The short answer
Every state requires dispensaries to have camera coverage of all areas with cannabis, every entrance and exit and parking areas, recordings kept for a set period, a monitored perimeter alarm, backup power, locked storage for product and controlled access to restricted areas. The details differ: New York requires at least 60 days of recordings and 8 hours of backup power, while Massachusetts requires 90 days and 4 hours, plus a panic alarm. Design security with the floor plan, order equipment early and test everything before inspection.
Why security drives the build
Security is the part of a dispensary build most likely to fail inspection and most likely to delay opening. Cameras, alarms, access control and the vault have to match the rules, the security plan you filed and the space as built. Designing them late means moving walls, rerunning cable and waiting on equipment.
Common requirements
| Requirement | New York | Massachusetts |
|---|---|---|
| Camera coverage | All areas that may contain cannabis, all entry and exit points and any parking lot | All areas that may contain marijuana, vaults and safes, entry and exit points, parking lots, sales and cash areas |
| Recording | Continuous during operating hours and whenever cannabis is handled; motion-activated otherwise | 24 hours a day |
| Retention | At least 60 days | At least 90 calendar days |
| Image quality | Able to produce a clear color still from live or recorded video, with date and time stamp | Clear color still images, with an embedded date and time stamp that does not obscure the picture |
| Alarm | Perimeter alarm alerting an internal designee and a commercial central monitoring station | Perimeter alarm on entries, exits and windows; failure notice within 5 minutes; tests at least every 30 days; backup alarm |
| Panic alarm | Check your security plan requirements | Duress, panic or holdup alarm connected to law enforcement |
| Backup power | At least 8 hours for alarm and video | At least 4 hours |
| Product storage | Secure storage per your approved plan | Finished product in a secure, locked safe or vault |
| Limited access areas | Measures to prevent unauthorized access in the security plan | Signed limited access areas, badges, visitor escorts and logs |
| Regulator access | OCM remote access to footage on request | Footage available to the Commission |
This table summarizes rules as published and as summarized by counsel. Always build to the current rules and your approved security plan.
Designing the system
Cameras
Plan camera positions on the floor plan before construction. Every point of sale, the vault door and interior, receiving, the entrance, the exit and the parking area need coverage that can identify a person. Avoid blind corners behind fixtures and plan lighting so footage is usable at night. Size storage for the retention period at your camera count and resolution, with headroom.
Alarms and monitoring
Choose a monitoring company that has served cannabis clients and understands the notification rules. Cover doors, windows, roof hatches and the vault. Decide who receives alerts after hours and write that into your SOPs.
Vault and storage
Decide early whether you need a built vault room or rated safes. A vault room affects walls, doors, HVAC and permits, and vault doors are often long-lead items. Size storage for peak inventory plus growth.
Access control
Separate public areas from limited access areas with controlled doors. Use badges or credentials, log visitors and keep the receiving door out of public view.
Backup power
Size the battery or generator for the alarm, cameras, recorder and network for the required hours, and test it.
Common inspection failures
- A camera that misses a point of sale, the vault door or part of the parking lot
- Recordings that stop overnight or do not reach the retention period
- Date and time stamps that are wrong or missing
- Backup power that does not last the required hours
- Unsigned limited access areas or missing visitor logs
- A floor plan that no longer matches the approved plan
- Staff who cannot explain alarm and incident procedures
Pre-inspection security checklist
- Camera list matches the security plan; every required area covered
- Recordings verified to meet the retention period
- Clear color stills can be exported with correct date and time
- Regulator remote access tested where required
- Perimeter alarm tested with the monitoring company
- Panic or duress alarms installed where required and tested
- Backup power tested for the required duration
- Vault or safes installed, locked and logged
- Limited access areas signed; badges and visitor logs in use
- Exterior lighting checked at night
- Security SOPs printed and staff trained
- Floor plan matches the approved plan
Security procedures, not just equipment
Inspectors check equipment, but they also check that people follow procedures. Write and train on these routines before opening:
- Opening and closing: who unlocks, who arms and disarms the alarm, and the order of checks
- Cash handling: counting, drops, safe access and armored pickup
- Product movement: escorting product between receiving, the vault and the floor
- Visitor management: sign-in, badges, escorts and sign-out
- Alarm response: who is called, who responds and when to call police
- Incident reporting: what counts as an incident, how it is documented and when the regulator must be notified
- Footage requests: how to export and preserve video for the regulator or law enforcement
Run a security drill before your inspection. Staff who have practiced answer inspectors' questions with confidence.
After opening
Security compliance does not end at inspection. Check recording retention monthly, test alarms and backup power on schedule, review access lists when staff leave and audit visitor logs. These checks are part of our monthly compliance audits.
Working with your security vendor
Choose a security integrator who has installed and supported cannabis systems in your state. Ask for references from licensed stores, the camera and recorder models they propose, how they size storage for your retention period, how they handle regulator remote access, and their response time for service calls. Give them your approved security plan and floor plan, and require a walkthrough and written test results before your inspection. Keep a service contract in place after opening; a camera that fails and stays down is a violation.
Security in your application
Many states score or review your security plan as part of the license application. Write the plan for the store you will actually build: the same camera positions, alarm zones, storage and access control that will appear on your floor plan. A plan that promises more than you build becomes a problem at inspection.
A quick self-audit you can run today
Pick a random time from last week and pull footage from every camera. Is it all there, clear and correctly time-stamped?
Walk the store and note any area with product that a camera does not cover.
Check the alarm log for the last 30 days. Were all alerts answered?
Check who has alarm codes, keys and badges. Has anyone left?
Open the visitor log. Is every visitor signed in and out with an escort noted?
Ask a new employee what to do if the alarm sounds after hours.
If any answer is no, fix it this week.
Other states we cover, including New Jersey, Maryland, Connecticut, Rhode Island, Delaware and Virginia, set their own security rules. Check the current regulations for your state, and your approved security plan, before you finalize the design.
Budgeting and scheduling security
Security is one of the larger lines in a dispensary budget and one of the most common causes of schedule slip. Get quotes for cameras, recorders and storage, access control, alarm and monitoring, panic buttons, the vault or safes, backup power, network and installation. Ask vendors about lead times when you sign the lease, not when walls are framed.
| Item | Order by | Why |
|---|---|---|
| Vault door or safes | Permit stage | Long lead times; affects walls and permits |
| Cameras and recorders | Design complete | Cable must run before ceilings close |
| Access control | Design complete | Door hardware and wiring |
| Alarm and monitoring | Mid-construction | Contract and testing before inspection |
| Backup power | Design complete | Electrical scope |
Frequently asked questions
Do I need security guards?
Some states or local approvals require them; many stores choose them for safety and customer comfort. Check your state rules and conditions of approval.
Can I store footage in the cloud?
Often, if the system meets retention, access and integrity requirements. Confirm with your state's rules and your security plan.
How often should we test the alarm?
Massachusetts requires testing at intervals of no more than 30 days. Monthly testing is a good standard everywhere.
Who should hold alarm codes and keys?
Only the managers named in your security plan, with a log of who has access and a procedure for changing codes when staff leave.
We run full mock inspections and set up security, POS and seed-to-sale systems. For the full opening sequence in New York, see how to open a dispensary in New York.
Related services and state guides
Sources
- Harris Sliwoski: New York retail dispensary security and surveillance
- 935 CMR 500.110 security requirements (Cornell LII)
- 9 NYCRR Part 125 (Justia)
Last updated October 25, 2026. Rules change often. This guide is general information from operators, not legal or tax advice. Confirm current rules with the regulator and your attorney before acting.