CBD Product Certification Standards CBD Website Certification Standards CBD Product Certification Standards Registration & ComplianceOur first step is making sure you are who you say you are and that you have the necessary documentation 1. Relationship of Applicant to Product The applicant must have substantial control over the manufacture, formulation, and labeling of the product and should be able to demonstrate compliance with all other standards. Eligible applicants include (1) product manufacturers, including contract manufacturers; and (2) entities selling products, under their own names, that are manufactured by a contract manufacturer, and who are otherwise able to demonstrate the product's compliance with all other standards. 2. Licensure, Registration, Legal Compliance The applicant must be duly registered as a corporate entity or legal person (e.g., as a limited liability company) in the state or jurisdiction where it appears to conduct business. To the extent that licensure or registration is required in any jurisdiction where the applicant operates or provides services, the applicant must comply with such requirements. This may include the jurisdiction(s) from which the products are sold and any jurisdiction(s) to which the products are offered to be shipped. Product Quality We need to see that your products and supply chain comply with legal requirements and your facility meets our standards. 3. Supply Chain / Test Results The applicant must disclose its supply chain for all products, adhere to all supply chain-related regulatory requirements, and demonstrate a commitment to good manufacturing practices. Additionally, the applicant must provide a testing facility approved by LegitScript, unexpired, random samples of products submitted for certification for testing. Such products must contain the advertised amount of hemp-derived compounds and must comply with legal requirements related to cannabinoid substances and ingredient levels. The applicant must demonstrate that products submitted for certification were produced in compliance with all USDA and state hemp-cultivation requirements, or are otherwise exempt from such requirements. 4. On-Site Inspections You agree that LegitScript may conduct on-site inspections of your facility/ies, and you will in no way restrict LegitScript access. Internal Practices We check to see that your staff has the required qualifications and that your business is fully insured. 5. Background and History Applicant's corporate officers, directors, or those exercising control over significant business decisions must submit to criminal background checks conducted at LegitScript's request, and must disclose any prior criminal, regulatory, or civil violations. Applicant must also disclose any litigation commenced, resolved or otherwise addressed that involves applicant at any time over the past 10 years. Prior offenses or other bad acts, including any prior regulatory discipline may be a disqualifying factor, in LegitScript's sole discretion. 6. Prior Discipline The applicant, including any associated business or websites, must not have been subject to significant recent and/or repeated instances of improper legal compliance, disciplinary sanctions, or other regulatory action. 7. Insurance Applicant must maintain and provide proof of general liability insurance. External Practices We make sure your products and their marketing are in compliance with applicable laws. 8. Acceptable Products Only products that are compliant with federal and state regulations may be certified. 9. Product Labeling and Marketing All product labeling must conform to federal and state legal and regulatory requirements. For example, cosmetic products containing CBD must be labelled in compliance with FDA cosmetics regulations. Products may not be marketed with impermissible therapeutic claims, or, as LegitScript may determine in our sole discretion, marketed in an obvious attempt to circumvent applicable regulations. 10. Controlled Substances Applicant may not manufacture or sell, in the United States, Schedule I controlled substances, as defined in the US Controlled Substances Act, except to the extent permitted by federal law. Applicant may also not manufacture or sell products containing ingredients that LegitScript has classified as global red flags. 11. Transparency The applicant's business must not engage in practices or extend offers that may deceive or defraud regulators, customers, or the public in any way, including but not limited to any material detail regarding legal compliance and product marketing. Failure to provide full and accurate information as requested, in LegitScript's sole discretion, will result in denial. Applicants may undertake reasonable remedial action during the certification process without penalty; provided, however, that a history of fraudulent behavior or non-transparent operations may, in LegitScript's sole discretion, result in denial of the application. CBD Website Certification Standards Registration & ComplianceOur first step is making sure you are who you say you are and that you have the necessary documentation. 1. Licensure, Registration, Legal Compliance The applicant must be duly registered as a corporate entity or legal person (e.g., as a Limited Liability Company) in the state or jurisdiction where it appears to offer services. To the extent that licensure or registration is required in any jurisdiction where the applicant operates or provides services, the applicant must comply with such requirements. This includes the jurisdiction(s) from which the products are sold and any jurisdiction(s) to which the products are offered to be shipped. 2. Domain Name Registration The applicant's domain name, if it advertises using its own website, must be accurate and transparently registered (it may not have privacy-protected or redacted Whois information). The applicant must also provide all domain names and websites under its control. Websites utilizing anonymous domain name registration services will not be eligible for approval. This Standard may be met by making the domain name registration information public, acquiring and maintaining a valid EVSSL certificate, or providing to LegitScript adequate documentation showing the domain name registration information for your website. 3. Contact Information The applicant must display accurate contact information in an easy-to-find location on its website. Internal Practices We check to see that your affiliates and staff have the required qualifications. 4. Background and History Applicant's corporate officers, directors, or those exercising control over significant business decisions must submit to criminal background checks conducted at LegitScript's request, and must disclose any prior criminal, regulatory, or civil violations. Applicant must also disclose any litigation commenced, resolved, or otherwise addressed that involves applicant at any time over the past 10 years. Prior offenses or other bad acts, including any prior regulatory discipline may be a disqualifying factor, in LegitScript's sole discretion. 5. Prior Discipline The applicant, including any associated business or websites, must not have been subject to significant recent and/or repeated instances of improper legal compliance, disciplinary sanctions, or other regulatory action. 6. Affiliates The applicant, domain name registrant, and any person or entity that exercises control over, or participates in, the business must not be affiliated with or control any other entity that violates these standards. External Practices We make sure your products and their marketing are in compliance with applicable laws. 7. Acceptable CBD Products The applicant may only offer for sale LegitScript-certified CBD products. 8. Product Labeling and Marketing All product advertising and website language must conform to federal and state legal and regulatory requirements. For example, products may not be marketed with impermissible therapeutic claims, or, as LegitScript may determine in our sole discretion, marketed in an obvious attempt to circumvent applicable regulations. 9. Other Products All products manufactured or sold by the applicant, whether on the website submitted to LegitScript by the applicant or on any other website under the applicant's control, must comply with federal and state regulations. The applicant may not manufacture, advertise, or sell any products on LegitScript's "Red Flag" list. 10. Transparency The applicant's business must not engage in practices or extend offers that may deceive or defraud regulators, customers, or the public in any way, including but not limited to any material detail regarding legal compliance and product marketing. Failure to provide full and accurate information as requested, in LegitScript's sole discretion, will result in denial. Applicants may undertake reasonable remedial action during the certification process without penalty; provided, however, that a history of fraudulent behavior or non-transparent operations may, in LegitScript's sole discretion, result in denial of the application. 11. Unapproved Advertising Applicants advertising on internet platforms in violation of the platforms' terms of service are presumed to be attempting to circumvent the goals of the LegitScript certification program. If LegitScript discovers such advertising, it may be grounds for certification denial.