Buried in last week’s registration news is a deadline that should be the only thing cannabis operators are thinking about right now.
The DEA issued guidance saying medical marijuana businesses that want federal registration and protections have until November 29 to begin sourcing cannabis only from, and selling only to, other companies that have been granted registration or applied for it in a timely fashion. The agency’s words: these businesses are “expected to complete these activities and establish compliant supply chains” by that date.
Twenty-six days. And the structure of the federal framework means a lot of operators are going to discover their supplier isn’t eligible to sell to them anymore.
The math nobody is running
When the DEA published its application list, the headline was the total: 6,983 business locations applied for federal protections. Break that down and it gets interesting.
4,197 dispensaries
2,076 manufacturers
710 distributors
Now look at how the federal framework actually routes product. Manufacturers can cultivate, process, package, and transfer to registered distributors or other registered manufacturers. Distributors receive from registered manufacturers and transfer to registered dispensers or other registered distributors.
Distributors sit in the middle of that chain. There are 710 of them nationwide who have even applied, against 4,197 dispensaries that need to be supplied.
That ratio is roughly six dispensaries for every distributor applicant, before a single application gets denied. And applications are not approvals.
Of those nearly 7,000 applicants, the DEA has so far granted registrations to just over 900 dispensaries, across Alabama, Florida, Mississippi, South Dakota, Texas, Virginia, and West Virginia. Everyone else is waiting, and the clock doesn’t care.
Then there’s who got shut out entirely
The DEA made clear that it cannot grant registration to medical cannabis businesses in states with dual-use licenses that also permit recreational marijuana, or in states that let patients access medical cannabis through self-certification. The agency laid this out in an order to a Minneapolis business, arguing Minnesota’s licensing structure permits activity beyond the federal medical framework.
That isn’t a small carve-out. A large share of the country’s cannabis supply infrastructure sits in states that built combined licensing precisely because it was administratively simpler.
So picture the November 30 scenario. A registered dispensary in a qualifying state has a manufacturer it has bought from for three years. That manufacturer operates in a dual-license state. It cannot register. The dispensary cannot buy from it and keep its own federal standing.
Nobody did anything wrong. The supply relationship just became non-compliant by operation of federal structure.
Even the labs are a problem
You can measure how thin the infrastructure is by what the DEA felt it had to excuse.
The guidance includes a carve-out saying the agency does not intend to penalize registrants for sending de minimis quantities to an analytical laboratory that is not DEA-registered, but only if the lab is in the same state, and only where no entities are registered to do that testing. The discretion applies only where using a DEA-registered lab would violate state law. And it runs one direction only, since registrants still cannot receive Schedule III medical marijuana back from a non-registered lab.
When a regulator has to write an exception because the required vendors do not exist yet, that tells you the framework arrived ahead of the infrastructure.
What this means if you’re lending into cannabis
This is the part the policy coverage will miss. The November 29 deadline is not a compliance story. It’s a counterparty risk story, and it changes what diligence has to look like.
Until now, the reasonable question on a cannabis file was whether the borrower held a valid state license and could service the debt. That question is now insufficient. A borrower can be fully licensed, fully registered, profitable, and still lose its primary supplier or its primary customer on November 30 because of someone else’s eligibility.
Four questions belong on every cannabis file this month:
Is the borrower registered, or merely an applicant? Those are different positions with different exposure, and “we applied” is not the same as “we’re approved.”
Who are the counterparties, and what is their status? Name the top suppliers and the top buyers, and establish whether each has been granted or timely applied. A manufacturer whose three largest distributors are all unregistered has a revenue problem in four weeks.
What’s the concentration? If 60% of a dispensary’s inventory comes from two manufacturers and one is in a dual-license state, that’s not a diversified supply chain. That’s a single point of failure with a date attached.
What happens to the tax position if registration is lost or denied? Treasury and the IRS put 280E in their 2026-2027 Priority Guidance Plan, released September 29, so guidance is coming. But the emerging read is that the relief attaches to the federal medical pathway. A borrower modeling improved after-tax cash flow on rescheduling needs to hold the registration that makes it real.
The uncomfortable version
Here’s what I think is actually happening, and I’ll flag it as my read rather than reporting.
The federal framework is sorting the industry, and it isn’t sorting on business quality. It’s sorting on which state you happened to build in and how your state structured its licenses years before any of this existed. A disciplined operator with clean books in Minnesota is on the outside. A weaker operator in a single-purpose medical state is inside.
That’s going to produce some strange credit outcomes over the next two quarters. It’s also going to produce acquisition activity, because the fastest way for an excluded operator to get inside the framework is to buy someone who’s already there. We’re already seeing distress drive the deal table, with November transactions clustering around cultivation assets and dispensary portfolios changing hands at prices that reflect urgency rather than value.
If you hold paper on a cannabis business, the thing to do this week is not to wait for the IRS guidance. It’s to call your borrower and ask who they buy from, and whether those companies are going to be allowed to sell to them on November 30.
If you’re an operator and you’ve gotten a straight answer out of the DEA on any of this, hit reply. I’d like to know what they’re telling people, and I’ll share what I learn.