← Back to all posts

Talk to operators outside New York about GMP and you'll usually hear the same thing: "We're basically already doing that." Then you walk the floor, pull a batch record, and ask where the deviation log is.

That gap — between what operators believe they're doing and what a real Good Manufacturing Practice system requires — is one of the most consistent things I've seen across every market I've worked in. It's not a knowledge problem. It's a records problem, and records are expensive in a way most P&Ls haven't planned for.

GMP isn't a checklist. It's a paper trail with a heartbeat.

Most operators think of GMP as a set of physical standards: clean rooms, PPE, pest control, sanitation logs. Those matter, but they're the easy part. The part that actually breaks people is the documentation infrastructure underneath it — batch records that trace every input to every output, deviation reports that get filed and investigated, corrective action logs that get closed out instead of forgotten, training records that prove a person was qualified to do the task they did six months ago when a product later fails testing.

New York operators have had to build this muscle because the regulatory framework demanded it early. Most other state markets didn't, because their programs didn't require it — until the market matures, an audit shows up, or a wholesale buyer with pharma-adjacent standards starts asking questions. By then, you're not implementing GMP. You're retrofitting it under pressure, which is the most expensive way to do it.

The overhead nobody budgets for

Here's the part that surprises operators every time: GMP isn't primarily a capital expense. It's a headcount and time expense. Someone has to own quality full-time. Someone has to review every batch record before it closes. Someone has to maintain a document control system so the SOP on the floor is actually the current version, not the one from eight months ago that got hand-edited in Sharpie.

That's payroll, not equipment. And it's payroll that doesn't touch a single gram of product — which makes it very easy to deprioritize until the day it isn't optional anymore.

A GMP system doesn't fail because the SOPs were wrong. It fails because nobody had the bandwidth to actually follow them.

This is where the Old Guard standard for a sound recommendation matters: any GMP buildout has to be financially responsible and executable by the available team, not just scientifically correct. I've watched operators try to bolt a pharma-grade quality system onto a team that was never resourced to run one.

Where to start if you're behind

You don't fix this by writing 200 SOPs in a month. You fix it the way you'd diagnose any operational gap — trace it back to root cause before you start prescribing solutions:

  • Map your actual batch flow first. Most operators don't have a single document that traces material from intake to finished, packaged product. Build that map before you build anything else.
  • Find out where your records already break down. Pull five real batch records at random. If you can't reconstruct exactly what happened — inputs, personnel, deviations, corrective actions — that's your starting point, not the areas you assume are weak.
  • Assign ownership before you assign paperwork. A quality system with no accountable owner turns into a folder nobody opens. Decide who owns it before you decide what it says.
  • Build for the audit you'll actually face, not the one you imagine. A single-state, non-GMP-certified operation doesn't need a pharmaceutical-grade validation package. It needs a system it can actually sustain and defend.

The standard is coming whether or not the paperwork is ready

Markets mature. Buyers get pickier. Testing labs get sharper. Whatever the regulatory timeline ends up being, the operators who treat GMP as a real operating discipline now — not a binder they build the week before an audit — are the ones who won't be scrambling when the standard catches up to them.

That's not a compliance opinion. It's an operations one.


Not sure where your records would hold up?

Old Guard helps operators build quality and compliance systems sized to what the team can actually sustain — not what looks good in a binder.

Start a conversation