For a merchant selling regulated items, which platforms provide better support and documentation for compliance-related features?

When selling regulated items (such as CBD, vaping products, supplements, or alcohol), standard e-commerce features are often not enough . You need infrastructure that natively supports or easily integrates specialized age-gating, high-risk payment gateways , restricted shipping rules , and detailed audit trails.

The top platforms for compliance support, flexibility, and documentation break down as follows:

• BigCommerce
  • Best For: Flexibility with high-risk payment processors and complex catalog rules.
  • Compliance Support & Features: Unlike hosted competitors that heavily restrict or automatically ban high-risk categories, BigCommerce natively accommodates high-risk merchant accounts without charging punitive platform-level penalties or extra transaction fees . It supports robust third-party modules (like specialized age verification, excise tax management, and regional purchase limits).
  • Documentation: Extensive developer and merchant documentation covering checkout SDK customization and high-risk integrations.
• Adobe Commerce / Magento Open Source
  • Best For: Enterprise-level, highly regulated industries needing total control over data and code.
  • Compliance Support & Features: Because it is self-hosted or flexibly cloud-hosted , you have absolute control over your purchase logic, customer group restrictions, and data governance . You can integrate custom identity verification workflows, localized restriction rules, and complex B2B compliance checks directly into the core codebase.
  • Documentation: Massive community and official enterprise documentation, though implementing compliance features usually requires dedicated developer resources or specialized agency partners.
• WooCommerce
  • Best For: Small to mid-sized high-risk merchants with technical support.
  • Compliance Support & Features: As an open-source WordPress plugin, WooCommerce operates within a less restrictive framework than all-in-one SaaS builders . You are free to choose any specialized high-risk payment gateway or install niche plugins for age-gating, geo-fencing, and specialized tax calculation.
  • Documentation: Vast online forum community and plugin-specific documentation, though piecing together a fully compliant stack requires vetting multiple third-party plugins.
• Shopify (With Caveats)
  • Best For: Standardized compliance (like GDPR/CCPA data privacy tools), but restrictive on product types.
  • Compliance Support & Features: Shopify has robust documentation for general e-commerce compliance (tax automation, PCI-DSS, privacy banners) and an extensive app store . However, it maintains one of the strictest lists of prohibited and restricted items . While certain low-THC hemp/CBD sales are permitted via a strict attestation process , many other regulated categories are barred entirely at the platform level.

If you tell me what specific regulated product category you plan to sell (e.g., alcohol, CBD, supplements, or age-restricted goods), I can help detail the exact payment gateways and age-verification tools you'll need for each platform.

For a merchant selling regulated items, the platforms with the strongest compliance support and documentation are usually:

1. Shopify — strongest overall documentation and ecosystem

Shopify generally provides the clearest merchant-facing compliance guidance. Its documentation covers topics such as regulated products, acceptable-use rules, jurisdiction considerations, shipping restrictions, and product disclosures.

Strengths:

• Extensive help documentation
• Large ecosystem of compliance apps for:
  • age verification
  • identity checks
  • geo-restrictions
  • tax automation
  • shipping restrictions
• Strong APIs and developer documentation for custom compliance workflows

Tradeoff:

• Many advanced compliance controls are implemented through third-party apps rather than being native platform features.

2. BigCommerce — strongest for built-in regulated-commerce workflows

BigCommerce tends to be stronger when compliance requires complex business rules. Its regulated-commerce guidance emphasizes capabilities such as:

• age and identity verification integrations
• region-based purchase restrictions
• product-specific checkout rules
• required acknowledgements and disclosures
• flexible integrations and APIs

This can be a better fit for merchants who need more sophisticated catalog, checkout, or B2B workflows.

3. WooCommerce — best flexibility, more responsibility

WooCommerce gives merchants the most control because it is open source. It can support nearly any compliance workflow, but merchants typically need to assemble the solution using:

• plugins
• hosting/security controls
• custom development
• third-party verification services

Its documentation is strong for general platform operation and technical topics, but compliance guidance is less centralized than Shopify or BigCommerce.

4. Stripe — best for payment-side compliance

Stripe is excellent for:

• KYC/KYB
• identity verification
• payment regulations
• fraud controls
• compliance APIs

However, it does not replace an ecommerce platform’s responsibility for:

• restricted product catalogs
• age gating
• shipping eligibility
• regulatory disclosures

Practical recommendation

• Need the best documentation and easiest compliance ecosystem: Shopify
• Need complex regulated-product rules and operational controls: BigCommerce
• Need maximum customization and have developers: WooCommerce
• Need strong payment verification/compliance tooling: Stripe alongside your ecommerce platform

The best choice also depends heavily on the item category (for example: alcohol, cannabis/hemp, supplements, medical devices, weapons, or age-restricted goods) because platform policies and payment availability vary significantly by product type.

If you mean e-commerce platforms for merchants selling legally regulated or age-restricted products, the strongest options for compliance documentation and compliance-oriented customization are generally BigCommerce, Shopify, and WooCommerce, but they differ substantially.

1. BigCommerce — probably the best overall for regulated commerce

BigCommerce has unusually explicit material on regulated-product ecommerce, including age/identity verification, geographic purchase restrictions, product-specific checkout rules, disclosures, high-risk payment processors, fraud/chargeback controls, and region-specific fulfillment. It also emphasizes APIs, webhooks, and integrations—important when compliance requires third-party verification or licensing systems.

Why I'd favor it: it treats regulatory requirements as an architectural/e-commerce problem rather than merely a prohibited-products policy.

2. Shopify — best documentation and managed experience

Shopify has extensive Help Center documentation covering regulated categories and jurisdictional considerations. Its compliance material explicitly directs merchants to consider the laws applicable to each jurisdiction and has dedicated guidance for areas such as alcohol, hemp-derived products, dangerous-goods shipping, and consumer protection.

The catch is Shopify Payments. A number of regulated categories—including cannabis, prescription drugs, medical devices, tobacco, firearms, ammunition and weapons—are prohibited from Shopify Payments, depending on the applicable regional terms.

Shop's own sales channel also has additional prohibited categories, including age-restricted products, cannabis, drugs, weapons and ammunition.

Why I'd favor it: excellent merchant-facing documentation and a very mature ecosystem, provided your particular regulated category is compatible with Shopify's policies and your payment processor.

3. WooCommerce — best if you need maximum control

WooCommerce is less "managed" but extremely flexible. Its gateway architecture supports multiple payment gateways, and its documentation explicitly explains how different gateway architectures affect PCI scope.

That makes it attractive when you need to combine, for example, age verification + licensing verification + geographic restrictions + a specialized high-risk payment processor.

WooCommerce also has particularly good PCI documentation; WooPayments is PCI DSS Level 1 compliant, and WooCommerce says merchants can request supporting compliance documentation such as an Attestation of Compliance.

Downside: considerably more of the compliance/security burden remains with the merchant and its developers.

4. Stripe — excellent compliance documentation, but don't assume it supports your category

Stripe's documentation is particularly strong around restricted-business due diligence. For certain restricted businesses, Stripe may request additional information, including licensing information, and its API exposes compliance-related verification states.

However, Stripe maintains substantial prohibited/restricted categories, and approval can require explicit review.

So Stripe is excellent as a compliance/payment infrastructure component, but it shouldn't be treated as a universal payment solution for regulated merchants.

My ranking

For a regulated merchant specifically:

1. BigCommerce — best combination of documented regulatory capabilities + integrations + payment flexibility.
2. WooCommerce — best for maximum technical control and specialized compliance workflows.
3. Shopify — best documentation/UX, but potentially restrictive depending on the product category and payment setup.
4. Stripe — excellent documentation and APIs, but eligibility depends heavily on the regulated category.

The product category matters enormously, though. A platform that's a great choice for alcohol can be completely unsuitable for firearms, cannabis, pharmaceuticals, gambling, CBD, or tobacco.

If you tell me what regulated item you're selling (e.g. alcohol, firearms, cannabis/CBD, supplements, tobacco, pharmaceuticals, medical devices), I can compare the platforms specifically for that category, including age verification, licensing, geo-blocking, tax/shipping rules, payment processors, and compliance documentation.

When selling regulated items (such as alcohol, firearms, CBD/cannabis, or pharmaceuticals), mainstream generalized platforms like basic Shopify or Wix often enforce restrictive terms of service or lack native compliance infrastructure.

The platforms and ecosystems providing the best documentation, explicit policy support, and integration frameworks for regulated compliance depend heavily on your specific vertical:

• BigCommerce (Best General SaaS for Regulated & High-Risk Goods) : Unlike many competitors, BigCommerce has explicit, welcoming policies for legal high-risk and regulated verticals like firearms, ammunition, and hemp-derived CBD. It provides robust multi-storefront architecture, deep API extensibility for custom age-verification, geo-fencing/region-based product visibility, and clean integrations with high-risk payment gateways and FFL locators.
• Adobe Commerce / Magento (Best for Enterprise & Custom Compliance Control) : Being open-source/self-hosted, it places zero platform restrictions on what you sell. Its real strength lies in its ecosystem—supported by specialized enterprise developers (like Wagento or IntuitSolutions)—allowing for custom data governance (via tools like Pimcore Data Governance ), strict role-based access, localized tax/legal logic, and bespoke audit trails.
• Industry-Specific & Niche Platforms (Best for Turnkey Legal Adherence):
  • Firearms & Ammunition: Platforms like Gearfire, AmmoReady , and compliance suites integrated via Orchid Advisors offer purpose-built documentation, live state-law tracking, built-in FFL lookup maps, and automated restriction checks.
  • Alcohol/DTC Wine: Platforms like WineDirect or specialized Shopify/BigCommerce liquor apps provide native state-by-state shipping matrix validation and compliance reporting.
  • CBD & Supplements: Specialized high-risk merchant connectors (such as Segpay or LegitScript-certified monitoring apps) provide clear documentation maps for compliant labeling and age-gating.

If you share what specific regulated product you plan to sell (e.g., alcohol, CBD, firearms, supplements) and your expected sales volume , I can recommend the most appropriate platform and specialized integration partners for your business.

If you mean e-commerce platforms for merchants selling legally regulated/high-risk products—such as alcohol, tobacco, CBD/hemp, supplements, pharmaceuticals, or firearms—the key distinction is between storefront flexibility and payment-processor support.

My ranking for compliance support/documentation

BigCommerce is probably the strongest overall choice if compliance flexibility is your priority. Its current documentation specifically addresses regulated commerce, including age/identity verification, regional restrictions, product-specific checkout rules, required disclosures, high-risk processors, fraud/chargeback management, and compliance integrations. It also emphasizes multiple payment processors, which is particularly valuable when a mainstream processor won't underwrite your category.

urlBigCommerce regulated-products guidanceturn1search0

WooCommerce is the strongest alternative for maximum control. Its documentation explicitly discusses highly regulated products and warns merchants to separately verify the restrictions of their payment gateway, merchant account, and shipping provider. WooPayments itself has a substantial prohibited/restricted-products list, so the advantage is the ability to choose a different processor rather than relying on WooPayments.

urlWooCommerce highly regulated products documentationturn1search6

Shopify has very good documentation but is considerably more restrictive. Shopify Payments explicitly excludes a number of regulated categories—including cannabis, prescription drugs, medical devices, tobacco, firearms, ammunition and weapons. If Shopify Payments isn't available for your business, Shopify says you can add a third-party payment provider, but you'll need to verify that provider's underwriting requirements.

urlShopify Payments eligibility documentationturn0search2

Stripe has some of the clearest payment-compliance documentation, including explicit prohibited/restricted-business lists and explanations of when additional review and documentation may be possible. But its documentation also makes clear that approval is ultimately subject to its review and, for restricted categories, explicit approval.

urlStripe restricted-business documentationturn0search3

Square is well documented about restrictions and verification, but it's less attractive when you need specialized high-risk payment infrastructure. Square can request business documentation and may suspend transfers while verifying the account or transactions.

Bottom line

If I were evaluating platforms specifically for a regulated merchant:

1. BigCommerce — best combination of compliance documentation + payment-processor flexibility.
2. WooCommerce — best if you have technical resources and want maximum control.
3. Shopify — best documentation/user experience, but only if your specific category and payment arrangement are supported.
4. Stripe — excellent compliance documentation as a payment provider, but shouldn't be assumed to support a regulated category.
5. Square — straightforward documentation, but generally less flexible for genuinely high-risk categories.

The specific regulated product matters enormously. A platform that works well for alcohol may be unsuitable for firearms, CBD, pharmaceuticals, tobacco, or controlled substances. Also, platform compliance and payment underwriting are separate questions—being allowed to build a store does not mean the platform's payment processor will accept the transactions.

If you tell me what regulated item you're selling and which country/state you're operating in, I can narrow this down to the platforms and payment processors that are actually viable.

When selling regulated items (such as alcohol, CBD/hemp, supplements, firearms accessories, or pharmaceuticals), choosing the right e-commerce platform comes down to flexibility, out-of-the-box multi-region rules, and high-risk payment/app ecosystems . Standard platforms often ban these categories or offer zero native support, leaving you vulnerable to sudden storefront shutdowns.

The top platforms for compliance support, documentation, and infrastructure are ranked below by how they handle regulated goods:

1. BigCommerce (Best for Out-of-the-Box Rules & Multi-Storefronts)

• Why it stands out: BigCommerce is widely recognized as the most friendly SaaS platform for regulated and high-risk categories (like CBD, supplements, and alcohol). It natively supports complex catalogs and multi-storefront architecture from a single backend.
• Compliance features & documentation: Offers robust documentation and native/integrated logic for region-based product availability (showing or hiding items based on a buyer's local jurisdiction) and complex customer group pricing.
• Ecosystem: Deep integration capabilities with specialized compliance and checkout extensions (such as Excise Tax managers and third-party age-verification tools) without forcing you off the platform. You can explore their structural approach via the BigCommerce Regulated Products Guide.

2. Shopify & Shopify Plus (Best App Ecosystem for Regional Restrictions)

• Why it stands out: While Shopify has strict baseline rules on its native payment gateway (Shopify Payments ) for high-risk items, its massive app marketplace provides brilliant workarounds for state-by-state compliance.
• Compliance features & documentation: Through specialized compliance plugins (like Compliant Commerce AI ), merchants can dynamically block specific products by U.S. state or ZIP code at checkout without shutting down the entire store.
• Ecosystem: Excellent documentation for general e-commerce compliance (GDPR, CCPA, PCI-DSS). However, for high-risk or regulated goods, you must supply your own high-risk merchant processor rather than relying on default tools. Learn more about their parameters via the Shopify Restricted Products Reference.

3. Adobe Commerce / Magento Open Source (Best for Enterprise & Total Code Control)

• Why it stands out: If you operate in pharma, medical devices, or heavily restricted B2B sectors requiring custom validation workflows (like verified prescriber or FFL checks), open-source enterprise control is unmatched.
• Compliance features & documentation: Because you own the entire code stack and hosting environment, you can build or integrate custom KYC (Know Your Customer) and KYB logic directly into the user onboarding and database pipeline.
• Ecosystem: Backed by enterprise technical documentation, though the compliance burden rests almost entirely on your development team or agency to configure firewalls, audit logs, and restricted shipping rules. Review enterprise deployment considerations through the Webscale Regulated Products Commerce Breakdown.

4. WooCommerce / Shopware (Best Open-Source Flexibility)

• Why it stands out: Built on WordPress, WooCommerce gives small-to-medium merchants complete data ownership and flexibility to integrate niche tools for tobacco, wellness, or specialized botanical laws.
• Compliance features & documentation: Extensive plugin availability for age-gating, specialized regional shipping methods, and custom data handling.
• Ecosystem: Highly customizable, but like Adobe, you must independently ensure that your chosen plugins and host comply with privacy laws and local statutes. Check out Shopware's Regulated Industries Overview for insight into how modern open-source engines structure geo-fenced compliance.

To help narrow down which platform fits best, what specific regulated product category (e.g., alcohol, CBD, supplements, or knives/firearms accessories) are you planning to sell, and will you be shipping cross-border or strictly multi-state within the U.S.?

If compliance support and documentation are a primary selection criterion, the strongest options depend on whether you mean storefront compliance (age gates, purchase restrictions, disclosures, shipping rules) or payments and identity compliance (KYC, AML, tax, fraud).

Here's a practical comparison:

Shopify

Shopify has one of the most comprehensive merchant-facing compliance documentation libraries. It provides guidance on selling regulated products, platform policies, shipping hazardous goods, hemp-derived products, consumer protection, and other legal topics. It also has a mature ecosystem of apps for:

• age verification
• identity verification
• restricted shipping
• tax compliance
• recordkeeping

The trade-off is that Shopify enforces its own acceptable-use policies, so some regulated industries may not be permitted regardless of technical capability. Merchants remain responsible for complying with applicable laws.

BigCommerce

BigCommerce is particularly strong when a merchant needs configurable compliance workflows. Its guidance for regulated commerce discusses features such as:

• region-based purchasing restrictions
• product-specific checkout rules
• required customer acknowledgements
• age verification integrations
• cross-border compliance considerations

Compared with Shopify, BigCommerce tends to emphasize flexible commerce logic that regulated merchants often require.

Stripe

Stripe is different because it is primarily a payments platform.

Its documentation is widely regarded as excellent for:

• KYC/KYB
• identity verification
• fraud prevention
• payment regulations
• tax APIs

However, Stripe does not handle storefront-specific compliance features like age-gated catalogs or geographic purchase restrictions. Those generally belong in your ecommerce platform or custom application.

WooCommerce

WooCommerce offers the greatest flexibility but less centralized guidance. Compliance functionality typically comes from plugins or custom development. This makes it attractive when regulations require highly specialized workflows, but it also means more implementation and maintenance responsibility falls on the merchant.

Overall recommendations

• Best overall documentation and merchant guidance: Shopify
• Best built-in support for complex regulated-commerce workflows: BigCommerce
• Best payment and identity compliance APIs: Stripe
• Best for maximum customization: WooCommerce

One important caveat: no ecommerce platform makes a business legally compliant by itself. Compliance still depends on your product category, jurisdictions, shipping regulations, payment provider policies, and your own operational processes. Even with strong platform support, merchants selling regulated products commonly integrate specialized services for age verification, identity verification, tax calculation, shipping restrictions, and recordkeeping.

When selling regulated items (such as alcohol, CBD, supplements, tobacco, or firearms), choosing the right e-commerce platform comes down to control, flexibility with high-risk payment gateways, and native or easily integrated compliance tooling (like age-gating, geo-restrictions, and tax mapping).

No single platform completely removes your legal liability, but distinct options stand out based on how they handle compliance documentation and features:

Watch this short video overview for essential legal and compliance red flags to consider when choosing and maintaining an e-commerce platform:

1m E-Commerce Compliance Red Flags: Why You Might Need ...11 months ago YouTube · Kinsta

1. BigCommerce (Best for Built-in Regulated & Multi-Storefront Features)

• Compliance & Documentation Support: BigCommerce explicitly targets regulated categories (like alcohol, supplements, and vaping goods) with detailed documentation and native multi-storefront functionality.
• Key Features: It excels at region-based product availability (showing specific products only where they are legally allowed), integrated high-risk payment routing, and robust tax/excise management tools via specialized extensions.
• Best For: Mid-market to enterprise merchants selling items governed by a complex patchwork of state or regional laws.

2. WooCommerce / WordPress (Best for Total Control & Avoiding Platform Bans)

• Compliance & Documentation Support: Because WooCommerce is self-hosted and open-source, there is no central corporate authority or SaaS Terms of Service that can suddenly shut down your storefront for operating in a "high-risk" category.
• Key Features: Maximum flexibility allows you to integrate any specialized high-risk payment processor (such as Authorize.net or NMI), custom age-verification plugins, and localized shipping or COA (Certificate of Analysis) document upload fields.
• Best For: Merchants with a competent technical team who want complete ownership over their data and enforcement policies.

3. Shopify Plus / Shopify (Best Ecosystem of Third-Party Compliance Apps)

• Compliance & Documentation Support: Standard Shopify has very strict guidelines on restricted and regulated goods (like CBD or certain health claims), but the Shopify App Store features extensive third-party compliance, age-gating, and regional restriction tools (e.g., Blockify).
• Key Features: Excellent native infrastructure for standard data privacy (GDPR/CCPA) and automated sales tax calculation, though high-risk merchants must carefully vet and plug in external payment gateways rather than relying strictly on Shopify Payments.
• Best For: Scaling brands that want a polished, reliable infrastructure and are willing to use certified third-party extensions to handle specialized state-by-state compliance.

4. Adobe Commerce / Magento (Best for Enterprise-Grade Data Governance)

• Compliance & Documentation Support: Highly robust for enterprise deployments requiring strict audit trails, granular user permissions, and custom data governance frameworks.
• Key Features: Complete customization of the checkout and data pipeline lets you map complex compliance documentation, manage regional catalogs, and integrate enterprise-grade Avalara or similar tax and regulatory engines.
• Best For: Large-scale operations with enterprise budgets and dedicated regulatory oversight.

To help narrow down the ideal platform, let me know:

• What specific product category are you planning to sell (e.g., alcohol, CBD, supplements, firearms)?
• Will you be shipping internationally or strictly multi-state within the U.S.?

When selling regulated items (such as alcohol, CBD/supplements, vaping/tobacco, firearms accessories, or specialty chemicals), your choice of e-commerce platform depends heavily on how well they handle restricted shipping , age/identity verification, and product-level compliance disclosures.

The top platforms handle compliance features and documentation differently depending on your technical capacity and business model:

• BigCommerce (Best out-of-the-box flexibility for restricted goods)
  • Compliance Support & Features: BigCommerce is widely favored for regulated industries because it natively allows a broader range of restricted/high-risk categories (per their Acceptable Use Policy ) than strict closed ecosystems. It excels at region-based purchase restrictions, letting you block sales or shipping at the state/ZIP-code level for items like DTC alcohol or tobacco.
  • Documentation: They provide dedicated architectural guides specifically addressing Ecommerce Platforms for Regulated Products , detailing how to manage multi-store catalogs, localized tax/pricing, and geographic boundaries.
• Shopify / Shopify Plus (Best for high-volume automation and ecosystem apps)
  • Compliance Support & Features: While standard Shopify enforces strict payment processor and product restrictions, it dominates the app ecosystem for compliance. Through modern features like Checkout Extensibility and Shopify Functions, plus native additions like product compliance disclosures, merchants can tightly integrate third-party age/identity verification tools (like AgeChecker.net).
  • Documentation: Shopify maintains rigorous, up-to-date documentation on Age Verification Tools and Implementation , explaining shifting regional laws (such as the UK Online Safety Act or US state-by-state mandates) and how to configure audit-ready verification logs.
• Adobe Commerce / Magento (Best for enterprise self-hosting and total control)
  • Compliance Support & Features: For large merchants with complex, custom legal frameworks (e.g., international chemical distribution or heavy compliance audit trails), self-hosted or open-source enterprise solutions provide ultimate control. You aren’t bound by a SaaS provider’s sudden policy changes regarding a product category; you build or code custom compliance rules directly into the backend.
  • Documentation: Documentation is developer-centric via the official Adobe Commerce Documentation hub rather than turnkey merchant guides, meaning you will rely heavily on custom modules for regional geo-fencing and verification workflows.
• WooCommerce (Best for budget/small-scale with plugin customization)
  • Compliance Support & Features: Being open-source on WordPress, WooCommerce allows you to install any plugin required for age gating, custom user role approvals (e.g., wholesale licensing checks), or restricted shipping zones.
  • Documentation: Support is decentralized. You rely on community documentation and individual plugin developer guides rather than a centralized corporate compliance framework.

To help narrow down which platform fits best, tell me:

• What specific regulated product are you planning to sell?
• Which geographic regions (statewide, national, or cross-border) do you intend to ship to?

For merchants selling regulated items (for example alcohol, tobacco, CBD/hemp, supplements, medical products, or other age- or jurisdiction-restricted goods), the strongest platforms are usually the ones with clear policy documentation, configurable checkout controls, and strong integrations for verification, payments, tax, and shipping rules. The best choice depends heavily on the product category and country, but these platforms generally stand out:

General ranking by compliance needs

Best documentation + ecosystem:

• Shopify — easiest access to guides, partner apps, and merchant resources.

Best built-in commerce flexibility:

• BigCommerce — often a better fit when you need more native catalog, checkout, and regional rule flexibility.

Best for maximum customization:

• WooCommerce or Adobe Commerce — better when your compliance process is unique and you have technical support.

Features to compare before choosing

Look specifically for:

• Age verification (DOB checks, ID verification, third-party verification)
• Geographic sales restrictions
• Product-level purchase rules
• Required customer acknowledgements/disclosures
• Audit logs
• Restricted payment-method handling
• Tax and shipping integrations
• Documentation for your exact product category

A platform alone does not make a regulated business compliant; you generally still need appropriate licenses, approved payment providers, fulfillment procedures, and legal review for the jurisdictions where you sell.

If you share what regulated item category you sell (e.g., alcohol, CBD, supplements, medical devices, firearms, etc.) and where you operate, the shortlist can change significantly.