The hardest vertical in digital.Exactly why it pays to serve well.

Google tightened its rules again in January 2026. Per Google's own Update to Cannabis-Related Content Policy, the platform still largely prohibits promoting THC-containing cannabis products to U.S. consumers, with narrow exceptions carved out for hemp-derived CBD. Topical CBD ads are allowed only where THC content is 0.3% or lower, and only with rigorous compliance documentation: proof of a secure supply chain and a third-party Certificate of Analysis on file before the campaign runs. Google's separate Recreational drugs policy covers the plant-touching side directly, and pharmaceutical CBD advertisers face their own approval process limited to California, Colorado, and Puerto Rico.

Google is also piloting a narrow Search-only cannabis program in Canada, running from August 2025 through the end of 2026, explicitly framed as a test to inform future U.S. policy rather than a signal that broader access is coming soon. None of this is enforced loosely. Google uses machine-learning classifiers paired with human reviewers, and trigger words like THC, flower, or pre-roll, or even ordinary calls to action like "order online," can trip a disapproval on a dispensary's account within minutes. An agency running paid search for a cannabis client without knowing this in detail is one campaign away from an account-level suspension it did not see coming.

Meta is more restrictive still. Per Meta's own Drugs and Pharmaceuticals policy, ads promoting THC or any psychoactive cannabis product are banned outright, full stop, across Facebook, Instagram, and every other Meta surface. The one narrow exception is CBD topicals that hold active LegitScript certification, and even those require prior written permission from Meta, targeting locked to the United States, and an 18+ audience floor. Brands that try to route around this with coded language or suggestive imagery risk a permanent account ban, not a warning.

• SEO and local search are the workhorses: they are not gated by ad-platform cannabis bans, so organic visibility and a well-maintained Google Business Profile carry disproportionate weight for a dispensary competing on foot traffic.
• Programmatic display and OTT/CTV reach cannabis-legal audiences through cannabis-friendly exchanges and inventory the walled gardens will not touch, which is where real reach lives once Google and Meta are off the table for plant-touching brands.
• Narrow, compliant paid social and search exist for CBD and ancillary brands under LegitScript certification and Google's stricter documentation requirements, and only a partner who tracks both policies in real time should be running them.

Every engagement starts the same way regardless of vertical: GTM, GA4, and Conversion Clarity configured and verified before anything launches, so a dispensary's foot traffic, menu clicks, and inbound calls attribute back to the specific channel that produced them. That foundation matters more in cannabis than almost anywhere else, because half the usual attribution toolkit, pixel-based ad platform reporting, is simply unavailable for plant-touching clients. GPS is what replaces it: a clean read on what is actually working, built from first-party data your agency and your client both control.

From there the channel mix leans on what cannabis actually allows rather than what a generic media plan defaults to: technical and local SEO, Google Business Profile optimization tuned for suspension risk, content built to rank for high-intent local queries, and programmatic or OTT flights where paid social and search cannot go. Because the rules differ meaningfully for plant-touching businesses versus CBD versus purely ancillary services (packaging, consulting, equipment), each client gets scoped to the strictest standard that applies to their specific category, and that scoping decision gets written down.

The most frequent mistake is treating cannabis like any other local vertical and pointing standard paid search and social budgets at it, only to watch the account get suspended within days because a trigger word or a coded call-to-action tripped an automated review. The second mistake is under-investing in Google Business Profile, arguably the single highest-leverage asset a dispensary has, because it looks like a small task sitting next to a media plan that feels more impressive on a proposal. The third is silence: failing to document why a channel was excluded from the plan, which leaves the agency with no answer when a client reasonably asks where the rest of the budget went.

Avoiding all three comes down to the same discipline that runs through every Conduit engagement, in cannabis and elsewhere: scope the channel mix to what the category and the state actually allow, put the GPS tracking foundation in place before anything launches, and write down the reasoning so it survives a client's scrutiny six months later.

The discipline cannabis demands, scoping every channel to what is actually allowed, documenting the reasoning, and building tracking before spend moves, is the same discipline Conduit applies to every regulated or restricted vertical it serves for its hundreds of partner agencies. An agency that trusts a partner to get cannabis right is usually, correctly, trusting the same partner with CBD, financial services, or any other client where the easy answer is not always the compliant one.

Choosing a fulfillment partner for cannabis work is really choosing how much risk your agency is willing to absorb without visibility into it. A generalist vendor asked to run cannabis campaigns will either quietly reach for tactics that violate platform policy, private link networks, misclassified paid campaigns that get accounts flagged, or it will simply underperform because it does not know where the real inventory and the real opportunity sit in this category. A partner who has already mapped the compliant channels, already knows which programmatic exchanges accept cannabis-adjacent inventory, and already has reporting built to prove attribution without paid social data removes that risk before it becomes your agency's problem to explain to a client.

None of this is theoretical for Conduit. The team runs cannabis SEO and content today, which is exactly why the guides published on cannabis marketing already hold page-one positions for competitive terms in the category, proof the underlying playbook works before your agency ever hands over a client relationship built on it. If your agency is weighing whether this is worth bringing in-house at all, the same build-versus-buy math that applies to every other channel applies here, with one difference: the compliance learning curve in cannabis is steeper, and the cost of getting it wrong is an account suspension, not just a slow month.