerlaubnis)Open source ↗} Origin has to stay legible after processing, all the way into the German file.

Farms that move cleanly into Germany produce the same batch package every time, to one standard. That package is the operating asset. A farm that later pursues its own EU-GMP certification does not start from zero, because the document discipline was built while the processing route was doing the market-entry work.