How to vet a compounding pharmacy before you sign.

Why this is your job, not the pharmacy's

A compounding pharmacy is not a vendor in the way a supply distributor is. When a compounded preparation goes wrong, the patient is in your chair, the chart has your name on it, and the state board asking questions is the one that licenses you. The pharmacy carries real responsibility for what it makes; you carry the responsibility for who you chose and what you documented.

That asymmetry is the whole reason this page exists. It is also why the useful version of this guide names no pharmacies at all. We place clinics with these relationships for a living, which means any list we published would be a list of companies we work with, and you would be right to discount it. What we can honestly give you is the process we run before we introduce anyone — including the parts that have occasionally made us walk away.

First, know which model you are buying

Nearly every mistake in this process traces back to evaluating a 503A as though it were a 503B, or the reverse. They are not tiers of the same thing. They are two different regulatory animals that happen to both be called compounding.

503A — patient-specific

A 503A pharmacy compounds against a prescription for a named, identified patient. It is regulated primarily by the state board of pharmacy, and in exchange for the patient-specific basis it is exempt from FDA new-drug approval and from current good manufacturing practice requirements. This is what fills a telehealth weight-management prescription that ships to the patient's door.

What you are evaluating: state licensure and non-resident licences, USP <795> and <797> practice, beyond-use dating, how quickly they turn a script around, and how they handle a prescription that needs to change.

503B — office stock

A 503B outsourcing facility registers with the FDA, may compound without a patient-specific prescription, must comply with current good manufacturing practice, reports adverse events, and is subject to FDA inspection on a risk-based schedule. This is the compliant source for the vial you administer to whoever presents that day.

What you are evaluating: everything above, plus FDA registration itself, cGMP evidence, inspection and warning-letter history, and lot-level release testing.

Most practices end up using both. If you take one sentence from this section: anyone offering you non-patient-specific product who is not a registered 503B outsourcing facility is the single clearest red flag in this process, regardless of how good the price is or how long you have known them.

Verify these four things before the first call

Do this before anyone gets a chance to be charming. It takes about twenty minutes and it changes the conversation, because you arrive already knowing the answers to the questions they expect to be asked.

1. The legal entity name

Ask for it, and expect it to differ from the brand name on the website. Everything else you verify keys off this. A pharmacy that is cagey about its legal entity name has told you something before you have looked anything up.

2. The licence in their own state

Every state board of pharmacy publishes a licence lookup. Search the legal entity name, confirm the licence is active and unrestricted, and note the expiry. Do not accept a PDF — a PDF is a photograph of a fact that may since have changed.

3. A non-resident licence for your patients' states

This is the item that quietly fails. A pharmacy shipping across state lines generally needs a non-resident, or out-of-state, licence for each state it ships into. A pharmacy can be entirely legitimate, hold forty of those, and not hold yours. Check the board in the state your patient is in, not the state the pharmacy is in, and re-check annually — licences lapse without ceremony.

4. FDA registration, if they will supply office stock

The FDA publishes the list of registered outsourcing facilities. If a supplier intends to send you non-patient-specific product, they should appear on it. While you are there, FDA also publishes inspection results and warning letters; a warning letter is not automatically disqualifying, but it is something you want to hear about from them rather than discover afterwards.

The questions, in the order worth asking them

Order matters. Licensing first, because a failure there ends the conversation and there is no point discussing beyond-use dates with a pharmacy that cannot ship to your patients. Price last, because it is the easiest thing to compare and the least likely to hurt you.

Licensing and standing

• What is your legal entity name, and what is your licence number in your home state?
• Which states do you hold non-resident licences in? (Then verify the ones you care about yourself.)
• Are you a 503A, a 503B, or do you operate both? If both, which entity is filling my order?
• Have you had board discipline, a consent order, or an FDA warning letter? What happened and what changed afterwards?

Quality and testing

• Can I see a certificate of analysis for a recent lot of the preparation I would be ordering?
• Is potency testing done in-house, by an independent laboratory, or both?
• For sterile preparations, what sterility and endotoxin testing is performed, and per lot or per batch cycle?
• Which USP chapters govern what you would make for me, and how do you evidence compliance?
• Are you accredited by PCAB/ACHC or NABP? If not, why not? (Voluntary, so the absence is a question, not a verdict.)
• Tell me about your most recent recall and how customers were notified.

The preparation itself

• What is the beyond-use date for each item I would order, and what drives it?
• Where does the bulk substance come from, and which FDA list does it sit on?
• How do you handle the essentially-a-copy limits for what I am asking for?
• What is your cold-chain process, and what happens if a shipment arrives warm — who absorbs that?

Operations

• What is realistic turnaround, as a range, and what do you do when you miss it?
• Who is my named contact when something goes wrong at 4pm on a Friday?
• If my volume tripled in six months, would that be comfortable for you?

Commercial terms — last, and in writing

• Full pricing including shipping, and how much notice before it changes.
• Is there any exclusivity, minimum volume, or automatic renewal? (Ask explicitly. This is the clause that appears late.)
• Who owns the patient data and records that pass through your system?
• How do I leave? Notice period, what happens to open prescriptions, and whether any inventory is stranded.

What a good answer sounds like

The content of the answer matters less than its shape. Across a lot of these conversations, the pattern is consistent.

A good answer is specific and slightly boring. "We hold non-resident licences in 31 states; here is the list and our licence number in each" is a good answer. So is "we have not tested that particular preparation in six months, I will get you the most recent COA today." Specific, checkable, occasionally admitting a limit.

A worrying answer is fluent and general. "We are fully licensed and compliant nationwide" is not an answer, it is a reassurance. "All our products are pharmaceutical grade" means nothing in statute. "FDA-approved" is simply wrong about any compounded preparation, and a pharmacy that says it either does not know its own regulatory position or is hoping you do not.

The best answer is sometimes a no. A pharmacy that says "we cannot lawfully do that for you" about something you asked for has just demonstrated the thing you were trying to find out.

Red flags, ranked

• Non-patient-specific product from a non-503B. Nothing else on this list is as clear.
• Any use of "FDA-approved" for a compounded preparation. Compounded medications are not FDA-approved. Not a nuance, a definition.
• An unverifiable licence, or reluctance to give the legal entity name.
• Verbal-only pricing, or pricing without shipping.
• Exclusivity or minimum volume introduced late in the process, after the relationship feels settled.
• An evasive recall answer. Everyone has events; the informative part is the notification.
• Pressure to order before your prescriber is in place. The account opens under a prescriber's licence. A pharmacy encouraging you to get ahead of that is not protecting you.

The half of this that is not about the pharmacy

Two of the most common reasons a clinic's sourcing goes wrong have nothing to do with which pharmacy it picked.

The first is the prescriber. A compounding pharmacy account opens under a licensed prescriber — a physician, NP, or PA who can write in the state the patient is in. Clinics routinely finish pharmacy diligence, sign, and then discover the account cannot activate because prescriber coverage is not in place. If that is you, medical director and prescriber coverage is the same problem as pharmacy access, not a separate one — and who prescribes compounded medications works through exactly how the two fit.

The second is your own state's rules on who may order, administer, and evaluate. Delegation, supervision, and the exam that must precede treatment all vary, and the exam requirement is among the most commonly cited deficiencies in med spa enforcement actions. Check yours on the state compliance map before you build a workflow on an assumption.

After you sign

Diligence is not an event. Four things are worth keeping up:

• Re-verify licences annually, particularly non-resident licences for states you have started treating patients in since.
• Log lot numbers in the chart at the point of administration. This is the single highest-value habit here.
• Keep the COAs that correspond to the lots you actually received.
• Watch the shortage list. When a drug leaves it, the compounded landscape around it can change quickly, and a program built on one assumption may need to move.

If a term in any of this is unfamiliar, the compounding glossary defines 55 of them in plain English with FDA and USP sources, and 503A vs 503B in plain English covers the two models in more depth.