← Back to the blog

LegitScript Certification for Cannabis Brands

7 August 2026

CBD and cannabis brands that try to run paid ads on Google or Meta usually hit the same wall: the account gets disapproved before a single click lands. LegitScript certification is the mechanism that quietly decides who gets past that wall. If you sell hemp-derived CBD in the US and want compliant reach on the major ad platforms, LegitScript certification for cannabis and CBD products is less a nice-to-have and more the entry ticket.

But the program is narrower than many founders assume. It does not cover every cannabis company, and it is tied specifically to US law. This article explains what LegitScript actually certifies, which businesses it fits, and what the process and cost look like in practice.

What LegitScript certification actually is

LegitScript is a third-party certification and monitoring company. It vets merchants and products in high-risk, tightly regulated categories, then signals to partners (search engines, social platforms, payment processors) that a business operates within the law. Alongside CBD, it runs certification programs for healthcare and addiction-treatment providers.

For our industry, the relevant program is LegitScript CBD certification. It confirms that a product, and the website selling it, comply with applicable US federal and state rules for hemp-derived CBD. Google and Meta both lean on this certification in their own CBD ad policies, which is why it carries weight far beyond a simple trust badge.

Which cannabis companies LegitScript is for

The short version: it is built for compliant, hemp-derived CBD, not for THC or marijuana.

A business tends to be a good fit if it:

• sells finished CBD products derived from hemp containing less than 0.3% THC,
• markets primarily to US customers,
• can document its supply chain, lab testing, and labeling.

It is not a fit if it sells marijuana or delta-9 THC products, or hemp-derived intoxicants such as delta-8 THC. LegitScript treats these as ineligible, largely because marijuana remains a Schedule I controlled substance at the US federal level. Recreational and medical cannabis operators in legal US states, and licensed producers in Canada, therefore fall outside this specific program, even though their businesses are legal locally.

Is LegitScript required for CBD ads?

For Google and Meta, effectively yes, if you want to advertise CBD directly. Both platforms require LegitScript certification as a precondition for eligible CBD advertisers in the US. Under the current requirements, you generally need two things certified: the website and every CBD product promoted on it. Certifying the domain but leaving products uncertified is a common reason approvals stall.

A few practical notes on LegitScript Google Ads CBD and LegitScript Meta certification:

• Certification is a gate, not a guarantee. You still have to follow each platform's ad content rules.
• Coverage is limited to eligible product types and to specific countries or states.
• Platform policies change often, so treat any list of "allowed" formats as a snapshot, not a permanent rule.

How to get LegitScript certified, and what it costs

Getting certified follows a set path: create an account, pay the application review fee, complete a detailed questionnaire, and submit documentation. Expect to provide a certificate of analysis, GMP evidence, an ingredient list, and samples for third-party lab testing. Certification then comes with ongoing monitoring, which is a requirement, not an optional extra.

On cost, LegitScript publishes per-product and per-website pricing in US dollars. As a rough picture at the time of writing: CBD product certification runs from about $500 to $650 per product for the application, plus roughly $750 to $1,000 per product in annual monitoring, with lower per-unit rates as volume rises. Website certification is around $800 for the application and $1,600 per year. These figures change, and promotional discounts appear periodically, so confirm current pricing directly before you build a budget.

What this means outside the US

LegitScript CBD certification is a US-anchored program. If your market is the EU, UK, Switzerland, or Canada, it will not be the lever that unlocks local advertising. Those regions run their own rules: national CBD and novel-food regulations across the EU, separate advertising standards in the UK, a distinct cannabis framework in Switzerland, and Health Canada's regime for licensed cannabis in Canada. Plan platform and compliance strategy market by market rather than assuming one certification travels across borders. These rules also shift regularly, so this reflects the current landscape rather than fixed law.

Conclusion

LegitScript certification is not a badge for every cannabis company. It is a focused, US-facing gate for compliant hemp-derived CBD brands that want to advertise on Google and Meta and reassure payment partners. If that describes you, treat it as core infrastructure and budget for both the fee and the ongoing monitoring. If it does not, your compliance path runs through your own market's rules instead. Know which side of that line your brand sits on before you spend a single dollar chasing reach.