The most dependable setup for legal cannabis delivery in the US is a two-point check: a scanned government photo ID when the order is placed, plus a second ID check by the driver at the door. That combination wins on the four criteria that decide the question, which are whether it satisfies state age-21 rules, whether it survives the handoff, how long ID data is kept, and how much friction it adds to a purchase that a customer chose for convenience. The options below are compared against those criteria.
Is There an Age Limit for CBD Products? US Rules by State and Store
What US cannabis delivery rules require
Every state with legal retail cannabis sets a minimum age, and delivery does not get an exemption from it. Adult-use customers must be 21 or older. Medical patients can qualify at a lower age, and the exact cutoff plus caregiver rules differ by state, so a platform built for one market rarely drops into another without changes.
is there an age limit for cbd products
Regulators generally expect three things: a check when the order is placed, a check when the product changes hands, and a record showing both happened. The second check is where operators get into trouble, because the driver is standing on a porch with product and a customer who wants to get back inside.
Can a 19-Year-Old Buy Recreational Cannabis?
- Government-issued photo ID, not a loyalty account or a saved profile
- Verification at order intake and again at handoff
- Transaction records kept for audits, with limits on how ID images are stored
- A refusal and return procedure for the person at the door who fails the check
Option 1: ID scan at checkout
This is the baseline most dispensaries already run. The customer uploads or scans a driver's license or state ID, the platform matches the date of birth against the state minimum, and the order proceeds. It is cheap, it fits inside an existing point-of-sale flow, and it stops an underage order before a driver is dispatched.
cannabis online delivery age verification rules
Pros
- Low cost and easy to add to an existing checkout
- Blocks bad orders at the earliest point
- Produces a timestamped record that supports an audit
Cons
- Does not cover the proxy problem, where someone else answers the door
- Stored ID images create a data retention liability
- Fails on customers who use an expired or out-of-state ID
Use it when: you run adult-use delivery in one state with steady volume and your drivers already carry a handheld scanner for the handoff check.
Option 2: Third-party age verification API
A verification vendor takes the ID image, reads the barcode, runs a document authenticity check, and returns a pass or fail to your platform. Some add a selfie match to confirm the person holding the ID is the person on it. This is the heaviest option on the checkout side, and it produces the cleanest audit trail.
Pros
- Handles ID formats from many states without custom work
- Document and selfie matching catch borrowed and altered IDs
- Audit logs are exportable when a regulator asks
Cons
- Per-verification pricing adds up on high order volume
- False rejections push legitimate customers to call support
- You depend on a vendor's uptime during peak hours
Use it when: you operate in more than one state, or your customer base skews toward tourists and new users whose ID formats you cannot predict.
Option 3: Driver-side handheld ID scan at the door
The driver scans the recipient's ID at the moment of handoff, and the app either releases the order or flags it. This is the option that most directly satisfies the second-check requirement, and it is the one regulators look for when they audit a delivery.
Pros
- Covers the handoff, which is where underage delivery happens
- Stops the proxy problem because the recipient must be present
- Creates a location and time stamp for each delivery
Cons
- Hardware and driver training add cost
- Poor signal inside apartment buildings can stall the scan
- Drivers need a clear script for refusals that keeps them safe
Use it when: your delivery zone includes campuses, dense apartments, or any market where the person at the door often is not the account holder.
Option 4: Selfie and biometric age estimation
Some platforms estimate age from a selfie and use that as a first filter before asking for an ID. It is fast and it removes typing, but it is a screening layer, not a compliance answer, because most state delivery rules call for a government-issued ID at the handoff.
Pros
- Low friction on the checkout screen
- Useful for flagging accounts that need a manual review
- Cuts down on obviously invalid orders
Cons
- Biometric data is sensitive and draws privacy scrutiny
- Estimation error rates fall hardest on customers who look young
- Rarely accepted as the only check for delivery
Use it when: you want a speed bump ahead of ID capture, and your counsel has signed off on how the biometric data is stored and deleted.
How to choose your setup
- Start with the state rule, not the vendor. Confirm the minimum age, the handoff requirement, and the record retention window for each market you serve.
- Require a scan at checkout and a scan at the door. One check on its own leaves a gap that a regulator or a plaintiff can point to.
- Decide how long you keep ID images. Keep what the rule requires and delete the rest on a schedule.
- Write the refusal script before you launch. Drivers need to know what to say and what to do with the product.
- Test the flow on an expired ID and an out-of-state ID. Those two cases expose most broken checkouts.
Convenience and compliance are not in conflict here. A checkout that verifies ID in a few seconds and a driver who scans at the door both protect the license that makes same-day delivery possible in the first place.