BioCompliance Advisory
Pharmaceutical-grade crop compliance consulting — certification to independence, for pharmaceutical and pharmaceutical-cannabis cultivation and manufacturing facilities.
Certification to independence: audits, quality systems, training, and regulatory intelligence — one integrated engagement.
A division of Hydrofarm Holdings Group · NASDAQ: HYFM
One integrated service: get certified, stay certified.
BioCompliance Advisory is a regulatory advisory and consulting firm for pharmaceutical and pharmaceutical-cannabis cultivation and manufacturing facilities. We don't sell a menu of disconnected services — we sell one outcome, delivered through four coordinated lines of work.
Audits & Certification Readiness
Pre-audits, gap assessments, formal audit reports against GACP, EU-GMP, CUMCS, and DTAM-GACP.
Quality Systems
SOPs, master quality plans, batch records, floor plans, training records — the QMS documentation a facility needs.
Personnel Training
Mock audit interviews, SOP walkthroughs, comprehension checks — building the client's own team capability.
Regulatory Intelligence
Tracking Ph. Eur., ICH Q9(R1)/Q10, EU-GMP Annex 11, CanG/MedCanG, Thai reclassifications — ongoing advisory.
Most compliance consultants deliver documents and leave.
BioCompliance delivers a certified facility and a trained internal Quality Assurance Team — the structure that sustains certification after the engagement closes.
This is not a service modification. It is the business model.
A document set, a departure, and a facility hoping the next surveillance audit goes as well as the first.
A certified facility and an internal QAT that can pass that next audit without us in the room.
Why we exist, and where we're taking the industry.
Mission
To help pharmaceutical-grade crop producers worldwide achieve, maintain, and leverage international regulatory certification — building the internal quality infrastructure, trained teams, and institutional knowledge that turn compliance into a permanent competitive advantage.
Vision
A world in which every licensed medicinal cannabis facility — regardless of geography — operates to the same rigorous quality standard that protects patients, enables cross-border trade, and builds a sustainable industry. BioCompliance exists to close the gap between that standard and current operational reality.
How we operate, every engagement.
Technical Precision
No shortcuts on documentation, no inflated audit-readiness scores — precision over commercial convenience.
Peer-Level Engagement
Clients are technical operators, not buyers of a commodity service. We engage as equals.
Transfer of Capability
Every engagement ends with the client team owning their own quality system — not dependent on us.
Regulatory Candour
If a facility is not ready, BioCompliance says so before the audit, not after.
Every major standard a regulated facility needs.
GACP — WHO/EMA 2024 · Cultivation
Global primary standard for cultivation and primary processing.
EU-GMP Annex 7
Herbal Medicinal Products — manufacturing and API processing.
CUMCS G.A.P. V5.1 — Control Union
21-section audit framework; de facto export credential for Thai-origin cannabis.
DTAM-GACP — Thailand
Ministerial Notifications B.E. 2568 — full domestic licensing pathway.
Plus: any other regulated-facility standard — food, cosmetics, medical device — via a facility-agnostic, cross-standard readiness matrix. Not limited to cannabis or pharma.
From first walk-through to certification support.
Pre-Audit
Read the client's own QMS documents, cross-reference against the standard.
NCF Log
Prioritized findings — Critical / Major / Minor.
CAPA
Corrective action per finding, with owner and deadline.
Remediation
Tracked to close.
Audit & Support
Formal audit report, re-check, certification support.
Billing is milestone-based, tied to programme stages — not flat invoicing.
The moat is a single, rare combination of expertise.
Deep cultivation knowledge fused with mastery of the full international pharmaceutical crop standard stack. No other consultant in this market offers both.
Regulatory Standards
EU-GMP Annex 7 · WHO/EMA GACP · CUMCS V5.1 · Thai GACP (DTAM) · SGS GACP · PIC/S · Ph. Eur. 3028
Cultivation Systems
Indoor · Greenhouse · Outdoor · Coco · Rockwool · Hydro · Aeroponic · VPD/HVAC validation
QMS Experience
SOP libraries · CAPA · Batch records · IQ/OQ/PQ · PQR · Staff training · Digital compliance (MS 365)
Genetics Documentation
8 jurisdictions: Thailand · Colombia · Germany · Australia · Israel · Canada · UK · Switzerland
Postgraduate Diploma — Pharmaceutical Quality Systems
IL3–Universitat de Barcelona · 30 ECTS · Nov 2026 – Jun 2027. GMP/GLP/GCP, ICH Q8–Q11, data integrity, CAPA, validations, and supplier audits — expertise brought directly back into every client engagement.
Five client situations, five entry points.
The Export-Ready Grower
Licensed cultivation, strong agronomy, zero compliance infrastructure — cannot legally export without a GACP certificate.
The Certification-Failed
Attempted GACP/GMP and failed. Open NCF register, no remediation plan, a lost contract on the line.
The Scale-Up
Domestic certification in hand, chasing EU premium markets — needs CUMCS or EU-GMP equivalence.
The Supply-Chain Auditor
An importer obligated to verify overseas supplier quality, with no in-country technical capability of its own.
The First-Time Builder
New facility in design or early construction — compliance not yet designed into the build.
A structural gap is driving demand.
Importing markets are converging on certification as a condition of market access, while producing-country certification rates remain in the low single digits. Germany's MedCanG, Australia's July 2023 GACP-to-GMP mandate, and the UK's NHS expansion have triggered a first-certification wave among producers in Thailand, Colombia, and Israel.
Source: DTAM licence register; BfArM import statistics, 2025.
Differentiation that's hard to replicate.
- Cultivation + compliance in one person — identifies agronomic-origin findings no pure regulator sees.
- Dual-standard efficiency — CUMCS/Thai GACP overlap methodology cuts client effort by ~40%.
- QAT build as the exit deliverable — surveillance audits pass because the internal team was built to pass them.
- Asia/Thailand depth — one of very few firms in the field treating Thailand as a primary market rather than an afterthought.
Independently operated. Built on Hydrofarm's 50+ years of expertise.
A Division of Hydrofarm
BioCompliance Advisory is an independently operated division of Hydrofarm, founded and led by Pato Stein and built on the cultivation-equipment and horticultural expertise Hydrofarm has developed over more than 50 years.
- Validation-ready equipment documentation — Hydrofarm-sourced systems arrive IQ/OQ/PQ-ready, cutting qualification timelines.
- Deep agronomic pedigree — five decades of horticultural science behind every finding, not just a document review.
- Operates under Hydrofarm corporate governance, with a dedicated and independent management team.
- Founder-led, with direct access to the Hydrofarm technical and commercial network.
How We Contract
- Milestone-based client contracts, tied to programme stages — not flat invoicing.
- Explicit, written deliverable definitions per stage — no ambiguity about what's owed and when.
- IP ownership: custom deliverables transfer to the client on full payment; BioCompliance retains its methodology IP.
- Professional indemnity and public liability insurance in place from Day 1 of every engagement.
Compliance that outlasts the engagement.
BioCompliance builds certified facilities and the internal teams that keep them certified — evidence-based, standard-cited, and designed to make itself unnecessary at the facility level.
BioCompliance Advisory, a division of Hydrofarm Holdings Group (NASDAQ: HYFM).