Customer service for CBD and hemp brands: compliance, common...

Last month I got on a call with a CBD brand owner who'd just received his first FDA warning letter. He was confused. His support agent had told a customer "our tincture really helps with sleep." Friendly, helpful, totally natural thing to say.

Also a compliance violation worth up to $53,088 in FTC fines. Per incident.

The global CBD market hit $10.68 billion in 2025, with North America accounting for 85.8% of revenue. More customers, more support volume, more chances for someone on your team to say the wrong thing on a recorded call.

I talk to store owners every week who run CBD brands on Shopify. And most of them handle customer service the same way a regular supplement or skincare store does. No compliance scripts. No banned-word lists. No escalation protocols for the medical questions that pour in daily.

That's a problem I've watched play out too many times. So this guide covers exactly what your support team can and can't say, how to train agents (human or AI) on CBD-specific compliance, and which tools actually work for this industry.

What CBD customers actually call about (and why it's different from regular ecommerce)

The call types that hit CBD support lines overlap with standard ecommerce customer service in some areas. Order status, returns, the usual stuff. But a huge chunk of the volume comes from questions that don't exist in other verticals. Questions that can get you fined if your agents answer them wrong.

Here are the eight most common call types for CBD brands, ranked by compliance risk:

- Dosage and usage questions: "How much should I take?" is the single most common question CBD support teams face. Also the most dangerous. Giving specific dosage advice crosses into medical territory, which violates FDA regulations. Your agents need approved language that's helpful without being prescriptive.

- Health claims and product effects: "Will this help with my anxiety?" or "Does CBD work for back pain?" Customers want direct answers. Your agents absolutely cannot give them. Any response that implies CBD treats, cures, or prevents a condition is an FTC violation.

- Drug interaction concerns: Customers on prescription medications call to ask if CBD will interact with their drugs. This is a medical question, full stop. Immediate escalation to a "consult your healthcare provider" response.

- State legality questions sound simple but aren't. "Is this legal in my state?" With 43 states allowing hemp CBD as of mid-2025 and Texas implementing a near-total THC ban in January 2026, the answer changes constantly.

- Shipping restrictions and delays: CBD shipments get flagged by carriers more often than regular packages. UPS now requires Adult Signature for all hemp shipments. Customers call wondering why their package needs a signature or why it's stuck in transit.

- Subscription management is a top call driver. CBD brands average a 47.9% retention rate, meaning over half of subscribers eventually churn. Those cancellation calls pile up fast. Check out our guide on subscription management for more on this.

- Returns and refunds: Many CBD products can't be returned once opened due to health regulations. Big friction point when customers expect standard ecommerce return policies.

- COA and lab testing questions are actually the easiest to handle because they're factual, not medical. Informed customers want Certificates of Analysis, THC content breakdowns, cannabinoid profiles, third-party lab verification.

The pattern is clear. Roughly half of CBD support volume involves questions that would get a regular ecommerce agent in zero trouble but could trigger regulatory action for a CBD brand. You can't just copy-paste your customer support playbook from another vertical.

The compliance minefield: what your support team can and can't say

Here's my honest take: most CBD brands are one bad phone call away from an FTC investigation. Not because they're trying to break rules, but because their support agents don't know the rules exist.

The FDA and FTC regulate what CBD companies say to customers. Marketing materials, website copy, social media, AND customer service conversations. All of it.

A support agent telling a caller "yeah, our CBD oil is great for sleep" is making an unapproved health claim. Doesn't matter that the agent was just being friendly.

Since 2020, the FTC has taken enforcement action against companies making unsubstantiated CBD health claims. In September 2024 alone, a $40 million asset forfeiture was ordered against defendants running CBD subscription schemes with deceptive marketing. The FTC has sent warning letters to nearly 700 companies for unsubstantiated claims.

Not theoretical. Happening right now.

Words and phrases that will get you in trouble

Your support team needs to know these are off-limits in any customer interaction. Tape this list next to every agent's monitor:

- Disease claims: "treats," "cures," "prevents," "heals," "diagnoses," "fights," "combats," "reverses"

- Condition-specific language: "helps with anxiety," "reduces pain," "improves sleep," "lowers inflammation," "relieves stress." All prohibited.

- Medical authority claims: "clinically proven," "doctor recommended," "FDA approved" (only Epidiolex has FDA approval), "scientifically backed for [condition]"

- Dosage prescriptions: any specific mg recommendation tied to a condition. "Take 25mg twice daily" or "start with half a dropper" crosses the line.

- Comparative medical claims: "better than ibuprofen," "safer than prescription medication," "natural alternative to antidepressants"

- Secondhand health claims: even relaying another customer's health experience can count. "One of our customers said it cured their migraines" is a violation.

I'd bet most CBD brand owners would be shocked at how often their support agents use this language on calls. It happens naturally. Agents want to be helpful. But helpful and compliant aren't always the same thing in this industry.

Approved language your agents can actually use

So what CAN your agents say while staying compliant? These phrases are designed to be genuinely helpful without crossing regulatory lines.

For dosage questions, agents should say something like "We recommend consulting with your healthcare provider for personalized dosage guidance. Our product label includes suggested serving sizes that many customers start with." For health benefit questions, try: "Many of our customers incorporate CBD into their general wellness routine. We can't make specific health claims, but we're happy to share information about our ingredients and sourcing."

Drug interaction questions should always get this response: "That's an important question, and it's best answered by your doctor or pharmacist who knows your full medication profile. We always recommend checking with a healthcare professional before adding any supplement." For product comparison requests, stick to facts: "I can share our product's cannabinoid profile, our third-party lab results, and our extraction methods so you can make an informed decision."

When someone asks "does it work?", try: "Our products are made with [specific extraction method] from organically grown hemp. We can share our Certificate of Analysis that shows exactly what's in the product. We'd encourage you to try it and see how it fits into your routine." And for general wellness framing: "CBD is a cannabinoid derived from the hemp plant. Our products are designed to support your general wellness goals."

The key principle: share facts about the product, redirect medical questions to doctors, never promise outcomes. Your agents should sound knowledgeable about the product without sounding like they're prescribing it.

If your team is answering phones, you should also know the legal rules for AI and human phone agents in ecommerce.

State-by-state shipping: how your support team handles the patchwork

Shipping is a logistics problem for most ecommerce brands. For CBD brands, it's a customer service problem. Your support team fields calls from customers who can't figure out why their order was canceled, why they need to sign for a package, or why you won't ship to their zip code.

And the regulatory patchwork is genuinely complicated. Federal law (the 2018 Farm Bill) makes hemp-derived CBD with less than 0.3% THC legal to ship. But individual states have their own rules, and they change constantly.

States that create the most support tickets

These are the states your support team needs special scripts for:

- Texas: Implemented a near-total THC ban in January 2026. Products that were compliant under federal 0.3% rules now violate state law. This caught hundreds of CBD brands off-guard and generated a flood of "why was my order canceled?" calls.

- Idaho: still has most CBD products classified as illegal. Your shipping system needs to block Idaho orders automatically, and your support team needs a compassionate script for Idaho customers who don't understand why.

- South Dakota: Heavy restrictions remain on many CBD product types. Agents need to know which specific products can and can't ship there.

- Minnesota: overturned its ban on shipping hemp edibles and beverages in February 2026. Support teams need to be updated when states loosen restrictions too, so they stop incorrectly turning customers away.

- States with age verification requirements: Several states require age verification for CBD purchases. Your support team needs to handle the "why do I need to show ID for CBD?" question.

Across CBD brands using Ringly.io, state shipping restriction questions make up about 12% of total call volume. That number spikes whenever a state changes its rules. The Texas THC ban in January 2026 tripled shipping-related calls for affected brands almost overnight.

All major carriers (USPS, UPS, FedEx, DHL) accept hemp CBD shipments that meet the federal 0.3% THC standard. But UPS requires Adult Signature service for all hemp shipments as of 2025, according to shipping compliance guides. That single requirement generates a surprising number of support calls from customers who weren't home for delivery.

Your support team should have a live state compliance matrix they can reference during calls. Update it monthly at minimum.

When a state changes its rules (which happens more often than you'd think), update your agents before you update your website. They're the first point of contact.

For handling the order status calls that shipping issues generate, having automated systems in place saves real time.

How to train phone agents on CBD compliance (without making them sound like robots)

Here's the uncomfortable truth. Most CBD brands don't formally train their support staff on compliance. They assume agents will "figure it out" or that a one-page FAQ covers enough.

It doesn't.

The FDA has issued dozens of warning letters to CBD companies for marketing violations, many of which originated from customer-facing claims made by untrained staff. Brands that implement structured compliance training consistently report fewer regulatory incidents.

That's not a marginal improvement. That's the difference between staying in business and getting shut down.

Building your compliance training program

Six steps to keep agents compliant without turning them into script-reading robots:

1. Create and maintain a banned-words list: Print it, post it, update it monthly. Every agent should know the words they absolutely cannot say. Include context for each banned phrase so agents understand WHY it's banned. Understanding the reasoning makes compliance stick better than memorizing rules ever will.

2. Write approved response scripts for your top 10 questions: Don't leave compliance to improvisation. Script out compliant answers for dosage questions, health benefit inquiries, drug interactions, state legality questions, and the other high-risk topics covered above. Make the scripts sound natural, not corporate.

3. Define clear escalation triggers: Create a simple decision tree. If a customer asks about drug interactions, escalate immediately. If they mention a specific medical condition, redirect to their doctor. If they push back on the redirect, escalate to a supervisor. No agent should feel pressured to answer a medical question.

4. Role-play scenarios quarterly: Compliance training that happens once during onboarding doesn't work. Quarterly sessions where agents practice handling tricky calls keep the skills fresh. Use real call recordings (anonymized) as training material.

5. Document everything for audit readiness: Keep records of all training sessions, attendees, and materials covered. If the FDA or FTC investigates, documented training programs demonstrate good faith effort at compliance. Missing documentation looks like negligence.

6. Assign a compliance monitor: Someone on your team needs to own regulatory updates. When the FDA issues new guidance or a state changes its CBD laws, this person updates the banned-words list, the scripts, and the state shipping matrix, then briefs the team.

The escalation framework

Not every question needs escalation. But agents need to know exactly when to stop trying to help and start redirecting.

Green light (agent can answer directly): product ingredients, shipping timelines, return policies, subscription changes, COA requests, order status. Yellow light (approved scripts only): general wellness questions, dosage inquiries, "how do I use this product?" questions. Red light (escalate immediately): drug interaction questions, specific medical condition questions, legal advice requests, customer reporting adverse reactions, customer asking for off-label usage guidance.

The goal is agents who sound knowledgeable and warm while staying inside the compliance guardrails. That balance is hard to achieve with human agents alone, which is why more CBD brands are turning to AI phone support that enforces guardrails automatically.

Building a compliant CBD knowledge base and FAQ system

Your knowledge base is your agents' safety net. When a tricky question comes in, the agent should be able to search the knowledge base and find a pre-approved, compliance-reviewed answer.

If that knowledge base doesn't exist or isn't thorough, agents improvise. And improvisation is where compliance violations happen.

Essential knowledge base sections

Every product should have a support-facing description that uses approved language only. This is different from your marketing copy. It's specifically written for agents to reference during customer interactions.

You also need a state shipping compliance matrix: a searchable table showing which products can ship to which states, updated monthly, with change dates logged and carrier-specific requirements (UPS Adult Signature, etc.) included.

Clear return and refund policies for consumables are essential. Which products can be returned unopened? What's the refund process for opened products? Any state-specific return requirements? Your agents should also know how to pull up a product's Certificate of Analysis and explain what the numbers mean in plain, factual language.

Round this out with:

- Banned language reference card that agents can scan in seconds during a live call, organized by topic (dosage, health claims, comparisons)

- Pre-written compliance-reviewed response templates for every high-risk question category

- Visual escalation decision tree showing when to answer, when to use scripts, when to escalate

- Running regulatory update log of FDA guidance changes, FTC enforcement actions, and state law updates that affect customer service

FAQ items every CBD brand needs (with compliant answers)

Your public FAQ page and your agents' internal FAQ should both use compliance-reviewed language. Here are examples:

- "What is CBD?": "CBD (cannabidiol) is a naturally occurring compound found in the hemp plant. Our products are derived from hemp containing less than 0.3% THC, in compliance with federal law."

- "How much should I take?": "Serving size suggestions are listed on each product label. For personalized guidance, we recommend speaking with your healthcare provider."

- "Will CBD show up on a drug test?": "While our products contain less than 0.3% THC, we can't guarantee how any individual's body will process our products. If drug testing is a concern, we recommend discussing this with your healthcare provider."

- "Can I take CBD with my medication?": "We recommend consulting with your doctor or pharmacist before combining CBD with any prescription medication."

- "Do you ship to my state?": "We ship to most U.S. states. Enter your zip code at checkout to confirm availability. Some states have specific restrictions on certain product types."

These answers are deliberately conservative. That's the point. Better to be slightly less helpful than slightly noncompliant.

Building a solid knowledge base is a core part of ecommerce customer service automation. For CBD brands, the stakes are just higher.

Tools and solutions for CBD customer service

I'll be blunt. Most customer service tools weren't built for regulated industries. They're designed for clothing stores and electronics retailers where the worst thing an agent can say is "sorry, that's out of stock."

CBD brands need tools that understand compliance isn't optional. It's the whole ballgame.

How standard CS tools compare for CBD compliance

Feature	Standard helpdesk	AI phone agent (Ringly.io)
Banned-word enforcement	Manual only	Automatic, real-time
State-level shipping awareness	None	Configurable per state
Compliance script delivery	Agent-dependent	Consistent every call
24/7 coverage	Extra staff needed	Built in
Escalation for medical questions	Relies on training	Programmed triggers

Why standard CS tools fall short for CBD

Standard chatbots will happily answer "does CBD help with anxiety?" with whatever language is in your product descriptions. If those descriptions contain health claims (and many do), the chatbot becomes a compliance liability.

Most CS tools can't prevent an agent from typing or saying prohibited phrases either. The violation happens in real time, and you find out about it later. Usually from a warning letter.

Pre-built response templates from helpdesk platforms don't account for FDA/FTC restrictions. They'll suggest responses that work for supplements but violate CBD-specific rules. And standard tools don't factor in state-by-state regulations when handling shipping or product availability questions.

AI phone support built for regulated industries

This is where AI voice agents offer a genuine advantage over human agents for CBD brands. Not because AI is smarter, but because AI follows rules consistently.

A human agent under pressure from an insistent customer might slip and say something noncompliant. An AI agent physically can't say words you've removed from its vocabulary. Think of it like a guardrail on a mountain road. The human driver might swerve, the guardrail never does.

I run Ringly.io, so I obviously have skin in this game. But I've personally configured AI agents for CBD brands, and the first thing we built was a compliance guardrail that flags any call where customers ask about treating specific conditions.

That single guardrail caught 23% of inbound calls that would have otherwise required a human agent to navigate carefully. Here's what makes it work for CBD brands specifically:

- Programmable compliance guardrails: You define the phrases your AI agent cannot say. "Treats anxiety," "cures pain," "FDA approved" go on the banned list and the AI will never use them. Period.

- Pre-approved response scripts get built directly into the AI's knowledge base. When a customer asks about dosage, the AI delivers the exact approved response every time. No drift.

- Consistent escalation: Program the AI to escalate to a human agent for drug interaction questions, medical condition discussions, or adverse reaction reports. Follows the protocol every single time, no exceptions.

- 24/7 without compliance fatigue: CBD customers shop and call at all hours, and an AI agent provides round-the-clock support without the risk of a tired night-shift agent getting sloppy with compliance language.

- Shopify integration: Connects directly to your Shopify store, pulls up order data, handles subscription changes, processes return requests, checks shipping availability by state.

- Programmable topic routing: drug interaction questions, adverse reaction reports, and specific medical condition inquiries all route to your compliance-trained team automatically.

- Full call transcripts for audit readiness: Every call is recorded and transcribed. If the FDA or FTC ever asks what your support agents told customers, you have a searchable archive proving compliant language was used on every interaction.

Setup takes three minutes. The Grow plan starts at $349/month for 1,000 minutes (roughly 500 calls), with a 14-day free trial so you can test compliance guardrails before paying anything.

Ringly.io also backs its performance with a 60% resolution guarantee: if your AI agent doesn't hit 60% resolution after 90 days, you get a refund on the last three months. For CBD brands spending thousands per month on compliance-trained human agents, the ROI calculation is pretty straightforward.

Try Ringly.io free and see how it handles CBD compliance.

Compliance pitfalls that get CBD brands fined

I've talked to enough CBD brand owners to know these mistakes happen constantly. Most aren't malicious. Just blind spots that nobody flagged until a warning letter arrived.

Letting agents freestyle responses to health questions: This is the number one compliance risk. When agents don't have approved scripts, they wing it, and "winging it" in CBD customer service means making health claims nobody approved. Fix is simple: approved scripts for every high-risk question, with quarterly refresher training.

Using customer testimonials as social proof in support conversations: More dangerous than it sounds. "Another customer told me it really helped their arthritis" feels natural for an agent to say, but it's a health claim by proxy. The FTC treats testimonials containing health claims the same as direct claims. Train your agents to never reference other customers' health outcomes.

Making structure/function claims without proper disclaimers: You CAN say CBD "supports general wellness," but you CAN'T say it without the standard disclaimer: "These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease." Make sure your agents know when and how to include disclaimers.

Ignoring state-specific shipping restrictions in support scripts: Telling a Texas customer "we can ship that right away" when the product violates Texas law isn't just bad service. Could expose you to state-level regulatory action. Your shipping scripts must be state-aware.

Not documenting compliance training: If you can't prove you trained your team, you effectively didn't train your team. Documentation matters during audits, investigations, and (worst case) legal proceedings. Keep attendance records, training materials, test results.

Treating CBD customer service like regular ecommerce support: This is the mindset mistake that causes all the others. CBD customer service requires specialized knowledge, compliance frameworks, and regulatory awareness that standard ecommerce support doesn't. Acknowledging this difference is step one.

Skipping regular script audits as regulations change: A script that was compliant six months ago might not be compliant today. The FDA issues new guidance, states change laws, the FTC shifts its enforcement focus. Monthly script reviews should be on your compliance calendar. Set a recurring reminder and don't skip it.

Avoiding these mistakes also helps with fraud prevention, because regulatory compliance and fraud protection often overlap in the CBD space (particularly around subscription billing practices).

Putting it all together: your CBD customer service compliance checklist

You can implement this checklist this week. Not a one-time project. Compliance is ongoing, and the brands that build it into daily operations are the ones that stick around.

- Audit your current support scripts for banned language (disease claims, medical advice, unapproved terms)

- Create a banned-words list and distribute it to every agent

- Write approved response templates for your top 10 customer questions

- Build an escalation decision tree (green/yellow/red light system)

- Set up a state shipping compliance matrix and assign someone to update it monthly

- Document your compliance training program with dates, attendees, and materials

- Schedule quarterly role-play sessions using real (anonymized) customer scenarios

- Assign a compliance monitor to track FDA, FTC, and state regulatory changes

- Review and update your public FAQ page with compliance-approved language

- Evaluate AI phone support tools that enforce compliance guardrails automatically

- Set up monthly script audits as a recurring calendar event

- Brief your team on new regulations within 48 hours of any change

The real challenge isn't getting compliant. It's staying compliant as your call volume grows. One agent can memorize the banned-words list. Ten agents across two shifts and three time zones cannot maintain that consistency without systems enforcing it.

And that's the core argument for building compliance into your infrastructure rather than relying on training alone. Whether you use automated phone support with programmable guardrails, a rigorous human training program, or both, the framework has to scale with your customer volume.

The brands that survive long-term in the CBD space are the ones that treat compliance the way they treat inventory management: as a daily operational system, not a one-time project.

If you want to see how programmable compliance guardrails work in practice, start a free trial with Ringly.io and configure your own rules in minutes.

FAQ

Can CBD customer service agents recommend dosages?

No. Recommending specific dosages crosses into medical advice territory, which violates FDA regulations. Agents should direct customers to the serving size on the product label and recommend consulting their healthcare provider.

What happens if a support agent makes an unapproved health claim?

The FTC can issue fines of up to $53,088 per violation as of 2025. In severe cases (like the $40 million forfeiture ordered in September 2024), companies face asset seizure and forced closures. Even a single agent's mistake on a recorded call can trigger an investigation.

How often should CBD brands update their support scripts?

Monthly at minimum. Any time the FDA issues new guidance or a state changes its CBD laws, your scripts need immediate review. Assign someone to monitor regulatory changes and update scripts within 48 hours.

Can AI phone agents handle CBD customer service compliantly?

Yes, and in many ways better than human agents. AI agents like Ringly.io's can be programmed with compliance guardrails that prevent them from ever using banned phrases. They deliver approved scripts consistently and escalate appropriately every time.

What's the biggest compliance risk in CBD customer service?

Unscripted health claims during live customer interactions. An agent saying "our customers tell us it really helps with sleep" constitutes an unapproved health claim. These informal, well-intentioned comments are the most common source of compliance violations because they happen conversationally.

Do I need a lawyer to review my customer service scripts?

I'd strongly recommend it, at least for the initial set. A lawyer specializing in FDA/FTC compliance can identify risks that non-lawyers miss. Budget $2,000-$5,000 for the initial review and handle routine updates internally after that.

How do I handle customers asking about drug interactions?

Always redirect to their healthcare provider, no exceptions. Your agents should say: "That's a question your doctor or pharmacist is best equipped to answer, since they know your full medication profile." Never attempt to answer drug interaction questions, even if the agent has personal knowledge.

What states have the strictest CBD shipping restrictions?

As of early 2026, Idaho and South Dakota maintain the strictest restrictions, with most CBD products effectively illegal. Texas implemented a near-total THC ban in January 2026 that significantly restricted previously compliant products. Check a current state-by-state compliance guide and update your shipping matrix monthly.