These are platform selection criteria, not legal advice or a payment-provider recommendation. Official policy and licence pages were checked on 30 October 2026. Your counsel and each provider must assess the actual products and markets before you rely on a proposed setup.
Which merchant model are you choosing for?
A lawful hemp or CBD direct-to-consumer business needs a catalogue and checkout that reflect where each product may be offered. A licensed cannabis dispensary may need a commerce layer tied to a particular licence, location and specialist operational system. One shortlist should not silently treat those as the same project.
Write down the business entity, product types, jurisdictions and fulfilment model before booking platform demos. Include whether customers pay online, reserve for collection or place an order through another system. Then identify the provider or operational constraint that is forcing the decision. That is the problem a replacement must address.
For US hemp law changes, use our hemp merchant action guide and its verified dates and product scope with your advisers. A platform's hemp policy cannot replace that product review.
What should a useful comparison measure?
Start with the trade you are willing to make between a hosted service and responsibility for your own software. These are practical selection questions, not a ranking of which platform is universally best.
| Option | Control and responsibility | Question before shortlisting |
|---|---|---|
| Keep Shopify | Work within a hosted platform and its policies. | Is the merchant eligible, and can the current setup meet the agreed requirements? |
| Swell | Your application on a licensed, hosted commerce service. | Do the terms and proposed integrations fit the actual business? |
| Medusa.js | Open-source software, with hosting and maintenance decisions to make. | Does the need for custom control justify owning more engineering work? |
For each candidate, ask who owns the code, who can change the trading rules, which data can be exported and who responds to an incident. Put the answers beside the migration cost and ongoing support scope. A lower software bill does not account for the whole operating cost.
When is staying on Shopify still a valid choice?
Shopify's US hemp requirements permit eligible hemp products subject to federal, state and local law, required licences and product conditions. They address testing, labelling and claims, and allow action up to store termination. This is conditional permission, not a blanket ban on every hemp business.
The Canadian cannabis requirements are separate: they require a licensed business in a province or territory where online sales are legal, compliance with applicable rules and orders in Canadian dollars. They do not establish eligibility for a US dispensary.
Shopify Payments does not support hemp, CBD or THC sales. Shopify describes third-party processing routes, but each provider decides whether to accept a merchant. Losing Shopify Payments does not automatically mean the platform itself is unavailable.
Staying deserves consideration if the business meets the relevant conditions and the store can enforce its agreed catalogue and market rules. Ask the team to demonstrate the difficult cases: a withdrawn product in a saved basket, an ineligible destination or a renewal after a rule changes. If those cases work and the contracts fit, migration needs another concrete reason.
What changes if you choose Swell?
Swell's Merchant Terms describe a cloud service. Section 3.1 distinguishes your application and content from Swell's platform software. This gives a different ownership boundary from running the commerce backend yourself.
Section 4.4 says Swell does not restrict merchants solely by industry or product category. Products must still be lawful wherever offered or supplied and comply with the agreement. Merchants remain responsible for required licences, verification, shipping and other regulated-product obligations.
The same section separates Swell's position from third-party decisions. It does not promise processor, bank or carrier acceptance, and retains intervention rights for legal, contractual and provider risks. Treat those qualifications as part of the offer.
Our selection test: ask Swell to review your exact operating model and show how the required integrations would work. Compare the hosted service's responsibilities, your application's maintenance and the exit process before treating flexibility as a reason to move.
What changes if you choose Medusa.js?
The Medusa repository licence permits use and modification under MIT, except for identified Enterprise Edition materials governed separately. Check the licence for every component you plan to use. Access to source code gives your engineers control over implementation; it does not decide whether a merchant may sell a product.
Hosting is another agreement. Medusa Cloud's terms govern its hosted services separately from the open-source framework and reserve suspension or restriction rights for suspected contractual or legal violations. Choosing another host creates another provider relationship to review.
Consider Medusa.js when a specific data model, catalogue rule or integration needs control you cannot reasonably obtain in the current system. Budget for maintaining that code, monitoring it and recovering from failures. An open-source licence is not a completed store, a dispensary system or confirmed payment coverage.
Hollow Point is an official Medusa Expert and the team that moved a £4.5M UK vape retailer. That experience informs our Medusa.js development work.
How does a licensed dispensary change the shortlist?
Start with the systems and conditions attached to the licensed operation. Ask the merchant and its advisers which inventory, reporting, purchase-limit, identity and fulfilment controls apply. Establish which system is authoritative for each record and how an online order reaches it. Do not assume a general commerce integration covers those duties.
Evaluate a specialist dispensary system against that same brief where appropriate. This comparison does not certify any provider for a licence or jurisdiction. A recommendation requires evidence that the complete operating path works, including what happens when systems disagree or an order cannot proceed.
What evidence should you require before migrating?
- Obtain the product and jurisdiction decisions from qualified advisers. Give every unresolved item an owner; do not let a demo stand in for a decision.
- Ask each proposed provider for a decision on the actual business model. Keep its conditions with the integration scope so an API feature cannot be mistaken for approval.
- Demonstrate agreed catalogue, eligibility and order controls with permitted and rejected cases. Include direct links, subscriptions and staff overrides where they exist.
- Rehearse the data and URL migration. Check record counts, sample orders, redirects, access ownership and rollback conditions before committing to cutover.
Our cannabis and hemp ecommerce assessment separates lawful hemp/CBD DTC from licensed cannabis requirements before proposing a build. The migration assessment then defines the technical scope if a move is justified.
We are not a payment provider and cannot promise approval. Bring existing provider decisions and the problem you need the store to solve; the next step is a scope with named dependencies and acceptance checks.
Common questions
Does every cannabis or hemp brand need to leave Shopify?
No. Shopify has conditions for US hemp sales and a separate Canadian cannabis policy. Check the applicable rules and your provider agreements before deciding. A payment refusal and a platform refusal are different problems.
Is Swell an unrestricted cannabis platform?
No. Its Merchant Terms address regulated products, but lawful operation, compliance with the agreement and third-party acceptance still matter. Read the terms against your specific products, locations and operating model.
Does self-hosted Medusa.js guarantee that we can keep trading?
No. Control over your software does not remove legal obligations or hosting, payment, carrier and other provider dependencies. You also need a team responsible for security, releases and operations.
Can Hollow Point arrange US hemp or THC payment approval?
No. We are not a payment provider, and approval is the decision of the provider and its acquiring bank. We integrate the provider that accepts your business; our scope starts with the requirements and unresolved dependencies.
NEXT STEP / HOLLOW POINT
Bring the merchant model to the platform decision.
Describe the products, jurisdictions, current systems and provider decisions. We can assess the engineering scope and identify the questions that remain open.