Malta was the first EU country to legalise cannabis social clubs. That pioneering step came with a genuinely specific compliance framework — and most associations have been managing it without software built for it.
Book a call with our teamWhen Malta's Responsible Use of Cannabis Act came into force in 2021 — making Malta the first EU country to legalise non-profit cannabis associations — there were no dedicated software tools built around the ARUC licensing framework. Associations improvised: spreadsheets, paper logs, general membership tools repurposed for a use case they were not designed for.
With approximately 19 associations now licensed by the Authority for the Responsible Use of Cannabis (ARUC), this is a small, defined market. Every association knows the specific compliance requirements — but knowing them and enforcing them reliably at the point of distribution are different things.
The following are the key operational requirements for licensed Cannabis Harm Reduction Associations (CHRAs) under Malta's framework:
Malta's CHRA framework has a requirement that distinguishes it from most other European cannabis association models: membership is restricted to Malta residents. Tourists and short-stay visitors cannot join. Verifying residence — not just age — must happen at signup using a government-issued document showing a Malta address.
This is not a checkbox. It is a compliance step that requires capturing, storing, and being able to demonstrate a document-level audit trail. If a member's address changes or a document expires, that chain must remain intact.
WeedPOS supports ID document capture and storage at the point of member registration. Staff can scan or photograph the document, attach it to the member record, and record the document type and issuing country. The record is encrypted and access-controlled by staff role.
Document scans are subject to GDPR's data minimisation principle — they should be held only as long as legally required and then deleted. WeedPOS includes automatic document deletion scheduling, so you define the retention period and the system handles deletion without manual tracking.
WeedPOS logs every distribution against the member record and checks the daily (7 g) and monthly (50 g) limits before completing the transaction. A distribution that would exceed a limit is flagged before it is recorded — not flagged in a report after the fact.
Every distribution, member verification step, and record change is logged with a timestamp and staff attribution. Corrections are recorded as corrections — the original entry is preserved. If ARUC requests distribution records for an inspection, you can export a complete, structured log.
Malta has roughly 19 licensed associations. That is not a market that benefits from generic EU-wide support documentation and a ticket queue. It is a market where a new association benefits from talking directly to someone who has already worked through Malta's specific licensing requirements and knows what the ARUC framework asks of an operator's software setup.
As a founding association on WeedPOS, your onboarding is a live session — not a walkthrough video. We configure your membership structure, supply limit rules, document verification workflow, and staff accounts alongside you. You go live with a system already calibrated to ARUC's requirements, not one you need to reverse-engineer from generic settings.
CHRAs that join WeedPOS during our launch phase are eligible for the Founding Club Program: your subscription rate is locked permanently at whatever plan you start on, with no annual increases. For an association managing operational costs within a non-profit budget, predictable software costs matter.
See the full pricing at weedpos.xyz/#pricing — no sales call required to see the numbers.
For a market the size of Malta's, a direct conversation is more useful than a signup form. If you manage a licensed CHRA and want to understand how WeedPOS maps to ARUC's framework, we would like to hear from you.
Book a call Start a free trial instead