Sovereign Nations. Different Laws. One Complicated Payments System.
Sovereign Nations. Different Laws. One Complicated Payments System. On Indigenous Peoples' Day, it's time to examine why tribal gaming, ...
For decades, regulated-product compliance has largely operated in a world of documents.
PDFs.
Images.
Labels.
Certificates of Analysis.
Laboratory reports.
Ingredient lists.
Licenses.
Packaging.
Testing records.
Manufacturer documents.
Emails.
Spreadsheets.
Folders.
Shared drives.
Merchant portals.
And somewhere inside all of that information exists the answer to a very simple question:
Is this product compliant with the rules and policies that apply to it?
The problem is that the information needed to answer that question is rarely structured in a way that allows the ecosystem to answer it efficiently.
Instead, we keep asking people to open documents, inspect websites, review labels, interpret test results, compare requirements, record findings and repeat the process whenever something changes.
That made sense when there was no alternative.
It makes far less sense today.
Because modern technology gives us the ability to turn virtually every meaningful characteristic of a product into structured digital intelligence.
And if we do that, the implications extend far beyond faster underwriting.
It could fundamentally change how regulated commerce is managed.
Consider how a typical regulated product is reviewed today.
A merchant may provide:
An analyst reviews those materials.
A decision is made.
The documents are saved.
The merchant is approved.
At that moment, the organization may have a reasonably good understanding of the product.
But then something important happens.
The intelligence disappears back into the documents.
The COA becomes a PDF.
The label becomes an image.
The ingredient list remains text on a website.
The analyst's reasoning becomes a note.
The product-to-policy relationship lives inside someone's interpretation.
The compliance determination becomes:
Approved.
And six months later, when a rule changes, much of that work has to be reconstructed.
Imagine that instead of simply storing the documents, every relevant piece of information becomes part of a persistent digital product record.
The product has its own compliance identity.
That identity might contain:
Product Identity
Composition
Evidence
Marketing
Commerce
Compliance
Now we're no longer looking at a folder full of evidence.
We're looking at a digital representation of the product.
That distinction changes everything.
Suppose a government agency changes the permissible threshold for a particular compound.
Under today's operating model, the organization first has to determine:
Which merchants might sell affected products?
Which products are affected?
Where are the lab reports?
Which reports are still current?
What do the test results say?
Do we need to perform calculations?
Does the product still comply?
Then analysts begin reviewing.
Websites.
PDFs.
Spreadsheets.
Merchant files.
Emails.
The regulation changed once.
But the operational consequence could involve reviewing thousands of products individually.
That is why product-level regulatory changes can become enormously expensive.
Now imagine the same regulatory change in a digitized environment.
The new requirement is translated into structured criteria.
The system asks:
Show me every product containing Compound X above Threshold Y.
The result appears.
Then:
Show me the merchants selling those products.
Then:
Show me which products have valid supporting evidence.
Then:
Show me which ones violate the new requirement.
Then:
Show me which merchants require remediation.
Potentially within minutes, the organization has identified the affected population.
Humans still need to make decisions.
Policy still needs interpretation.
Exceptions still need review.
Merchants may still need to remediate.
But the discovery problem has changed dramatically.
The rule changed. The data answered.
That's the difference.
This may be the biggest operational advantage.
Today, many organizations respond to regulatory change by launching another audit.
In a fully digitized product environment, the starting point changes.
Instead of asking:
“Who do we need to review?”
you ask:
“Which existing product records intersect with the new rule?”
That's an entirely different operating model.
It moves compliance from:
Audit → Document → Interpret → Decide
toward:
Query → Identify → Evaluate → Remediate
The human work becomes concentrated around exceptions rather than rediscovery.
This is the concept I believe matters most.
We already create persistent digital identities around many things.
People.
Businesses.
Bank accounts.
Transactions.
Devices.
Merchants.
Why not products?
For regulated commerce, a product can arguably be just as important as the merchant selling it.
A digital product identity could continuously evolve as new information becomes available.
A new COA?
Attach it to the product.
New batch?
Update the record.
New ingredient?
Change the product profile.
New label?
Compare it against the previous one.
New regulation?
Re-evaluate the product.
New bank policy?
Re-evaluate again.
New merchant begins selling the same product?
The intelligence doesn't necessarily have to start from zero.
That's where the value becomes exponential.
The same product can exist across:
A manufacturer.
A distributor.
A wholesale merchant.
A retailer.
A marketplace.
Several payment processors.
Multiple acquiring banks.
Different sponsor banks.
Every one of them may separately ask for:
The same COA.
The same ingredients.
The same laboratory report.
The same label.
The same manufacturing information.
Then each organization may pay someone to review essentially the same evidence independently.
That's extraordinarily inefficient.
A digitized ecosystem creates the possibility of something much different:
Verify once. Reuse intelligently. Monitor continuously.
That doesn't mean every party blindly trusts every other party's determination.
Each organization still has its own policies and obligations.
But the underlying facts about the product don't need to be rediscovered every time.
The same laboratory result can be evaluated against multiple policies.
That's the important distinction.
This is where a digitized model becomes particularly powerful.
Imagine Product A has a complete digital compliance record.
The facts are the facts:
Ingredients.
Concentrations.
COA results.
Manufacturing information.
Claims.
Label.
Testing.
But different organizations may evaluate those facts differently.
Processor A
Acceptable.
Processor B
Enhanced review required.
Bank A
Not supported.
Bank B
Supported in 42 states.
Marketplace A
Permitted with additional labeling.
State X
Requires additional registration.
The underlying product data doesn't change.
The policy interpretation does.
That means product intelligence and institutional policy can finally become separate but connected layers.
That's a much cleaner architecture.
For payment processors, digitized Product Intelligence could solve several persistent problems.
Faster underwriting
Instead of requiring underwriters to manually discover and interpret every product characteristic, much of the information can already be structured and evaluated.
Lower compliance costs
Technology handles discovery, extraction, comparison and ongoing monitoring while humans focus on exceptions.
Faster regulatory response
When policy changes, affected products can be identified without performing another complete portfolio audit.
Better merchant segmentation
Instead of declining entire industries, processors can potentially identify specific products that do or do not fit policy.
Better sponsor-bank conversations
A processor can provide specific evidence about products instead of broad statements about merchant categories.
Better portfolio visibility
Risk teams can understand what regulated commerce exists inside the portfolio at any moment.
And perhaps most importantly:
Processors could support categories that are currently uneconomical to manage manually.
That's not simply a compliance benefit.
That's a revenue opportunity.
Sponsor banks are ultimately trying to answer a relatively straightforward question:
What commerce are we allowing through our institution?
Merchant-level data only answers part of that question.
Digitized Product Intelligence gives banks a much deeper understanding.
Instead of saying:
We have 750 CBD merchants.
the institution could potentially say:
We support 750 merchants selling 38,000 regulated products.
36,900 currently satisfy our policy.
700 require updated documentation.
250 require remediation.
150 fall outside appetite.
That's not simply more data.
That's materially better risk governance.
It also gives the bank something it rarely has today:
Product-level portfolio analytics.
Banks could understand risk by:
That's an entirely new level of portfolio management.
Now take the concept one level higher.
Card brands today establish rules across enormous global payment ecosystems.
But much of the enforcement architecture ultimately flows through merchants and acquiring relationships.
Imagine what becomes possible when product-level intelligence exists across those networks.
Instead of saying:
a network could theoretically define:
Then acquiring organizations could evaluate those requirements directly against structured product intelligence.
The rule becomes machine-readable.
The portfolio becomes searchable.
The evidence becomes auditable.
That's an enormous evolution from broad merchant categorization.
This isn't simply about giving banks and processors more oversight.
Merchants suffer tremendously from today's fragmented model.
A regulated merchant may provide the same COA to:
Its processor.
Its bank.
A marketplace.
A wholesale partner.
A retailer.
An auditor.
An insurer.
A state agency.
A customer.
Everyone asks for essentially the same thing.
And the merchant maintains all of it manually.
Digitized Product Intelligence allows the merchant to become the owner of its product compliance record.
The merchant can know:
Which products are missing documentation.
Which COAs are expiring.
Which labels have problems.
Which products don't meet a partner's requirements.
Which evidence needs updating.
Which products changed.
Which issues need remediation.
That turns compliance from something imposed by outsiders into something the merchant can actually manage.
There is another stakeholder we rarely include in payment compliance discussions.
The consumer.
Imagine scanning a QR code on a regulated product and accessing a verified Product Transparency Page.
You can see:
Product identity.
Manufacturer.
Ingredients.
Testing.
COA.
Batch information.
Relevant certifications.
Warnings.
Other verified information.
Now the same infrastructure supporting bank and processor compliance creates consumer transparency.
One data layer.
Multiple stakeholders.
That's where the ecosystem begins becoming much more powerful.
Regulatory change isn't going away.
If anything, it is accelerating.
CBD.
Hemp.
Cannabinoids.
Vape.
Nicotine.
Kratom.
Peptides.
Nutraceuticals.
Mushrooms.
Alcohol.
Pharmaceutical products.
Novel ingredients.
New categories will continue emerging.
The problem isn't simply that regulations change.
The problem is that our compliance infrastructure isn't designed for change.
A digitized Product Intelligence ecosystem is.
When regulation changes:
Update the rule.
Evaluate the products.
Identify the impact.
Remediate the exceptions.
That should eventually become normal.
Once product information becomes structured, other possibilities emerge.
Product Intelligence can support:
Risk Management
Identify problematic product characteristics.
Underwriting
Accelerate product-level due diligence.
Portfolio Analytics
Understand product exposure.
Regulatory Response
Identify affected products quickly.
Merchant Services
Help businesses maintain compliance.
Consumer Transparency
Provide trusted product information.
Insurance
Improve product-liability understanding.
Lending
Better understand merchant inventory and business models.
Commerce Platforms
Improve seller and product acceptance.
Fraud Detection
Identify falsified documentation or suspicious product relationships.
Supply-Chain Visibility
Connect manufacturers, laboratories, distributors and retailers.
At some point this stops looking like a compliance application.
It starts looking like commerce infrastructure.
Digitizing everything is not automatically better.
There are legitimate challenges that need to be addressed.
1. Bad data becomes scalable
If incorrect information enters the system and isn't properly validated, automation can spread the error much faster than a manual process.
Digitization does not eliminate the need for verification.
It makes verification even more important.
2. Policies aren't always binary
Regulation is nuanced.
Institutional policies contain exceptions.
Legal interpretation changes.
Humans still need to govern how rules are translated into machine-readable logic.
Not every compliance question should become:
Yes / No.
3. Data ownership becomes important
Who owns the product record?
The manufacturer?
Merchant?
Laboratory?
Technology provider?
Bank?
Some data will need to remain private.
Other information could be shared.
The ecosystem needs permissions.
4. Security matters enormously
A product-intelligence system could contain valuable commercial, scientific and regulatory information.
Strong cybersecurity, access controls and audit trails would be essential.
5. Standardization will be difficult
Different laboratories use different formats.
Manufacturers label products differently.
Different industries have different terminology.
States regulate products differently.
Creating normalized product intelligence is difficult.
But difficult is not impossible.
6. Technology can create false confidence
Perhaps the biggest risk is believing:
The system says compliant, therefore the product is compliant.
Technology should support professional judgment.
It should not eliminate accountability.
Absolutely.
But only if we understand what it is actually replacing.
We're not comparing digitization against some perfect human system.
We're comparing it against today's reality:
Documents stored across disconnected systems.
Manual reviews.
Repeated data entry.
Point-in-time audits.
Incomplete portfolio visibility.
Duplicated work.
Expensive re-audits.
Information trapped inside PDFs.
Merchant self-reporting.
Compliance determinations that immediately begin aging.
Against that reality, the advantages are substantial.
The real question is not whether digitization creates challenges.
It will.
The question is:
Are those challenges more manageable than the ones we already have?
I believe the answer is overwhelmingly yes.
This is ultimately the transformation.
Today's architecture:
PRODUCT
↓
DOCUMENTS
↓
HUMAN REVIEW
↓
DECISION
↓
FILE STORED
↓
TIME PASSES
↓
RULE CHANGES
↓
AUDIT EVERYTHING AGAIN
The future:
PRODUCT DIGITAL IDENTITY
↓
STRUCTURED EVIDENCE
↓
POLICY INTELLIGENCE
↓
CONTINUOUS EVALUATION
↓
CHANGE DETECTION
↓
EXCEPTION
↓
HUMAN REVIEW
↓
REMEDIATION
↓
CONTINUOUS COMPLIANCE
That isn't simply making the current system faster.
It is changing the system.
This doesn't become transformational if only one stakeholder participates.
The real power emerges when manufacturers, laboratories, merchants, processors, banks, marketplaces and eventually networks can interact with the same underlying product intelligence.
Think about it.
The manufacturer creates the product identity.
The laboratory attaches verified testing.
The merchant associates the product with its catalog.
The processor evaluates it against processing policy.
The bank evaluates it against institutional appetite.
The marketplace evaluates it against platform policy.
The consumer accesses approved transparency information.
The regulator can receive defensible evidence when appropriate.
One product.
One structured intelligence foundation.
Multiple policy layers.
That is a radically different world from everyone collecting their own PDF.
This is one of the fundamental ideas behind MyCOA®, Q-Trust™ and the broader Qredible architecture.
We don't believe product compliance should exist as scattered documents reviewed repeatedly by different people.
The objective is to turn the product itself into a persistent digital compliance object.
Product.
Evidence.
Testing.
Regulation.
Policy.
Monitoring.
Change.
Connected.
When something changes at the product level, the intelligence changes.
When regulation changes, the product can be re-evaluated.
When bank policy changes, the portfolio can be queried.
When evidence expires, the appropriate stakeholder can be notified.
The goal isn't simply to automate compliance.
It's to make compliance reusable.
That's a very important distinction.
Think about how much money the ecosystem currently spends repeatedly performing essentially the same work.
A manufacturer maintains product records.
A merchant organizes them.
An underwriter reviews them.
A compliance analyst reviews them.
A sponsor bank reviews them.
An auditor reviews them.
A marketplace may review them.
Then regulations change and everyone reviews them again.
Digitization doesn't eliminate every one of those responsibilities.
But it can eliminate an enormous amount of rediscovery.
And rediscovery may be one of the least productive expenses in regulated commerce.
The same intelligence should not have to be recreated every time another stakeholder asks a question.
We have digitized money.
Identity.
Banking.
Payments.
Contracts.
Communications.
Supply chains.
Advertising.
Commerce itself.
Yet product compliance still frequently depends on somebody opening a PDF.
That will eventually change.
I believe it has to.
Because the complexity of modern regulated commerce is increasing faster than the number of humans we can afford to assign to reviewing it.
The only scalable answer is to convert compliance information into intelligence that computers can continuously evaluate and humans can intelligently govern.
Imagine a payment executive asking tomorrow:
Today, the answer might be:
“We'll assemble a team and get back to you.”
In a digitized Product Intelligence environment, the answer becomes:
“3,417 products across 284 merchants are potentially affected.
2,946 currently meet the new requirement.
327 require updated evidence.
144 require remediation.
Here they are.”
That's the difference between having documents and having intelligence.
And once the industry experiences that difference, I don't believe we'll ever willingly go back.
The future of product compliance isn't another PDF.
It isn't another spreadsheet.
It isn't another audit.
It is a continuously evolving digital representation of the product, its evidence, the rules governing it, and its compliance status.
Digitize the product once.
Apply intelligence continuously.
That's when regulatory change stops becoming a crisis and starts becoming a query.
Qredible is redefining merchant underwriting through Merchant Risk Intelligence (MRI)—a product-first approach that continuously analyzes what businesses sell, how they market those products, and the evidence required to support compliant payment acceptance. By moving beyond static industry classifications, Qredible helps banks, payment processors, ISOs, and sponsor banks make faster, more informed, and more defensible underwriting decisions while reducing manual effort and strengthening ongoing portfolio oversight. Learn more about Qredible's product-first automated compliance management platform for regulated industries →
