Created to provide helpful information about the Iowa cannabis industry


Please note; while we aim to keep these pages fully up to date with the latest information, cannabis laws are always changing. We encourage you to verify these rules and regulations in the official legal text, which we’ve linked throughout the page for your convenience.

For compliance requirements related to cannabis seed to sale tracking and reporting for growers, manufacturers, and dispensaries in Iowa, click here!

Click here for program webpage

Iowa Cannabis Business Security Requirements

*Please note that this section encompasses only the compliance requirements relevant to business security. Many parts of the rules and regulation shave been removed to focus exclusively on the security compliance aspects. To view the full set of rules and regulations for Iowa, click here!

Iowa Business Security Requirements for Cannabis Licensees

You can view the program webpage here.

641—154.18(124E) Security requirements.

The department may request assistance from the department of public safety in ensuring manufacturers meet the security requirements in this rule.

154.18(1) Visitor Logs. Visitors to the manufacturing facility shall sign visitor manifests with name, date, and times of entry and exit, and shall wear badges that are visible at all times and that identify them as visitors.

154.18(2) Restricted access. A manufacturer shall use a controlled access system and written manifests to limit entrance to all restricted access areas of its manufacturing facility and shall retain a record of all persons who entered the restricted access areas.

  1. The controlled access system shall do all of the following:
  • Limit access to authorized individuals;
  • Maintain a log of individuals with approved access, including dates of approvals and revocations;
  • Track times of personnel entry to and exit from the facility;
  • Store data for retrieval for a minimum of one year; and
  • Limit access to authorized individuals in the event of a power failure.

      2. Separate written manifests of visitors to restricted access areas shall be kept and stored for a minimum of one year if the controlled access system does not include electronic records of visitors to the restricted access areas.

3. A manufacturer shall promptly, but no later than five business days after receipt of a request, submit stored controlled access system data to the department.

4. Restricted access areas shall be identified with signs that state: “Do Not Enter – Restricted Access Area – Access Limited to Authorized Personnel Only.”

154.18(3) Perimeter intrusion detection system.

  1. Computer-controlled video surveillance system. A manufacturer shall operate and maintain in good working order a computer-controlled, closed-circuit television surveillance system on its premises that operates 24 hours per day, seven days a week, and visually records:
  • All phases of medical cannabidiol production;
  • All areas that might contain plant material and medical cannabidiol, including all safes and vaults;
  • All points of entry and exit;
  • The entrance to the video surveillance control room; and
  • Parking areas, which shall have appropriate lighting for the normal conditions of the area under surveillance.

2. Camera specifications. Cameras shall:

  • Capture clear and certain identification of any person entering or exiting a manufacturing facility or its parking areas to the extent identification is technologically feasible with generally accepted commercial security cameras;
  • Have the ability to produce a clear, color still photograph live or from a recording;
  • Have on all recordings an embedded date-and-time stamp that is synchronized to the recording and does not obscure the picture; and
  • Continue to operate during a power outage.

3. Video recording specifications.

  • A video recording shall export still images in an industry standard image format, such as .jpg, .bmp, or .gif.
  • Exported video shall be archived in a format that ensures authentication and guarantees that the recorded image has not been altered.
  • Exported video shall also be saved in an industry standard file format that can be played on a standard computer operating system.
  • All recordings shall be erased or destroyed at the end of the retention period and prior to disposal of any storage medium.

4. Additional requirements. A manufacturer shall maintain all security system equipment and recordings in a secure location to prevent theft, loss, destruction, corruption, and alterations.

5. Retention. A manufacturer shall ensure that recordings from all video cameras are:

  • Available for viewing by the department upon request;
  • Retained for at least 60 days;
  • Maintained free of alteration or corruption; and
  • Retained longer, as needed, if a manufacturer is given actual notice of a pending criminal, civil, or administrative investigation, or other legal proceedings for which the recording may contain relevant information.

6. Required signage. A manufacturer shall post a sign in capital letters in a conspicuous location at every entrance to the manufacturing facility that reads, “THESE PREMISES ARE UNDER CONSTANT VIDEO SURVEILLANCE.”

154.18(4) Security alarm system requirements.

  1. A manufacturer shall install and maintain a professionally monitored security alarm system that provides intrusion and fire detection of all:
  • Facility entrances and exits;
  • Rooms with exterior windows;
  • Rooms with exterior walls;
  • Roof hatches;
  • Skylights; and
  • Storage rooms.

2. For the purposes of this subrule, a security alarm system means a device or series of devices that summons law enforcement personnel during, or as a result of, an alarm condition. Devices may include:

  • Hardwired systems and systems interconnected with a radio frequency method such as cellular or private radio signals that emit or transmit a remote or local audio, visual, or electronic signal;
  • Motion detectors;
  • Pressure switches;
  • A duress alarm;
  • A panic alarm;
  • A holdup alarm;
  • An automatic voice dialer; and
  • A failure notification system that provides audio, text, or visual notification of any failure in the surveillance system.

3. A manufacturers security alarm system and all devices shall continue to operate during a power outage.

4. A manufacturer’s security alarm system shall be inspected and all devices tested annually by a qualified alarm vendor. A manufacturer shall provide documentation of the annual inspection and device testing to the department upon request.

154.18(5) Personnel identification system. A manufacturer shall use a personal identification system that controls and monitors individual employee access to restricted access areas within the manufacturing facility and that meets the requirements of this subrule and subrule 154.18(1).

  1. The requirement for an employee identification card. An employee identification card shall contain:
  • The name of the employee;
  • The date of issuance and expiration;
  • An alphanumeric identification number that is unique to the employee; and
  • A photographic image of the employee.

2. A manufacturer’s employee shall keep the identification card visible at all times when the employee is in a manufacturing facility, a dispensary, or a vehicle transporting medical cannabidiol.

3. Upon termination or resignation of an employee, a manufacturer shall immediately:

  • Revoke the employee’s access to the manufacturing facility; and
  • Obtain and destroy the employee’s identification card, if possible.

Iowa is still in the process of finalizing all rules and regulations pertaining to medical marijuana. If you have any questions pertaining to the application process for Iowa or security requirements feel free to reach out to us by clicking here.


Why Choose Helix Cannabis Security?

Focused on Safety, Security, and Compliance


Our top priority is making sure your staff, your business, and your investment, are safe and secure. We provide cost-effective solutions to satisfy every    compliance requirement in your state as well as end-to-end expert security consultation, and of course, development and implementation of services.

Helix Dispensary Security Services


Maintain full compliance with your state and local cannabis business security requirements through Helix’s full-service security firm. Our team of cannabis security experts have implemented compliance-centric security frameworks in dozens of legal cannabis markets for grow warehouses, manufacturing facilities, laboratories and dispensaries.


360 Security Systems

From cameras and remote monitoring services to alarm systems and rapid response, Helix Digital Security Systems can address all of your security needs and beyond. Cover every square inch of your facility with comprehensive security camera systems, ensuring 24/7 visibility, DVR capabilities, and more.


Security Training

Your staff isn’t expected to stop criminals in action, but ensuring your staff is trained on security best practices can provide essential steps in de-escalation, situational control, and threat identification to allow team members to resolve a situation before it arises.

Want to learn more about Helix Security’s comprehensive services and expertise?

Remote, Eyes-On Monitoring


The most-cost effective approach to 24/7 active monitoring of your legal cannabis business.

Remote monitoring provides live, eyes-on guards monitoring your business security camera systems 24 hours a day, 7 days a week. Our guards will activate timely response times and ensure your business is secure, especially when you can’t be there.

At Helix Cannabis Security, we consider it a cannabis security best practice to have guards on-site at your facility at all times that people are present. If people are not present on the premise, there’s no need to risk the safety of a security guard. Remote monitoring provides the same, high-level attention and security, without risking a guards life, or incurring unnecessary costs.

Click to learn more.

Receive Our Pricing Guide