CBD Product Certification Standards CBD Website Certification Standards CBD Product Certification Standards Registration & Compliance 1. Relationship of Applicant to Product The applicant must have the ability to demonstrate the product's compliance with all other standards. 2. Licensure, Registration, Legal Compliance To the extent that licensure or registration is required in any jurisdiction where the product is manufactured, processed, or sold, the product must comply with such requirements. Product Quality We need to see that the product and its supply chain comply with legal requirements. 3. Supply Chain / Test Results The applicant should be able to provide supply chain documentation for all products. The product should adhere to all supply chain-related regulatory requirements and be manufactured consistent with good manufacturing practices. The applicant must provide a Certificate of Analysis demonstrating the CBD used in the final product complies with federal laws regarding the cultivation and processing of hemp. Additionally, the applicant must provide to a testing facility approved by LegitScript, unexpired, random samples of products submitted for certification for testing. Such products must contain the advertised amount of hemp-derived compounds and must comply with legal requirements related to cannabinoid substances and ingredient levels. The applicant must be able to demonstrate that products submitted for certification were produced in compliance with all USDA and state hemp-cultivation requirements, or are otherwise exempt from such requirements. Prior Discipline 4. Prior Discipline The applicant or product manufacturer, including any associated personnel, businesses, or websites, must not have been subject to significant recent and/or repeated instances of improper legal compliance, disciplinary sanctions, or other regulatory action. Prior offenses or other bad acts by the applicant or product manufacturer, including any prior regulatory discipline may be a disqualifying factor, in LegitScript's sole discretion. External Practices Your products and their marketing must be in compliance with applicable laws. 5. Acceptable Products Only products that are compliant with applicable federal and state regulations may be certified. 6. Product Labeling and Marketing All product labeling must conform to federal and state legal and regulatory requirements. For example, cosmetic products containing CBD must be labeled in compliance with FDA cosmetics regulations. Products may not be marketed with impermissible therapeutic claims, or, as LegitScript may determine in our sole discretion, marketed in an obvious attempt to circumvent applicable regulations. 7. Transparency The applicant's business must not engage in practices or extend offers that may deceive or defraud regulators, customers, or the public in any way, including but not limited to any material detail regarding legal compliance and product marketing. Failure to provide full and accurate information as requested, in LegitScript's sole discretion, will result in denial. Applicants may undertake reasonable remedial action during the certification process without penalty; provided, however, that a history of fraudulent behavior or non-transparent operations may, in LegitScript's sole discretion, result in denial of the application. CBD Website Certification Standards Registration & Compliance Our first step is making sure you are who you say you are and that you have the necessary documentation. 1. Licensure, Registration, Legal Compliance The applicant must be duly registered as a corporate entity or legal person (e.g., as a limited liability company) in the state or jurisdiction where it appears to offer services. To the extent that licensure or registration is required in any jurisdiction where the applicant operates or provides services, the applicant must comply with such requirements. This includes the jurisdiction(s) from which the products are sold and any jurisdiction(s) to which the products are offered to be shipped. 2. Domain Name Registration The applicant's domain name must be accurate and the domain name registrant must have a logical nexus to the applicant’s business. The applicant must also provide all domain names and websites under its control. Websites utilizing anonymous domain name registration services will not be eligible for approval. This Standard may be met by making the domain name registration information public, acquiring and maintaining a valid EVSSL certificate, or providing to LegitScript adequate documentation showing the domain name registration information for your website. 3. Contact Information The applicant must display accurate contact information in an easy-to-find location on its website. Internal Practices We check to see that your affiliates and staff have the required qualifications. 4. Background and History Applicant's corporate officers, directors, or those exercising control over significant business decisions must submit to criminal background checks conducted at LegitScript's request, and must disclose any prior criminal, regulatory, or civil violations. Applicant must also disclose any litigation commenced, resolved, or otherwise addressed that involves applicant at any time over the past 10 years. Prior offenses or other bad acts, including any prior regulatory discipline may be a disqualifying factor, in LegitScript's sole discretion. 5. Prior Discipline The applicant, including any associated business or websites, must not have been subject to significant recent and/or repeated instances of improper legal compliance, disciplinary sanctions, or other regulatory action. 6. Affiliates The applicant, domain name registrant, and any person or entity that exercises control over, or participates in, the business must not be affiliated with or control any other entity that violates these standards. External Practices We make sure your products and their marketing are in compliance with applicable laws. 7. Acceptable CBD Products Any CBD products offered by applicant website must be LegitScript-certified CBD products. 8. Product Labeling and Marketing All product advertising and website language must conform to federal and state legal and regulatory requirements. For example, products may not be marketed with impermissible therapeutic claims, or, as LegitScript may determine in our sole discretion, marketed in an obvious attempt to circumvent applicable regulations. 9. Other Products All products manufactured or sold by the applicant, whether on the website submitted to LegitScript by the applicant or on any other website under the applicant's control, must comply with federal and state regulations, including state-specific product or CBD-seller registration or licensure. The applicant may not manufacture, advertise, or sell any products on LegitScript's "Red Flag" list. 10. Transparency The applicant's business must not engage in practices or extend offers that may deceive or defraud regulators, customers, or the public in any way, including but not limited to any material detail regarding legal compliance and product marketing. Failure to provide full and accurate information as requested, in LegitScript's sole discretion, will result in denial. Applicants may undertake reasonable remedial action during the certification process without penalty; provided, however, that a history of fraudulent behavior or non-transparent operations may, in LegitScript's sole discretion, result in denial of the application. 11. Unapproved Advertising Applicants advertising on internet platforms in violation of the platforms' terms of service are presumed to be attempting to circumvent the goals of the LegitScript certification program. If LegitScript discovers such advertising, it may be grounds for certification denial.