Skip to content

About canna-br

canna-br is a pre-incorporation personal initiative by Gabriel — a software engineer who is both a medical cannabis patient and a builder. There is no company, no CNPJ (Brazilian business registration), no investor. It is software that should have existed and didn’t.

The motivation is twofold: direct personal stake (patient, not just developer) and conviction that the identified technical gap — no serious OSS solution in Portuguese covering the ANVISA regulatory sandbox requirements — is real and worth filling.

The project is AGPL-3.0 because auditability is not an optional feature when software processes members’ health data. Any association using canna-br can (and should) ask their lawyer to review every line of code. No closed SaaS can offer that.

RDC 1.014/2026 (Brazil’s first administrative regime for medical cannabis patient associations) was published in April 2026. Reading the technical requirements — immutable audit trail, SNGPC integration, RBAC with segregation of duties, 7 reportable KPIs — made it clear that no existing solution covered the complete set. Available OSS alternatives on GitHub are all focused on US regulation. Brazilian SaaS solutions are black boxes with health data on third-party servers.

The estimated candidacy window for the regulatory sandbox is September–October 2026. That leaves less than six months to build, test, and document. The code has existed since 2025. Opening it now makes sense.

  • Not production-ready SaaS. It is alpha. Running in production as demo/pilot, not as a management system for a real association with active members.
  • Not a commercial entity. No company behind it, no contracted team, no SLA support.
  • Not a substitute for legal counsel. Documentation covers the Brazilian regulatory framework as best technical understanding. Each association must validate with a specialized lawyer before using it as the basis for an ANVISA candidacy.
  • Not a replacement for existing production systems. If your association already has a functioning system, migrating to alpha software before the sandbox is unnecessary risk.
  • The code is auditable, but has not been audited by third parties. The promise is transparency, not certification.

Gabriel — gabriel@devmagic.com.br · WhatsApp +55 13 98803-2053

For technical questions, open an issue in the repository. For pilot partnership interest, use the seed slots form.


Machine-translated v1 — English version generated by LLM, human polish in progress. Report translation errors to gabriel@devmagic.com.br.