Trust & Security

Our Commitment

The Maine Cannabis Coalition built this Platform to bring transparency and trust to Maine's medical cannabis community. We are a compliance and directory service, not a marketplace. We do not sell cannabis, facilitate cannabis sales, or process payments between users and members.

Verified, Admin-Approved Listings

Every member listing is manually reviewed and approved by an MCC administrator before it appears publicly. No member, product, photo, or trust-sensitive content goes live until a human has verified it. When a member updates trust-sensitive information, the change is re-reviewed before it replaces the approved live version.

License Monitoring

We store and monitor required license and compliance dates, including OCP license expiration and, where applicable, kitchen license expiration. The Platform issues automated warnings as expirations approach. If a required license lapses and updated documentation has not been submitted and approved, the member is suspended from public visibility until compliance is restored.

Coalition Certification Signals

Our color-code system and verification badges, such as KWH verification and certification markers, are designed to help users distinguish local, verified operators from corporate and multi-state operations. These signals are applied based on submitted documentation and MCC review.

Moderated Reviews

Reviews are published only after moderation. Users must verify their email address to leave a review, may leave only one review per member, and may not review entities they control. Edited reviews return to moderation before going live. We remove abusive or fraudulent content.

Our Technology and Infrastructure

The Platform is built on a modern, security-focused technology stack using Next.js and React, and relies on established infrastructure providers that follow industry best practices.

• Authentication is managed through Clerk, a dedicated identity provider that handles sign-in, email verification, multi-factor authentication, and session management. Clerk maintains SOC 2 Type II compliance.
• Application data and file storage are managed through Convex, our backend and database provider. Convex maintains SOC 2 Type II compliance and handles real-time data, access control, and secure file storage.
• All connections to the Platform are secured with HTTPS/TLS, and data and uploaded files stored within our infrastructure are encrypted at rest by our providers.

Access Controls and Data Protection

• Role-based access control is enforced on the server side, so users only see and do what their role permits.
• Compliance documents, such as licenses and utility records, are used for verification and stored securely; they are not published publicly.
• Authentication credentials are handled by our identity provider and are never stored in plain text by us.
• API keys and secrets are stored as protected environment variables and are never exposed to the browser.

Payments and Platform Boundaries

Payments on the Platform are limited to fees owed directly to MCC, including memberships, sponsorships, and event listings. These are handled through established payment processors, and card statements appear under the descriptor "United Technologies."

• We do not sell or facilitate the sale or purchase of cannabis products.
• We do not operate a cart, checkout, or order system for cannabis.
• We do not process payments between users and members.
• We do not guarantee the accuracy of member-submitted information or the outcome of any communication between users and members.

Reporting a Concern

If you spot inaccurate information, suspicious activity, or a security issue, contact us at info@mainecannabiscoalition.com. We take reports seriously and review them promptly.

Maine Cannabis Coalition Foundation (dba United Technologies) 26 Robert St, Winslow, ME 04901 info@mainecannabiscoalition.com