Case Study · Hemp Ingredients & the Line a Certificate Can’t Cross

A bulk-CBD maker called High Desert — built to the wrong line, making a marijuana-grade stream it never tested, certain a certificate made it legal.

High Desert Botanical Extracts ran a competent paper quality system — pointed at the wrong boundary. Its GMP began “at the kettle,” so half the operation had no controls; its extraction concentrated THC past the legal line in a stream it never tested; and it treated a coming NSF registration as proof its CBD was a lawful ingredient. None of those three is what the firm believed it was.

High Desert GMPure CBD Isolate ≥99% bulk hemp ingredient fiber drum on a pallet in a GMP facility
The operation at the center of the file — a vertically integrated hemp ingredient maker selling bulk CBD isolate and distillate to supplement and topical brands.
Why we built this one

A file like this follows a pattern we know well. Not this company — High Desert, its people, its lot numbers are invented — but the pattern: a competent operator that built its quality system, its facility, and its lab around one quiet interpretation, and never tested whether the interpretation was right.

Facility design follows scope interpretation. The documents look fine until you ask one question — where does GMP begin? — and then a single wrong answer turns out to have built the whole upstream half of the plant to the wrong line.

So we built the case, because the lesson is worth more than the failed registration it usually arrives with.

— Regulatory Options
Read this if it sounds like your operation
  • Your GMP system begins at a processing step, with receipt, staging, or subdivision treated as “out of scope.”
  • Your process concentrates a regulated analyte — THC, an allergen, a potent active — with no in-process gate where it peaks.
  • Your in-house lab grades its own product and calls itself “17025-aligned” by self-attestation.
  • You treat a certification — NSF, organic, GMP — as proof of legal status.

If two or more are true, this case is describing your operation, not a stranger’s.

The file, as it arrived

Every record behind the case — dossier, CoAs, method file, lab manual, process study, the readiness application. Each one, read on its own, looks like a competent, careful operation.

A system like this fails on one interpretation, not one page. Open the file and read what you’d catch — then see what we found, just below.

What the records showed, together

No single page is alarming — read apart, each record is a competent paper system. Read together, the same evidence resolves into four threads, all turning on one quiet decision: where does GMP begin, and what does a certificate actually buy?

A facility built to the wrong line.

The whole quality system was scoped to begin “at the kettle” — so everything upstream of extraction was treated as out-of-scope agricultural handling, and built with no GMP at all.

GMP scoped to begin “at the kettle” — biomass receipt, staging, and subdivision classed as “agricultural handling,” but GMP applies from receipt and subdivision is a manufacturing step. · 21 CFR 111.20 / 111.155
Biomass received and held in an unconditioned pole barn and shipping containers — no temperature/RH control, no pest devices, no cleanable surfaces. · 21 CFR 111.15 / 111.20
Subdivision into extraction charges performed outdoors on a covered pad — exposed product during a manufacturing step. · 21 CFR 111.20(d) / 111.155(b)
GMP and non-GMP zones separated by floor markings only — no wall or air separation, no pressurization on the finishing area. · 21 CFR 111.20(b) / 111.20(d)

Hot hemp, purified to pass.

Biomass enters compliant, but extraction concentrates cannabinoids — so an intermediate crosses the federal THC line, in a stream the program never tests.

No in-process total-THC gate — biomass at ~0.28% becomes a distillate intermediate over 1% total THC, a marijuana article latent in the numbers. · 7 CFR 990 · 21 USC 802(16)
The recycle and mother-liquor — the most concentrated THC streams — are never tested, and their disposition is undocumented. · 21 CFR 111.260(j) / 111.460
Cleaning between the THC-bearing distillate campaign and the isolate campaign is visual-only — a carryover route into the “THC-free” isolate. · 21 CFR 111.27(d) / 111.35
The finished isolate is purified below detection, so the CoA reads “0.0%” — the non-compliant stream is real; the paperwork is clean. · 7 CFR 990 · 21 CFR 111.75(c)

A lab that can’t see the line it grades.

The total-THC determination every CoA rests on is computed three different wrong ways — before the process even concentrates the THC.

Total THC reported as Δ9 only, omitting the 0.877 × THCa decarboxylation factor — it under-reports THC at the gate that decides lawful-hemp status. · 7 CFR 990 total-THC
No measurement uncertainty and no decision rule on a 0.3% line — a 0.29% release can exceed 0.3% within uncertainty. · ISO 17025 §7.6 / §7.8.6
Reference standards have no metrological traceability — vendor ampoules, no CRM chain, no expiry — so every result is anchored to an uncontrolled standard. · ISO 17025 §6.5
The HPLC method was “verified” against a vendor app note, never validated, and the lab is “17025-aligned” by self-attestation, not accreditation. · USP <1225> · ISO 17025 §8

A real certificate mistaken for legality.

The most sophisticated catch: the NSF mark is genuine and valuable — and still isn’t a finding of federal lawfulness.

Federal status treated as resolved by the prospective NSF registration — but the mark is a private conformity standard, not a determination of federal lawfulness. · FD&C §201(ff)(3)(B) · FDA CBD position
CBD is precluded from dietary-ingredient status (approved as the drug Epidiolex), yet the spec and CoA assert “dietary ingredient” with no NDI or GRAS dossier. · FD&C §201(ff)(3)(B) / §413
No screen for Δ8-THC, THCP, or other intoxicating / synthesized cannabinoids — the blind spot the Δ9-only convention misses. · 7 CFR 990 · state intoxicating-hemp bans
The B2B sheet sent to the downstream customer carries potency and a single extraction-solvent figure but no full USP <467> residual-solvent panel — so the customer can’t establish its own incoming control; the defect propagates down-chain. · USP <467> · supply-chain reliance

Read apart, every document is a competent paper system — a validated-looking method, a clean isolate CoA, a quality manual, an NSF application. Read together, they describe a facility built to the wrong boundary, a process that makes a marijuana-grade intermediate it never tests, a lab that computes the lawful-hemp number three different wrong ways, and a real certificate mistaken for federal legality. The system isn’t sloppy — it’s competent, pointed at the wrong line. The isolate was purified until the CoA read 0.0%. The mark was treated as the law.

None of it needed a new test to see. It needed the right answer to one question — where does GMP begin? — and an honest read of what a certificate does and doesn’t buy, the things the whole system was built around.

What was at stake

What’s at stake

A failed registration, a marijuana-grade stream, and a federal gap no mark closes

The readiness audit can’t recommend the facility as built; an over-the-line intermediate flows uncontrolled; and even a legitimate NSF registration leaves a CBD-as-dietary-ingredient exposure FDA’s position doesn’t recognize.

What catches it first

Reset the boundary, gate the THC, size the gap

Re-scoping GMP to “from receipt” rebuilds the upstream half; an in-process total-THC gate catches the hot intermediate; and a clear-eyed read of the certificate names exactly what it covers — and the federal risk it doesn’t.

If this is your operation

You don’t need us to find out whether your operation has the same blind spot. Most of it you can check yourself, this week, with records you already have.

  1. Where does your GMP system begin — at receipt of components, or at the processing step?— and is every step before it really “out of scope”?
  2. Do you have an in-process gate where your regulated analyte concentrates?— or only a release test on the purified finished product?
  3. Is your lawful-status number computed and controlled correctly — total basis, traceable standards, a decision rule?— or anchored to a vendor ampoule and reported on the wrong basis?
  4. Do you know exactly what your certification does and doesn’t cover?— or are you treating a private mark as federal lawfulness?

Nothing here is built around this one company — each door points somewhere bigger, and no one of them is the “right” one. The case is just where they all meet.

A real certificate was never the same thing as federal lawfulness.

A constructed teaching case. High Desert Botanical Extracts, LLC, GMPure™, HempGuard / Green Meridian Botanicals, and all lots, people, document numbers, dates, and figures shown are invented — no real company, product, or client is depicted. Real regulatory frameworks and standards (FD&C Act, 21 CFR 111, 7 CFR 990, USP, ISO/IEC 17025, NSF/ANSI 173) are named by reference only; no certifier’s logo or mark is reproduced. The regulatory patterns and the analysis applied to them are genuine. Provided for illustration and education — general commentary, not legal advice. Viewing this page forms no attorney-client or consulting relationship.

© 2026 Regulatory OptionsCase · High Desert Botanical Extracts™