A practical operator brief on the two required ID checks, the staff-supervised Restricted Access Area, Metrc and point-of-sale reconciliation, checkout camera coverage, and the local approvals that shape a Colorado store.
Reviewed November 12, 2026. Counts come from the Marijuana Enforcement Division’s published count of licensees by type, last updated November 2, 2026. They count licenses, not storefronts confirmed open, and a medical and a retail store can share one premises.
Retail store licenses in the Division’s count of licensees by type, updated November 2, 2026.
View source264medical marijuana store licensesMedical store licenses in the same Division count, updated November 2, 2026.
View source24,082licensed marijuana employeesIndividual employee licenses in the same Division count, updated November 2, 2026.
View sourceRegulatory note: The rule text cited here is the Division’s unofficial copy of 1 CCR 212-3 effective November 1, 2026; the Secretary of State had not posted the official copy when this page was reviewed. Dispensify provides technology planning, not legal, licensing, tax, or compliance advice. Confirm current state and local requirements before deployment.
A licensee must verify a valid government-issued photo ID showing the person is 21 or older before letting them into the Restricted Access Area, and again before starting the transfer of retail marijuana. A kiosk ID scan can assist that workflow, but both checks stay with licensed staff.
1 CCR 212-3 Rule 6-110(B)Every area where retail marijuana is sold, displayed, or dispensed is a Restricted Access Area, and a licensee must supervise it whenever consumers are present. Rule 6-105(I) separately covers automated machines that dispense marijuana; the rules don’t specifically mention ordering kiosks, so plan kiosk placement inside the supervised area with staff completing the handoff.
1 CCR 212-3 Rules 6-115 and 6-105(I)Licensees must use the state Inventory Tracking System (Metrc) as the primary system of record and reconcile on-premises and in-transit inventory in it each day at close. A separate point-of-sale system is allowed as a secondary system, and the licensee must make sure its data transfers accurately to and from the tracking system.
1 CCR 212-3 Rule 3-805(A) and (E)Point-of-sale areas need camera coverage that records the facial features of consumers and employees clearly enough to determine identity. Recordings are kept at least 30 days, and the embedded date and time must synchronize with any point-of-sale system. Check sight lines and clock sync before moving a register or adding a kiosk.
1 CCR 212-3 Rule 3-225Official updates for the November 1 rule revisions, the inventory tracking contract, and product safety oversight. Last checked November 12, 2026.
Colorado MED
Rule revisions the State Licensing Authority adopted on September 10, 2026 went into effect November 1, along with a new fee schedule. The Division has posted an unofficial copy and a redline while the official Secretary of State copy is pending.
Why it matters: Work from the November 1 text, not the January 2026 version, when you update store procedures.
Read official sourceColorado MED
The Division agreed with the State Auditor’s recommendations. It plans to review testing exemptions, make Health and Safety Advisories clearer, and work with the Legislative Audit Committee on draft legislation.
Why it matters: Expect more attention on product safety notices, and keep a clear store process for pulling product named in an advisory.
Read official sourceColorado MED
The bulletin covers relabeling limits, late fees on unpaid annual license fees, and a tighter ban on subletting or contracting out license privileges. It notes that ordinary professional and support services remain allowed.
Why it matters: Review vendor and contractor agreements so no outside party operates in, or takes possession of, any part of the licensed premises.
Read official sourceColorado MED
Bulletin 26-08 announced a new statewide Inventory Tracking System contract with Metrc after a competitive process. New functions, including more tag options, will phase in over the next year, and licensee fee terms changed on November 1, 2026.
Why it matters: The tracking system isn’t changing vendors, so keep current reporting workflows and watch for Metrc bulletins on new functions.
Read official sourceWhere will licensed staff verify ID before a customer enters the Restricted Access Area, and again before the transfer starts?
Will every kiosk sit inside the supervised Restricted Access Area, with the required pregnancy warning posted at each point of sale?
Which point-of-sale system holds the one-ounce transaction limit and reconciles with Metrc at close of business each day?
Do cameras record customer and employee faces at each ordering and payment position, with timestamps synced to the point-of-sale clock?
Does the layout change need local licensing authority approval, and is it marked on the floor plan for the next state renewal?
The cash recycler is optional. Cash acceptance, change return, and reconciliation depend on the selected hardware and software configuration. Confirm those options and the staff handoff before finalizing a rollout.
Colorado’s rules don’t specifically mention self-service ordering kiosks. Rule 6-105(I) covers automated machines that dispense marijuana in the Restricted Access Area, which is a different device. What the rules do require is that licensed staff verify ID before entry and before the transfer, and supervise the Restricted Access Area. Confirm your plan with the Division and your local licensing authority.
Dispensify plans and deploys the physical checkout layer. The licensee is responsible for Metrc reporting, which runs through its selected POS, inventory platform, or third-party integrator.
The licensee does, twice. Rule 6-110(B) requires verifying a valid government-issued photo ID before a person enters the Restricted Access Area and again before initiating the transfer. A kiosk ID scan can assist staff, but it doesn’t take the place of either check.
A retail store can’t transfer more than one ounce of flower or its equivalent in a single transaction. The rule sets one ounce equal to eight grams of concentrate or 80 ten-milligram servings of THC in product. Multiple sales to the same person in a business day can count as one transaction.
Point-of-sale areas and all entrances and exits need coverage. Cameras at each point of sale must capture the faces of customers and employees, recordings are kept at least 30 days, and timestamps must sync with the point-of-sale system. A chronological transaction log has to be available to pair with the video.
The state applies a 15% retail marijuana sales tax to retail marijuana and retail marijuana products, which are exempt from the 2.9% state sales tax. Medical marijuana is subject to the 2.9% state sales tax. Local taxes vary, so confirm rates with your city or county.
Last reviewed . This guide summarizes publicly available sources, and rules and figures can change after that date. Dispensify provides technology planning and deployment support, not legal or licensing advice. Confirm current requirements with the Colorado Marijuana Enforcement Division, your advisors, and the applicable local authority.
Tell us what you’re opening, replacing, or standardizing. We’ll map the kiosk, POS hardware, cash, installation, and support path around your operating environment.
