Most stores lose a sale when their security slips. A dispensary can lose its license.
That’s the part people outside the industry miss. A cannabis shop just doesn't guard shelves. It’s holding small, high-value products and, in most states, more cash than it can legally put in a bank. Regulators know it. Thieves know it. Both are paying attention. So the dispensary security system stops being an accessory and becomes the thing that keeps the doors legally open.
This guide walks through what actually goes into a dispensary security system, what state rules demand before they’ll sign off on a license, and the places where a setup that looks fine on paper quietly fails an inspection.
Why dispensary security is its own problem
Plenty of businesses worry about theft. Few carry all of these risks at the same time, which is why cannabis security gets treated as its own category:
-
High-value product that’s easy to move. Cannabis is small, valuable, and has a ready black market. That makes it a target for organized burglary in a way most retail inventory never is.
-
Cash on hand, often a lot of it. Because cannabis is still federally illegal, banking access is limited. Many dispensaries run largely on cash, which turns every location into a robbery target and raises the stakes on safes and cash handling.
-
Internal theft is usually the bigger problem. Most losses don’t come through a broken window. They come from staff. That’s why access logs, role-based permissions, and camera coverage over the point of sale matter as much as the perimeter.
-
The license is on the line. A weak system isn’t only a loss risk. Fail an inspection, or fail to produce footage after an incident, and you’re looking at fines, a suspension, or a pulled license.
Compliance comes before the hardware
Here’s the reason the rules are this strict: cannabis is still a Schedule I substance federally, so there’s no federal framework carrying the load. State regulators carry the full weight of oversight, and they write detailed security requirements into the licensing process to prove the industry can police itself.
In practice, that means you don’t design the system and then check the rules. You start with the rules. Nearly every state that licenses dispensaries requires a written security plan as part of the application, and that plan has to spell out where every camera sits, how long footage is kept, how access to secure areas is controlled, and how alarms are monitored. Get the plan wrong and you don’t open.
What state regulations actually require
The details vary, but almost every cannabis state regulates the same four things: video quality, camera coverage, how long footage is retained, and controlled access to secure areas. The numbers are where states split apart.
|
State |
Min. camera spec |
Retention |
Worth knowing |
|---|---|---|---|
|
California |
720p (1280×720) @ 15 fps |
90 days |
Coverage of every limited-access area, POS, and entry/exit; some cities (e.g. Lynwood) add a backup-power rule. |
|
Colorado |
Facial ID at 20 ft |
40 days |
Written around what the footage must prove, not a fixed pixel count. |
|
Oregon |
720p @ 10 fps |
90 days |
Similar coverage rules to California with a lower frame-rate floor. |
|
Washington |
640×480 @ 10 fps |
45 days |
One of the lowest resolution floors — usually worth exceeding. |
|
Michigan |
Functional standard |
14 days |
The shortest retention window of the major cannabis states. |
|
New York |
Clear color image |
60 days |
OCM requires double-lock security on cannabis storage areas. |
|
Pennsylvania |
Clear identification |
4 years |
The extreme case — a 16-camera setup can need hundreds of TB of storage. |
Always confirm current numbers with your state’s cannabis authority and your city or county — local ordinances stack on top of state minimums, and the rules get updated often.
One thing the pixel counts don’t tell you: a system can meet the resolution and retention minimums on paper and still fail an inspection. If a camera covers a mandated zone but sits at an angle that misses the safe door, or glare off a display case washes out the face at the register, that’s a documented gap. Inspectors judge the footage, not the install checklist.
Two more things worth building in early. Set retention above the state minimum — incidents often surface at month-end during an inventory count, and a system overwriting on a 14- or 30-day loop erases the footage before anyone thinks to pull it. And size storage before you buy: sixteen 1080p cameras recording continuously for a 90-day window run past 30 TB, and Pennsylvania’s four-year rule pushes that into hundreds of terabytes. That math decides your recorder and backup strategy, not the other way around.
Video surveillance: the foundation of the system
Cameras are the one component no dispensary gets to skip, and they’re usually where the state rules bite hardest. Beyond hitting your state’s resolution and frame-rate floor, the system has to cover every entrance and exit, the sales floor, every point of sale, the storage and vault areas, and often the exterior and parking. Any blind spot in a mandated zone is a compliance problem. ASE’s security cameras and video surveillance collection covers the dome, bullet, and PoE cameras plus the recorders that carry that kind of coverage.
There’s an upgrade most owners find worth the money even where it isn’t required: tying video to the POS. Pairing each transaction with the matching clip lets you check a void or a suspicious sale against what actually happened at the counter. It turns a compliance cost into a real loss-prevention tool, which is exactly how the specialist video platforms in this space win business.
Access control for limited-access areas
Regulators don’t just want the building locked — they want proof that only the right people reach the cannabis and the cash. That’s what access control does. Restrict the vault, the storage room, and the back office to authorized staff, assign permissions by role, and keep an audit log of who opened what and when. When something goes missing, those logs paired with the camera feed are how you find out who was in the room.
The credential depends on the door and the state. A few common choices:
-
Keypads. A PIN is a simple way to lock down an interior or lower-traffic door without issuing hardware to everyone. See ASE’s access control keypads.
-
Fobs and cards. RFID fobs and card readers are easy to issue, easy to revoke, and give you a clean per-person log — useful when an employee leaves and their access has to end that day.
-
Biometrics. A fingerprint or face read closes the gap that a shared PIN or a borrowed card leaves open, and it’s common on the highest-security doors like the vault.
A detail that trips people up: a handful of states go further than “restrict the room.” New York, for example, requires double-lock security on cannabis storage. Check your state’s wording before you assume a single reader on the door is enough.
Secure storage for cash and product
Because so much of the business still runs on cash, the safe isn’t an afterthought here — it’s core infrastructure. Product and cash should live in a high-grade safe or vault with multi-point locking, placed in a restricted area out of customer sight, and matched to whatever construction standard your state names. ASE’s safes collection includes depository and keypad-and-biometric models built for exactly this kind of cash-heavy, drop-and-lock use.
Depository safes earn their place in a dispensary specifically because staff can drop cash without being able to open the safe — which quietly removes one of the most common internal-theft opportunities during a shift.
Alarms, panic buttons, and monitoring
Cameras record what happened. Alarms are what get someone to respond while it’s still happening. A dispensary system generally layers a few things:
-
Intrusion detection. Door and window contacts, glass-break sensors, and motion detection for after-hours coverage, split into zones so you can arm the sales floor and storage separately.
-
Panic and duress buttons. Discreet alerts that let staff signal for help during a robbery. Several states require them for exactly this scenario.
-
Monitored response. A 24/7 central station that verifies the alarm and calls it in. Many states require monitoring, not just a siren, and some require the system to be tested and documented on a set schedule.
One easy-to-miss detail from installers who do this work: some regulations want the recording equipment itself in a room with its own independent intrusion alarm and access control, separate from the main floor — so a thief who breaches the store can’t simply walk over and wipe the evidence.
Putting a compliant system together
If you’re speccing a dispensary security system from scratch, the order of operations matters more than any single product:
-
Start with the rulebook. Pull your state’s cannabis security regulations and your local ordinance first, then design to the stricter of the two.
-
Build in a buffer. Exceed the minimum on resolution and retention. The cost difference is small next to a missed identification or an overwritten clip.
-
Integrate, don’t bolt on. Cameras, access control, alarms, and the POS should talk to each other on one platform. Disconnected parts create the blind spots inspectors and thieves both look for.
-
Document everything. Keep the coverage map, the retention settings, the test records, and an incident log. Regulators increasingly want evidence the system is actively managed, not just installed.
Whether you’re outfitting a single storefront or standardizing across locations, mapping your doors, secure areas, and required coverage first is what keeps the build compliant. ASE’s full access control and video surveillance collections cover the cameras, readers, keypads, and recorders that bring the plan together.
Frequently asked questions
Why do cannabis dispensaries need such strict security?
Because the risk profile is unusual: high-value product that’s easy to resell, large amounts of cash from limited banking access, and a black market willing to buy stolen inventory. On top of that, state regulators tie a dispensary’s license directly to its security system, so the rules aren’t optional the way they are for most retailers.
How long do dispensaries have to keep security footage?
It depends entirely on the state. Retention runs from as little as 14 days in Michigan to 40–90 days in states like Colorado, California, and Oregon, up to four years in Pennsylvania. Most operators store longer than the minimum so late-reported incidents are still on file.
Do dispensaries need security guards?
Some states and local jurisdictions require licensed security personnel, and a few address armed guards specifically, while others leave it to the operator. Guard rules vary widely by state and city, so it’s one to confirm locally rather than assume.
What are the main components of a dispensary security system?
Video surveillance, access control for limited-access areas, secure storage for cash and product, and a monitored alarm system with intrusion sensors and panic buttons. The strongest setups tie all of it together on one platform.
How much does a dispensary security system cost?
It varies with facility size, camera count, retention requirements, and integration, but industry breakdowns commonly put a full dispensary security build in the tens of thousands of dollars, plus ongoing costs for monitoring, footage storage, and maintenance. State retention rules are a big driver, since longer retention means more storage.
Security that protects your license and your inventory
A dispensary security system is doing two jobs at once: keeping the product, cash, and people safe, and proving to a regulator that you’re running a tight, accountable operation. Those goals point the same direction, which is the good news.
Start with your state’s rules, cover every mandated zone with real sightlines, put cash and product behind a proper safe, back it with monitored alarms, and tie the pieces together so nothing falls through the gaps. Get that right, and the system quietly does its job — the burglary that doesn’t happen, the footage that’s there when you need it, and the inspection that passes without a scramble.




