On May 13, 2026, Verano Holdings Corp. published a press release confirming it had submitted DEA registration applications for its state-licensed medical cannabis operations. The company operates in 13 U.S. states, with 162 Zen Leaf™ and MÜV™ dispensaries and 14 production facilities covering more than 1.1 million square feet of cultivation capacity.
CEO George Archos called the submission “a significant step forward on the company’s path to becoming a federally legal business.”
Verano is not the only operator to file — nearly 400 businesses had submitted applications within days of the portal opening on April 29. But Verano is the first major multi-state operator to publicly confirm filing, and that public disclosure is itself a strategic choice worth understanding.
Why MSOs Face a Different Compliance Problem Than Single-State Operators
For a single-state dispensary, the DEA registration process is relatively straightforward. One set of state licenses. One physical location. One application covering one facility’s operations.
For a multi-state operator, the calculus is fundamentally different. Verano’s 162 dispensaries across 13 states represents 162 separate DEA registration applications, each tied to a specific state license in a specific regulatory environment. The operational complexity is significant:
- Each application references a specific state cannabis license as the basis for registration
- Each application requires identifying every individual with controlled substance access at that facility — by name, SSN, and criminal history
- Each facility may be subject to different state program requirements that affect how the DEA application is completed
- Compliance information (Section 5) must be accurate for each location independently
For MSOs, this is not just a legal filing exercise — it is a compliance audit of every medical cannabis facility in your portfolio.
The First-Mover Advantage
Verano’s public announcement of its filing is not just a press release. It is a signal to investors, banking partners, retail landlords, and regulators that the company is operating inside the new federal framework rather than alongside it.
The 60-day registration window from the April 28 effective date creates a specific advantage for early filers: businesses that submit within this window may continue operating during the pendency of the application and can expect a DEA response within six months. This continued-operations protection is meaningful for businesses that cannot afford operational disruption.
Beyond the procedural benefit, early registration communicates something to the financial sector. Cannabis banking has been constrained by federal scheduling for decades. Schedule III registration — and particularly publicly confirmed DEA registration — gives banking institutions a cleaner legal hook for extending services. Operators who move early and confirm their registration status are better positioned for the banking relationship expansion that is expected to follow federal registration at scale.
The Red-Flag Question Issue and How DEA Responded
One of the most significant concerns raised about the Schedule III registration application was Section 4 — the liability questions section. Specifically, one question effectively asks applicants to acknowledge prior involvement in drug law violations.
For cannabis operators, this created an obvious problem: the entire business model has historically involved activities that are technically federal drug offenses, even when operating in full compliance with state law.
Cannabis Business Times and several industry attorneys flagged the question publicly. The DEA responded, clarifying that the question is “not intended as a categorical barrier” to registration for state-licensed operators whose only violations were related to state-legal cannabis activity.
This clarification matters for MSOs in particular. A 13-state operator with years of multi-state operations has a substantial historical footprint. The DEA’s clarification is not a formal safe harbor — it is regulatory guidance — but it significantly reduces the legal risk of answering the Section 4 question accurately and proceeding with registration.
Operators considering filing should still consult cannabis-specialized legal counsel before completing Section 4. The DEA’s verbal clarification and a signed application that triggers enforcement consequences are two different things.
What Verano’s Compliance Operation Tells Us About Scale Requirements
Verano’s announcement noted that medical cannabis sales account for a majority of their retail business. That detail matters for understanding the strategic imperative behind early filing.
Medical cannabis operations are the specific category covered by the April 28 order. Adult-use operations remain Schedule I until the broader rescheduling rule is finalized (hearing set for June 29). For operators like Verano where medical sales are the larger share of revenue, being inside the Schedule III framework is not an optional enhancement — it is the compliance foundation for the majority of their business.
For MSOs with significant adult-use operations, the calculus is different. Adult-use facilities are not covered by the current order and cannot currently file for Schedule III registration. The June 29 hearing outcome will determine whether — and on what timeline — adult-use operations can be brought into the federal framework.
The practical consequence: MSOs need to understand the split in their own portfolio between medical and adult-use operations before deciding where to focus their compliance resources in the 60-day window.
The DEA Security Requirements Coming for Registered Entities
Registration under Schedule III creates ongoing DEA compliance obligations that most state-licensed operators have not previously faced. For MSOs managing dozens of locations, these obligations require systematic implementation:
Per-Facility Record-Keeping
Each DEA-registered facility must independently maintain records of all Schedule III substance receipts, transfers, disposals, and on-hand inventory for a minimum of two years. These records must be available for DEA inspection at any time. For MSOs running centralized inventory management systems, the question is whether your current system can produce per-facility federal records that are reconcilable with METRC but also meet DEA format requirements.
Access Control Documentation
Section 5 of the registration application requires naming every individual with controlled substance access. Post-registration, this list must be maintained and updated. For facilities with high employee turnover — which is common in cannabis retail — this creates an ongoing administrative compliance obligation. New hires with controlled substance access need to be added to your DEA compliance records. Terminations need to be processed and documented.
The access control requirements should push MSOs toward better-integrated HR and compliance systems that can automatically flag when access control records need updating.
Theft and Loss Reporting — One Business Day
DEA registrants must report theft or significant loss of Schedule III controlled substances within one business day of discovery. This is more demanding than most state cannabis regulations. For an MSO running 162 locations, a single facility’s loss event triggers a federal reporting obligation that must be met within 24 hours.
Your incident response framework needs to include a fast-path for loss discovery at the facility level to reach whoever is responsible for federal DEA reporting. The chain from store manager to compliance officer to DEA filing needs to be explicitly designed and tested.
Physical Security Standards
The DEA’s physical security standards for Schedule III facilities are more prescriptive than typical state cannabis program requirements. Expect vault or safe storage requirements, alarm system specifications, and access control standards that may require facility upgrades. MSOs should conduct a gap assessment of their physical security posture against DEA requirements at each facility before assuming current state-compliant security is sufficient.
The Banking Unlocking Thesis
Verano’s move needs to be understood against the backdrop of what federal registration may unlock for the company’s banking relationships.
Cannabis banking has been constrained for a decade by the Schedule I status of cannabis, which made banking relationships legally precarious for financial institutions. FinCEN guidance allowed banks to serve cannabis clients through the SAR filing process, but the legal risk — and the operational overhead — limited the banking sector’s willingness to engage.
Schedule III status changes the legal foundation. Businesses with valid DEA Schedule III registrations are, for the first time, federally licensed entities handling a controlled substance within a clear federal legal framework. This is the structure that conventional pharmaceutical distributors operate under. Banks can evaluate Schedule III cannabis operators using the same legal framework they apply to pharmaceutical clients.
The tax implications are equally significant. Section 280E — which prohibited cannabis businesses from deducting ordinary business expenses because they were trafficking in Schedule I controlled substances — does not apply to Schedule III businesses. The IRS has also been directed to consider providing retrospective relief from 280E liability for years in which operators held a state medical marijuana license and operated legally under state law.
For an MSO of Verano’s scale, the 280E relief alone represents a material change in effective tax rate. That financial reality is why Archos framed the registration filing as a step toward “becoming a federally legal business” rather than simply a regulatory filing.
What Other MSOs Should Do in the Next 45 Days
1. Conduct a portfolio audit. Separate your medical cannabis facilities from adult-use. Only medical facilities are eligible to register now. Know your numbers before you begin.
2. Engage multi-state legal counsel. The Section 4 liability questions require careful handling, and the answers may vary by state based on local program history and enforcement record.
3. Assess your access control records. Section 5 requires a complete list of individuals with controlled substance access at each facility. If your records are inconsistent across locations, this is the time to fix them.
4. Build a DEA compliance workflow. Post-registration, you need processes for per-facility record-keeping, access control updates, and the one-business-day loss reporting obligation. Design this before you register, not after.
5. Brief your banking relationships. If you have banking partners who have been waiting for a cleaner legal hook to expand services, your DEA registration filing — and confirmation of pending registration — is the document they are waiting for.
6. Do not wait for adult-use clarity. The June 29 hearing for broader rescheduling is months away from producing a final rule. Medical cannabis registration is available now. File in the 60-day window and position your medical operations inside the framework while you wait for the adult-use determination.
The Signal Verano Is Sending
Going public with your DEA registration filing is a choice. Verano could have filed quietly. The decision to issue a press release and put the CEO on record signals confidence in the registration process and a desire to be seen as a first mover in the new federal framework.
Expect other major MSOs to announce similar filings in the coming days. The 60-day registration window and the competitive dynamics around banking and investor relations mean that public confirmation of federal registration status will become a standard disclosure for publicly traded cannabis companies in the near term.
For private operators, the less visible but equally important signal is internal: federal registration requires compliance systems that function at federal standards, not just state program standards. The operators who build those systems now — clean access control records, per-facility inventory tracking, one-business-day incident response — will be positioned for whatever the next phase of federal cannabis regulation requires.
CannaSecure is tracking the DEA Schedule III registration process and will publish updates as the broader rescheduling hearing (June 29, 2026) develops.
