A White Paper from the Cannabis Device Safety Institute
Author: Matt Macosko, Founder Date: April 2026 Version: 1.0 (Founding Draft)
Executive Summary
Tens of millions of Americans inhale cannabis through electronic and ceramic hardware every day. Yet there is no comprehensive federal or state safety standard for that hardware — no off-gas testing requirement, no materials transparency requirement, no certification mark backed by published methodology, and no independent body whose job it is to fill that gap.
This paper argues that an independent, builder-led safety institute — formally partnered with Cal Poly Humboldt’s Humboldt Institute for Interdisciplinary Marijuana Research (HIIMR), and structured as a 501(c)(3) nonprofit with a fee-for-service testing subsidiary — is the right vehicle to close that gap. It explains the science of why hardware safety matters (terpene degradation, ceramic glaze leaching, off-gas chemistry), the failure modes of every existing institutional alternative (universities, FDA, state regulators, industry self-regulation), and the operating model and funding structure that the Cannabis Device Safety Institute (CDSI) proposes to deploy.
The Institute is not theoretical. Its founder commissioned the first independent off-gas test of a cannabis concentrate vaporizer in 2016, eight years before any regulator asked for one. CDSI exists to make that work routine.
1. The Problem
1.1 No standard exists
Search the Code of Federal Regulations for a cannabis consumption hardware safety standard. There isn’t one. The FDA has no jurisdiction over devices designed to deliver a Schedule I substance. State cannabis regulators write rules for the flower and concentrate — pesticide residue, microbial contamination, residual solvents — but the device the consumer puts to their lips is governed by, at most, a generic consumer-products statute that was never written for inhalation hardware.
The Underwriters Laboratories (UL) standard for e-cigarette hardware — UL 8139, published 2018 — addresses electrical and battery safety. It does not address what compounds the heating element off-gases when it reaches operating temperature with a cannabis concentrate inside it.
There is no equivalent of NSF certification for water filters. No equivalent of ASTM medical device material standards. No equivalent of the Greenguard indoor air-quality certification. The hardware is sold to consumers on the strength of marketing alone.
1.2 What’s at stake chemically
Cannabis concentrate hardware operates at temperatures between roughly 350 °F and 700 °F (180 °C — 370 °C). At those temperatures, three categories of risk exist:
Terpene degradation. Terpenes — pinene, limonene, myrcene, beta-caryophyllene, and dozens more — are the volatile aromatic compounds that give cannabis its flavor, aroma, and significant portions of its physiological effect. They are also chemically fragile. Above approximately 400 °F, many terpenes begin to thermally decompose into compounds with significantly worse inhalation toxicity profiles, including aldehydes (acetaldehyde, formaldehyde) and reactive oxygen species. Hardware that overshoots target temperature, or that has uneven heat distribution, accelerates this degradation pathway.
Materials off-gassing. Heating elements made of metal alloys, ceramic substrates, glaze coatings, and adhesives can volatilize trace constituents at operating temperature. Lead, cadmium, chromium, and tin have all been detected in third-party tests of various consumption devices over the past decade. The 2016 ALS Environmental test commissioned by Divine Tribe — service request P1605022 — established a methodology baseline for exactly this question, but no industry-wide adoption followed.
Adulterant interactions. When the heating element is hot enough to volatilize the concentrate, it is also hot enough to react with whatever else is in the cartridge — cutting agents, residual solvents, terpene additives sourced from non-cannabis botanicals, vitamin E acetate. The 2019 EVALI outbreak (e-cigarette or vaping-associated lung injury), traced primarily to vitamin E acetate in illicit-market cartridges, killed 68 people and hospitalized over 2,800. No hardware-side standard would have caught it. A device-level certification that included pre-market off-gas testing under realistic loading conditions would have flagged the interaction.
1.3 Why existing institutions don’t fill the gap
Universities. Cal Poly Humboldt’s Humboldt Institute for Interdisciplinary Marijuana Research (HIIMR), founded in 2012, is one of the most respected cannabis research bodies in the country. It studies terpene chemistry, cultivation, social policy, and biology with academic rigor. But HIIMR is part of a public university system that cannot, structurally, certify commercial products or accept manufacturer fees for testing services. Its mission is research, not standards-setting. Universities are necessary partners; they cannot be the standards body.
FDA. The FDA’s Center for Tobacco Products has authority over electronic nicotine delivery systems but has explicitly disclaimed jurisdiction over cannabis hardware while cannabis remains federally Schedule I. Even after Schedule III rescheduling, FDA jurisdiction would expand slowly and would prioritize pharmaceutical-grade applications, not consumer concentrate devices.
State regulators. State cannabis control bodies have neither the laboratory capacity nor the statutory mandate to test hardware. California’s Bureau of Cannabis Control, for example, regulates the concentrate inside the cartridge — not the cartridge itself.
Industry self-regulation. Manufacturers police their own products. There is no incentive to publish unfavorable findings, no requirement to use shared methodology, and no public registry of failed tests. The result is a marketplace where the only available safety information is the manufacturer’s marketing claim.
The institutional vacuum is not the result of any single party’s failure. It is the predictable consequence of a regulatory framework written for a different industry, applied to a substance that was federally illegal until very recently. The vacuum will not fill itself.
2. The CDSI Model
2.1 Independent lab, university partnership
CDSI is structured as a 501(c)(3) nonprofit. It is not a department of any university, not a subsidiary of any manufacturer, and not a trade association. Its sole mandate is the safety of cannabis consumption hardware.
CDSI proposes a formal Memorandum of Understanding with HIIMR at Cal Poly Humboldt. Under this MOU:
- HIIMR conducts pure terpene-chemistry and degradation-pathway research
- CDSI conducts applied device-level testing using HIIMR-validated methodology
- HIIMR retains a permanent seat on the CDSI Scientific Advisory Board
- Joint publications cover findings produced collaboratively
- HIIMR cannabis-studies students rotate through CDSI internships
- CDSI and HIIMR jointly host an annual hardware-safety symposium in Humboldt County
This division of labor is deliberate. Universities do basic science; standards bodies do applied certification; together they produce findings the industry can act on. The same model has produced the most credible certifications in adjacent fields — UL works with university materials labs; NSF works with public-health schools; ASTM committees include both industry and academic seats.
2.2 Five operating pillars
1. Provenance. CDSI did not appear in response to a regulatory mandate. Its founder commissioned the first independent off-gas test on a concentrate vaporizer in 2016, when no funding source existed. That test — and the V5 ceramic glaze ROHS analysis that followed in 2021 — are the methodological seed of the Institute. Provenance matters because credibility cannot be retrofitted.
2. Mission. Hardware safety standards are written by builders, peer-reviewed by scientists. Builders know failure modes that chemists do not. Chemists understand reaction pathways that builders cannot identify visually. CDSI’s protocols are co-authored by both.
3. Independence. CDSI’s nonprofit parent receives grants, donations, and (post-Schedule III) federal research awards. Its testing services LLC charges manufacturers fees for certification testing — but every report is published publicly, regardless of outcome. This is “pay the lab,” not “pay to pass.” Every conflict of interest is disclosed on the cover page of every report.
4. Methodology. Every CDSI testing protocol is replicable, auditable, and open. The Institute publishes its full methodology, sample sizes, instrument calibration, chain of custody, and raw data — not just the conclusions. Any qualified third party can repeat any test and verify any finding.
5. Output. CDSI produces three classes of work product: (a) public test reports, (b) a certification mark for hardware that passes published standards, and (c) open standards documents that any party — manufacturer, regulator, consumer advocate — can reference and adopt.
2.3 Funding model
Three independent revenue streams support the Institute:
- Vendor testing fees (CDSI Testing Services LLC) — manufacturers pay for testing; revenue flows to the nonprofit parent. Pricing is published. Pay-the-lab discipline is enforced by the public-report requirement.
- Foundation grants and donations — health-equity, harm-reduction, and consumer-protection foundations have natural alignment with the Institute’s mission. The 501(c)(3) structure makes these contributions tax-deductible.
- Federal research funding (post-Schedule III) — once cannabis is rescheduled to Schedule III, NIH, NIDA, NIOSH, and CDC funding pathways open. CDSI is structured to be eligible for those awards on day one.
No single revenue stream may exceed 50% of operating budget, by board policy, to preserve structural independence.
3. Roadmap
Year One
- Q1: Formal incorporation; 501(c)(3) application filed; founding board seated
- Q2: MOU with HIIMR drafted, negotiated, and signed
- Q3: First public testing protocol published (off-gas methodology, building on the 2016 ALS framework)
- Q4: First certified device released against the published standard
Years Two and Three
- Expand certification mark to cover the major device categories (concentrate atomizers, glass ovens, ceramic donut heaters, ball-vape heaters, dry-herb vaporizers)
- Hire a permanent Scientific Director (jointly recruited with HIIMR)
- Host the first annual Humboldt Hardware Safety Symposium
- Apply for NIH/NIOSH funding under Schedule III rescheduling pathways
Year Five
- CDSI certification mark recognized by at least three state cannabis regulatory bodies
- Open standards adopted as the industry baseline reference
- Scientific publications in peer-reviewed journals on terpene degradation, materials off-gassing, and combined-loading hardware behavior
4. How to Engage
CDSI welcomes engagement from:
- Manufacturers who want their hardware tested against open standards
- Cannabis researchers interested in collaborative work or scientific advisory roles
- Foundations and donors whose mission aligns with consumer safety and harm reduction
- Regulators seeking technical reference for their own standards work
- Consumer advocates who want a seat at the table
Founder direct: matt@ineedhemp.com Headquarters: Arcata, California Status: Foundation paperwork in progress, April 2026
Acknowledgments
The 2016 off-gas analysis that anchors this paper was performed by ALS Environmental (Simi Valley, CA), service request P1605022, project manager Samantha Henningsen. The 2021 V5 ceramic glaze ROHS analysis was performed by an independent California-based lab. Both reports are archived in full at the CDSI document repository.
The framing of “builders, not lawyers” owes a debt to every operator in this industry who funded their own testing because nobody else would.
This is a founding-draft white paper. It will be revised as the Institute formalizes, the HIIMR partnership solidifies, and the first round of public testing protocols is finalized. Comments, corrections, and collaboration inquiries are welcome.