Why is security important in the cannabis industry?

Maintaining complete privacy and anonymity to our client’s customers and to our medical patients is our highest priority. It’s because of this that we aim to achieve the highest possible security standards available for all of our systems, both government, and commercial. Data security is of the utmost importance and that’s why with BioTrack, you own your data, nobody else.

Commercial BioTrack Software Security

How does BioTrack currently store data?

Some of the features that are offered on BioTrack’s Core system are as follow:

Two-Factor Authentication

In addition to entering a user’s email address, Unified Business Identifier (UBI), and password, users can also implement a one-time use passcode required for a user to login. This feature, which updates every time a user logs in, adds another level of protection for business owner’s and their customers by mitigating the compromise of unwanted access.

Password Encryption

BioTrack employs bcrypt, which is the strongest password encryption type currently available.


By timing sessions for each individual user, BioTrack logs inactivity and cues an automatic logoff after remaining inactive for a certain amount of time, allowing for further protection of private data and eliminating data breaches due to oversights.

SSL Certs

We utilize the latest Secure Socket Layer (SSL) encryption technology available to protect the privacy of businesses and customer’s data.

Database Encryptions

Our Database connections are encrypted with standard authentication and the same SSL encryption technology mentioned previously. At no point in the network path will data be unencrypted.

User Permissions

Create granular user permission settings to minimize the opportunity for error and keep a close eye on who has access to what.

Access Logs

Enjoy comprehensive access logs detailing date, time, and user, for every single action performed in your BioTrack system.

Hosting Options

We understand that every business is different and has unique needs, which is why we offer the option for your BioTrack system to utilize either a local server or a cloud server to host your business’ data. Keep a physical, on-site local server, or enjoy the industry-leading security standards of AWS cloud hosting. Not sure if your business is better off with a cloud server or a local server? Click Here.

Click here to learn more about our all-in-one seed-to-sale cannabis software for cultivators, processors, and dispensaries!

Government Traceability System’s Security

How does BioTrack currently store data?

BioTrack currently stores all of its Traceability System data in Tier 3 data centers; the highest tier available to non-government entities. Any system connected to a BioTrack state Traceability System, including those operating on the Core Commercial Software, benefit from the security features mentioned below. Some key features that award a Tier 3 to a data center are:

Meets all Tier I & II requirements in addition to:

  • Multiple independent distinct distribution paths serving the IT equipment critical loads
  • All IT equipment must be dual¬-powered provided with two redundant, distinct UPS feeders. Single corded IT devices must use a Point of Use Transfer Switch to allow the device to receive power from and select between the two UPS feeders.
  • Each and every critical capacity component, distribution path, and component of any critical system must be able to be fully compatible with the topology of a site’s architecture isolated for planned events (replacement, maintenance, or upgrade) while still providing N capacity to the critical loads.
  • Onsite energy production systems (such as engine generator systems) must not have runtime limitations at the site conditions and design load.

Utilizing Amazon Web Service’s Government Cloud, (AWS GovCloud), BioTrackTHC recently became the first company in the history of the cannabis industry to deploy a live seed-to-sale Traceability System in a FedRAMP authorized environment. This new level of data security, which extends beyond the common 3 tier ranking system, is exclusively reserved for vetted government-affiliated operations. Due to the successful deployment of Hawaii’s live seed-to-sale Traceability System into a FedRAMP authorized environment, BioTrackTHC is now in the unique position to be able to deploy new solutions to the FedRAMP authorized cloud faster than anyone in the industry.

Click here (Seed-To-Sale Software) to learn more about our government traceability solutions!

For current state systems interested in transitioning to the AWS GovCloud, please contact your BioTrackTHC state manager.

We are a proud member of the Minority Cannabis Business Association

"Having an experienced consultant come help train us on BioTrack was incredibly beneficial to our understanding of the software. There are so many pieces to BioTrack that we wouldn’t have been able to utilize otherwise. I’ve attempted to learn tracking software in the past, but they’ve ended in a mess. Deciding to have someone come out here to train us was a great decision because now we feel confident in our ability to functionally use BioTrack. Even if we do fall into a point of confusion, our onsite consultant is always quick to respond. I completely recommend having someone who knows BioTrack to train your team."
George, Advanced Grow Labs, CT